last executing test programs: 6m49.785125625s ago: executing program 2 (id=2251): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000000000)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(r1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1a00000004000000060000000100000020"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1a00000004000000060000000100000020"], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000fb) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000fb) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) 6m49.368435044s ago: executing program 2 (id=2254): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20008891}, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001bc0)=""/4075, 0xfeb}, {&(0x7f0000000700)=""/225, 0xe1}, {&(0x7f0000000c40)=""/204, 0xcc}, {&(0x7f0000000800)=""/259, 0x103}, {&(0x7f0000000980)=""/165, 0xa5}, {&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000540)=""/152, 0x98}], 0x8}, 0x40022020) r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) write$binfmt_misc(r1, &(0x7f0000000600)="3581129ab3d9fd45d20b3e019c6f645530265676b7372e49bb4310fd888fa186159f175ff14ee8d0b8fd66c53e809d9c099573ec3c4dbbc00b4002c9888128568cc4382d13f6e4dc474df04d812c81976f44e120b1d2aa4f8cc6eeab3c42f0550598d7123bbf024783c3a09fa6f80c5a90587740ff20c372ea30511a4af5243d1c63903a5c50c34f260ba51525e723c386684da6456f653e4dff12407ffb7960d2041cafaa42ac25d111bc933073c9869ac3e14dae5c256af60612af4823608076c905c1e1e3448e9cd91ebce624d57c3634bc34d1c0e0e28fc924ecfcee3782c95430eb67c85c780027487b", 0xec) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902940003010000000904000000010124020000000000000000000524050000082407000000009e0c240700000000a3e82f07070724070100000009240300000000010009040100000102000009040101010102000009f5000900000000000725010000000009040200000102000009040201010102000009058209000000000007250100"/166], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@my=0x1}) 6m47.568535589s ago: executing program 2 (id=2265): syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102000000206d0413c540000102030109022400010103e00109040007e77b0103010921ac0004012290080905810300020f1f05"], &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0xd, 0x3, 0x20}, 0xce, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x1003}}, {0xb1, &(0x7f00000002c0)=@string={0xb1, 0x3, "1ddcba4aa47e4ddc0c8d61a510ac574b58083af5dd5d159ef571ee1d21bb3c78cc1e12f032e2fcb230c0a89b188ad94980a768ebcab08eb77cd2e34549afa49b7ea7d72131728b52d7e28c30cacf75039489c7eea0c2ad322c41f923ddbd454317b63d000543879faecaf03779912af6c86ba63853b86ab0506ef28321f223afc287b5a053ed9d48f7aa82ba22c8e39ca6334ee4377a097e7f53c8297e9bdda530f7f46b7a87274fafb075d8221ae2"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x406}}, {0xc9, &(0x7f0000000380)=@string={0xc9, 0x3, "35cd311b7a32564eb15ce02cea496705f1ba7016d0ccc2e67cf7b2780a008b0d6b79ffedec7115cf468d935e76c1f967d2753195e0a22e1451f0fd387ccdefd32629f10208497b906d7bffee473a27881e7ab55f8bba48832c823f6506fff10f481028fccc8dc9af1a795db7eb6e6a226483a6d3111bf90b25469bd3dbb3083ab59c8a1c29b16aa3e0d1c27c593df1edaf4047c48c6925435c7aef98671c3000f423ff0e4e2f10ba5a4de1daeaf918042e24bf05e2603c9d2601df5c4c1c36ffb246d2959be7ba"}}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/27, 0x1b}}], 0x6, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x6d, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x5e, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "2f03"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x5, 0x75}, [@mdlm={0x15, 0x24, 0x12, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x80, 0x24}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xef}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x250, 0xd, 0x7f, 0x1, 0x40, 0xff}, 0x14f, &(0x7f0000000700)={0x5, 0xf, 0x14f, 0x6, [@generic={0xe0, 0x10, 0x1, "5817e8e2f59ec5b6736d3137181ed331728563d736f0a2135ccca38d6f7c6e212ce636f24fce35fb91c67e365c45582ce436a326bfc47053beef160de67a61e9898fcf6edae7a9b1ce254ffecccf89588ce32ba40278c384801af248ff2367d130f7e11f50c3ada6f7966ab62a294fda11af79c047c65ec45908c6ae575ae1ba2aee3ae1772e798f2f0b2be41f5f12e683855145dc8fe88b66375dbc84da221532ac72cdc55195c491076ce52ba8be3fcb11737417e2d314957663fac8418a2527dbe52762f3445225ed28c50681b1797ea70ffdcefbd9e99b0a91ae33"}, @generic={0x4b, 0x10, 0x3, "f99434d00a5cf300fa4388c1fbbc506f2ae7cd8afb9234b3aaad9a4ddd3bbf79b5f1d9e1da50330ef071a65436131e12cbd2e4a48c77b25881564c4d3568be31984db6d0a9390e7c"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4c, 0x0, 0x2, 0xa, 0xf2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xd, 0x7}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xa3, 0x49, 0x5}]}, 0x2, [{0x4, &(0x7f0000000880)=@lang_id={0x4}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1007}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') openat$nci(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) openat$nci(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) io_setup(0x7, &(0x7f0000000280)) (async) io_setup(0x7, &(0x7f0000000280)=0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0x42, 0x8) (async) r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0x42, 0x8) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000001c0)='7', 0x1, 0x4}]) recvfrom$inet(r2, &(0x7f0000000580)=""/83, 0x53, 0x2100, &(0x7f0000000600)={0x2, 0x4e23, @private=0xa010101}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000043242108d81301006230010203010902120001000000000904"], 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x6, 0x11b4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800019c0], 0x0, &(0x7f0000000180), &(0x7f00000019c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x16, 0x886c, 'veth1_virt_wifi\x00', 'gre0\x00', 'veth0\x00', 'pim6reg\x00', @local, [0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x90e, 0x95a, 0x986, [@among={{'among\x00', 0x0, 0x87c}, {{@zero, @zero, 0x1, {[0x861, 0x2, 0x6, 0x802000, 0x3, 0x10001, 0x3, 0x401, 0x2, 0x5, 0xb, 0x1, 0x3, 0x6, 0x0, 0x509, 0x3, 0xf, 0x1, 0xfff, 0x7, 0x10000, 0xff, 0x7, 0x3, 0x0, 0x37345c5f, 0x7f, 0x3ff, 0x838, 0x132, 0x7ce, 0x1, 0x62883ab, 0x1, 0x5, 0x3, 0x676, 0x1, 0xffffffff, 0x5, 0x0, 0x5, 0x3, 0x8, 0xe, 0x8, 0x0, 0x7, 0x161b, 0x9, 0x1, 0x1, 0x3e, 0x6, 0x80000001, 0x3, 0x2, 0x9, 0x9, 0x3, 0xd, 0xc8, 0x4, 0x8001, 0x80000000, 0xaef8, 0x8, 0x3, 0x4, 0x3, 0x9b, 0x2, 0x1, 0xfffffff7, 0x8, 0x3, 0xb, 0x7, 0x5, 0x6, 0x79d, 0xffff, 0x9, 0xb9e, 0x4, 0x9, 0x10, 0x5, 0x4, 0x1, 0x8, 0x7, 0x9aa, 0x1da, 0x2524, 0x7, 0x4, 0x3ff, 0x5c6b, 0x5, 0x8000, 0x3, 0x7fffffff, 0x6, 0xc72a, 0x4, 0x1, 0xffffffff, 0x2, 0x200, 0x8, 0x7fffffff, 0x7, 0x9, 0x4, 0x4, 0xef22, 0x10000, 0x2, 0x2e, 0x8, 0x6, 0x7, 0x64, 0x7, 0x3, 0x9, 0x101, 0x9, 0x3, 0x8, 0x6, 0x1b1, 0x0, 0xa9e, 0xc6, 0x8, 0x3, 0x7, 0x4, 0x1, 0x10001, 0x2, 0xfffffffa, 0x437d, 0x281b9e9b, 0x6, 0x9, 0x59, 0x8, 0x400, 0x5f, 0x24a, 0x7, 0xfff, 0x0, 0xffff, 0x0, 0x8, 0x3af68379, 0x7, 0x1, 0x9, 0x1ff, 0x8001, 0x3ff, 0x4, 0x4, 0x5, 0xffffffff, 0x3, 0x6, 0x4f, 0x7f, 0x0, 0x3, 0xd, 0x9, 0xa, 0x7, 0x101, 0x0, 0x5, 0x5, 0x9, 0xfffffffc, 0x9, 0x3, 0x1, 0x81, 0x9, 0x2, 0x7f, 0x9b, 0x0, 0x5c, 0x3, 0xfffffff7, 0x9, 0xb, 0x8, 0x101, 0x800, 0xffffff7e, 0x8f68, 0xfffffff8, 0x6, 0x1, 0x8, 0x6, 0x2, 0xc, 0x5, 0x3, 0x3, 0x6, 0x4, 0x2, 0x7, 0x0, 0x6, 0x1, 0x8, 0x2, 0x3, 0x101, 0x1507, 0x401, 0xffffffff, 0x5, 0x2, 0x0, 0xdab, 0x401, 0xfffffffb, 0x91b, 0x3, 0x1ff, 0x1, 0x9, 0x556c, 0xe, 0x80, 0x10000, 0x40, 0xfff, 0x4, 0x8000, 0x5, 0xf, 0xe3, 0xf6, 0xf, 0x0, 0x900000, 0xd], 0x7, [{[0xb6c6, 0x87], @remote}, {[0x55e, 0x2], @multicast2}, {[0x7], @initdev={0xac, 0x1e, 0x0, 0x0}}, {[0x7d8, 0x3ff], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0xa, 0x9], @empty}, {[0x7, 0x2], @private=0xa010102}, {[0x2], @loopback}]}, {[0x7fffffff, 0x4, 0x0, 0x8, 0x800, 0x5, 0x729f, 0x549, 0x9, 0x9, 0x10001, 0x6, 0x8001, 0x0, 0x3340c0f0, 0x9, 0x7, 0x5, 0x1, 0x8, 0x3, 0x7, 0x8000, 0x1, 0x7ff, 0x8, 0xa, 0xffffff5b, 0x5, 0x80000000, 0x6, 0xfffffffc, 0xffff935a, 0x1, 0x2, 0x2, 0x6566, 0x80000001, 0x7, 0x1, 0x0, 0x8, 0x6, 0x3, 0x4, 0x4, 0x3, 0x3, 0x3, 0x8, 0x1, 0x1000, 0x2, 0x3, 0x8, 0x5, 0x2, 0x400000, 0x3, 0x100, 0xfffffff7, 0x9, 0xeb, 0x5, 0x0, 0x8001, 0x5, 0x2, 0x2, 0x6, 0x6, 0x1, 0x9, 0x101, 0x9, 0x3, 0x1, 0x101, 0x8, 0x8000, 0x6, 0x1, 0x8, 0x81, 0x4, 0x20000000, 0x9, 0x7, 0x0, 0x1, 0x7, 0x81, 0x6, 0x6, 0xf7, 0x3ff, 0xfffffff7, 0xad, 0x4, 0x4, 0xfffffdbc, 0xe, 0xb634, 0xfff, 0x4, 0x8, 0xfffffff7, 0x1, 0x3, 0x4, 0x7, 0x3, 0x9, 0x0, 0xffffffff, 0x8, 0x6, 0x745, 0x10, 0x5, 0x4181, 0xdf9, 0x4, 0xf504, 0x8f8f, 0x3, 0x3, 0x9, 0x7f7, 0x8, 0xffffffff, 0x100, 0xfffffffe, 0xe, 0x5, 0x0, 0x2, 0x0, 0xa6b, 0x8, 0x7, 0x0, 0x0, 0x400, 0x6, 0xe9ee, 0x7efa, 0xa4d, 0xffffffff, 0x7ff, 0x8, 0x7, 0x1, 0x81, 0x3, 0xffff, 0x6, 0x6, 0x80000000, 0x13, 0x7, 0x6, 0x7ff, 0x2, 0xbf, 0xc, 0xbb, 0x7, 0x400, 0x9, 0x1, 0x4, 0x3, 0x0, 0xb, 0x7, 0x4, 0x5, 0xc, 0x0, 0x4730, 0xbfa, 0x7ff, 0x2, 0xfffffff7, 0x5, 0x7fffffff, 0x2, 0x2, 0x4, 0x4, 0x8, 0x9, 0x6, 0x0, 0x2, 0xe, 0x1, 0x17c8, 0x80, 0x7fffffff, 0x1, 0xf7, 0x8, 0x3ff, 0x100000, 0x40, 0x1, 0x1, 0x10001, 0x5, 0x1ff, 0x1, 0xf, 0x5, 0x6, 0x1, 0x6, 0x4, 0x800, 0x6, 0xc, 0x1, 0xffff, 0x3, 0xa, 0x7, 0x9, 0x9, 0x4, 0x9, 0x0, 0x5, 0x4, 0x200, 0xfffff000, 0xff, 0xfffffeff, 0x549f, 0x400, 0x2, 0xfffffffc, 0x0, 0x6, 0xf9cd, 0x8, 0x333, 0x10001, 0x677, 0x40e, 0x2, 0x3, 0x1000, 0xffff, 0x7fffffff, 0x8, 0x2], 0x1, [{[0x7, 0x4], @multicast2}]}}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz1\x00', {0x1}}}}], @common=@mark={'mark\x00', 0x8, {{0xffffffc0, 0xfffffffffffffffd}}}}, {0x3, 0x2, 0x2, 'veth1\x00', 'nicvf0\x00', 'bond_slave_1\x00', 'bond0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff], 0x1da, 0x34a, 0x38e, [@comment={{'comment\x00', 0x0, 0x100}}, @nfacct={{'nfacct\x00', 0x0, 0x24}, {{'syz1\x00', 0x65}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x7, 0xc4, {0x8}}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10000, 'system_u:object_r:syslogd_initrc_exec_t:s0\x00'}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x6, 0x5, {0x9}}}}}]}, {0x0, '\x00', 0x2, 0x0, 0x2, [{0x11, 0x32, 0x800, 'ip6erspan0\x00', 'vlan0\x00', 'macvlan0\x00', 'bond0\x00', @random="ca53d0146582", [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0x0, 0x1fe, 0x677f6e41cdcc76b4, 0xff], 0xd6, 0x106, 0x152, [@ip={{'ip\x00', 0x0, 0x1c}, {{@dev={0xac, 0x14, 0x14, 0x34}, @loopback, 0xffffff00, 0xffffff00, 0xc, 0x33, 0x10, 0x0, 0x4e20, 0x4e23, 0x4e22, 0x4e22}}}, @pkttype={{'pkttype\x00', 0x0, 0x4}, {{0x3}}}], [@common=@dnat={'dnat\x00', 0xc, {{@remote, 0xffffffffffffffff}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x3, {0x7}}}}}, {0x9, 0x0, 0x6001, 'macvtap0\x00', 'veth0\x00', 'macsec0\x00', 'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, [0x0, 0xff, 0x0, 0xff], 0xb6, 0xb6, 0xfa, [@helper={{'helper\x00', 0x0, 0x24}, {{0x1, 'RAS\x00'}}}], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x0, 0x7, {0x7f8000}}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{0x9, 0x66, 0x88a8, 'ip6tnl0\x00', 'ip6erspan0\x00', 'bond0\x00', 'veth1_to_team\x00', @random="108d363a852d", [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0x0, 0xff, 0xff], 0x6e, 0xe2, 0x12e, [], [@common=@AUDIT={'AUDIT\x00', 0x4, {{0x1}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz1\x00'}}}], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x5, {0x8}}}}}, {0x11, 0x8, 0x892f, 'dvmrp1\x00', 'bridge0\x00', 'syzkaller1\x00', 'ip6gretap0\x00', @empty, [0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0x96, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x4, {{0x1}}}}]}]}, 0x1204) fcntl$notify(r3, 0x402, 0x10000002a) unshare(0x28000400) unshare(0x8000800) (async) unshare(0x8000800) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/4096) ioctl$RTC_PIE_ON(r3, 0x7005) (async) ioctl$RTC_PIE_ON(r3, 0x7005) 6m44.107692878s ago: executing program 2 (id=2283): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4804) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000240)=""/72, 0x48}], 0x1, &(0x7f00000014c0)=""/7, 0x7}, 0x401}], 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000007e00000043000800feffffff00000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r5, 0x24, &(0x7f00000000c0)={0x300, 0x1, 0x0, 0x4000007fffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8) syz_emit_ethernet(0x1b4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="12011001a0b4c41058044a70553a010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 6m41.012847682s ago: executing program 2 (id=2293): syz_open_dev$video(&(0x7f0000000040), 0x3f9, 0x141842) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000ac0)={&(0x7f0000000080)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)="3a697bed9d972d33ff2ec97e06d67f1c1fd7f46db8f4211528", 0x19}, {&(0x7f0000000280)="cdd915a560ed5dcd6a6999fcc9588cd25d6f104995656d5e7f3d1d5600c9f515bcd95161bf0b0644b9c6f0b3a86fa45ee4e85c61acf31b9361b4a1584d3aff34e9c991ddf435096eeb27f397b8f0a335d1edc8fafe82484bc90cf809472020481d22e5b29b44f51fd8260ad12bba70fa6ca97239718d711e1137b09cd45792eda9041a3c1dfe93cb85a41d33016ad9bf03eeb5057edb9b5de0af327693c110879ff573d8d8a847c69b9774a2a385c8389f2d2be50a48", 0xb6}, {&(0x7f0000000340)="ab845b62a009c6d4dfb46c082c8fbb06e25e750ebdec4b4cc228e849badbedef60d51b5e19e0ae335fbee0c187189506e0829fa446f46a6b98b6345b73c2e1e81fe0f6f6b9bef0aaf6ba9c640721262307e4f3112ad8e83a65d737ff7599f06eff776c548d69e4cee0b43980342947412ec561267617784a1c6ea54d6b6d10d9273cee9289296a8fc373b165bfe64bbf236dd98c246cec38d12a3310ee2820f199f320947af24be93926ceb6494579fc860926f70fb7954d1dfbe53528d88443968c53215d1f781e38db8923d695bfcfff", 0xd1}, {&(0x7f0000000140)="7bc601598826934066e145bb1104acbb4334fb3595ce4fa4be1c7cb3be0d68ec65d5b77a3051e1a6a9", 0x29}, {0x0}, {&(0x7f0000000540)="9a887c3e6af7737058d87929afb0cbeb651bc84ad4cc6daea9bd9c5e7905e8fd8fcdd1ed0ae589abc754890cadf2da60e3ec269bc9bccfe082572bc424dc17b89a5ce1f76f507cb4d0623ac3f9dc3a161e9349f46a818118009f44fd64907602b3892d84e3b8e199968d4df62224c221df4f837582d03a00b65146", 0x7b}, {&(0x7f0000000180)="a932b42e5b9771ecdd57006ba005ed4d495c64839eb0e33cf08ed95d2f79f068e536b05860a085", 0x27}, {&(0x7f0000000600)="1ea24a069808b342ebd6e04755d733fbffc8c45e4b015ce694921cd1aa412a88fc51f4db4cb226fbab4399aa814fa524d449bf048c159e9e857600ba5f2b9202f8ea4ae2051b31703403f05d6be9f37b7a038007666f91de44cc265e4c46b88722dcbeec304ac7d42dff47628a2a1ae14ae4fde515e781f51e7609f16bc66561cf3d388fa9623f0fcc46171666066c93d1bf6440a2fb0fd5451815fe1f0d525c34a3b44b3c4214f341bd3377b63f4f07f3fade01c5526460a95ff92a392593", 0xbf}], 0x8, &(0x7f0000000700)=[{0xa4, 0x115, 0x800, "77ee0182f222ad9d55140385f9671e598066720a7bb6168f8793863a7f9adc75206c3b3177d33ae830bfa8c4229a8dde088d68fd02bc013e17ef8899de39d2ecaa714c033dd0d3460e2b1d199214ebe1ebe1bcdfd94bda51d080f9f03237047de53288f8786e44f5aaa26dcc6bd0b7b2b3f49660eedc269addad444a0e9cd1492ed6341ed51f36892745c963c3c0b0e44917f9e4e317"}, {0xc, 0x84, 0xe9}, {0xc4, 0x0, 0x5, "5a7401ca0b53767688d81edc35f8813fe4c684f652fc1e485e85df655dc2cb016abfdb1c1f499ec1ac89b5129a8e903654828f6a419c91f7696f4f9dbeae7cbefc9d6e2ab0a7e06c238eb1903ec97c72aacef7a7d43c4461195c7ee197b5122345512e8a423e428b8f9f1587fd38002920c324ee3a02bd9ece9f922e4721f06731efea5829f0cf76f571af75ff4f52f2b88d1b0ff7082cacfb664d7841cb78b51dc2f2b38540fe99fa5ff59668ed7ba18f15e426e2a2"}, {0x64, 0x10f, 0x8, "88a423e2d4e69e28fd66bc8d520f250c7d4e0da7408d51c5dade450cd18e06a5ea942649094d787e246d28eacb131caaab1898e3df48dfbd422f18277d645aa3253fc0937d4864b71b8579426c04eb0060dbc3a7ef"}, {0x90, 0x11, 0xfffffffe, "fa43f117f84ae6692a64a110d591c5bc5ed6a9ce989a4c1ec912f946f1de5bb794a0c848f164794fe49aba1671ebaec32187c8880bfa8bdd51397633865c3f866315955d08a4797cf1c3bfbdf164fb2a3aac579a1e13fea7cc329a255d425116283fd0774a6ea672e90be2a62289df23dee82e3a601deaad77bbc413d5a8ae4c1df2"}, {0x80, 0x119, 0x4, "be9323c0fe1e5969a287c3f1bca7fc4aaa6b727409ad6e658d55acafb89eb2fa170abe2ef06419434e101815fc384fec4dfad348a60a2d1535a98b5381db1d5cfb5927e5dfbc80d1ba5551b54ff8b43716e92cafbe96fa83c49c27b8091d80e8a876558cda29bca6c60541dd255f7a23e4da"}, {0xd4, 0x102, 0x404, "6bbf057e1ecb8c20ee2d68bb8961edc9569ef5887d0fbbf2e5927e303695a9c90e7832f036fd94145bb4a3b116000b13bed8a208372251d3dc827114b67015ab2c079b244ce80ce75927ecd802d0281c7fbd6566e915c977e3bcd5aa30814535b3ee78a698b7aa1113dc6610e139a9a0549e47dbc14c13dfe140890e3b294b02dd521a591b149988eada1edc6ba4d59728d1b669112da99ba8e5125390d12ffa83ab9493372d9ba9684af37a4f4acdf91c0872f01edbbd43341d860d87abad4e3b9fec8cd5c11a24"}], 0x3bc}, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0xa, 0x400000) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="ad3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000900f00e000009"], 0x48) 6m40.288148033s ago: executing program 2 (id=2297): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x800) 6m39.820473863s ago: executing program 32 (id=2297): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x800) 4m43.130610152s ago: executing program 3 (id=2798): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) statx(r1, &(0x7f0000000340)='./file0/file0\x00', 0x6000, 0x7ff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0xd3e}}, {@blksize={'blksize', 0x3d, 0x1600}}, {@default_permissions}], [{@smackfshat={'smackfshat', 0x3d, 'fuse\x00'}}]}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 4m42.134633069s ago: executing program 3 (id=2801): r0 = fsopen(0x0, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000007080)=[{{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000500)="e9ee37c97ca1e8bbde727f9330dfcc38c64200807e449ec233a9324cae14133aaf9840302c94b07c38471bed03629566bbc3997d7014dfa4a6d9c19259cdb0420c256b210712746a7891fa3215f7cb913183e3e6813bd47e67ae454c5cb4e76a8bea3613ab7e79ee1655bc76b70f", 0x6e}, {&(0x7f0000000580)="f73ec3055b65890e95107fa41ea97069a86328440b0e246b840419ec7c15f09c3084226d97b5eb358fa2444db54d60d98d6f2e50bbd7972c8455e3dd8852f14de4648009c4e98b185ac90d345f", 0x4d}, {&(0x7f0000000600)="802c54a277049a90eb6def0137cd144248eaae213a95c51156789c4938b6c1a84dc8a5e04f6f2c6b44b10fd6d380079e77794660b2f4ef42f43459c59cdaaa0a9aed68ed2038720a76468be1d437d24171a239", 0x53}, {&(0x7f00000003c0)="36d1959fea4ddc0bc0abfd535096436cd46d0b4ffdef99773463d92a58fc2a43051d7285c81c3bcc53e7760c324897b1d0", 0x31}, {&(0x7f0000000680)="aca7f6ff488beac8a911fe0775ee8250c2a711dab7c2e7561983adfa2ab00ca83beafe0b1d9d4860845de43ea053a2928aa99a6be84f13400f9c62be30f18767710c2e9a0087ac778f9db16c9fc28ad61e26f4a719d140c2d445d1d83254908765ebf0a29c8996f6f68e758c7b15003169bb1890dd9ce506af5dd58bb54b981001c8824a082f6736", 0x88}, {&(0x7f0000000880)="82f1d75fce38e6dfc7c8a673b7f272de708a9f257f8f2acb1c35cbbfc5c6d2457868b77ab9ff81a17d0ffc5fd4ccaa8a767c15c216cc0e94703ca9d5ee20c8ce66c075c71fd4ad507614eafbfba11bd5786534f41bfaed974eb2c12b849319d0b1ec395d956bdae63f10b60ab8baf637c8c374ec9fff81b1dc0f06a8c3ebab3186e89ae6f6706785687edcbbca94e2d84007f66dc6ee85daba0d0470fc6a5333453a5bdda059b82246270aa0aaf5ea19a8d81dc3b6722e4f742d7aa9e0f052a9872952f999dbdc85bf95329ca34320cf354f8643c6ab9d8d7b21ea4cc43b44dc390de09adce319d35a2e87c0a9a1750763a2d1d176e97870", 0xf8}], 0x6, &(0x7f0000000980)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [r3, r0, r2, r1, r3]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r3]}}], 0x58, 0x4004}}, {{&(0x7f0000006a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006c00)=[{&(0x7f0000006a80)="bed5392d35b6bd1ab1fd6615587d1ad52e0050df9dac85cc5a5cf9cfd850f36587af0f287d089178e4bc4b23cd22a3e7c631f4b19f7060e1ddd007fdc491d42ce61ba489c2d1438fedd7a5684436814af5351e82bb3943b0adfb670f18fb48736491ce7109bf732c9126d1c9a30b4d60ea67e7af4996ee969fdaef454f81053a8f77", 0x82}, {&(0x7f0000007180)="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", 0x1000}, {&(0x7f0000006b40)="c5421208c29b0dc5bb1f0bf2b94637c31e79c11cf6eef9ff32932783a8be0f1a96288320467014386c7967e79b27183e08a0dc11df5899185194b2b8403de2d35c111743a7588a34b85d6613b955824310d246e3903e8666cd626a81c2433c25589f14e0d02a2e258cc42a03a3d78018f0382bcdb12b872d6c637695df8921ecbfa47d", 0x83}], 0x3, &(0x7f0000006d40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58, 0x24012044}}, {{&(0x7f0000006dc0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000006f40)=[{&(0x7f0000006c80)="979483a1392767393b8fb10bc4822db4", 0x10}, {&(0x7f0000006e40)="146d663bcdf21acb68d6e5465d007d512a78335d8e30ece48a3d91af17fb6cb4e801f985780c108c22cae236a9af1f5027adab87360b1e3e1418e496f1b959f6f07fee0aa60289200cd992ccad03bb50a1aaa690d667ffe474ab0bb537465b77b1cd4ef44f01598dee0a967583dfe5e75ef82323f7c4cc18e92bbb07f2a85135e44e2608d511297b8658319a57fd3a847f6bded52218c5488befced1babedb9e2db823dd372fe9e619eaf5f10c0a338629a3b1af8d", 0xb5}, {&(0x7f0000000740)="90e00feaf9ee23ced49f6169756b6550d63d", 0x12}], 0x3, &(0x7f0000008180)=[@rights={{0x34, 0x1, 0x1, [r3, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0xc}}, @cred={{0x18}}], 0xa4, 0x81}}], 0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000a00)={0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x614e597b2cca9230}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES64=r5, @ANYRESDEC=r4], 0x110) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) socket$xdp(0x2c, 0x3, 0x0) accept4$unix(r3, &(0x7f00000002c0), &(0x7f0000000340)=0x6e, 0x80000) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@newtclass={0x24, 0x28, 0x500, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0x10, 0xffe0}, {0xb, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048022}, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(r8, 0x141601) fcntl$setstatus(r9, 0x4, 0x102800) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x19) 4m41.106821089s ago: executing program 3 (id=2805): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4m40.871889102s ago: executing program 3 (id=2810): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) statx(r1, &(0x7f0000000340)='./file0/file0\x00', 0x6000, 0x7ff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0xd3e}}, {@blksize={'blksize', 0x3d, 0x1600}}, {@default_permissions}], [{@smackfshat={'smackfshat', 0x3d, 'fuse\x00'}}]}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) (fail_nth: 1) 4m39.969241176s ago: executing program 3 (id=2814): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r4 = socket(0x1d, 0x2, 0x6) recvfrom$l2tp6(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x20) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x160}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d2", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100"], 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8c4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x890, 0x2, [@TCA_U32_POLICE={0x868, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x803, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10001, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0xffffff00, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0xebb, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x4, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x7f, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf6, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x4003, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x2, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0xa, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x42b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) r10 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) ioctl$EVIOCGEFFECTS(r10, 0x80044584, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) io_uring_setup(0x598, 0x0) 4m39.589571603s ago: executing program 3 (id=2815): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000005000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000000) 4m39.311355806s ago: executing program 33 (id=2815): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000005000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000841}, 0x4000000) 16.964759477s ago: executing program 4 (id=4013): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) futex_waitv(&(0x7f0000001b00), 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x11223}}, 0x20}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}]}]}, 0x78}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2c, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xba}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0x78, 0x90, 0x43, 0x20, 0x2040, 0x9950, 0x4f54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xbc, 0x1, 0x10, 0x0, [{{0x9, 0x4, 0xce, 0x42, 0x1, 0x57, 0x5b, 0x5b, 0x81, [], [{{0x9, 0x5, 0x1, 0xc, 0x200, 0x8, 0xa0, 0x5}}]}}]}}]}}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000001640)=ANY=[@ANYBLOB="508ba426766e237e584db7b6d3b2c8e418756d8db1366d3258fe1c14a3834fd7a5baf617f5353c5ce5cf4bf664264027acfd1cebdc396353fe713335bae25cacec5a905bb7d907dff823328eb873c05eb9aa9d0867bf5f4d35d6b1b0604ec0fcf1f26718fc27b811908b84d8553452a1354e3ad4ecda3d2447202b115c05a44835cb16c06a8e220257d05b9b22989b59a7c54676c1aa12f4d78be6a85f0d83e45c85f464d15a23670019e8059bb61a9308488ceca439de5c16258662901e0dbf7d9ea9300ed236ef8ac65fea38541a4b96f5a0d84c81273ee10bc6dbbb4258dc56582adba7f52e3a42d03618d26d", @ANYRESHEX=0x0, @ANYBLOB="39cdb53c57a6c7a75a46755ef48350b559464577bdedd97c17a5f3a8dd795eaed8acc8d2391f81831a574d798af1073ef043f74bdc8fc1b51e9da050a6aebaed5b0c916c686219b1df185727f714532087695bd945fa7c757cd4b0d3b7b18ad41bcbc3c48a21a0ec5d8dc36462adcfc9dc276081686778a5d4583813be822d1db574c259b6631472118794d5bff601d4238531fcee61242cfc9f2e30055c6343337de492582ee724b7df838ad3e103bbcf5a2340020fecc008fdb9075403645788fa1bd3aaf301177250412186905cc526db63c0ff5b0ab46237785d504a913cf8c422cb5fef64f014c60b9a", @ANYRESDEC=r12, @ANYRES64=r11, @ANYRESDEC=r11], 0x8e79f0352167ea14) 13.780971068s ago: executing program 4 (id=4024): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_dev$dri(&(0x7f0000001280), 0x1fe, 0xa2142) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) write$sequencer(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000009300a0"], 0x24) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x80) syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b000090400"], 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000001300)=0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4073, 0xfe9}], 0x1}, 0x9}], 0x1, 0x40012100, 0x0) r7 = openat$vnet(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vhost_msg_v2(r7, &(0x7f0000001440)={0x2, 0x0, {&(0x7f0000001540)=""/171, 0xab, 0x0, 0x3, 0x3}}, 0x48) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)='P', 0x1}], 0x1}}], 0x1, 0x1) shutdown(r8, 0x1) setsockopt(r8, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2", 0x6) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r9) 9.87227685s ago: executing program 4 (id=4038): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f0000000040), 0x1, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) lremovexattr(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=""/231, 0xe7) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x3}}) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r9 = socket$key(0xf, 0x3, 0x2) fsetxattr$trusted_overlay_upper(r9, &(0x7f0000002b40), &(0x7f0000002b80)={0x0, 0xfb, 0xc1, 0x3, 0xf5, "f4e33b790d893d82db8d1354169ef5f4", "90b01cc3752a132d643ee35a3256f1e4cd895b518d06f9f01d573e3b2dddf51fb3642f4fcf70ebd7d5ac476ec062e23ccc432408bb726c49c21b04e08ff61e2ce1ce3ce9c2ea5fcdc5dec87bc1ca43853752e3cb85618f69e3ebe86828c763ff3a20f817aa5b7933f15e009426d68e7f5cf779894ebfd6bb564fd4350caac82aa4066b7f68a91284fb9b51badb351f7512343ff130ef81be29713b1878704c0eb189f8ae34736aabaac03afb"}, 0xc1, 0x1) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000002ac0)={r10, 0x20, &(0x7f0000002a80)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000002b00)=0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)="24fa82ee4a9e", 0x6}], 0x1}, 0x20048010) sendmsg$kcm(r2, &(0x7f00000028c0)={&(0x7f0000000340)=@ethernet={0x6, @remote}, 0x80, &(0x7f0000002840)=[{&(0x7f00000003c0)="df583b4d6d1273f64dc9f5b46c49f932744c4187b523601defd384c33aa0dc98be340984aac569402e41a6ed0a7a531ccf97dcf1945e14c75f12586703456b831e7cf1f0d584355e8b3c4d8c6a80e1af21b2bef2f3fdf47a3c8a80078dd12152bd72991fae24627d513984678590b0246e8c33c3", 0x74}, {&(0x7f0000000440)}, {&(0x7f0000000480)="e95ccbcad90629b3544f6a15f2648603ad52fa0b6504e19493fd6c9f1ce978bf644008fec20448ecbeb611fad34387f00840f1fac6a6c5614ab541838a0ec7263c3550f227e5dd5045ec97b786159d5dc1b8bcd16d21c4b433e068f2553a0c14667b9a261c4c061b465bb236854f3e24a0ecce5bcd0fdbc81a3eeced26316125d61176e0aca791be7b04fd027f424341bd28db0362d552bc574b5b84e81005351d152c3834567cf4842d742dcb3334d420d1b53d91730111195b98541be1311bbbbe8f4e3ef7d9d499a850796ef4078428e07d60c8ce789e16fce9416ba3a6b9deebdfdced7c0945bb2a9de1eb86b478cc7d4a6c8d149f86c1cb3e352ed790181e2af333ea93c0895f28e7e73246b4ccac052482e74295b21322453b8c86e1549b030f6b2a8efd5bdff55eafa9410a3b83d944af9cfde1771ff5029babcfd6fa681451315cca5bbe87379b41ac5190027a824dbc0a9429b8bdd9934a31ec256120fbca97ea4541214c4b410b2a9c716d8153331c994ad296d68e503f33a29081bf7788aeafe941429e59e6d18c59a299957aa47a05a116c29ebe37de0b2d8a47b393d0a96933a3a5835ef9e72b5ed82075ff89da65a7047e3b7a14dc55d66bafc6376010acecb81925fbcd9c53a8bfaa8c704bc4303d316a79178e6a0afa9f3f99fab4f8d4a726b4eb830f5d37b86d9c6d4b34d80e61c84acc704efdffdb5a393c061e27044b49a90a6b91a8755d19360629a4474fba2a9c7af486fbae91580c34b04b900505be87a3e8a77b9917c32fe10683f11a4b40bc4ed3f25229e6cb8b4211aa660159707b96cd1a6518fc085a61eea50255cb568f81a179f84de768795e454d27c333477d0727ee86aeb8efd2b31a06309ccbd9d41fb9ea5ef5a25bd6ad8a51f621e236914de8892483ba9298c2b0724e55754b8cf7e0dc70df5480dfcfe56ccb60e3f25bae3676bef3a88b4bff70643eca2de7d685ec504f2238733e9b1025a6266bc24adaeeb09a2b93fa0c9c94922e2088b5d25712e8f4ceb5cd95bc0350f76bc2fcad6f76190dac4e3b5c6775fe17ce27647eff4608f86d3ded8ab19a84682f8a554d78409e1a3133af7b0af243af9a065c6204a3bfad8aa679d4f49577e23e298fc345cb6ef5f0b51581edb110135e7da3d4838c29121f40d1a21ac0e3716d2491fbe7ebb5ded9de5f97088d7d377aa1df3147d502493da8152785552290951654b6b76888ab3f01b3157e83c7356959e65ba04d627a0c900c8bd6c28630be9a27b9ca7e69949f00dddfaff239eef403595686508334f459b5faad14e2cf19b033d2c3922289c27056fa621da27760899caf344180a7aa190aab46ca084f830b4f3421c6f77aeb94a5f492cf2dbff0f90198d92b2de43cbc15ba842443421862ca532c3de3754e714e6210617d569981849b6ca654253b3695eef0381e674a71cce8dcf82e3357465d62893b74e90f330991c78d1df3f09de275b26b02f09c531f825ed240135649510545405aa820709408dbd33579ef8ff5af7ba2a9e5bb85328e5893ea61cb8cdc3fed4f99f2d2366e5d6c35e9b4b934189b9e26b48282c34bea9cd97d78a656de1c502a9c714bc0b2ceaa3e64373d970ee7c5ca13cd3a27e0894348c8fc92d0bfee9159b4a07cff56768cbdd1927b6b8b20f05a593b47657ef023a0b59b31fdb416e95316389a6f40b5743d8b70702be9b440af4466aba707a3d723c72e5f9aebbdc64dfaa41b5de06eed0c24ec1d476a537fe4c64ea2278a4f806350b09ece55d76af77398b763eec23409aec3c9ce501d487d2cdd3a8cdd33d1e26448cec782955f5476e995324851d42c47506bca85f972afe19b54d27ee37f78274886eba97f0a459922795126769446c60ec823df0d099538c56a1d1d037ff5e1e2c72aeb5d2579b9780c1f0331d5618b589fb8178dd971b7c87d2884e79e0a501ae769af228de2d64f88df26508d5c86081f1f2bd3b2c70ddb9ada84f89a193354ed5318fb98d5dd714bdefc63166d5be73c6373daaf75cb22c50dfb3d61419baa71da0394ad6e91d3dc2796c6c626e9f3434724396c0be4ac4eef26f81efce9ca722440683707e5adbf9103a8f13a9dd4be6c25c1804c7eb93e4216aaec56a1c4ecfb261a46b8d2bb51fb7d109f0397440a53c903eb4dc68c49eb36b254579270331fc9b23aebf48d66d63b1275518a0f61d872c95f67a4f9f5e4666a18cba733e511bf17c9a06ed294556b580ead5c63059ba52ea34e87b28543a552b478bb14801786ef6e86ecd147eeb889aad41b1c195d19dc9544e104e9d907df2a0494e39efc1ba0c94d5bc7fb86b94b74bbfd41b7cadf628d90d373a2a8618422cd70dc51702570130c6f2d4b2ee35fcbcf9222e3e303949d42bb98f67d6d55f700ce267419a2602948679d59336b67734bf655df8976a2bb62f014972811339f439e904922637563097c2f6d01bdd13683342762800c05324ad520d59f1a47f0b93630a57e5ab71b34edfab895b9a368bde91c2f781b17749ff31920d0eca1b1559fc941be6ab257028561fc8aa0aaf0e0c7039b1dd409627e51a0346e7a12353d80e9a94d9639175a0cbf57d65353763db8c47a4f653efb8fee10fa1ea5ebbb5e5dfb315b73102617e63f157305da5c623b85e2d034ce6d9b64265d2521896c0f1ce9e49cf278310c2d7637312bdb0c725400ad23f68d4fabe8af997a6a39c49b04842c6149eaa727b34cc4c81ff6cae8dc3800307e2e064bd2d94b69326255acb2594ccf40280e57bbc8b8f9ae43b683586dde8ba67cd2e010e4c6dd1a0a71c365ddbe8fac048591b179f3bd789e90264cbdaf75f6153c70e4170af1f958ea6ad7227b7b7ca5db10bc20fed10331b44ca173941858092ce657b208b4d21ae503685af7330cc9850672d040b696b2c79b48e31066f8d6bd3bafd4502282bfa7daaa3a28dc850b11472c113138166b4cd3113e56ce0f168695134a026d8140aa1701a5c0a069abf7cd4a400c772f44ef53a3684ffa5e5e5deca3302b4c265a31eed36fa4ab836fba6228cbfd993796dbf61e7ec2576651e0d506235b9e9b43a7b4a539126d3abf2ebe7d7d0504d278e621fe0a1fd290ed382fd938906a1bd36e86fc5c508620edb5f21d19c803f3dc3770c9cbb666abd66df05ca4a1c0d9d9474b66f76af92c70c92da80c6a80298fc56f051da79ef13a945804542255419a6c00039d2ed5e60922ac9e3046ee51c5277d8cbb057e101ae896a9b29d6c26fb328372158c367982529484b0e6741b4666db5948e46dd5c82c761b0af852ea36f6662b920674db5cdf3a6b1cd50ef3b942dc010dbb34e1b856e66701b14c7f06258304b7bdb1862a4b748fccdfbb10e9fe9333311edbb8de4aeae76b10f819e19a8f1ce426baacb661e34ea0baccf6173af9f26f8c79b5e6ee0b025d3977ac6dd35be0c7cc59907dacec945df9aef112816079208977ab364f1cce779caaf08ed7441d2f6593e2b6041f6eefac96447736aa0bdf2c84558d8819197b3fe98d5fec535aad67a9dedce29b6693d5cc9ce54c9c4b141a60877c1bb2dd4286d5b9ed2acaf3317ff188996148a5c91d414c0c83483903ceac03ec55f485e9997951a671d9d6d98b46a71f72a35f62ac4cafdd7e8bf151a133b24c6362784a8d017e8d0acbb818d791725a59ddf00fc770f07b5d4224db08fc8a17cdc452760ecf66de231afe7c8837dabdc8120766d2b47d3352c7f798cf16bab211a2279880b2d6f5ec67ee2b642aa53ee5bdbb2721a7abe17de2722d4a1e916af110b79ec23d8b9ef1e5331a4b1185c62e1a1d33954fe3f941e59a3696db701712c03796ca7aef9c29820639c1f322a203995ddaefccefe0e17bac6c2ac4f240a3a84f9a3cd2f175660919b08bb0f40fefb1e41614768068560ad21d04cdfbbfb2e9bec1317110449af1d65e815520b53a992fe247594d9f0f28d413040fdec0c83b8036333815ba937fa4898aee99b8df720d4eed8c5688173ba58d3f371d140fce4700228525f728e4825c4acda47c7a0b6ee3cbb69044fd0fe960b6c9cb07b35e321264090b5c7b60e052b0ee05acc46bf499655f948e5bafd504fb9852c25471c5a4d2f9b0b0b7c5dd84cf49980d4695520d0c9cf83cd046afd3993af3d1b400c7b37a0cdea247a97578a2267b70a45d2d8dadb6f6cd7af2f3ee4f2dcadbad961bce801556087d459c57e71c05bc8ca28c1751db64ed2f5db4241479d16d8dea046dd309ad896ffe5fd226d67a5324f148096632ea2c6e5879a52a4096e31bf20f1d8ec1e454c336d29e76954aa7ab4646b86f238391a413125fd52c8b6fd20811cb8d37e725e32c583aa7e7c5e3df372b2dcc77b04c659f5fd00ee07c22d2f9ee4c377aec42dc71e90d371e1400b075611dcdbe6b729374f89dbdd249bf2e574df4b884a3bb0ff14168513e622d4f58274f54b1168ea4b564aeffb4db5aa04a558e12b60606683289614ba2b7c466b3d471f182d72e3ba8167eb88295fb6fbfe0e00f8b290208895e87640b944cafa50f8f246a873be46b847d742c3e4835f7d43b5d149519e7786f7b2629ea93eeb4fcee83fe49a9d075dd6c6da2cf175fb33a0dca28d151541d88194fb9b7b62b481226157fea2b6be22caaf1b7416c64dc900b46f1d0db12a273c4b7af07c4fd3826a56c71bb25395e6d6879e7ad5d67e3dc11335fbfad14aa4cd353f8cf8e092fe301977c18c9a08f9882fe9927698c2fd167ffbeec16567e50eb8103ef6cd3b60f03c3b8e2424caf8feeda32ddc6e96e36928fde03066469d27af2dd8883585e3a944e0623b2e3e405457730ff2a69d08e5a88696baa0e493eee9c986dbacdae98421b693f1d410dc0c99868b7c693aeb4f6f71779ff13be04614c5cfe0f06dda2ab96a0cf2611f1ea14502f1248abe1b8749830c7039bc4bd356b7ad802b32a90399bf1a2f0c9bd7d6a1478ec3f04b359cfe833ae006eadf9adb606af16acb1c146a9c364a29704f02253428b6cb7f2fc8c33f32131d4e15aced06c28e5c991693ec13dbf4ace0590c2f2818ab45b1907a6bac37a386bd6b555857fa339fff4fb2eec974cee0ac9ce614d24665d790d9db60a450588c80062bf5978ec4b5ad439379ae9ea5b6fcf237a2c17e60b5ee3d49dc4a80ca6791f4d058425d9890c2f27a6b61270a71976c9a8a77d4c5a8c6929c7cc352c07de3c1eac2c3d14df6294fd5bd238b6d1496d1a4dce19bb3fb3bbfbd0bc07ab1b8f2b1af7e7ac68673cf4cb81b563890c730c5bc233961c2d6754d25b2f3a5bde17525a3c53b35c62a0d2310c25afbe6cb80073bcea46d5794c09b9a3f0a1f70a23521fc80dcb3d52f2d9254a52bf61e9a9842cb22f4c011fd58d92d0d1d3c56c2cf58c552de88f3a12c68121f7ba2e059d595ecffb0eb45edd9ecdc6525656a7c33d80b6ecdd14796957088aa4036c4aad494323f8549602ec3901c556bee8a10c93e31d1b05db91a68c34b236f470716af5ab54769ae45127ebe07f296bc5fdfde294db2933dce3448488410f7fcd4604e788c7ec3183416de9405a0575c0855265491ca1760c558a6f6bc143e4ffcd9777bf1d4553a6a00e33fcfd19bf4f0c4f9a599b50be858ff5c3bebe889f4af8ca1e19f529c57351d672875b60b869ed7646864e9fbc19748ba1e9206253ec3fc21d98d26c53ddc5322f2db9769159cdb5f7ef0f555701a327e44bd40c2fbf3917e31cb731c492d000a6cf1d61cbbe75a8aee6780e2d5c08fc78382871a1fad75e160adc8440303a", 0x1000}, {&(0x7f0000001480)="1a51bfbecaca5b8eca49d31168886dd768b8f447206541a8952fd91c192dc227f0bd5204daf8a7f6fa2aa86a43b4ad80ab88bb607fa6fdb53760", 0x3a}, {&(0x7f00000014c0)="84a21968a657264452c5c37cc09f80aee29129a1bde9b593028da5865cb4e837fd4b2a420489b8391dba3c0d478f6a823568172df25264ca4e21c6964107d4866327267506486cc8cef9361996319f0175476b96e7041abedb731485b336cae372ca6183679546c31718249d1b034f7f81fd193d6ed06082633fee2dcbec17a6deb568b5568e5bcb7be1c9c40f8132405a2f", 0x92}, {&(0x7f0000001580)="2c62a23bcf45bd281096b55e22b508dbb74b4e6432da0464992ccec5cc288581ead832810370190e2a5bc35dcfd46862cd7f112ab8525d8fe1a2d10d4dd65fc9102b77ca3d1778111f4c5d714111c80aafff6a73840ab5616d2b0ff2530c79b01f3cae5f245925462cc740d1467e527e4e278c753252e31fefe0845905c41023d45dc39db194bf8a75fd5d4cb0587bf8139079d083449264712e518f05d5ce4670d4668260de3562de9257bb372e6eebdaf4715e313fe19b1d997a1398da5c6a77bad7bd794dadb37b82c7ec55c79401ac0118a1704e3eb8901a0e68fa0b700335db4baba0e011cf9e44bd69c1581fb22e", 0xf1}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="eb779526c792b5e16213ad3ac9e3a297f87248308e5e7858313239d503f282190e81678f9e4fcf1c561da6a11224d351aeb58ef5689c0a9d8c6ad7d93aa7f8cd90633c34d5f3a17be8cb372917f26284ce11a391e263b0cba5865c978f2b3956ad02c4d5d418231691e94470d5c5116bc637186a409fafdfafd43a1026e4131e1eadc0908fdaddf645ac6556e72b13c8faa64796e8adbf122d6baa1f088e8275ee3ede4037a6f29cd9c4a340973d68651151", 0xb2}, {&(0x7f0000002740)="eff64241a8e8aacc0245d087074eab9e898311250d17e4a5641ce7e3cbe72b67558914f3e2dcc146f99773f8d543f745a06696b74783e62f85ddc80965c063420dc0cf2912b48d437abaead2dd727eee02b1b30982", 0x55}, {&(0x7f00000027c0)="d8a145a9c9b455a500200d1f3df3decdd60053ca7097879cb42b6761b63ac0d0378a29c6847d38cbf61e25e5ffee122c7683f4964a8df82efd682fd3986fbd2ec037", 0x42}], 0xa}, 0x40800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002900)=ANY=[@ANYBLOB="600000001000ffff957f4828fbdbdf25000074c26aa103608f0221ac0629f1790000724e768c5bdf5d0d24f35f2126afca89ed1f4ae4b2219cdd0f54c430f08e1ed6612884d428420024834cea8998f1b129c2dc72e0b21a1b46d9ad8b5b139e7c54985c7322201898410b03ad047e3a9408e9622ccee3dc0590f1570cacf133025718e94cb0eea1f1961f00d8b75d69d712ffcd6b327a8cd8750080cbd0cd40c9ef450b2923fe96c9d9cebf9c1cec1f4eb086e337610a262c04f81010628c70214f68d15c75b815e63fbabc734c182162579c7dcae7a2173399799750b6c6617645bbf86f6a000f9be756b35f112fe2529238a0bc4fe9adad55eec0757ee6fda46ef7003fe808322d31652755b9", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500340012800e0001006970366772657461700000001a41028006000f00ff00000014000600fc0000000000000000000000000000010a000100aaaaaaaaaabb0000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 7.123316471s ago: executing program 0 (id=4046): mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000081) timer_create(0x7, &(0x7f0000000680)={0x0, 0x21, 0x1, @thr={&(0x7f0000000280)="cc9ed8f601b2519ed739bd80e2cf71511f67fc7733497e11920abb5f7ff1aad34c2a53f7b87670be41869327192d2ee15eed85807a9ba59f80faa30ada0b10ce64467c1cf1a5c80d3aaf56ae8a9fbdb7515e421d0c1623d0ec6f5d58f490a9f6e6929a62db6755d2dbcef65347999057bc63e992b7e45577f383", &(0x7f0000000300)="9b8e42b0342d49a2242adb7f1037fb3f8643524201f80d0addf80fc489645bdd319455ffd202ec4d4b343e83f40550b36be7845060bcbbeae105360dc278971b063b25bbaa16b7a0a3e52a6ff8e79a1d8cd474a3752f5847bd84857d5b9d123385bdc8a9b17d542feff0"}}, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4e}, 0x2400c000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10000000, 0xfffffffc, 0x0, 0xb49, 0x9, 0x8, 0x5, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f00000002c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000140), 0x9) 6.964427277s ago: executing program 4 (id=4047): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2, 0x20}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xffffffff}, 0x0) r4 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1, 0x0, 0x0, 0x240001d1}], 0x1, 0x45) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='status\x00') socket$rxrpc(0x21, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000070900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000040) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket(0x10, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x28, "0000000000000000000100ff00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040005}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x6, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x419) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 5.710991821s ago: executing program 1 (id=4051): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000014c0)='cgroup.stat\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind(r2, &(0x7f0000001080)=@generic={0x1d, "fb54595b6ebc45663ecab7fedc45c6da2a0a90364fc8e61b51eec42df19b7e0d36895ad08597d5aa07f6c5724b9d307ebde33924e32b7ebda1f550aefadc5321e0711df8d36ec3d83f471bbc9ff7e86f0cbfe26c27e6f881ea86b4267c125766471f4b86a26c193837abc598052c0b5071f1d6755dd183387278cf5ea3ae"}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="4000000010004b0400000000f7dbdf257a000000", @ANYRES32=0x0, @ANYBLOB="000000004e500200140012800b00010062726959b5ed001ed3add9f3e90fe76124a9f46667650000040002800a000100aaaaaaaaaa290000"], 0x40}}, 0x20000004) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000001100)=0x22822e0) 5.556509416s ago: executing program 0 (id=4052): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='qnx6\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = getpid() sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x20002}]}, 0x44}}, 0x4008040) r6 = fsmount(r3, 0x0, 0x86) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 5.151268194s ago: executing program 1 (id=4054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x3001, 0x5000, 0x3, 0x7, 0x8, 0x0, 0xfd, 0x3, 0x0, 0x8, 0x6, 0x8}, {0x0, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0x9, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xf000, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0x2, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x2}, {0x100000, 0xf000, 0x0, 0x2, 0x83, 0xc, 0x2, 0xfb, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0xfec77002, 0x6000, 0xd, 0x0, 0x0, 0x7, 0x4, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x10}, {0xdddd1000}, 0x0, 0x0, 0x41000, 0x0, 0xc, 0xf801, 0x5000, [0x80000000, 0x0, 0xbf0d, 0x20000000000001]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff0000) 4.983459868s ago: executing program 6 (id=4055): r0 = socket$unix(0x1, 0x1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) (async) io_pgetevents(r2, 0x1, 0x29, &(0x7f00000000c0), 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async, rerun: 32) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@host}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) (async, rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xd, 0x5}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000048, 0x8, 0x20000000, 0xa, 0x3}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x404c000}, 0x24000850) syz_emit_ethernet(0x1202, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x11cc, 0x11, 0x0, @private0, @local, {[@fragment={0x2b, 0x0, 0xf, 0x0, 0x0, 0x3, 0x66}, @dstopts={0x84, 0x21f, '\x00', [@pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x30, {0x0, 0xa, 0x9, 0x100, [0x0, 0x7ff, 0x3, 0x6, 0xffff]}}, @hao={0xc9, 0x10, @private2}, @generic={0xff, 0x81, "e9ac3ffd7dbb82a3f4a11c37acb909bdb8abe9cd079eb7dd09e9a629ded58649396bea3a799b8abf9c84b3f7e59e274fb7e270f54c278df9a00e6b4454fee0410d0d6e4c84ebab09c50a6426a85a87f7561ee2064650664fac5ce0520f7fb3e3ba6457225da98e0a716a8abad90106555ea1475157aeee429b2655df5da819f93e"}, @hao={0xc9, 0x10, @loopback}, @generic={0x5, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x2f4b}]}, @routing={0x39, 0x4, 0x2, 0x2, 0x0, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x87, 0x10, 0x4, 0x8, 0x14, 0x20, 0x7, [@dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @empty, @mcast2]}], {0x0, 0x4e23, 0xc, 0x0, @opaque="03000000"}}}}}}, 0x0) 4.943530218s ago: executing program 4 (id=4056): syz_open_dev$video(&(0x7f0000000040), 0x3f9, 0x141842) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000ac0)={&(0x7f0000000080)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)="3a697bed9d972d33ff2ec97e06d67f1c1fd7f46db8f4211528", 0x19}, {&(0x7f0000000280)="cdd915a560ed5dcd6a6999fcc9588cd25d6f104995656d5e7f3d1d5600c9f515bcd95161bf0b0644b9c6f0b3a86fa45ee4e85c61acf31b9361b4a1584d3aff34e9c991ddf435096eeb27f397b8f0a335d1edc8fafe82484bc90cf809472020481d22e5b29b44f51fd8260ad12bba70fa6ca97239718d711e1137b09cd45792eda9041a3c1dfe93cb85a41d33016ad9bf03eeb5057edb9b5de0af327693c110879ff573d8d8a847c69b9774a2a385c8389f2d2be50a48", 0xb6}, {&(0x7f0000000340)="ab845b62a009c6d4dfb46c082c8fbb06e25e750ebdec4b4cc228e849badbedef60d51b5e19e0ae335fbee0c187189506e0829fa446f46a6b98b6345b73c2e1e81fe0f6f6b9bef0aaf6ba9c640721262307e4f3112ad8e83a65d737ff7599f06eff776c548d69e4cee0b43980342947412ec561267617784a1c6ea54d6b6d10d9273cee9289296a8fc373b165bfe64bbf236dd98c246cec38d12a3310ee2820f199f320947af24be93926ceb6494579fc860926f70fb7954d1dfbe53528d88443968c53215d1f781e38db8923d695bfcfff", 0xd1}, {&(0x7f0000000140)="7bc601598826934066e145bb1104acbb4334fb3595ce4fa4be1c7cb3be0d68ec65d5b77a3051e1a6a9", 0x29}, {0x0}, {&(0x7f0000000540)="9a887c3e6af7737058d87929afb0cbeb651bc84ad4cc6daea9bd9c5e7905e8fd8fcdd1ed0ae589abc754890cadf2da60e3ec269bc9bccfe082572bc424dc17b89a5ce1f76f507cb4d0623ac3f9dc3a161e9349f46a818118009f44fd64907602b3892d84e3b8e199968d4df62224c221df4f837582d03a00b65146", 0x7b}, {&(0x7f0000000180)="a932b42e5b9771ecdd57006ba005ed4d495c64839eb0e33cf08ed95d2f79f068e536b05860a085", 0x27}, {&(0x7f0000000600)="1ea24a069808b342ebd6e04755d733fbffc8c45e4b015ce694921cd1aa412a88fc51f4db4cb226fbab4399aa814fa524d449bf048c159e9e857600ba5f2b9202f8ea4ae2051b31703403f05d6be9f37b7a038007666f91de44cc265e4c46b88722dcbeec304ac7d42dff47628a2a1ae14ae4fde515e781f51e7609f16bc66561cf3d388fa9623f0fcc46171666066c93d1bf6440a2fb0fd5451815fe1f0d525c34a3b44b3c4214f341bd3377b63f4f07f3fade01c5526460a95ff92a392593", 0xbf}], 0x8, &(0x7f0000000700)=[{0xa4, 0x115, 0x800, "77ee0182f222ad9d55140385f9671e598066720a7bb6168f8793863a7f9adc75206c3b3177d33ae830bfa8c4229a8dde088d68fd02bc013e17ef8899de39d2ecaa714c033dd0d3460e2b1d199214ebe1ebe1bcdfd94bda51d080f9f03237047de53288f8786e44f5aaa26dcc6bd0b7b2b3f49660eedc269addad444a0e9cd1492ed6341ed51f36892745c963c3c0b0e44917f9e4e317"}, {0xc, 0x84, 0xe9}, {0x68, 0x0, 0x5, "5a7401ca0b53767688d81edc35f8813fe4c684f652fc1e485e85df655dc2cb016abfdb1c1f499ec1ac89b5129a8e903654828f6a419c91f7696f4f9dbeae7cbefc9d6e2ab0a7e06c238eb1903ec97c72aacef7a7d43c4461195c7e"}, {0x58, 0x10f, 0x8, "88a423e2d4e69e28fd66bc8d520f250c7d4e0da7408d51c5dade450cd18e06a5ea942649094d787e246d28eacb131caaab1898e3df48dfbd422f18277d645aa3253fc0937d4864b71b8579"}, {0x90, 0x11, 0xfffffffe, "fa43f117f84ae6692a64a110d591c5bc5ed6a9ce989a4c1ec912f946f1de5bb794a0c848f164794fe49aba1671ebaec32187c8880bfa8bdd51397633865c3f866315955d08a4797cf1c3bfbdf164fb2a3aac579a1e13fea7cc329a255d425116283fd0774a6ea672e90be2a62289df23dee82e3a601deaad77bbc413d5a8ae4c1df2"}, {0x80, 0x119, 0x4, "be9323c0fe1e5969a287c3f1bca7fc4aaa6b727409ad6e658d55acafb89eb2fa170abe2ef06419434e101815fc384fec4dfad348a60a2d1535a98b5381db1d5cfb5927e5dfbc80d1ba5551b54ff8b43716e92cafbe96fa83c49c27b8091d80e8a876558cda29bca6c60541dd255f7a23e4da"}, {0xd8, 0x102, 0x404, "6bbf057e1ecb8c20ee2d68bb8961edc9569ef5887d0fbbf2e5927e303695a9c90e7832f036fd94145bb4a3b116000b13bed8a208372251d3dc827114b67015ab2c079b244ce80ce75927ecd802d0281c7fbd6566e915c977e3bcd5aa30814535b3ee78a698b7aa1113dc6610e139a9a0549e47dbc14c13dfe140890e3b294b02dd521a591b149988eada1edc6ba4d59728d1b669112da99ba8e5125390d12ffa83ab9493372d9ba9684af37a4f4acdf91c0872f01edbbd43341d860d87abad4e3b9fec8cd5c11a241e6256"}], 0x358}, 0x0) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x46, 0x50, 0xd3, 0x10, 0xc45, 0x800a, 0xdb47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0xa6, 0x37}}]}}]}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0xa, 0x400000) ioctl$SG_IO(r5, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="ad3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000900f00e000009"], 0x48) 4.934741224s ago: executing program 1 (id=4057): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060300000000000080000000000000050001000700000009"], 0x5c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x50, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x4000}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="f4000900062b8825fe80000000000000dc0bd9504ee34b71711d7074ce17fac08eb74a48085d0010b8", 0x29}], 0x1}, 0x48000) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4f21, 0xbc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, {0xa, 0x4e22, 0x2000004, @private0, 0x5}, 0x0, {[0x40, 0x80, 0x9, 0x35f, 0xa53, 0x9, 0x100, 0x3]}}, 0x5c) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f00002c7000/0x5000)=nil, 0x5000, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r7, 0x4b32, 0xf1a) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r8 = add_key(&(0x7f0000001140)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000010c0)="aea20396523c61e4f532d02484618b87bfc156bfbf2e40a10ba3560673ff1290d117d7acbc92e3e6f514f5ae4070854f2e3905abd6cf970b4181c8", 0x3b, 0xfffffffffffffffe) keyctl$read(0x2, r8, &(0x7f00000000c0)=""/4096, 0x1000) 4.6277979s ago: executing program 6 (id=4059): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x248, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x280, 0x230, 0x230, 0x280, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x94, 0xdc, 0x0, {0x1000000}, [@common=@unspec=@state={{0x24}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x2a4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = io_uring_setup(0x3910, &(0x7f0000000000)={0x0, 0x1e79, 0x4000, 0x1, 0x20e}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000380)=[@ioring_restriction_register_op={0x0, 0x19}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r3, 0x19, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = socket(0x10, 0x6, 0x8) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000003c0)={0x100003, 0x0, {[0xfff, 0x6, 0x1, 0x7, 0x1, 0x8, 0x71, 0x7]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x1007}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x14fe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c, 0x0}}], 0x1, 0xc040) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x7000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x20004000) recvmmsg(r8, &(0x7f0000000a00)=[{{&(0x7f0000000500)=@can, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000580)=""/82, 0x52}, 0xc3b}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/141, 0x8d}], 0x1, &(0x7f0000002380)=""/4096, 0x1000}, 0x3}], 0x2, 0x12022, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x0, 0x0, 0x3}, 0x0) 3.856490049s ago: executing program 0 (id=4061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r2, &(0x7f0000002540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0xd, 0x4) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fremovexattr(r2, &(0x7f0000001580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) read$FUSE(r3, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1ff91", 0x3}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r3) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="555506e68523e403346c270e81e19eae7e743ce331a7dce2ca9981ee580f0e5e50fff462167ae49f8c58cd624f2e77137d791bc78cd59e229b00337c48ac7324d61f3dcb52040a360a286ec130046b3714e0cb9b516f59cba2bc5194774df18560efa3dd349f7949fa08285cdc57", 0x6e, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0}) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x490, &(0x7f0000000080)=0x0) io_submit(r11, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe, r10, &(0x7f00000000c0)='\f\v', 0xfd95, 0x0, 0x0, 0x4}]) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="e6fcca1c29eaf0b2152956e52e0dc5b5615d3c5f1104682f415777ee2cd8199e8b8e568da35ade32fea8a46dc5864d1479e62e9847d743b21b4547ffab292002b43a578d92349c58a8c8e6d39e42573eac38d49813bbe9a1cef48d2b6493a9602da58c4c0483fb50aacd508bfdb6e2095565127b38eda5a0ccf555", 0x7b, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f00000006c0)={&(0x7f0000000480)=[0x0], &(0x7f00000015c0)=[{}, {}, {}, {}, {}], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0), 0x5, 0x7, 0x4000002d}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000007c0)={0x400, 0x5, &(0x7f0000000340)=[r7, r8, r9, 0x0, r12], &(0x7f0000000440)=[0x66f, 0x0, 0x800bc3, 0x8, 0x8, 0x6], &(0x7f0000000740)=[r13], &(0x7f0000000780)=[0xfffffffffffffff0, 0x8, 0xd], 0x0, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendto$rxrpc(r2, &(0x7f0000004a00)="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", 0x1000, 0x21, &(0x7f0000001540)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x24) r15 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') pwritev(r15, &(0x7f0000000500)=[{&(0x7f0000001740)="1b47d925af55bdbaf61f3611af843555e32f648e6f561867f70af5e66ca4f48d73faaa6b3055ab567a03f9378f1ea419c4a065a8d5ab5d1dd7b0ccb6eec9e931278608caad0ffbc78ed74795184117f7076bfc9d2e5eceb996fecd281658a4a3afee24bab0bc587410209bc8c1b57023fb4ec5ee9dcdcced8d27142969b3e8d1425944f1cc2d424bf1178e4892570873f7c4307655412fd3a43b10d825022fdfa9f3eb6ac6a54c714abb9600"/182, 0xb6}, {0x0}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf252100000008000300", @ANYRES32=r14, @ANYBLOB="14002cc0080000fa010100000800000000080000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40400d0) ioctl$BLKTRACESETUP(r15, 0xc0401273, &(0x7f00000004c0)={'\x00', 0x9, 0x9, 0x68219929, 0x15, 0x8, r5}) 3.762109399s ago: executing program 1 (id=4062): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000140)="c58a978b0aaf6f181f79f630a7af56523bd18ec5cea899827d3eb46e79cf8ca2e7e23058f3283a5058a103aa9111b2fc055298675f3ea73812abaa4eafac7c239553c1528eb46669c285217074fbbb875051bfdba1a7fb8c223e34e1d6889fcbe3e7c891da73b0c91176cafec2f3165fea11b397bcb3b0a87ba7ba6c266319dc7d528387d370658b3a13bb8cb799af4eacb63b023ba7d466a7677febf60d5abfdfc9d67de3dbb1389985edd7d0a7f925d17007dfa64e19d94fcf650bf0cc625c00340d92e6da2869a20900001e1810b5b9f9635f825b062dc61385caa00e16653cc0c1b60ebd83bd556305c04c185cb6d18501680a9ad6ad19d217c3303487", 0xff, 0x0, &(0x7f0000000300)={0xa, 0x2, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x13}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000400)={0x1, 0x0, [{0x259, 0x0, 0xe0000000200000}]}) r5 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x9, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) r11 = socket$kcm(0x11, 0x7, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x2, 0x10000006, 0xf, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) 3.651814702s ago: executing program 5 (id=4063): r0 = socket(0x10, 0x3, 0x0) fchmod(r0, 0x2c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1b4, 0x1a, 0xa01, 0x70bd2c, 0x0, {0xa}, [@generic="b5", @nested={0x19a, 0x2f, 0x0, 0x1, [@generic="266402c052af17ff41c3d4578ea3b134bdf16c954462eac02369738bdceb4bc4e06beaf271cd2f7cc20c6613e6d075e3b59252d717064062c92c945ffb4e69ce0b733cc77712100ccb564b2a85dedc7f7526dc5215007adc10de99ab77b95d611141c1c25b1753cf432de572088ed21ebd8b678b2ab87d8dc4f80f8005860314aa2a93f9b21cc157cb1cbad66bacf95ed8de52d84a8f6b95fc88", @nested={0x87, 0x89, 0x0, 0x1, [@generic, @generic="e93e08eb744e8a6032e41d5e24eb534b1d65e11893bbf9817f7f534f4e5fae2e110887e6fd9e96359f1a8171b56f594aaa5bb10826e94bc41bf4120307daa142e3729805fdb5d61c34db6cd5bd665059d2186a7689728b5e430c11517f3aff8fd13dbcb6fc645a8ddfab9de0e107b0edcc3d43bbee452de3164316", @typed={0x8, 0x10e, 0x0, 0x0, @fd=r0}]}, @generic="0216327d84c58178da508119492e1da43cb7fd0eefb2d9ff50949dd422d8bfa7ecb75c521c74bef5fc17f875faa9325cde0840eb7a20501126a26bdbc13122086102ae940ec8bb299f4c256f274dfe5e55c55e11d43cd847ce87a4100b5292af262c2d355a17d533baf34efca19bd9fcdd79bba0"]}]}, 0x1b4}}, 0x4004011) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x4, @empty}, 0x1c, 0x0}}], 0x1, 0xff00) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="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", 0x2000, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) preadv2(r3, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/178, 0xb2}], 0x1, 0x6, 0x7ff, 0x10) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000440)=[{0x2, 0x0, 0x0, 0x100}]}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="5c0a78891413d8ac00000000082c450000300000000000019078ac1e0001ac1414aa0300907803400000450000000000000000010000ac14aaac1e0001ba80801de50e523bd9cb70847d1465534d6f4198d5fb821430308dac65fe62d2db1c7da73f44c7007dfc9d81a59072107f465e0909eaf150780a3b67ecd6ef9de9fc0f53f407d6a549c66e424a3ca9888398f36384dac4347decc2e3fe1ce874a7c71bb31837bec7ee7afba35e24489d24356f086f80ffd77a273d4f365a2bd07561646b6c09f97bd0122e8f1476a2c0d0491f198e29645b94584025a2"], 0x0) 3.632171034s ago: executing program 6 (id=4064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x2b5c3bbf0946ce19, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x2b5c3bbf0946ce19, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x5e4, 0x430, 0x0, 0xffffffff, 0x0, 0x324, 0x550, 0x550, 0xffffffff, 0x550, 0x550, 0x5, &(0x7f0000000280), {[{{@uncond, 0x0, 0x1ec, 0x220, 0x0, {}, [@common=@addrtype={{0x2c}, {0x98c, 0xdc2, 0x0, 0x1}}, @common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x4, 0xc11, 0x40, 0x3, 0x3, 0x5, 0x0, 0x80, 0x20}, {0x9}}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x3, @loopback, @multicast1, @gre_key=0x3, @gre_key=0x9}}}}, {{@ip={@multicast2, @remote, 0xff000000, 0xff, 'ip6_vti0\x00', 'hsr0\x00', {}, {}, 0x2, 0x2, 0x45}, 0x0, 0xbc, 0x104, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x2c}, {[0x6, 0x5]}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @port=0x4e20, @port=0x4e23}}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff000000, 'pimreg0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x33, 0x3, 0x30}, 0x0, 0xd8, 0x10c, 0x0, {}, [@common=@ah={{0x2c}, {[0x1, 0x5a663ace]}}, @common=@unspec=@limit={{0x3c}, {0xde42, 0xffff8000, 0x3, 0x1, 0x8, 0x8000, 0x4}}]}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x1, @remote, @broadcast, @port=0x4e22, @icmp_id=0x67}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'hsr0\x00', 'syzkaller0\x00', {}, {}, 0x5e, 0x3, 0x8}, 0x0, 0xec, 0x120, 0x0, {}, [@common=@ah={{0x2c}, {[0x5, 0x1], 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x1}}]}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x3, 0x4}, {0x2, 0x0, 0x6}, {0x0, 0x3}, 0x7, 0x7}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x640) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x80040, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) (async) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f00000001c0)=@t={0x81, 0x5}) r8 = dup(0xffffffffffffffff) write$binfmt_script(r8, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r9 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f37000000", 0x8c, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r9}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r9, r10, r9}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000050001000700000004000780e347855743"], 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000090601020000000000000000000000000900020073797a3100000000050001000700000004000780e347855743"], 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 3.596649339s ago: executing program 5 (id=4065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000280)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x20, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4004090) 3.307576303s ago: executing program 5 (id=4066): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@can_delroute={0xac, 0x19, 0x300, 0x70bd28, 0x25dfdbfb, {0x1d, 0x1, 0x5}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x0, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "416651f6265c831d"}, 0x1}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3}, 0x8, 0x0, 0x0, 0x0, "43a6a0693df8a89f"}, 0xd}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "7db42fb79847e51e"}, 0x3}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x0, 0x1}, 0x6, 0x2, 0x0, 0x0, "220859ae946ed231"}, 0x6}}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x0, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "104be49925649a3d"}}}, @CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "89e811b51885f0d9"}, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x24000084}, 0x20040000) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0xff, 0x1, 0xeeee8000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r4 = accept4$inet6(r3, 0x0, &(0x7f0000000240), 0xc0800) accept4$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000002c0)=0x1c, 0x80800) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000300)={0x7, 0xc, 0x4, 0x7fffffff, "ad70881d91ff02143f2b0896dc648a6571f905d2627ea8bef5195631c0cef248"}) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) io_uring_enter(r0, 0x5a51, 0xd4eb, 0x1, &(0x7f0000000380)={[0xfffffffa, 0x4]}, 0x8) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f00000003c0)={0x4}, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000400), &(0x7f0000000440)='./file0/file0\x00', 0xe, 0x1) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10010018}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r6, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000802}, 0x11) ioctl$TCSBRKP(r0, 0x5425, 0xffffffff) openat$ptp0(0xffffff9c, &(0x7f0000000640), 0x440, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={@local, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x9, 0x5, 0x688, 0x0, 0x5f5e, 0x1, r2}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000700)={{0x0, 0x101, 0x5e, 0x0, 0x9, 0x100000001, 0x7f, 0x4, 0x4, 0x7, 0x0, 0xfffffffffffffff7, 0x6, 0x80, 0x8}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f00000007c0)={{r8, 0x36800, 0x9790, 0x1, 0x9, 0x6, 0x9, 0x6d, 0xf, 0x3, 0x4, 0xffffffff, 0x1, 0x7, 0x5}}) unshare(0x60100) r9 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_TRANSLATE(r9, 0xc018ae85, &(0x7f00000017c0)={0x26000, 0x41000, 0x36, 0x6, 0x10}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x10010, r4, 0x244da000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0xe8, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xb3, 0x8, "ed1485ac0a221e4a956a5f5340bc7844ac2e6c4371d2ee3323329f38296bed0105b20b7b3276aa37657ddba5471bceec0a30d1f83edb4a1f572a64e63e64b2a17fdf3610a36b38645df6f1bb69bbd39f161cb2679387c6555fc4a6a3af86ca752e7749e4b4847c8b9c7fa1cb168beab6110a32d60d47f93f480802c5f13e3452400c8e23eda64841926ab5c8d50ae170cffdf8142d2de62fff0cbe9a9e2cd671fcff3db7a9465d8282f4593bb33923"}]}, @NFT_MSG_DELOBJ={0x10c, 0x14, 0xa, 0xb00, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0xf8, 0x8, "f43bddb93730ff85d966411a7b734fddd5559db87fb0cd6fab2486d7cd1ef7df67acb3d02f546210e4fec0ea14a94ac88dc6b6db5ea402d947e6a326c2e2e21b414eb30123b356476a6cd0a85e5c80cbeeb0db21269a5a41c9c32db395f6433ef30ab771551cc8fb3c64691084991c71546844d728fedf3c6c60776deb8db3de6929bed903e26b89a458eee088c225b8a07d5bfd807e76ef0e2efb119b3b98bbb3e8b6f969400138a519c7777f1d0e5336bbc48f70d4cd41361f79361e3e5b2080238aa71fec2d46e51b8fcbed6ee82e397341a235765d294e7bcac513289e50b364c0d6150303220459adbe4425c2f826f5c7b1"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x21c}, 0x1, 0x0, 0x0, 0x8881}, 0x2) 3.244933296s ago: executing program 0 (id=4067): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd25030009008000f8ff1b8ba5b09f0005000305006d0600050005000600002000000a0000000000000000000000000000000000000000060001026c0000000000000200010000000000000007fd0000000005000500e14600200a"], 0x88}, 0x1, 0x7}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r5) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) syz_fuse_handle_req(r1, &(0x7f000000a300)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x2, 0x1, 0x6, 0x800, 0x9, 0x4, {0x0, 0x56541a3c, 0x7, 0x8, 0x4, 0x1ff, 0xb28d, 0x0, 0xffff, 0x4000, 0x0, r3, r4, 0x8, 0x6}}, {0x4, 0x7, 0x2, 0x0, '.%'}}]}, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, r3, &(0x7f0000000000)={0x8, 0x3ff}) 3.232952876s ago: executing program 5 (id=4068): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f00001dc000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg(r1, 0x0, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x44, "4372070000001000476fb2940acf"}}) socket$kcm(0x2d, 0x2, 0x0) r3 = gettid() ptrace$getregset(0x4204, r3, 0x201, &(0x7f00000002c0)={&(0x7f0000000380)=""/199, 0xc7}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f000000000000005504000001ed0a002500000017ffffffcc040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="8000001e0558d010fd09000084000000b80100007782fd5f9281f7ad8e0d0a15f5eaff2b002b69628636745432adbe1db81217ab7e037f1caa6b44cb3791fae2d0c2dd25a57352ffbdc91d16e83fdae1696a874fed82796022bfb052d777d042be7191e8a850005d3c81988eb1bdf3a5fd7a4e559bbdb9959ab843bf782da0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 3.067887146s ago: executing program 0 (id=4069): syz_open_dev$video4linux(0x0, 0x5, 0x20040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005f2ab420720c0d009b270102030109021200010000000009"], 0x0) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) (fail_nth: 1) 3.067176344s ago: executing program 6 (id=4070): unshare(0x6a040000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) r2 = epoll_create1(0x80000) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xc000000b}) signalfd4(r3, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) recvmmsg(r1, &(0x7f00000014c0), 0x0, 0x40012000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x20000006}) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x8, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.651771705s ago: executing program 4 (id=4071): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$cgroup_pid(r1, &(0x7f00000004c0), 0xfdb6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000000) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003740dcf40da0b400129da0102030109021b"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) sendmsg$inet6(r3, 0x0, 0x20008814) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0xa}]}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x1000000}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f0000000140)}, 0x10) 2.604183891s ago: executing program 1 (id=4072): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060300000000000080000000000000050001000700000009"], 0x5c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x50, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0x4000}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="f4000900062b8825fe80000000000000dc0bd9504ee34b71711d7074ce17fac08eb74a48085d0010b8", 0x29}], 0x1}, 0x48000) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4f21, 0xbc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, {0xa, 0x4e22, 0x2000004, @private0, 0x5}, 0x0, {[0x40, 0x80, 0x9, 0x35f, 0xa53, 0x9, 0x100, 0x3]}}, 0x5c) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f00002c7000/0x5000)=nil, 0x5000, 0x16) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r7, 0x4b32, 0xf1a) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r8 = add_key(&(0x7f0000001140)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000010c0)="aea20396523c61e4f532d02484618b87bfc156bfbf2e40a10ba3560673ff1290d117d7acbc92e3e6f514f5ae4070854f2e3905abd6cf970b4181c8", 0x3b, 0xfffffffffffffffe) keyctl$read(0x2, r8, &(0x7f00000000c0)=""/4096, 0x1000) 2.196391128s ago: executing program 6 (id=4073): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='qnx6\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = getpid() sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x20002}]}, 0x44}}, 0x4008040) r6 = fsmount(r3, 0x0, 0x86) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r7, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.051649593s ago: executing program 5 (id=4074): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x12, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6(0xa, 0x2, 0x0) keyctl$reject(0x13, 0x0, 0x20000003, 0x202, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a31000000001400078008001240002000050800134000dfff0d0500050002000000050004000100000011000300686173683a69702c706f7274", @ANYBLOB="baac9c6af4d68a27ef67cde96a205a86b277056cd370b57e96c0a7314fa469a8e07c2bf512b8082f2d2b7d7c99ef4fb5ed85163c387391a593a7f0"], 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x20004080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={&(0x7f00000001c0)="895292fc5e5b9288e99ca2be23020058d448ac630f451482910f11da1af090c2fc1531505436fb930eee67856cd367be0af113b527e5f4fd7f68e67051c5dc4d1753e6", &(0x7f0000000580)="3e912e47e0ff21e96f6170aba0f085512089d987a093b9d49c8309c70e8c78cd8b660c9b9941de6fa9bdb83b6659acead847c9cfd66df10adec6f5ea974e736de5f587b6038aabe74cc6ad1c83f8f3e38f4792af2e13b1ffb7c07d82e15f31f6045148aacfabff1ad58ccab7591e0d25e32501cdca5e2fdb39682b4be2504699be8e24eb603699eff47084195259617e1c1bfbf95d0454c9ac8da6837c327699ecadca51437067d2426025a9eb75f1c333ca7e2f64513f8904b84500247d2301d5683690a71387af64e5c027b89d17b59910ce6288a67e40fb8518d8ea973aea16ce5cdd10c9993eac7ad4851f00a0382e0fc3"}}, &(0x7f0000000000)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sigaltstack(0x0, 0x0) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000802, 0xfffffffffffffffe}) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) r6 = socket$isdn(0x22, 0x2, 0x11) r7 = socket$isdn(0x22, 0x2, 0x26) openat$sndseq(0xffffff9c, &(0x7f0000000280), 0x600200) dup3(r6, r7, 0x0) 1.603733373s ago: executing program 1 (id=4075): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000004400000008f0ffff0000000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="020000004400000008f0ffff0000000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x88, 0x76, 0x59, 0x8, 0x1de1, 0xc102, 0x1fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa4, 0xb, 0x5d}}]}}]}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) (async) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) (async) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/233, 0xe9}, {&(0x7f0000000500)=""/35, 0x23}, {&(0x7f0000000740)=""/89, 0x59}, {&(0x7f0000000600)=""/185, 0xb9}], 0x5) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$uinput_user_dev(r2, &(0x7f0000000900)={'syz1\x00', {0x8725, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x4, 0x20000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0xb7, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0xe5, 0x0, 0x10000000, 0x0, 0xfffffffe, 0x0, 0xa8e, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x3, 0x0, 0x20, 0x3, 0x5, 0x80000004, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x20004, 0x0, 0x0, 0xd, 0x2, 0xffffffff], [0x10, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffffffd, 0x800, 0x0, 0xfffffffc, 0x3, 0x1, 0x0, 0x3, 0x0, 0x5, 0x40000000, 0x2, 0xfffffffc, 0x7fffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x8, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0x4], [0x0, 0x4, 0xfffffffe, 0x0, 0xffffffff, 0x1, 0x100, 0x0, 0x0, 0xb7c, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x7, 0xfffffffe, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x2ff, 0x4000005, 0x0, 0x4, 0x2, 0x0, 0x40000000, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20e, 0x5, 0x0, 0x103, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7fff, 0xfffffffd, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x40000003, 0x2, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x8, 0x0, 0x0, 0x0, 0x8, 0x7, 0x8000, 0x0, 0x8002, 0x80000003, 0x1000000, 0x0, 0x3]}, 0x45c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d60908007f000000db9af0ff41000600bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 936.896769ms ago: executing program 6 (id=4076): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) read(r4, &(0x7f0000000680)=""/4096, 0x1000) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x87fc, 0x650bed0a9f141fca}, &(0x7f0000ffe000), 0x0) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffed5) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x18}}], 0x1, 0x0) r5 = socket$inet(0x2, 0x800, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000300)=[{0x0}], 0x1) r7 = socket$inet(0x2, 0x5, 0x9c) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0xa5) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x43c2}) 115.322702ms ago: executing program 5 (id=4077): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x13, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_lifetime={0x4, 0x3, 0x0, 0x80000001}, @sadb_ident={0x2, 0xa, 0x2, 0x0, 0xfff}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7, 0x1000000}, @sadb_address={0x5, 0x7, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x2, 0x1, 0x60000001}]}, 0x98}}, 0x0) 0s ago: executing program 0 (id=4078): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000108c0d220000000000000904aba60103000000092105000001220500090581030002000007"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): lock_acquire+0x6b5/0x2cf0 [ 862.230740][T18387] ? __pfx____sys_recvmsg+0x10/0x10 [ 862.230784][T18387] ? __fget_files+0x3a0/0x420 [ 862.230816][T18387] do_recvmmsg+0x3a5/0x800 [ 862.230848][T18387] ? __pfx_do_recvmmsg+0x10/0x10 [ 862.230884][T18387] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 862.230908][T18387] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 862.230932][T18387] __sys_recvmmsg+0x1a5/0x290 [ 862.230959][T18387] ? __pfx___sys_recvmmsg+0x10/0x10 [ 862.230984][T18387] ? ksys_write+0x242/0x270 [ 862.231008][T18387] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 862.231047][T18387] __do_fast_syscall_32+0x20d/0x640 [ 862.231067][T18387] ? do_fast_syscall_32+0x33/0x70 [ 862.231084][T18387] ? asm_int80_emulation+0x1a/0x20 [ 862.231101][T18387] ? do_int80_emulation+0x274/0x4d0 [ 862.231117][T18387] ? trace_irq_disable+0x3b/0x150 [ 862.231145][T18387] do_fast_syscall_32+0x33/0x70 [ 862.231162][T18387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 862.231183][T18387] RIP: 0023:0xf704ef6c [ 862.231199][T18387] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 862.231213][T18387] RSP: 002b:00000000f53fb50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 862.231233][T18387] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003700 [ 862.231246][T18387] RDX: 0000000000000001 RSI: 0000000040012100 RDI: 0000000000000000 [ 862.231257][T18387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 862.231267][T18387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 862.231278][T18387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 862.231304][T18387] [ 862.798586][ T9] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 862.827324][T16304] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 862.996203][T16304] usb 6-1: Using ep0 maxpacket: 16 [ 863.009441][T16304] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 863.020839][T16304] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.049998][T16304] usb 6-1: config 0 has no interface number 0 [ 863.098792][T16304] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 863.126301][T16304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.142316][T16304] usb 6-1: Product: syz [ 863.156118][T16304] usb 6-1: Manufacturer: syz [ 863.167288][T16304] usb 6-1: SerialNumber: syz [ 863.184066][T16304] usb 6-1: config 0 descriptor?? [ 863.204068][T16304] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 863.223162][T16304] uvcvideo 6-1:0.105: No valid video chain found. [ 863.272073][T16292] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 863.339407][T16292] usb 2-1: USB disconnect, device number 124 [ 863.402250][T18396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.412593][T18396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.435534][T18396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.454079][T18406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.464270][T18396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.464667][T18406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.498659][T16313] usb 6-1: USB disconnect, device number 46 [ 863.706145][T16292] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 863.878429][T16292] usb 2-1: too many configurations: 212, using maximum allowed: 8 [ 863.897655][T16292] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 863.905384][T16292] usb 2-1: can't read configurations, error -61 [ 863.941904][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 863.976285][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3654'. [ 864.008201][T18412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.019771][T18412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.031849][T18412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3655'. [ 864.076712][T16292] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 864.103574][T18416] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3657'. [ 864.241379][T16292] usb 2-1: too many configurations: 212, using maximum allowed: 8 [ 864.243859][T18412] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3655'. [ 864.252116][T16292] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 864.262295][T18412] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3655'. [ 864.271841][T16292] usb 2-1: can't read configurations, error -61 [ 864.286145][T16292] usb usb2-port1: attempt power cycle [ 864.316179][T16313] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 864.466728][T16313] usb 5-1: Using ep0 maxpacket: 32 [ 864.474195][T16313] usb 5-1: config 0 has an invalid interface number: 76 but max is 0 [ 864.482509][T16313] usb 5-1: config 0 has no interface number 0 [ 864.492090][T16313] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 864.501666][T16313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.509940][T16313] usb 5-1: Product: syz [ 864.514189][T16313] usb 5-1: Manufacturer: syz [ 864.518922][T16313] usb 5-1: SerialNumber: syz [ 864.525317][T16313] usb 5-1: config 0 descriptor?? [ 864.531689][T16316] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 864.544012][T16313] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 864.553658][T16313] dw2102: su3000_power_ctrl: 1, initialized 0 [ 864.560910][T16313] dvb-usb: bulk message failed: -22 (2/0) [ 864.571261][T16313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 864.582156][T16313] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 864.591739][T16313] usb 5-1: media controller created [ 864.597699][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 864.603511][T16313] dw2102: i2c transfer failed. [ 864.609030][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 864.614931][T16313] dw2102: i2c transfer failed. [ 864.619856][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 864.625672][T16313] dw2102: i2c transfer failed. [ 864.630537][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 864.636665][T16292] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 864.644611][T16313] dw2102: i2c transfer failed. [ 864.650139][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 864.655984][T16313] dw2102: i2c transfer failed. [ 864.661071][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 864.667500][T16313] dw2102: i2c transfer failed. [ 864.672656][T16313] dvb-usb: MAC address: 02:02:02:02:02:02 [ 864.679169][T16292] usb 2-1: too many configurations: 212, using maximum allowed: 8 [ 864.687657][T16316] usb 6-1: Using ep0 maxpacket: 16 [ 864.697107][T16292] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 864.711457][T16313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 864.720045][T16292] usb 2-1: can't read configurations, error -61 [ 864.728953][T16316] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 864.738439][T16316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.754974][T16316] usb 6-1: Product: syz [ 864.759823][T16313] dvb-usb: bulk message failed: -22 (3/0) [ 864.765586][T16313] dw2102: command 0x0e transfer failed. [ 864.771419][T16316] usb 6-1: Manufacturer: syz [ 864.776120][T16316] usb 6-1: SerialNumber: syz [ 864.780761][T16313] dvb-usb: bulk message failed: -22 (3/0) [ 864.787741][T16313] dw2102: command 0x0e transfer failed. [ 864.798050][T16316] usb 6-1: config 0 descriptor?? [ 864.856272][T16292] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 864.879840][T16292] usb 2-1: too many configurations: 212, using maximum allowed: 8 [ 864.890199][T16292] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 864.898372][T16292] usb 2-1: can't read configurations, error -61 [ 864.906152][T16292] usb usb2-port1: unable to enumerate USB device [ 865.022331][T18425] netlink: 'syz.6.3661': attribute type 21 has an invalid length. [ 865.030611][T18425] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3661'. [ 865.044844][T18425] netlink: 'syz.6.3661': attribute type 21 has an invalid length. [ 865.057183][T18425] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3661'. [ 865.106206][T16313] dvb-usb: bulk message failed: -22 (3/0) [ 865.112133][T16313] dw2102: command 0x0e transfer failed. [ 865.118015][T16313] dvb-usb: bulk message failed: -22 (3/0) [ 865.124158][T16313] dw2102: command 0x0e transfer failed. [ 865.129951][T16313] dvb-usb: bulk message failed: -22 (1/0) [ 865.136221][T16313] dw2102: command 0x51 transfer failed. [ 865.165395][T16313] DVB: Unable to find symbol ds3000_attach() [ 865.171552][T16313] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 865.218221][T16316] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 865.228085][T16316] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 865.238220][T16313] rc_core: IR keymap rc-su3000 not found [ 865.244566][T16313] Registered IR keymap rc-empty [ 865.252266][T16316] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 865.260444][T16316] usb 6-1: media controller created [ 865.272294][T16313] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 865.289095][T16316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 865.302698][T16313] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input59 [ 865.330657][T16313] dvb-usb: schedule remote query interval to 150 msecs. [ 865.338460][T16313] dw2102: su3000_power_ctrl: 0, initialized 1 [ 865.344608][T16313] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 865.366850][T16313] usb 5-1: USB disconnect, device number 13 [ 865.428091][T16316] zl10353_read_register: readreg error (reg=127, ret==0) [ 865.435223][T16316] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 865.446629][T16316] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 865.490858][T16313] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 865.507370][T16316] usb 6-1: USB disconnect, device number 47 [ 865.562431][T16316] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 865.846321][T16313] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 866.205293][T16313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.234059][T16313] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 866.256656][T16313] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 866.285545][T16313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 866.300145][T16313] usb 5-1: SerialNumber: syz [ 866.535384][T16313] usb 5-1: USB disconnect, device number 14 [ 866.736849][T16304] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 866.799506][T18446] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 866.852957][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 866.852978][ T30] audit: type=1326 audit(1772197603.823:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18444 comm="syz.1.3666" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704ef6c code=0x0 [ 866.986453][T16304] usb 6-1: Using ep0 maxpacket: 32 [ 867.001290][T16304] usb 6-1: config 0 has an invalid interface number: 138 but max is 0 [ 867.011072][T16304] usb 6-1: config 0 has no interface number 0 [ 867.024745][T16304] usb 6-1: config 0 interface 138 has no altsetting 0 [ 867.124675][T16304] usb 6-1: New USB device found, idVendor=0e41, idProduct=4642, bcdDevice=d1.a3 [ 867.185727][T16304] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.221613][T16304] usb 6-1: Product: syz [ 867.249136][T16304] usb 6-1: Manufacturer: syz [ 867.277197][T16304] usb 6-1: SerialNumber: syz [ 867.328585][T16304] usb 6-1: config 0 descriptor?? [ 867.525449][T18459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.554589][T18459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.603563][T18441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.620381][T18441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.715516][T18459] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3669'. [ 867.794326][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3671'. [ 867.812770][T18464] netlink: 'syz.1.3671': attribute type 21 has an invalid length. [ 868.166369][T16313] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 868.326142][T16313] usb 5-1: Using ep0 maxpacket: 32 [ 868.335760][T16313] usb 5-1: config 0 has an invalid interface number: 76 but max is 0 [ 868.351301][T16313] usb 5-1: config 0 has no interface number 0 [ 868.382610][T16313] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 868.408897][T16313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.437673][T16313] usb 5-1: Product: syz [ 868.449807][T16313] usb 5-1: Manufacturer: syz [ 868.463606][T16313] usb 5-1: SerialNumber: syz [ 868.489576][T16313] usb 5-1: config 0 descriptor?? [ 868.514776][T16313] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 868.533804][T16313] dw2102: su3000_power_ctrl: 1, initialized 0 [ 868.550429][T16313] dvb-usb: bulk message failed: -22 (2/0) [ 868.563045][T18472] netlink: 'syz.1.3673': attribute type 21 has an invalid length. [ 868.571702][T18472] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3673'. [ 868.593426][T16313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 868.618487][T18472] netlink: 'syz.1.3673': attribute type 21 has an invalid length. [ 868.629868][T16313] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 868.642085][T18472] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3673'. [ 868.661873][T16313] usb 5-1: media controller created [ 868.676308][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 868.686997][T16313] dw2102: i2c transfer failed. [ 868.698709][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 868.722640][T16313] dw2102: i2c transfer failed. [ 868.752525][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 868.772743][T16313] dw2102: i2c transfer failed. [ 868.786824][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 868.806693][T16313] dw2102: i2c transfer failed. [ 868.811548][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 868.826145][T16313] dw2102: i2c transfer failed. [ 868.831235][T16313] dvb-usb: bulk message failed: -22 (6/0) [ 868.837252][T16313] dw2102: i2c transfer failed. [ 868.842582][T16313] dvb-usb: MAC address: 02:02:02:02:02:02 [ 868.870539][T16313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 868.923538][T16313] dvb-usb: bulk message failed: -22 (3/0) [ 868.941825][T16313] dw2102: command 0x0e transfer failed. [ 868.972792][T16313] dvb-usb: bulk message failed: -22 (3/0) [ 868.985390][T16313] dw2102: command 0x0e transfer failed. [ 869.306765][T16313] dvb-usb: bulk message failed: -22 (3/0) [ 869.312866][T16313] dw2102: command 0x0e transfer failed. [ 869.333050][T16313] dvb-usb: bulk message failed: -22 (3/0) [ 869.385861][T16313] dw2102: command 0x0e transfer failed. [ 869.400834][T18477] FAULT_INJECTION: forcing a failure. [ 869.400834][T18477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.424547][T16313] dvb-usb: bulk message failed: -22 (1/0) [ 869.444989][T16313] dw2102: command 0x51 transfer failed. [ 869.467684][T18477] CPU: 1 UID: 0 PID: 18477 Comm: syz.1.3675 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.467716][T18477] Tainted: [L]=SOFTLOCKUP [ 869.467723][T18477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 869.467735][T18477] Call Trace: [ 869.467742][T18477] [ 869.467750][T18477] dump_stack_lvl+0xe8/0x150 [ 869.467772][T18477] should_fail_ex+0x412/0x560 [ 869.467793][T18477] _copy_to_user+0x31/0xb0 [ 869.467809][T18477] ucma_query+0x1464/0x1a10 [ 869.467838][T18477] ? __pfx_ucma_query+0x10/0x10 [ 869.467856][T18477] ? unwind_next_frame+0xa5/0x23c0 [ 869.467915][T18477] ? __lock_acquire+0x6b5/0x2cf0 [ 869.467929][T18477] ? aa_file_perm+0x50e/0x15e0 [ 869.467991][T18477] ? aa_file_perm+0x192/0x15e0 [ 869.468032][T18477] ? kstrtoull+0x12f/0x1d0 [ 869.468072][T18477] ucma_write+0x24e/0x2f0 [ 869.468094][T18477] ? __pfx_ucma_write+0x10/0x10 [ 869.468109][T18477] ? security_file_permission+0x75/0x260 [ 869.468134][T18477] ? rw_verify_area+0x255/0x4d0 [ 869.468151][T18477] ? __pfx_ucma_write+0x10/0x10 [ 869.468170][T18477] vfs_write+0x29a/0xb90 [ 869.468196][T18477] ? __pfx_vfs_write+0x10/0x10 [ 869.468215][T18477] ? __fget_files+0x2a/0x420 [ 869.468249][T18477] ? __fget_files+0x2a/0x420 [ 869.468269][T18477] ? __fget_files+0x3a0/0x420 [ 869.468284][T18477] ? __fget_files+0x2a/0x420 [ 869.468301][T18477] ksys_write+0x150/0x270 [ 869.468313][T18477] ? __pfx_ksys_write+0x10/0x10 [ 869.468328][T18477] __do_fast_syscall_32+0x20d/0x640 [ 869.468347][T18477] ? do_fast_syscall_32+0x33/0x70 [ 869.468363][T18477] ? asm_int80_emulation+0x1a/0x20 [ 869.468380][T18477] ? do_int80_emulation+0x274/0x4d0 [ 869.468396][T18477] ? trace_irq_disable+0x3b/0x150 [ 869.468423][T18477] do_fast_syscall_32+0x33/0x70 [ 869.468434][T18477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 869.468447][T18477] RIP: 0023:0xf704ef6c [ 869.468458][T18477] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 869.468466][T18477] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 869.468480][T18477] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 869.468490][T18477] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 869.468500][T18477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 869.468510][T18477] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 869.468521][T18477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 869.468549][T18477] [ 869.803878][T16313] DVB: Unable to find symbol ds3000_attach() [ 869.810163][T16313] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 869.912255][T16304] snd_usb_pod 6-1:0.138: Line 6 BassPODxt Live found [ 869.969257][T16313] rc_core: IR keymap rc-su3000 not found [ 869.975588][T16313] Registered IR keymap rc-empty [ 869.984663][T16313] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 869.997238][T16313] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input60 [ 870.027930][T16304] snd_usb_pod 6-1:0.138: set_interface failed [ 870.034501][T16304] snd_usb_pod 6-1:0.138: Line 6 BassPODxt Live now disconnected [ 870.051237][T16313] dvb-usb: schedule remote query interval to 150 msecs. [ 870.065342][T16313] dw2102: su3000_power_ctrl: 0, initialized 1 [ 870.082939][T16304] snd_usb_pod 6-1:0.138: probe with driver snd_usb_pod failed with error -71 [ 870.084764][T16313] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 870.100896][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.111006][T16313] usb 5-1: USB disconnect, device number 15 [ 870.116360][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.254190][T16304] usb 6-1: USB disconnect, device number 48 [ 870.347841][T16313] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 870.746267][T16313] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 871.021142][T16313] usb 5-1: config 5 has an invalid interface number: 24 but max is 2 [ 871.626363][T16313] usb 5-1: config 5 has an invalid interface number: 45 but max is 2 [ 871.721851][T16313] usb 5-1: config 5 has an invalid interface number: 184 but max is 2 [ 871.796225][T16313] usb 5-1: config 5 has an invalid interface number: 23 but max is 2 [ 871.804411][T16313] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 871.848136][T16313] usb 5-1: config 5 has an invalid interface number: 224 but max is 2 [ 871.884709][T16313] usb 5-1: config 5 has an invalid interface number: 157 but max is 2 [ 871.916483][T16313] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 871.934013][T16313] usb 5-1: config 5 has 6 interfaces, different from the descriptor's value: 3 [ 871.984398][T16313] usb 5-1: config 5 has no interface number 0 [ 872.004756][T16313] usb 5-1: config 5 has no interface number 1 [ 872.105055][T16313] usb 5-1: config 5 has no interface number 2 [ 872.134827][T16313] usb 5-1: config 5 has no interface number 3 [ 872.175326][T16313] usb 5-1: config 5 has no interface number 4 [ 872.194128][T16313] usb 5-1: config 5 has no interface number 5 [ 872.208507][T16313] usb 5-1: config 5 interface 24 altsetting 8 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 872.240592][T16313] usb 5-1: config 5 interface 24 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 872.284684][T16313] usb 5-1: too many endpoints for config 5 interface 45 altsetting 40: 122, using maximum allowed: 30 [ 872.314222][T18518] netlink: 'syz.6.3684': attribute type 21 has an invalid length. [ 872.322738][T18518] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3684'. [ 872.333749][T16313] usb 5-1: config 5 interface 45 altsetting 40 has a duplicate endpoint with address 0xC, skipping [ 872.344814][T16313] usb 5-1: config 5 interface 45 altsetting 40 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 872.356365][T16313] usb 5-1: config 5 interface 45 altsetting 40 has 3 endpoint descriptors, different from the interface descriptor's value: 122 [ 872.370612][T18518] netlink: 'syz.6.3684': attribute type 21 has an invalid length. [ 872.379795][T18518] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3684'. [ 872.389007][T16313] usb 5-1: too many endpoints for config 5 interface 184 altsetting 4: 57, using maximum allowed: 30 [ 872.401812][T16313] usb 5-1: config 5 interface 184 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 872.521851][T16313] usb 5-1: config 5 interface 184 altsetting 4 endpoint 0xD has invalid wMaxPacketSize 0 [ 872.544552][T16313] usb 5-1: config 5 interface 184 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 872.564880][T16313] usb 5-1: config 5 interface 184 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 57 [ 872.582050][T16313] usb 5-1: too many endpoints for config 5 interface 23 altsetting 76: 140, using maximum allowed: 30 [ 872.598791][T16313] usb 5-1: config 5 interface 23 altsetting 76 has a duplicate endpoint with address 0xD, skipping [ 872.609769][T16313] usb 5-1: config 5 interface 23 altsetting 76 has a duplicate endpoint with address 0xA, skipping [ 872.620546][T16313] usb 5-1: config 5 interface 23 altsetting 76 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 872.631637][T16313] usb 5-1: config 5 interface 23 altsetting 76 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 872.643337][T16313] usb 5-1: config 5 interface 23 altsetting 76 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 872.659291][T16313] usb 5-1: config 5 interface 23 altsetting 76 has a duplicate endpoint with address 0xD, skipping [ 872.670884][T16313] usb 5-1: config 5 interface 23 altsetting 76 has 6 endpoint descriptors, different from the interface descriptor's value: 140 [ 872.713558][T16313] usb 5-1: config 5 interface 224 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 872.903308][T18527] bond3 (unregistering): Released all slaves [ 872.980588][T16313] usb 5-1: config 5 interface 224 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 873.026196][T16313] usb 5-1: config 5 interface 224 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 873.088233][T16313] usb 5-1: config 5 interface 224 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 873.101041][T16313] usb 5-1: config 5 interface 224 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 873.116232][T16313] usb 5-1: config 5 interface 157 altsetting 253 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 873.128840][T16313] usb 5-1: config 5 interface 157 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 873.157612][T16313] usb 5-1: config 5 interface 157 altsetting 253 has a duplicate endpoint with address 0x4, skipping [ 873.182480][T16313] usb 5-1: config 5 interface 157 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 873.209757][T16313] usb 5-1: config 5 interface 157 altsetting 253 endpoint 0x83 has invalid wMaxPacketSize 0 [ 873.230620][T16313] usb 5-1: config 5 interface 157 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 873.280744][T16313] usb 5-1: config 5 interface 157 altsetting 253 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 873.580157][T16313] usb 5-1: config 5 interface 157 altsetting 253 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 873.615587][T16313] usb 5-1: config 5 interface 157 altsetting 253 has a duplicate endpoint with address 0xB, skipping [ 873.646279][T16313] usb 5-1: config 5 interface 157 altsetting 253 has a duplicate endpoint with address 0xD, skipping [ 873.677915][T16313] usb 5-1: config 5 interface 157 altsetting 253 has a duplicate endpoint with address 0x1, skipping [ 873.710798][T16313] usb 5-1: config 5 interface 157 altsetting 253 has a duplicate endpoint with address 0xA, skipping [ 873.776203][T16313] usb 5-1: config 5 interface 157 altsetting 253 has a duplicate endpoint with address 0xC, skipping [ 873.830296][T16313] usb 5-1: config 5 interface 157 altsetting 253 has a duplicate endpoint with address 0x8, skipping [ 873.873837][T16313] usb 5-1: config 5 interface 24 has no altsetting 0 [ 873.897627][T16313] usb 5-1: config 5 interface 45 has no altsetting 0 [ 873.918131][T16313] usb 5-1: config 5 interface 184 has no altsetting 0 [ 874.107445][T16313] usb 5-1: config 5 interface 23 has no altsetting 0 [ 874.114229][T16313] usb 5-1: config 5 interface 157 has no altsetting 0 [ 874.190279][T16313] usb 5-1: string descriptor 0 read error: -71 [ 874.227463][T16313] usb 5-1: Dual-Role OTG device on HNP port [ 874.249373][T18542] syzkaller0: entered promiscuous mode [ 874.261485][T16313] usb 5-1: can't set HNP mode: -71 [ 874.275860][T18542] syzkaller0: entered allmulticast mode [ 874.736162][T16313] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 874.956236][T16313] usb 5-1: Using ep0 maxpacket: 32 [ 875.005709][T16313] usb 5-1: config 188 has an invalid interface number: 206 but max is 0 [ 875.016440][T16313] usb 5-1: config 188 has no interface number 0 [ 875.027486][T16313] usb 5-1: config 188 interface 206 altsetting 66 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 875.040214][T16313] usb 5-1: config 188 interface 206 has no altsetting 0 [ 875.299829][T18564] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3695'. [ 875.430477][T18564] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3695'. [ 875.441234][T16313] usb 5-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=4f.54 [ 875.466134][T16313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.494892][T16313] usb 5-1: Product: syz [ 875.580187][T16313] usb 5-1: Manufacturer: syz [ 875.584927][T16313] usb 5-1: SerialNumber: syz [ 875.816157][T16313] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 875.862454][T16313] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 875.919780][T16313] dib0700: firmware download failed at 7 with -8 [ 875.948328][T16313] usb 5-1: USB disconnect, device number 17 [ 876.142417][T18570] netlink: 'syz.5.3697': attribute type 21 has an invalid length. [ 876.246855][T18570] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3697'. [ 876.436726][T18574] netlink: 'syz.5.3697': attribute type 21 has an invalid length. [ 876.485695][T18574] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3697'. [ 877.024670][ T30] audit: type=1326 audit(1772197613.993:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.0.3705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 877.082478][ T30] audit: type=1326 audit(1772197613.993:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.0.3705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 877.119831][ T30] audit: type=1326 audit(1772197613.993:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.0.3705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 877.160728][ T30] audit: type=1326 audit(1772197613.993:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.0.3705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 877.186540][ T30] audit: type=1326 audit(1772197613.993:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.0.3705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 877.313400][T13776] Bluetooth: hci4: command 0x0406 tx timeout [ 877.328938][ T30] audit: type=1326 audit(1772197613.993:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.0.3705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 877.544406][ T30] audit: type=1326 audit(1772197613.993:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.0.3705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 877.803614][ T30] audit: type=1326 audit(1772197613.993:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.0.3705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 878.018052][ T30] audit: type=1326 audit(1772197613.993:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.0.3705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 878.198893][ T30] audit: type=1326 audit(1772197613.993:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18591 comm="syz.0.3705" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 878.546156][T16304] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 878.701988][T16304] usb 5-1: device descriptor read/64, error -71 [ 878.976432][T16304] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 879.106172][T16304] usb 5-1: device descriptor read/64, error -71 [ 879.197501][T18622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3711'. [ 879.209153][T18622] netlink: 'syz.1.3711': attribute type 4 has an invalid length. [ 879.216639][T16304] usb usb5-port1: attempt power cycle [ 879.566215][T16304] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 879.586806][T16304] usb 5-1: device descriptor read/8, error -71 [ 879.756506][T18626] netlink: 'syz.6.3713': attribute type 21 has an invalid length. [ 879.764989][T18626] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3713'. [ 879.775885][T18626] netlink: 'syz.6.3713': attribute type 21 has an invalid length. [ 879.783888][T18626] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3713'. [ 879.851476][T16304] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 879.896738][T16304] usb 5-1: device descriptor read/8, error -71 [ 880.019156][T16304] usb usb5-port1: unable to enumerate USB device [ 880.406292][T16304] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 880.522332][T18645] FAULT_INJECTION: forcing a failure. [ 880.522332][T18645] name failslab, interval 1, probability 0, space 0, times 0 [ 880.586740][T18645] CPU: 0 UID: 0 PID: 18645 Comm: syz.0.3718 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.586760][T18645] Tainted: [L]=SOFTLOCKUP [ 880.586764][T18645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 880.586771][T18645] Call Trace: [ 880.586776][T18645] [ 880.586782][T18645] dump_stack_lvl+0xe8/0x150 [ 880.586801][T18645] should_fail_ex+0x412/0x560 [ 880.586816][T18645] should_failslab+0xa8/0x100 [ 880.586830][T18645] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 880.586842][T18645] ? alloc_vfsmnt+0xe6/0x420 [ 880.586855][T18645] kstrdup+0x42/0x100 [ 880.586868][T18645] alloc_vfsmnt+0xe6/0x420 [ 880.586880][T18645] clone_mnt+0x4b/0x9a0 [ 880.586891][T18645] ? do_raw_spin_unlock+0xf5/0x210 [ 880.586904][T18645] copy_tree+0x3d4/0x930 [ 880.586921][T18645] copy_mnt_ns+0x24d/0x990 [ 880.586934][T18645] ? kmem_cache_alloc_noprof+0x307/0x650 [ 880.586948][T18645] ? create_new_namespaces+0x33/0x6a0 [ 880.586964][T18645] create_new_namespaces+0xcf/0x6a0 [ 880.586978][T18645] ? bpf_lsm_capable+0x9/0x20 [ 880.586990][T18645] ? security_capable+0x7e/0x2c0 [ 880.587005][T18645] unshare_nsproxy_namespaces+0x11a/0x160 [ 880.587019][T18645] ksys_unshare+0x51d/0x930 [ 880.587038][T18645] ? __pfx_ksys_unshare+0x10/0x10 [ 880.587053][T18645] ? ksys_write+0x242/0x270 [ 880.587068][T18645] __ia32_sys_unshare+0x37/0x40 [ 880.587082][T18645] __do_fast_syscall_32+0x20d/0x640 [ 880.587094][T18645] ? do_fast_syscall_32+0x33/0x70 [ 880.587103][T18645] ? asm_int80_emulation+0x1a/0x20 [ 880.587113][T18645] ? do_int80_emulation+0x274/0x4d0 [ 880.587124][T18645] do_fast_syscall_32+0x33/0x70 [ 880.587134][T18645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 880.587146][T18645] RIP: 0023:0xf7f74f6c [ 880.587156][T18645] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 880.587166][T18645] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 880.587178][T18645] RAX: ffffffffffffffda RBX: 0000000024020400 RCX: 0000000000000000 [ 880.587185][T18645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 880.587191][T18645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 880.587197][T18645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 880.587203][T18645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 880.587217][T18645] [ 880.940014][T16304] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 880.951598][T16304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 880.962668][T16304] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 880.971964][T16304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.982737][T16304] usb 2-1: config 0 descriptor?? [ 880.988512][T18640] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 881.007715][T16304] hub 2-1:0.0: USB hub found [ 881.317944][T16304] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 881.359470][T16304] usbhid 2-1:0.0: can't add hid device: -71 [ 881.365515][T16304] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 881.437021][T16304] usb 2-1: USB disconnect, device number 3 [ 881.513518][T18654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.544366][T18654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.561875][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3720'. [ 882.022231][T16313] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 882.224159][T16313] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 882.283680][T16313] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 882.337833][T16313] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 882.402297][T16313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.153255][T16313] usb 6-1: usb_control_msg returned -32 [ 883.173024][T16313] usbtmc 6-1:16.0: can't read capabilities [ 883.302627][T18686] netlink: 'syz.6.3724': attribute type 21 has an invalid length. [ 883.389499][T18686] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3724'. [ 883.405726][T18688] netlink: 'syz.6.3724': attribute type 21 has an invalid length. [ 883.439478][T18688] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3724'. [ 884.068929][T18705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.078355][T18705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.396224][T16304] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 884.836113][T16304] usb 2-1: Using ep0 maxpacket: 8 [ 884.843113][T16304] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 884.859770][T16312] usb 6-1: USB disconnect, device number 49 [ 884.880125][T16304] usb 2-1: config 1 interface 0 altsetting 242 endpoint 0x1 has invalid maxpacket 13058, setting to 64 [ 884.933096][T16304] usb 2-1: config 1 interface 0 altsetting 242 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 884.966319][T16304] usb 2-1: config 1 interface 0 has no altsetting 0 [ 884.985238][T16304] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 884.994724][T16304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.010832][T16304] usb 2-1: Product: syz [ 885.023221][T16304] usb 2-1: Manufacturer: syz [ 885.033442][T16304] usb 2-1: SerialNumber: syz [ 885.163401][T18714] hub 9-0:1.0: USB hub found [ 885.169040][T18714] hub 9-0:1.0: 1 port detected [ 885.275355][T16304] usb 2-1: USB disconnect, device number 4 [ 885.983516][T18724] FAULT_INJECTION: forcing a failure. [ 885.983516][T18724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.998078][T18724] CPU: 0 UID: 0 PID: 18724 Comm: syz.4.3736 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.998108][T18724] Tainted: [L]=SOFTLOCKUP [ 885.998115][T18724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 885.998125][T18724] Call Trace: [ 885.998132][T18724] [ 885.998140][T18724] dump_stack_lvl+0xe8/0x150 [ 885.998168][T18724] should_fail_ex+0x412/0x560 [ 885.998194][T18724] _copy_to_user+0x31/0xb0 [ 885.998229][T18724] simple_read_from_buffer+0xe1/0x170 [ 885.998256][T18724] proc_fail_nth_read+0x1bb/0x230 [ 885.998282][T18724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 885.998306][T18724] ? rw_verify_area+0x2a6/0x4d0 [ 885.998324][T18724] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 885.998348][T18724] vfs_read+0x20c/0xa70 [ 885.998362][T18724] ? __fget_files+0x2a/0x420 [ 885.998382][T18724] ? fdget_pos+0x246/0x320 [ 885.998407][T18724] ? __pfx___mutex_lock+0x10/0x10 [ 885.998426][T18724] ? __pfx_vfs_read+0x10/0x10 [ 885.998445][T18724] ? __fget_files+0x2a/0x420 [ 885.998471][T18724] ? __fget_files+0x3a0/0x420 [ 885.998492][T18724] ? __fget_files+0x2a/0x420 [ 885.998518][T18724] ksys_read+0x150/0x270 [ 885.998536][T18724] ? __pfx_ksys_read+0x10/0x10 [ 885.998557][T18724] ? asm_int80_emulation+0x1a/0x20 [ 885.998579][T18724] do_int80_emulation+0x173/0x4d0 [ 885.998597][T18724] ? asm_int80_emulation+0x1a/0x20 [ 885.998613][T18724] ? clear_bhb_loop+0x40/0x90 [ 885.998630][T18724] ? clear_bhb_loop+0x40/0x90 [ 885.998652][T18724] asm_int80_emulation+0x1a/0x20 [ 885.998669][T18724] RIP: 0023:0xf7175cab [ 885.998687][T18724] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 885.998702][T18724] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 885.998721][T18724] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f542d5d0 [ 885.998734][T18724] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 885.998744][T18724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 885.998754][T18724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 885.998764][T18724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 885.998791][T18724] [ 886.316201][T16313] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 886.476187][T16313] usb 2-1: Using ep0 maxpacket: 16 [ 886.488450][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'. [ 886.498360][T16313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.531869][T18731] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.540307][T18731] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.549699][T16313] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 886.559731][T16313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.571265][T16313] usb 2-1: config 0 descriptor?? [ 886.831850][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3734'. [ 886.851024][T16313] usbhid 2-1:0.0: can't add hid device: -71 [ 886.865903][T16313] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 886.919723][T16313] usb 2-1: USB disconnect, device number 5 [ 887.206121][T16304] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 887.576239][T16304] usb 5-1: Using ep0 maxpacket: 32 [ 887.589837][T16304] usb 5-1: config 188 has an invalid interface number: 206 but max is 0 [ 887.600257][T16304] usb 5-1: config 188 has no interface number 0 [ 887.602061][T18736] netlink: 'syz.0.3739': attribute type 21 has an invalid length. [ 887.607067][T16304] usb 5-1: config 188 interface 206 altsetting 66 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 887.627836][T16304] usb 5-1: config 188 interface 206 has no altsetting 0 [ 887.638838][T16304] usb 5-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=4f.54 [ 887.648800][T18736] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3739'. [ 887.659158][T16304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.676144][T16304] usb 5-1: Product: syz [ 887.681497][T16304] usb 5-1: Manufacturer: syz [ 887.687008][T16304] usb 5-1: SerialNumber: syz [ 887.688379][T18746] xt_recent: Unsupported userspace flags (000000fe) [ 887.700375][T18736] netlink: 'syz.0.3739': attribute type 21 has an invalid length. [ 887.755891][T18736] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3739'. [ 888.483649][T18757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.538781][T18757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.946136][T16292] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 889.166165][T16292] usb 6-1: Using ep0 maxpacket: 32 [ 889.175635][T16292] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 889.185152][T16292] usb 6-1: config 0 has no interface number 0 [ 889.194672][T16292] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 889.204224][T16292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.284919][T16292] usb 6-1: Product: syz [ 889.289485][T16292] usb 6-1: Manufacturer: syz [ 889.294653][T16292] usb 6-1: SerialNumber: syz [ 889.304246][T16292] usb 6-1: config 0 descriptor?? [ 889.334848][T16292] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 889.354391][T16292] dw2102: su3000_power_ctrl: 1, initialized 0 [ 889.362741][T16292] dvb-usb: bulk message failed: -22 (2/0) [ 889.380764][T16292] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 889.391490][T16292] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 889.402894][T16292] usb 6-1: media controller created [ 889.433261][T16292] dvb-usb: bulk message failed: -22 (6/0) [ 889.445023][T16292] dw2102: i2c transfer failed. [ 889.459037][T16292] dvb-usb: bulk message failed: -22 (6/0) [ 889.471574][T16292] dw2102: i2c transfer failed. [ 889.483847][T16292] dvb-usb: bulk message failed: -22 (6/0) [ 889.495282][T16292] dw2102: i2c transfer failed. [ 889.506069][T16292] dvb-usb: bulk message failed: -22 (6/0) [ 889.519226][T16292] dw2102: i2c transfer failed. [ 889.532984][T16292] dvb-usb: bulk message failed: -22 (6/0) [ 889.544761][T16292] dw2102: i2c transfer failed. [ 889.562808][T16292] dvb-usb: bulk message failed: -22 (6/0) [ 889.584787][T16292] dw2102: i2c transfer failed. [ 889.595262][T16292] dvb-usb: MAC address: 02:02:02:02:02:02 [ 889.650506][T16304] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 889.668308][T16292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 889.723354][T16304] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 889.736814][T18778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.751740][T16304] dib0700: firmware download failed at 7 with -8 [ 889.764177][T18778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.776647][T16292] dvb-usb: bulk message failed: -22 (3/0) [ 889.782414][T16292] dw2102: command 0x0e transfer failed. [ 889.808594][T16304] usb 5-1: USB disconnect, device number 22 [ 889.809831][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3753'. [ 889.824222][T16292] dvb-usb: bulk message failed: -22 (3/0) [ 889.846871][T16292] dw2102: command 0x0e transfer failed. [ 890.176816][T16292] dvb-usb: bulk message failed: -22 (3/0) [ 890.182685][T16292] dw2102: command 0x0e transfer failed. [ 890.189462][T16292] dvb-usb: bulk message failed: -22 (3/0) [ 890.202353][T16292] dw2102: command 0x0e transfer failed. [ 890.221829][T16292] dvb-usb: bulk message failed: -22 (1/0) [ 890.231896][T16292] dw2102: command 0x51 transfer failed. [ 890.315271][T16292] DVB: Unable to find symbol ds3000_attach() [ 890.328636][T16292] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 890.506979][T16292] rc_core: IR keymap rc-su3000 not found [ 890.514710][T16292] Registered IR keymap rc-empty [ 890.527579][T16292] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 890.591052][T16292] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input61 [ 890.620003][T16292] dvb-usb: schedule remote query interval to 150 msecs. [ 890.633406][T16292] dw2102: su3000_power_ctrl: 0, initialized 1 [ 890.653593][T16292] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 890.686098][T16292] usb 6-1: USB disconnect, device number 50 [ 890.845915][T16292] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 891.034399][T18792] netlink: 'syz.6.3757': attribute type 21 has an invalid length. [ 891.042524][T18792] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3757'. [ 891.059419][T18792] netlink: 'syz.6.3757': attribute type 21 has an invalid length. [ 891.067606][T18792] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3757'. [ 891.117081][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3758'. [ 891.309076][T18801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3759'. [ 891.830227][T16292] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 891.965234][T18815] loop2: detected capacity change from 0 to 7 [ 891.996373][T18815] Dev loop2: unable to read RDB block 7 [ 892.029740][T16292] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 892.047407][T16292] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 892.088621][T18815] loop2: AHDI p1 p3 [ 892.115926][T18815] loop2: partition table partially beyond EOD, truncated [ 892.236254][T18815] loop2: p1 size 16777216 extends beyond EOD, [ 892.269494][T16292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 892.300769][T18815] truncated [ 892.311934][T16292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 892.325733][T16292] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 892.347745][T16292] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 892.410917][T16292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.503905][T16292] usb 2-1: config 0 descriptor?? [ 892.564634][ T5953] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 892.629400][T18803] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 892.746619][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 892.755676][ T5953] usb 6-1: config 0 has an invalid interface number: 76 but max is 0 [ 892.773856][ T5953] usb 6-1: config 0 has no interface number 0 [ 892.786868][ T5953] usb 6-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 892.797193][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.816368][ T5953] usb 6-1: Product: syz [ 892.831031][ T5953] usb 6-1: Manufacturer: syz [ 892.845239][ T5953] usb 6-1: SerialNumber: syz [ 892.877728][ T5953] usb 6-1: config 0 descriptor?? [ 892.890102][ T5953] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 892.907069][ T5953] dw2102: su3000_power_ctrl: 1, initialized 0 [ 892.913286][ T5953] dvb-usb: bulk message failed: -22 (2/0) [ 892.925553][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 892.959449][ T5953] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 892.987806][ T5953] usb 6-1: media controller created [ 892.993166][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 893.002401][ T5953] dw2102: i2c transfer failed. [ 893.008516][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 893.014322][ T5953] dw2102: i2c transfer failed. [ 893.020879][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 893.027910][ T5953] dw2102: i2c transfer failed. [ 893.032971][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 893.040358][ T5953] dw2102: i2c transfer failed. [ 893.045188][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 893.051370][ T5953] dw2102: i2c transfer failed. [ 893.051372][T16292] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 893.069490][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 893.075569][ T5953] dw2102: i2c transfer failed. [ 893.080587][ T5953] dvb-usb: MAC address: 02:02:02:02:02:02 [ 893.081669][T16292] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 893.099855][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 893.114326][T18828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.132536][T18826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.133513][T18828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.153409][T18826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.181493][T18828] veth0_vlan: left promiscuous mode [ 893.187087][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 893.188907][T18828] veth0_vlan: entered promiscuous mode [ 893.196288][ T5953] dw2102: command 0x0e transfer failed. [ 893.206338][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 893.212289][ T5953] dw2102: command 0x0e transfer failed. [ 893.226375][T16316] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 893.270710][T18803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.287519][T18803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.357883][T18803] plantronics 0003:047F:FFFF.001E: implement() called with too large value 19203840 (n: 0)! (syz.1.3760) [ 893.369478][T18803] plantronics 0003:047F:FFFF.001E: implement() called with too large value 129 (n: 0)! (syz.1.3760) [ 893.385001][T16316] usb 5-1: Using ep0 maxpacket: 16 [ 893.392498][T16316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.403702][T16316] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 893.409052][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3760'. [ 893.412905][T16316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.439348][T16316] usb 5-1: config 0 descriptor?? [ 893.536153][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 893.541985][ T5953] dw2102: command 0x0e transfer failed. [ 893.548139][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 893.553900][ T5953] dw2102: command 0x0e transfer failed. [ 893.559729][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 893.565488][ T5953] dw2102: command 0x51 transfer failed. [ 893.599288][ T5953] DVB: Unable to find symbol ds3000_attach() [ 893.616149][ T5953] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 893.673769][T18824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3767'. [ 893.692596][ T5953] rc_core: IR keymap rc-su3000 not found [ 893.699512][T16316] usbhid 5-1:0.0: can't add hid device: -71 [ 893.705587][T16316] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 893.708037][ T5953] Registered IR keymap rc-empty [ 893.720327][ T5953] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 893.731070][T16316] usb 5-1: USB disconnect, device number 23 [ 893.752967][ T5953] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input63 [ 893.771701][ T5953] dvb-usb: schedule remote query interval to 150 msecs. [ 893.781151][ T5953] dw2102: su3000_power_ctrl: 0, initialized 1 [ 893.788164][ T5953] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 893.814736][ T5953] usb 6-1: USB disconnect, device number 51 [ 893.956180][ T5953] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 894.021554][T18838] can: request_module (can-proto-5) failed. [ 894.296234][ T5953] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 894.385234][T18843] netlink: 'syz.4.3771': attribute type 21 has an invalid length. [ 894.395173][T18843] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3771'. [ 894.405917][T18843] netlink: 'syz.4.3771': attribute type 21 has an invalid length. [ 894.415046][T18843] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3771'. [ 894.446235][ T5953] usb 6-1: Using ep0 maxpacket: 32 [ 894.453499][ T5953] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 894.462122][ T5953] usb 6-1: config 0 has too many interfaces: 234, using maximum allowed: 32 [ 894.472223][ T5953] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.482508][ T5953] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 234 [ 894.499045][ T5953] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 894.509962][ T5953] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 894.520275][ T5953] usb 6-1: Product: syz [ 894.524814][ T5953] usb 6-1: Manufacturer: syz [ 894.529595][ T5953] usb 6-1: SerialNumber: syz [ 894.536467][ T5953] usb 6-1: config 0 descriptor?? [ 894.772731][ T5953] usb 6-1: USB disconnect, device number 52 [ 895.090747][T16304] usb 2-1: USB disconnect, device number 6 [ 895.266171][T16316] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 895.493570][T18871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.503665][T16316] usb 6-1: Using ep0 maxpacket: 32 [ 895.515026][T16316] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 895.524312][T16316] usb 6-1: config 0 has too many interfaces: 234, using maximum allowed: 32 [ 895.570086][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 895.584954][T18873] tipc: Can't bind to reserved service type 2 [ 895.640710][T18871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.646111][T18873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3779'. [ 895.649907][T16316] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.685203][T18873] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3779'. [ 895.702118][T16316] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 234 [ 895.712603][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3781'. [ 895.749133][T18873] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3779'. [ 895.771166][T16316] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 895.785948][T16316] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 895.811256][T16316] usb 6-1: Product: syz [ 895.823324][T16316] usb 6-1: Manufacturer: syz [ 895.852957][T16316] usb 6-1: SerialNumber: syz [ 895.875318][T16316] usb 6-1: config 0 descriptor?? [ 896.958135][ T5953] usb 6-1: USB disconnect, device number 53 [ 897.266724][T16292] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 897.421224][T18896] FAULT_INJECTION: forcing a failure. [ 897.421224][T18896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 897.435513][T18896] CPU: 1 UID: 0 PID: 18896 Comm: syz.6.3788 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.435539][T18896] Tainted: [L]=SOFTLOCKUP [ 897.435546][T18896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 897.435555][T18896] Call Trace: [ 897.435562][T18896] [ 897.435569][T18896] dump_stack_lvl+0xe8/0x150 [ 897.435597][T18896] should_fail_ex+0x412/0x560 [ 897.435624][T18896] _copy_from_iter+0x1d3/0x1670 [ 897.435648][T18896] ? rcu_is_watching+0x15/0xb0 [ 897.435672][T18896] ? __pfx__copy_from_iter+0x10/0x10 [ 897.435699][T18896] ? netlink_sendmsg+0x650/0xb40 [ 897.435717][T18896] ? skb_put+0x11b/0x210 [ 897.435741][T18896] netlink_sendmsg+0x6c0/0xb40 [ 897.435767][T18896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.435789][T18896] ? aa_sock_msg_perm+0xf1/0x1b0 [ 897.435807][T18896] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 897.435819][T18896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 897.435830][T18896] ____sys_sendmsg+0xa68/0xad0 [ 897.435848][T18896] ? __pfx_____sys_sendmsg+0x10/0x10 [ 897.435863][T18896] ? kstrtoull+0x12f/0x1d0 [ 897.435878][T18896] ___sys_sendmsg+0x2a5/0x360 [ 897.435894][T18896] ? __pfx____sys_sendmsg+0x10/0x10 [ 897.435908][T18896] ? get_pid_task+0x20/0x1f0 [ 897.435918][T18896] ? get_pid_task+0x20/0x1f0 [ 897.435925][T18896] ? get_pid_task+0x20/0x1f0 [ 897.435946][T18896] ? __fget_files+0x2a/0x420 [ 897.435959][T18896] ? __fget_files+0x3a0/0x420 [ 897.435976][T18896] __sys_sendmsg+0x183/0x260 [ 897.435990][T18896] ? __pfx___sys_sendmsg+0x10/0x10 [ 897.436026][T18896] __do_fast_syscall_32+0x20d/0x640 [ 897.436044][T18896] ? do_fast_syscall_32+0x33/0x70 [ 897.436057][T18896] ? asm_int80_emulation+0x1a/0x20 [ 897.436072][T18896] ? do_int80_emulation+0x274/0x4d0 [ 897.436086][T18896] ? trace_irq_disable+0x3b/0x150 [ 897.436109][T18896] do_fast_syscall_32+0x33/0x70 [ 897.436125][T18896] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 897.436143][T18896] RIP: 0023:0xf702ef6c [ 897.436159][T18896] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 897.436173][T18896] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 897.436192][T18896] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 897.436205][T18896] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 897.436215][T18896] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 897.436225][T18896] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 897.436235][T18896] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 897.436261][T18896] [ 897.706042][T16292] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 897.714689][T16292] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 897.724923][T16292] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 897.733976][T16292] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 897.745136][T16292] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 897.786758][T16292] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 897.796084][T16292] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 897.804101][T16292] usb 2-1: Product: syz [ 897.808544][T16292] usb 2-1: Manufacturer: syz [ 897.819832][T16292] cdc_wdm 2-1:1.0: skipping garbage [ 897.825098][T16292] cdc_wdm 2-1:1.0: skipping garbage [ 897.834480][T16292] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 897.840968][T16292] cdc_wdm 2-1:1.0: Unknown control protocol [ 898.467964][T18907] blktrace: Concurrent blktraces are not allowed on sg0 [ 898.487542][T18906] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3791'. [ 898.714529][T16292] usb 2-1: USB disconnect, device number 7 [ 898.732717][T15089] Bluetooth: hci0: unexpected event 0x09 length: 6 > 3 [ 898.777364][T18901] netlink: 'syz.6.3789': attribute type 21 has an invalid length. [ 898.792228][T18901] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3789'. [ 898.827021][T18901] netlink: 'syz.6.3789': attribute type 21 has an invalid length. [ 898.924711][T18901] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3789'. [ 899.868575][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3796'. [ 901.084977][T18947] syzkaller1: entered allmulticast mode [ 901.104326][T18948] delete_channel: no stack [ 901.196160][T16292] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 901.371813][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 901.371837][ T30] audit: type=1326 audit(1772197638.353:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 901.405267][T16292] usb 2-1: Using ep0 maxpacket: 32 [ 901.416981][ T30] audit: type=1326 audit(1772197638.393:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 901.417587][T15089] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 901.440463][T16292] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 901.487793][T16292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.526095][T16292] usb 2-1: config 0 has no interface number 0 [ 901.566268][ T30] audit: type=1326 audit(1772197638.393:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 901.596829][T16292] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 901.626978][T16292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.635125][T16292] usb 2-1: Product: syz [ 901.736183][ T30] audit: type=1326 audit(1772197638.393:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 901.758596][T16292] usb 2-1: Manufacturer: syz [ 901.763221][T16292] usb 2-1: SerialNumber: syz [ 901.778017][ T30] audit: type=1326 audit(1772197638.393:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 901.786184][ T5953] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 901.801514][T18955] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3803'. [ 901.834601][T16292] usb 2-1: config 0 descriptor?? [ 901.880316][ T30] audit: type=1326 audit(1772197638.393:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 901.932471][ T30] audit: type=1326 audit(1772197638.393:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 901.991951][ T30] audit: type=1326 audit(1772197638.403:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 901.996280][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 902.056473][T16292] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 902.080957][ T5953] usb 5-1: config 0 has an invalid interface number: 76 but max is 0 [ 902.094404][ T5953] usb 5-1: config 0 has no interface number 0 [ 902.114364][ T5953] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 902.114396][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.114416][ T5953] usb 5-1: Product: syz [ 902.114431][ T5953] usb 5-1: Manufacturer: syz [ 902.114446][ T5953] usb 5-1: SerialNumber: syz [ 902.125732][ T5953] usb 5-1: config 0 descriptor?? [ 902.129297][ T5953] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 902.129342][ T5953] dw2102: su3000_power_ctrl: 1, initialized 0 [ 902.129358][ T5953] dvb-usb: bulk message failed: -22 (2/0) [ 902.134552][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 902.136832][ T5953] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 902.136887][ T5953] usb 5-1: media controller created [ 902.136913][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 902.136928][ T5953] dw2102: i2c transfer failed. [ 902.136944][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 902.136959][ T5953] dw2102: i2c transfer failed. [ 902.136973][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 902.136987][ T5953] dw2102: i2c transfer failed. [ 902.137000][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 902.137014][ T5953] dw2102: i2c transfer failed. [ 902.137036][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 902.137050][ T5953] dw2102: i2c transfer failed. [ 902.137063][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 902.137076][ T5953] dw2102: i2c transfer failed. [ 902.137086][ T5953] dvb-usb: MAC address: 02:02:02:02:02:02 [ 902.161101][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.171750][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 902.171766][ T5953] dw2102: command 0x0e transfer failed. [ 902.171776][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 902.171787][ T5953] dw2102: command 0x0e transfer failed. [ 902.190788][ T30] audit: type=1326 audit(1772197638.403:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 902.393588][ T30] audit: type=1326 audit(1772197638.403:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.0.3803" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f74f6c code=0x7ffc0000 [ 902.424100][T16292] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 902.477190][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 902.489925][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 902.508526][ T5953] dw2102: command 0x0e transfer failed. [ 902.508546][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 902.508563][ T5953] dw2102: command 0x0e transfer failed. [ 902.508573][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 902.508586][ T5953] dw2102: command 0x51 transfer failed. [ 902.578394][ T5953] DVB: Unable to find symbol ds3000_attach() [ 902.578413][ T5953] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 902.670673][ T5953] rc_core: IR keymap rc-su3000 not found [ 902.670689][ T5953] Registered IR keymap rc-empty [ 902.671906][ T5953] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 902.673306][ T5953] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input65 [ 902.681107][ T5953] dvb-usb: schedule remote query interval to 150 msecs. [ 902.681132][ T5953] dw2102: su3000_power_ctrl: 0, initialized 1 [ 902.681145][ T5953] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 902.836256][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 902.842170][ T5953] dw2102: i2c transfer failed. [ 903.006134][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 903.013128][ T5953] dw2102: i2c transfer failed. [ 903.042227][ T5953] usb 5-1: USB disconnect, device number 24 [ 903.336741][ T5953] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 903.446175][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 903.558135][T18981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.569815][T18981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.577927][ T9] usb 6-1: device descriptor read/64, error -71 [ 903.816373][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 903.878528][ T5953] usb 2-1: USB disconnect, device number 8 [ 903.980195][ T9] usb 6-1: device descriptor read/64, error -71 [ 904.107897][ T9] usb usb6-port1: attempt power cycle [ 904.466347][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 904.498092][ T9] usb 6-1: device descriptor read/8, error -71 [ 904.757186][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 904.856692][ T9] usb 6-1: device descriptor read/8, error -71 [ 905.133451][ T9] usb usb6-port1: unable to enumerate USB device [ 905.946130][T16316] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 906.179536][T16316] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 906.256300][T16316] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 906.288429][T16316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.307285][T16316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.320525][T16316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 906.383155][T16316] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 906.418913][T16316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.442529][T16316] usb 2-1: config 0 descriptor?? [ 907.344206][T16316] usbhid 2-1:0.0: can't add hid device: -71 [ 907.364764][T16316] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 907.439183][T16316] usb 2-1: USB disconnect, device number 9 [ 907.751519][T19029] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 907.773991][T19030] fuse: blksize only supported for fuseblk [ 908.471023][T19050] input: syz1 as /devices/virtual/input/input66 [ 908.516386][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 908.847479][ T9] usb 5-1: device descriptor read/64, error -71 [ 908.890699][T19056] FAULT_INJECTION: forcing a failure. [ 908.890699][T19056] name failslab, interval 1, probability 0, space 0, times 0 [ 909.025461][T19056] CPU: 0 UID: 0 PID: 19056 Comm: syz.0.3836 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.025481][T19056] Tainted: [L]=SOFTLOCKUP [ 909.025485][T19056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.025491][T19056] Call Trace: [ 909.025497][T19056] [ 909.025503][T19056] dump_stack_lvl+0xe8/0x150 [ 909.025522][T19056] should_fail_ex+0x412/0x560 [ 909.025537][T19056] should_failslab+0xa8/0x100 [ 909.025550][T19056] __kmalloc_cache_noprof+0x88/0x660 [ 909.025562][T19056] ? fuse_get_tree+0xb5/0x4f0 [ 909.025574][T19056] ? __kmalloc_cache_noprof+0x15b/0x660 [ 909.025585][T19056] fuse_get_tree+0xb5/0x4f0 [ 909.025597][T19056] ? bpf_lsm_capable+0x9/0x20 [ 909.025612][T19056] vfs_get_tree+0x92/0x2a0 [ 909.025624][T19056] do_new_mount+0x341/0xd30 [ 909.025636][T19056] ? apparmor_capable+0x126/0x170 [ 909.025652][T19056] ? __pfx_do_new_mount+0x10/0x10 [ 909.025665][T19056] ? ns_capable+0x89/0xe0 [ 909.025678][T19056] ? path_mount+0x690/0x10e0 [ 909.025693][T19056] ? user_path_at+0xd4/0x160 [ 909.025709][T19056] __se_sys_mount+0x31d/0x420 [ 909.025725][T19056] ? __pfx___se_sys_mount+0x10/0x10 [ 909.025739][T19056] ? __ia32_sys_mount+0x20/0xc0 [ 909.025753][T19056] __do_fast_syscall_32+0x20d/0x640 [ 909.025767][T19056] ? do_fast_syscall_32+0x33/0x70 [ 909.025777][T19056] ? asm_int80_emulation+0x1a/0x20 [ 909.025787][T19056] ? do_int80_emulation+0x274/0x4d0 [ 909.025798][T19056] do_fast_syscall_32+0x33/0x70 [ 909.025808][T19056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 909.025820][T19056] RIP: 0023:0xf7f74f6c [ 909.025831][T19056] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 909.025839][T19056] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 909.025851][T19056] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 909.025858][T19056] RDX: 0000000080002100 RSI: 0000000000000000 RDI: 0000000080002140 [ 909.025864][T19056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 909.025870][T19056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 909.025876][T19056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 909.025890][T19056] [ 909.327034][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 909.691897][ T9] usb 5-1: device descriptor read/64, error -71 [ 909.886612][T19065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3840'. [ 909.887291][ T9] usb usb5-port1: attempt power cycle [ 910.083478][T16316] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 910.172438][T19065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.486118][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 910.523188][T16316] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 910.542706][ T9] usb 5-1: device descriptor read/8, error -71 [ 910.581344][T16316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.635719][T16316] usb 2-1: config 0 descriptor?? [ 910.651935][T16316] sisusb 2-1:0.0: Invalid USB2VGA device [ 910.687072][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3843'. [ 910.688861][T16316] sisusb 2-1:0.0: probe with driver sisusb failed with error -22 [ 910.876149][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 910.936241][ T9] usb 5-1: device descriptor read/8, error -71 [ 911.059893][T19059] C: renamed from team_slave_0 [ 911.065665][ T9] usb usb5-port1: unable to enumerate USB device [ 911.103069][T19059] netlink: 'syz.1.3837': attribute type 1 has an invalid length. [ 911.123612][T19059] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 911.323298][T19089] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 911.332010][T19089] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 911.347670][T19089] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 911.359253][T19089] kvm: requested 31847 ns i8254 timer period limited to 200000 ns [ 911.369805][T19089] kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 911.379745][T19089] kvm: requested 194438 ns i8254 timer period limited to 200000 ns [ 911.401160][T19091] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3846'. [ 911.401163][T19089] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 911.458632][T19089] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 911.482898][T19089] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 911.540571][T19085] netlink: 'syz.6.3845': attribute type 21 has an invalid length. [ 911.581414][T19085] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3845'. [ 911.617092][T19094] netlink: 'syz.6.3845': attribute type 21 has an invalid length. [ 911.674412][T19094] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3845'. [ 911.858657][T19104] fuse: Unknown parameter 'use00000000000000000000' [ 912.117208][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3850'. [ 912.702778][T16292] usb 2-1: USB disconnect, device number 10 [ 913.518011][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 913.715980][ T9] usb 5-1: device descriptor read/64, error -71 [ 913.939289][T19145] FAULT_INJECTION: forcing a failure. [ 913.939289][T19145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.985457][T19145] CPU: 0 UID: 0 PID: 19145 Comm: syz.1.3862 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.985486][T19145] Tainted: [L]=SOFTLOCKUP [ 913.985493][T19145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.985504][T19145] Call Trace: [ 913.985511][T19145] [ 913.985520][T19145] dump_stack_lvl+0xe8/0x150 [ 913.985550][T19145] should_fail_ex+0x412/0x560 [ 913.985575][T19145] _copy_to_user+0x31/0xb0 [ 913.985600][T19145] simple_read_from_buffer+0xe1/0x170 [ 913.985627][T19145] proc_fail_nth_read+0x1bb/0x230 [ 913.985653][T19145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 913.985678][T19145] ? rw_verify_area+0x2a6/0x4d0 [ 913.985695][T19145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 913.985719][T19145] vfs_read+0x20c/0xa70 [ 913.985735][T19145] ? fdget_pos+0x246/0x320 [ 913.985762][T19145] ? __pfx___mutex_lock+0x10/0x10 [ 913.985781][T19145] ? __pfx_vfs_read+0x10/0x10 [ 913.985800][T19145] ? __fget_files+0x2a/0x420 [ 913.985826][T19145] ? __fget_files+0x3a0/0x420 [ 913.985848][T19145] ? __fget_files+0x2a/0x420 [ 913.985877][T19145] ksys_read+0x150/0x270 [ 913.985904][T19145] ? __pfx_ksys_read+0x10/0x10 [ 913.985926][T19145] ? asm_int80_emulation+0x1a/0x20 [ 913.985947][T19145] do_int80_emulation+0x173/0x4d0 [ 913.985961][T19145] ? trace_irq_disable+0x3b/0x150 [ 913.985982][T19145] ? asm_int80_emulation+0x1a/0x20 [ 913.985999][T19145] ? clear_bhb_loop+0x40/0x90 [ 913.986013][T19145] ? clear_bhb_loop+0x40/0x90 [ 913.986031][T19145] asm_int80_emulation+0x1a/0x20 [ 913.986047][T19145] RIP: 0023:0xf7185cab [ 913.986061][T19145] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 913.986074][T19145] RSP: 002b:00000000f543d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 913.986092][T19145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d5d0 [ 913.986103][T19145] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 913.986113][T19145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 913.986123][T19145] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 913.986133][T19145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 913.986160][T19145] [ 914.386125][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 914.501440][T19148] syzkaller0: entered promiscuous mode [ 914.552708][T19143] netlink: 'syz.0.3861': attribute type 21 has an invalid length. [ 914.565227][T19148] syzkaller0: entered allmulticast mode [ 914.573243][T19143] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3861'. [ 914.603253][T19147] netlink: 'syz.0.3861': attribute type 21 has an invalid length. [ 914.611409][T19147] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3861'. [ 914.617308][ T9] usb 5-1: device descriptor read/64, error -71 [ 914.747101][ T9] usb usb5-port1: attempt power cycle [ 914.916455][T16316] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 914.928054][ T5953] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 915.076515][T16316] usb 6-1: Using ep0 maxpacket: 16 [ 915.083866][T16316] usb 6-1: too many configurations: 79, using maximum allowed: 8 [ 915.086790][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 915.094484][T16316] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 915.099712][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.104902][T16316] usb 6-1: can't read configurations, error -61 [ 915.115716][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 915.130441][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.140612][ T5953] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 915.149933][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.161673][ T5953] usb 2-1: config 0 descriptor?? [ 915.176934][ T9] usb 5-1: device descriptor read/8, error -71 [ 915.246153][T16316] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 915.396469][T16316] usb 6-1: Using ep0 maxpacket: 16 [ 915.402510][T16316] usb 6-1: too many configurations: 79, using maximum allowed: 8 [ 915.413896][T16316] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 915.416771][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 915.421658][T16316] usb 6-1: can't read configurations, error -61 [ 915.436193][T16316] usb usb6-port1: attempt power cycle [ 915.449051][ T9] usb 5-1: device descriptor read/8, error -71 [ 915.513288][T19164] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3870'. [ 915.556713][ T9] usb usb5-port1: unable to enumerate USB device [ 915.570891][ T5953] cherry 0003:046A:0027.001F: unknown main item tag 0x2 [ 915.579940][ T5953] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 915.587361][ T5953] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 915.595547][ T5953] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 915.602739][ T5953] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 915.610091][ T5953] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 915.617386][ T5953] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 915.624476][ T5953] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 915.631603][ T5953] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 915.638805][ T5953] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 915.649414][ T5953] cherry 0003:046A:0027.001F: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.1-1/input0 [ 915.770016][T16312] usb 2-1: USB disconnect, device number 11 [ 915.780990][T16316] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 915.806821][T16316] usb 6-1: Using ep0 maxpacket: 16 [ 915.812810][T16316] usb 6-1: too many configurations: 79, using maximum allowed: 8 [ 915.822708][T16316] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 915.832738][T16316] usb 6-1: can't read configurations, error -61 [ 915.966138][T16316] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 915.986573][T16316] usb 6-1: Using ep0 maxpacket: 16 [ 915.992336][T16316] usb 6-1: too many configurations: 79, using maximum allowed: 8 [ 916.002775][T16316] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 916.010610][T16316] usb 6-1: can't read configurations, error -61 [ 916.017489][T16316] usb usb6-port1: unable to enumerate USB device [ 916.451069][T19176] fuse: Unknown parameter '' [ 916.452096][T19174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.638136][T19182] syzkaller0: entered promiscuous mode [ 916.651868][T19182] syzkaller0: entered allmulticast mode [ 917.147014][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.204133][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.234156][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.287401][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.305133][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.331753][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.378133][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.402675][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.456278][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.480046][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.501019][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.516900][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.529808][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.540181][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.550890][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.560452][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.569882][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.585660][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.595921][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.626218][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.649370][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.685703][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.695613][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.776239][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.804464][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.854633][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.933558][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.944876][ T5953] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 917.946312][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.965970][T19187] program syz.6.3878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.970082][T19210] FAULT_INJECTION: forcing a failure. [ 917.970082][T19210] name failslab, interval 1, probability 0, space 0, times 0 [ 918.020158][T19210] CPU: 0 UID: 0 PID: 19210 Comm: syz.4.3884 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.020189][T19210] Tainted: [L]=SOFTLOCKUP [ 918.020196][T19210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 918.020207][T19210] Call Trace: [ 918.020214][T19210] [ 918.020223][T19210] dump_stack_lvl+0xe8/0x150 [ 918.020251][T19210] should_fail_ex+0x412/0x560 [ 918.020277][T19210] should_failslab+0xa8/0x100 [ 918.020299][T19210] __kmalloc_noprof+0xe8/0x760 [ 918.020318][T19210] ? trace_kmalloc+0x2a/0x110 [ 918.020333][T19210] ? tomoyo_encode+0x28b/0x550 [ 918.020360][T19210] tomoyo_encode+0x28b/0x550 [ 918.020387][T19210] tomoyo_realpath_from_path+0x58d/0x5d0 [ 918.020416][T19210] ? tomoyo_path_number_perm+0x219/0x630 [ 918.020435][T19210] tomoyo_path_number_perm+0x246/0x630 [ 918.020457][T19210] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 918.020479][T19210] ? __lock_acquire+0x6b5/0x2cf0 [ 918.020531][T19210] ? __fget_files+0x2a/0x420 [ 918.020558][T19210] ? __fget_files+0x3a0/0x420 [ 918.020585][T19210] ? __fget_files+0x2a/0x420 [ 918.020611][T19210] security_file_ioctl_compat+0xc3/0x2a0 [ 918.020640][T19210] __ia32_compat_sys_ioctl+0x139/0x950 [ 918.020663][T19210] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 918.020686][T19210] ? __fget_files+0x3a0/0x420 [ 918.020719][T19210] ? fput+0xa0/0xd0 [ 918.020741][T19210] ? ksys_write+0x242/0x270 [ 918.020770][T19210] __do_fast_syscall_32+0x20d/0x640 [ 918.020790][T19210] ? do_fast_syscall_32+0x33/0x70 [ 918.020807][T19210] ? asm_int80_emulation+0x1a/0x20 [ 918.020823][T19210] ? do_int80_emulation+0x274/0x4d0 [ 918.020839][T19210] ? trace_irq_disable+0x3b/0x150 [ 918.020865][T19210] do_fast_syscall_32+0x33/0x70 [ 918.020883][T19210] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 918.020905][T19210] RIP: 0023:0xf703ef6c [ 918.020921][T19210] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 918.020935][T19210] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 918.020954][T19210] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000402c5828 [ 918.020966][T19210] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 918.020978][T19210] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 918.020989][T19210] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 918.020999][T19210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 918.021027][T19210] [ 918.021048][T19210] ERROR: Out of memory at tomoyo_realpath_from_path. [ 918.366181][ T5953] usb 6-1: device descriptor read/64, error -71 [ 918.449628][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3885'. [ 918.466267][T19213] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3885'. [ 918.490464][T19213] x_tables: duplicate underflow at hook 4 [ 918.619698][ T5953] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 918.652778][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3886'. [ 918.796328][T19219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 918.811130][ T5953] usb 6-1: device descriptor read/64, error -71 [ 918.926442][ T5953] usb usb6-port1: attempt power cycle [ 919.266111][ T5953] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 919.286791][ T5953] usb 6-1: device descriptor read/8, error -71 [ 919.526200][ T5953] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 919.570659][ T5953] usb 6-1: device descriptor read/8, error -71 [ 919.807017][ T5953] usb usb6-port1: unable to enumerate USB device [ 920.468234][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 920.468253][ T30] audit: type=1800 audit(1772197657.433:501): pid=19232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3889" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 921.203178][T19253] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3897'. [ 921.484589][T19257] kvm: user requested TSC rate below hardware speed [ 922.041086][T19269] wireguard0: entered promiscuous mode [ 922.108029][T19269] wireguard0: entered allmulticast mode [ 922.130359][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3898'. [ 922.396297][ T5953] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 922.664314][T19280] netlink: 'syz.0.3901': attribute type 2 has an invalid length. [ 922.832649][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 923.269170][ T5953] usb 2-1: config 188 has an invalid interface number: 206 but max is 0 [ 923.296084][ T5953] usb 2-1: config 188 has no interface number 0 [ 923.324318][ T5953] usb 2-1: config 188 interface 206 altsetting 66 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 923.395194][ T5953] usb 2-1: config 188 interface 206 has no altsetting 0 [ 923.458408][ T5953] usb 2-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=4f.54 [ 923.467742][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.487150][ T5953] usb 2-1: Product: syz [ 923.511670][ T5953] usb 2-1: Manufacturer: syz [ 923.543578][ T5953] usb 2-1: SerialNumber: syz [ 923.645248][T19294] FAULT_INJECTION: forcing a failure. [ 923.645248][T19294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.707634][T19294] CPU: 0 UID: 0 PID: 19294 Comm: syz.5.3906 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.707662][T19294] Tainted: [L]=SOFTLOCKUP [ 923.707668][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.707679][T19294] Call Trace: [ 923.707686][T19294] [ 923.707694][T19294] dump_stack_lvl+0xe8/0x150 [ 923.707720][T19294] should_fail_ex+0x412/0x560 [ 923.707749][T19294] strncpy_from_user+0x36/0x2b0 [ 923.707769][T19294] path_setxattrat+0x191/0x440 [ 923.707795][T19294] ? __pfx_path_setxattrat+0x10/0x10 [ 923.707832][T19294] ? fput+0xa0/0xd0 [ 923.707853][T19294] ? ksys_write+0x242/0x270 [ 923.707875][T19294] __ia32_sys_fsetxattr+0xbc/0xe0 [ 923.707900][T19294] __do_fast_syscall_32+0x20d/0x640 [ 923.707917][T19294] ? do_fast_syscall_32+0x33/0x70 [ 923.707933][T19294] ? asm_int80_emulation+0x1a/0x20 [ 923.707949][T19294] ? do_int80_emulation+0x274/0x4d0 [ 923.707966][T19294] ? trace_irq_disable+0x3b/0x150 [ 923.707992][T19294] do_fast_syscall_32+0x33/0x70 [ 923.708010][T19294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 923.708031][T19294] RIP: 0023:0xf7fe5f6c [ 923.708047][T19294] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 923.708062][T19294] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 00000000000000e4 [ 923.708082][T19294] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 923.708094][T19294] RDX: 0000000080000040 RSI: 0000000000000014 RDI: 0000000000000000 [ 923.708106][T19294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 923.708114][T19294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 923.708125][T19294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 923.708148][T19294] [ 924.074690][T19297] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3907'. [ 924.263483][T19304] FAULT_INJECTION: forcing a failure. [ 924.263483][T19304] name failslab, interval 1, probability 0, space 0, times 0 [ 924.284600][T19304] CPU: 0 UID: 0 PID: 19304 Comm: syz.4.3909 Tainted: G L syzkaller #0 PREEMPT(full) [ 924.284631][T19304] Tainted: [L]=SOFTLOCKUP [ 924.284637][T19304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 924.284648][T19304] Call Trace: [ 924.284656][T19304] [ 924.284662][T19304] dump_stack_lvl+0xe8/0x150 [ 924.284690][T19304] should_fail_ex+0x412/0x560 [ 924.284712][T19304] should_failslab+0xa8/0x100 [ 924.284732][T19304] __kvmalloc_node_noprof+0x178/0x8a0 [ 924.284749][T19304] ? xt_alloc_table_info+0x40/0xb0 [ 924.284781][T19304] xt_alloc_table_info+0x40/0xb0 [ 924.284805][T19304] do_ip6t_set_ctl+0x970/0xe10 [ 924.284828][T19304] ? rcu_is_watching+0x15/0xb0 [ 924.284848][T19304] ? trace_contention_end+0x3d/0x150 [ 924.284872][T19304] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 924.284895][T19304] ? nf_setsockopt+0x221/0x290 [ 924.284922][T19304] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 924.284953][T19304] ? __pfx_aa_sk_perm+0x10/0x10 [ 924.284976][T19304] nf_setsockopt+0x26f/0x290 [ 924.284996][T19304] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 924.285016][T19304] do_sock_setsockopt+0x17c/0x1b0 [ 924.285038][T19304] __ia32_sys_setsockopt+0x13d/0x1b0 [ 924.285062][T19304] __do_fast_syscall_32+0x20d/0x640 [ 924.285081][T19304] ? do_fast_syscall_32+0x33/0x70 [ 924.285095][T19304] ? asm_int80_emulation+0x1a/0x20 [ 924.285110][T19304] ? do_int80_emulation+0x274/0x4d0 [ 924.285125][T19304] ? trace_irq_disable+0x3b/0x150 [ 924.285150][T19304] do_fast_syscall_32+0x33/0x70 [ 924.285167][T19304] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 924.285185][T19304] RIP: 0023:0xf703ef6c [ 924.285200][T19304] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 924.285215][T19304] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 924.285235][T19304] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 924.285247][T19304] RDX: 0000000000000040 RSI: 0000000080000540 RDI: 0000000000000508 [ 924.285259][T19304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 924.285268][T19304] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 924.285276][T19304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 924.285300][T19304] [ 925.086121][T16292] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 925.266376][T16292] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.296262][T16292] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 925.305450][T16292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.350394][T16292] usb 6-1: config 0 descriptor?? [ 925.365020][T16292] pwc: Askey VC010 type 2 USB webcam detected. [ 925.895636][T16292] pwc: recv_control_msg error -32 req 02 val 2b00 [ 925.913076][T16292] pwc: recv_control_msg error -32 req 02 val 2700 [ 925.926375][T16292] pwc: recv_control_msg error -32 req 02 val 2c00 [ 925.939066][T16292] pwc: recv_control_msg error -32 req 04 val 1000 [ 925.950030][T16292] pwc: recv_control_msg error -32 req 04 val 1300 [ 925.962152][T16292] pwc: recv_control_msg error -32 req 04 val 1400 [ 925.974265][T16292] pwc: recv_control_msg error -32 req 02 val 2000 [ 925.987015][T16292] pwc: recv_control_msg error -32 req 02 val 2100 [ 926.001221][T16292] pwc: recv_control_msg error -32 req 04 val 1500 [ 926.022518][T16292] pwc: recv_control_msg error -32 req 02 val 2500 [ 926.055436][T16292] pwc: recv_control_msg error -32 req 02 val 2400 [ 926.072087][T16292] pwc: recv_control_msg error -32 req 02 val 2600 [ 926.093820][T16292] pwc: recv_control_msg error -71 req 02 val 2900 [ 926.103834][T16292] pwc: recv_control_msg error -71 req 02 val 2800 [ 926.115450][T16292] pwc: recv_control_msg error -71 req 04 val 1100 [ 926.139258][T16292] pwc: recv_control_msg error -71 req 04 val 1200 [ 926.159182][T16292] pwc: Registered as video103. [ 926.188087][T16292] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input67 [ 926.478115][ T5953] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 926.482125][T16292] usb 6-1: USB disconnect, device number 66 [ 926.587697][ T5953] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 926.595834][ T5953] dib0700: firmware download failed at 7 with -8 [ 926.754286][ T5953] usb 2-1: USB disconnect, device number 12 [ 926.926095][T16312] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 927.103001][T16312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.124607][T16312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.148033][T16312] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 927.175531][T19335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3920'. [ 927.195554][T16312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.226296][T16312] usb 5-1: config 0 descriptor?? [ 927.317404][T16292] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 927.426995][ T5953] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 927.497689][T16292] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 927.509666][T16292] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 927.563689][T16292] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 927.575963][T16292] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 927.587553][T16292] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 927.599306][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 927.605983][T16292] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 927.606238][ T5953] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 927.624230][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.641620][T16312] hid_parser_main: 48 callbacks suppressed [ 927.641635][T16312] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 927.654654][T16292] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 927.663685][T16292] usb 6-1: Product: syz [ 927.670509][ T5953] usb 2-1: config 0 has no interface number 0 [ 927.675292][T16312] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 927.689777][T16292] usb 6-1: Manufacturer: syz [ 927.703923][ T5953] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 927.720269][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.721057][T16292] cdc_wdm 6-1:1.0: skipping garbage [ 927.729540][ T5953] usb 2-1: Product: syz [ 927.729563][ T5953] usb 2-1: Manufacturer: syz [ 927.729580][ T5953] usb 2-1: SerialNumber: syz [ 927.768400][ T5953] usb 2-1: config 0 descriptor?? [ 927.783001][T16292] cdc_wdm 6-1:1.0: skipping garbage [ 927.795668][ T5953] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 927.807835][T16292] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 927.815143][T16292] cdc_wdm 6-1:1.0: Unknown control protocol [ 927.821318][ T5953] uvcvideo 2-1:0.105: No valid video chain found. [ 927.858120][T19323] xt_SECMARK: invalid mode: 0 [ 927.884140][T16312] cp2112 0003:10C4:EA90.0020: error requesting version [ 927.900500][T16312] cp2112 0003:10C4:EA90.0020: probe with driver cp2112 failed with error -71 [ 927.920241][T16312] usb 5-1: USB disconnect, device number 33 [ 927.923141][ T5953] usb 6-1: USB disconnect, device number 67 [ 928.091481][ T9] usb 2-1: USB disconnect, device number 13 [ 928.358989][T19353] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3311282296 (13245129184 ns) > initial count (5448364772 ns). Using initial count to start timer. [ 928.446429][T19357] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3926'. [ 929.201042][T16312] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 929.537685][T16312] usb 6-1: device descriptor read/64, error -71 [ 929.886108][T16312] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 929.999946][T19374] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3933'. [ 930.026659][T16312] usb 6-1: device descriptor read/64, error -71 [ 930.151613][T16312] usb usb6-port1: attempt power cycle [ 930.290083][T19387] netlink: 'syz.6.3939': attribute type 27 has an invalid length. [ 930.298180][T19387] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 930.325465][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 930.335296][T19391] netlink: 'syz.4.3936': attribute type 18 has an invalid length. [ 930.353966][T19391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3936'. [ 930.646170][T16312] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 930.666854][T16312] usb 6-1: device descriptor read/8, error -71 [ 930.876374][T16292] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 930.916264][T16312] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 931.018410][T16312] usb 6-1: device descriptor read/8, error -71 [ 931.046395][T16292] usb 5-1: device descriptor read/64, error -71 [ 931.156205][T16312] usb usb6-port1: unable to enumerate USB device [ 931.309147][T16312] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 931.326155][T16292] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 931.481082][T16292] usb 5-1: device descriptor read/64, error -71 [ 931.490155][T16312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.500733][T16312] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 931.537825][T16312] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 931.548323][T16312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.551293][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.559916][T16312] usb 2-1: config 0 descriptor?? [ 931.570453][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.610099][T16292] usb usb5-port1: attempt power cycle [ 931.785827][T16312] Bluetooth: Can't get state to change to load ram patch err [ 931.795544][T16312] Bluetooth: Loading patch file failed [ 931.804832][T16312] ath3k 2-1:0.0: probe with driver ath3k failed with error -121 [ 931.976142][T16292] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 932.003507][ T5953] usb 2-1: USB disconnect, device number 14 [ 932.010824][T16292] usb 5-1: device descriptor read/8, error -71 [ 932.356200][T16292] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 932.388192][T16292] usb 5-1: device descriptor read/8, error -71 [ 932.526303][T16292] usb usb5-port1: unable to enumerate USB device [ 933.547886][T19435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3952'. [ 933.681735][T19440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3954'. [ 934.197403][ T9] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 934.356354][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 934.473686][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 934.484259][ T9] usb 6-1: config 4 interface 0 has no altsetting 0 [ 934.493978][ T9] usb 6-1: string descriptor 0 read error: -22 [ 934.500437][ T9] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 934.509938][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.593454][ T9] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 934.612487][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 934.712561][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 934.750525][ T9] usb 6-1: media controller created [ 934.778185][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 934.790507][T19440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 934.818924][T19440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.033472][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 935.381903][ T9] usb 6-1: USB disconnect, device number 72 [ 936.673702][T19482] binder: 19480:19482 ioctl c0306201 0 returned -14 [ 937.424596][T19501] sctp: [Deprecated]: syz.1.3969 (pid 19501) Use of int in maxseg socket option. [ 937.424596][T19501] Use struct sctp_assoc_value instead [ 938.178217][T19516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.187692][T19516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.853094][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3980'. [ 939.868221][T19542] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 939.877239][T19542] team0: Device ipvlan5 is already an upper device of the team interface [ 941.796162][ T9] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 941.976354][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 941.988600][ T9] usb 5-1: config 188 has an invalid interface number: 206 but max is 0 [ 942.000117][ T9] usb 5-1: config 188 has no interface number 0 [ 942.025478][ T9] usb 5-1: config 188 interface 206 altsetting 66 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 942.047527][ T9] usb 5-1: config 188 interface 206 has no altsetting 0 [ 942.084462][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=4f.54 [ 942.106513][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.143397][ T9] usb 5-1: Product: syz [ 942.202491][ T9] usb 5-1: Manufacturer: syz [ 942.222374][ T9] usb 5-1: SerialNumber: syz [ 942.526464][T16292] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 943.019006][T16292] usb 6-1: unable to get BOS descriptor or descriptor too short [ 943.029474][T16292] usb 6-1: config 7 has an invalid interface number: 174 but max is 0 [ 943.039902][T16292] usb 6-1: config 7 has no interface number 0 [ 943.093442][T16292] usb 6-1: config 7 interface 174 has no altsetting 0 [ 943.133846][T16292] usb 6-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=92.f8 [ 943.143627][T16292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.152395][T16292] usb 6-1: Product: syz [ 943.157427][T16292] usb 6-1: Manufacturer: syz [ 943.162227][T16292] usb 6-1: SerialNumber: syz [ 944.294278][ T9] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 944.322331][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 944.332217][ T9] dib0700: firmware download failed at 7 with -8 [ 944.355351][ T9] usb 5-1: USB disconnect, device number 38 [ 945.407858][T16292] zaurus 6-1:7.174: More than one union descriptor, skipping ... [ 945.423840][T16292] usb 6-1: bad CDC descriptors [ 945.501328][T16292] usb 6-1: USB disconnect, device number 73 [ 946.461822][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4007'. [ 946.470986][T19632] bridge_slave_1: left allmulticast mode [ 946.477779][T19632] bridge_slave_1: left promiscuous mode [ 946.484381][T19632] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.504139][T19632] bridge_slave_0: left allmulticast mode [ 946.534308][T19632] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.496110][ T9] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 947.682541][T19646] program syz.4.4012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 947.686200][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 947.704392][T19646] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 947.706582][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 947.745238][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 947.763592][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 947.785711][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 947.805364][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 947.821956][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 947.833011][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.862997][ T9] usb 6-1: config 0 descriptor?? [ 947.875286][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 947.882750][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 947.963557][T15089] Bluetooth: hci2: urb ffff88805359f100 submission failed (90) [ 948.150654][T16312] usb 6-1: USB disconnect, device number 74 [ 948.876141][T16312] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 949.036255][T16312] usb 5-1: Using ep0 maxpacket: 32 [ 949.066375][T16312] usb 5-1: config 188 has an invalid interface number: 206 but max is 0 [ 949.075977][T16312] usb 5-1: config 188 has no interface number 0 [ 949.102346][T16312] usb 5-1: config 188 interface 206 altsetting 66 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 949.114446][T16312] usb 5-1: config 188 interface 206 has no altsetting 0 [ 949.124637][T16312] usb 5-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=4f.54 [ 949.142099][T16312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.159319][T16312] usb 5-1: Product: syz [ 949.170456][T16312] usb 5-1: Manufacturer: syz [ 949.184695][T16312] usb 5-1: SerialNumber: syz [ 950.416805][T19679] netlink: 'syz.6.4022': attribute type 10 has an invalid length. [ 950.713641][T19679] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4022'. [ 950.808738][T19679] team0: Failed to send options change via netlink (err -105) [ 950.836621][T19679] team0: Port device geneve0 added [ 950.846496][T15202] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.879989][T15202] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.968084][T16312] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 950.979004][T15202] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.046313][T15202] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.065620][T19684] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4023'. [ 951.154868][T16312] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 951.190641][T16312] dib0700: firmware download failed at 7 with -8 [ 951.217893][T16312] usb 5-1: USB disconnect, device number 39 [ 951.646374][T16312] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 951.813896][T16312] usb 5-1: Using ep0 maxpacket: 16 [ 951.961117][T16312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.992277][T16312] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 952.013618][T16312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.074913][T16312] usb 5-1: Product: syz [ 952.089634][T16312] usb 5-1: Manufacturer: syz [ 952.102722][T16312] usb 5-1: SerialNumber: syz [ 952.189427][T16312] usb 5-1: config 0 descriptor?? [ 953.554253][T19670] syz.1.4020 (19670): drop_caches: 1 [ 954.818394][T16312] powermate 5-1:0.0: probe with driver powermate failed with error -22 [ 954.862284][T16312] usb 5-1: USB disconnect, device number 40 [ 955.313140][T19745] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 955.452427][T19735] can: request_module (can-proto-3) failed. [ 956.045466][T19745] [U] J"—E:ÀÆ" [ 956.277101][T19738] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4038'. [ 957.949403][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4047'. [ 958.278419][T19791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4048'. [ 958.311370][T19791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4048'. [ 958.444383][T19788] bond2: entered promiscuous mode [ 958.452394][T19788] 8021q: adding VLAN 0 to HW filter on device bond2 [ 958.529153][T19799] FAULT_INJECTION: forcing a failure. [ 958.529153][T19799] name failslab, interval 1, probability 0, space 0, times 0 [ 958.578788][T19799] CPU: 1 UID: 0 PID: 19799 Comm: syz.5.4050 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.578822][T19799] Tainted: [L]=SOFTLOCKUP [ 958.578829][T19799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 958.578840][T19799] Call Trace: [ 958.578847][T19799] [ 958.578855][T19799] dump_stack_lvl+0xe8/0x150 [ 958.578884][T19799] should_fail_ex+0x412/0x560 [ 958.578910][T19799] should_failslab+0xa8/0x100 [ 958.578932][T19799] __kmalloc_cache_noprof+0x88/0x660 [ 958.578951][T19799] ? binder_transaction+0x2477/0x71d0 [ 958.578975][T19799] ? do_raw_spin_unlock+0xf5/0x210 [ 958.578996][T19799] binder_transaction+0x2477/0x71d0 [ 958.579034][T19799] ? is_bpf_text_address+0x26/0x2b0 [ 958.579061][T19799] ? kernel_text_address+0xa5/0xe0 [ 958.579086][T19799] ? __pfx_binder_transaction+0x10/0x10 [ 958.579108][T19799] ? __lock_acquire+0x6b5/0x2cf0 [ 958.579135][T19799] ? __lock_acquire+0x6b5/0x2cf0 [ 958.579162][T19799] ? __lock_acquire+0x6b5/0x2cf0 [ 958.579192][T19799] ? __lock_acquire+0x6b5/0x2cf0 [ 958.579214][T19799] ? __lock_acquire+0x6b5/0x2cf0 [ 958.579234][T19799] ? binder_debug+0x155/0x1d0 [ 958.579278][T19799] binder_ioctl_write_read+0xe3b/0xa660 [ 958.579316][T19799] ? unwind_get_return_address+0x4d/0x90 [ 958.579340][T19799] ? arch_stack_walk+0xfb/0x150 [ 958.579372][T19799] ? stack_trace_save+0xa9/0x100 [ 958.579390][T19799] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 958.579409][T19799] ? kasan_save_free_info+0x46/0x50 [ 958.579435][T19799] ? stack_depot_save_flags+0x33/0x810 [ 958.579454][T19799] ? format_decode+0xd0/0xe10 [ 958.579477][T19799] ? kasan_save_track+0x4f/0x80 [ 958.579493][T19799] ? kasan_save_track+0x3e/0x80 [ 958.579509][T19799] ? kasan_save_free_info+0x46/0x50 [ 958.579534][T19799] ? __kasan_slab_free+0x5c/0x80 [ 958.579555][T19799] ? __lock_acquire+0x6b5/0x2cf0 [ 958.579587][T19799] ? binder_debug+0x155/0x1d0 [ 958.579629][T19799] ? _raw_spin_unlock+0x28/0x50 [ 958.579650][T19799] ? binder_get_thread+0x177/0x6d0 [ 958.579674][T19799] binder_ioctl+0x423/0x1b70 [ 958.579697][T19799] ? tomoyo_path_number_perm+0x219/0x630 [ 958.579717][T19799] ? tomoyo_path_number_perm+0x219/0x630 [ 958.579738][T19799] ? do_vfs_ioctl+0x1166/0x1530 [ 958.579757][T19799] ? __pfx_binder_ioctl+0x10/0x10 [ 958.579778][T19799] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 958.579827][T19799] ? __fget_files+0x2a/0x420 [ 958.579853][T19799] ? __fget_files+0x3a0/0x420 [ 958.579874][T19799] ? __fget_files+0x2a/0x420 [ 958.579899][T19799] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 958.579923][T19799] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 958.579945][T19799] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 958.579967][T19799] ? __fget_files+0x3a0/0x420 [ 958.579995][T19799] ? fput+0xa0/0xd0 [ 958.580017][T19799] ? ksys_write+0x242/0x270 [ 958.580044][T19799] __do_fast_syscall_32+0x20d/0x640 [ 958.580063][T19799] ? do_fast_syscall_32+0x33/0x70 [ 958.580080][T19799] ? asm_int80_emulation+0x1a/0x20 [ 958.580096][T19799] ? do_int80_emulation+0x274/0x4d0 [ 958.580117][T19799] do_fast_syscall_32+0x33/0x70 [ 958.580134][T19799] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 958.580155][T19799] RIP: 0023:0xf7fe5f6c [ 958.580172][T19799] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 958.580187][T19799] RSP: 002b:00000000f546450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 958.580206][T19799] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000c0306201 [ 958.580219][T19799] RDX: 0000000080004a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.580229][T19799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.580239][T19799] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 958.580250][T19799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.580274][T19799] [ 958.582249][T19796] bridge0: entered promiscuous mode [ 959.146812][T19802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4051'. [ 959.163252][T19796] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 959.193212][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4051'. [ 960.187585][T16292] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 960.376479][T16292] usb 5-1: Using ep0 maxpacket: 16 [ 960.392562][T16292] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 960.437785][T16292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.481920][T16292] usb 5-1: Product: syz [ 960.493440][T16292] usb 5-1: Manufacturer: syz [ 960.553920][T16292] usb 5-1: SerialNumber: syz [ 960.580257][T16292] usb 5-1: config 0 descriptor?? [ 960.819618][T16292] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 961.230840][T16292] gspca_sn9c2028: read1 error -71 [ 961.237842][T16292] gspca_sn9c2028: read1 error -71 [ 961.242987][T16292] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 961.275825][T16292] usb 5-1: USB disconnect, device number 41 [ 961.316956][T19848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4065'. [ 962.486196][T16316] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 962.661043][T16316] usb 5-1: unable to get BOS descriptor or descriptor too short [ 962.671699][T16316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.682749][T16316] usb 5-1: config 0 has no interfaces? [ 962.861706][T16316] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 962.880404][T16316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.893372][T16316] usb 5-1: Product: syz [ 962.900989][T16316] usb 5-1: Manufacturer: syz [ 962.908969][T16316] usb 5-1: SerialNumber: syz [ 962.978616][T16316] usb 5-1: config 0 descriptor?? [ 963.054298][ T30] audit: type=1326 audit(1772197700.003:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19878 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5f6c code=0x7ffc0000 [ 963.094267][ T30] audit: type=1326 audit(1772197700.003:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19878 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf7fe5f6c code=0x7ffc0000 [ 963.132608][ T30] audit: type=1326 audit(1772197700.003:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19878 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5f6c code=0x7ffc0000 [ 963.193366][T19882] delete_channel: no stack [ 963.418221][ T30] audit: type=1326 audit(1772197700.003:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19878 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=264 compat=1 ip=0xf7fe5f6c code=0x7ffc0000 [ 963.442177][ T30] audit: type=1326 audit(1772197700.003:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19878 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5f6c code=0x7ffc0000 [ 963.566190][T16307] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 963.641600][ T30] audit: type=1326 audit(1772197700.003:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19878 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5f6c code=0x7ffc0000 [ 963.689568][ T30] audit: type=1326 audit(1772197700.003:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19878 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe5f6c code=0x7ffc0000 [ 963.840091][T16307] usb 2-1: Using ep0 maxpacket: 8 [ 963.940087][T16307] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=1f.cb [ 963.953063][T16307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.963371][ T30] audit: type=1326 audit(1772197700.383:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19878 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5f6c code=0x7ffc0000 [ 963.993331][T16307] usb 2-1: Product: syz [ 963.997773][T16307] usb 2-1: Manufacturer: syz [ 964.002553][T16307] usb 2-1: SerialNumber: syz [ 964.012584][T19878] delete_channel: no stack [ 964.020595][ T30] audit: type=1326 audit(1772197700.383:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19878 comm="syz.5.4074" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5f6c code=0x7ffc0000 [ 964.132849][T16307] usb 2-1: config 0 descriptor?? [ 964.203744][T16307] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 964.215370][T16307] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 964.238932][T16307] usb-storage 2-1:0.0: USB Mass Storage device detected [ 964.253533][T16307] usb-storage 2-1:0.0: device ignored [ 964.267573][T19892] netlink: 'syz.6.4076': attribute type 4 has an invalid length. [ 964.420730][T19885] input: syz1 as /devices/virtual/input/input68 [ 964.946905][ T31] INFO: task kworker/0:3:5819 blocked for more than 143 seconds. [ 964.958804][ T31] Tainted: G L syzkaller #0 [ 964.968908][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 964.993017][ T31] task:kworker/0:3 state:D stack:21160 pid:5819 tgid:5819 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 965.043714][ T31] Workqueue: usb_hub_wq hub_event [ 965.054610][ T31] Call Trace: [ 965.060916][ T31] [ 965.066453][ T31] __schedule+0x1585/0x5340 [ 965.075576][ T31] ? __pfx___schedule+0x10/0x10 [ 965.086149][ T31] ? schedule+0x90/0x360 [ 965.094800][ T31] schedule+0x164/0x360 [ 965.104413][ T31] schedule_timeout+0xc3/0x2c0 [ 965.114896][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 965.125676][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 965.131598][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 965.143815][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 965.145721][T16316] usb 5-1: USB disconnect, device number 42 [ 965.171792][ T31] ? wait_for_completion+0x274/0x5e0 [ 965.182354][ T31] wait_for_completion+0x2cc/0x5e0 [ 965.190763][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 965.209043][ T31] i2c_del_adapter+0x5c0/0x790 [ 965.213891][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 965.226290][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 965.231625][ T31] ? dvb_usbv2_exit+0x935/0xb60 [ 965.246146][ T31] dvb_usbv2_probe+0x4c3/0x3d40 [ 965.251096][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 965.266126][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 965.272042][ T31] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 965.286106][ T31] usb_probe_interface+0x668/0xc90 [ 965.291313][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 965.304740][ T31] really_probe+0x267/0xaf0 [ 965.316205][ T31] __driver_probe_device+0x18c/0x320 [ 965.321556][ T31] driver_probe_device+0x4f/0x240 [ 965.346074][ T31] __device_attach_driver+0x2d4/0x4c0 [ 965.351517][ T31] bus_for_each_drv+0x258/0x2f0 [ 965.366104][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 965.372268][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 965.396114][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 965.401374][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 965.416085][ T31] __device_attach+0x2c5/0x450 [ 965.420926][ T31] ? __pfx___device_attach+0x10/0x10 [ 965.446365][ T31] ? _raw_spin_unlock+0x28/0x50 [ 965.451295][ T31] device_initial_probe+0xa1/0xd0 [ 965.466062][ T31] bus_probe_device+0x12a/0x220 [ 965.470994][ T31] ? device_add+0x726/0xb70 [ 965.475686][ T31] device_add+0x7b6/0xb70 [ 965.486192][ T31] usb_set_configuration+0x1a87/0x2110 [ 965.491978][ T31] usb_generic_driver_probe+0x8d/0x150 [ 965.497885][ T31] usb_probe_device+0x1c4/0x3b0 [ 965.503093][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 965.508915][ T31] really_probe+0x267/0xaf0 [ 965.513711][ T31] __driver_probe_device+0x18c/0x320 [ 965.519469][ T31] driver_probe_device+0x4f/0x240 [ 965.524794][ T31] __device_attach_driver+0x2d4/0x4c0 [ 965.532180][ T31] bus_for_each_drv+0x258/0x2f0 [ 965.538288][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 965.544317][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 965.553883][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 965.560816][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 965.567175][ T31] __device_attach+0x2c5/0x450 [ 965.572057][ T31] ? __pfx___device_attach+0x10/0x10 [ 965.577823][ T31] ? _raw_spin_unlock+0x28/0x50 [ 965.582795][ T31] device_initial_probe+0xa1/0xd0 [ 965.588439][ T31] bus_probe_device+0x12a/0x220 [ 965.593444][ T31] ? device_add+0x726/0xb70 [ 965.598552][ T31] device_add+0x7b6/0xb70 [ 965.602998][ T31] usb_new_device+0xa08/0x16f0 [ 965.608853][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 965.614456][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 965.620204][ T31] hub_event+0x2a1c/0x4f30 [ 965.624785][ T31] ? __pfx_hub_event+0x10/0x10 [ 965.630242][ T31] ? process_scheduled_works+0xa25/0x1830 [ 965.638270][ T31] ? process_scheduled_works+0xa25/0x1830 [ 965.644330][ T31] process_scheduled_works+0xb02/0x1830 [ 965.650979][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 965.661058][ T31] ? assign_work+0x3d5/0x5e0 [ 965.669535][ T31] worker_thread+0xa50/0xfc0 [ 965.674477][ T31] kthread+0x388/0x470 [ 965.678938][ T31] ? __pfx_worker_thread+0x10/0x10 [ 965.684163][ T31] ? __pfx_kthread+0x10/0x10 [ 965.689349][ T31] ret_from_fork+0x51e/0xb90 [ 965.694279][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 965.700655][ T31] ? __switch_to+0xc7d/0x1450 [ 965.705522][ T31] ? __pfx_kthread+0x10/0x10 [ 965.710834][ T31] ret_from_fork_asm+0x1a/0x30 [ 965.715762][ T31] [ 965.720822][ T31] [ 965.720822][ T31] Showing all locks held in the system: [ 965.733510][ T31] 1 lock held by khungtaskd/31: [ 965.741149][T16307] usb 2-1: USB disconnect, device number 15 [ 965.796357][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 965.816126][ T31] 2 locks held by getty/5576: [ 965.820885][ T31] #0: ffff88803710a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 965.846179][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 965.866588][ T31] 5 locks held by kworker/0:3/5819: [ 965.872027][ T31] #0: ffff8880222c9d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 965.885322][ T31] #1: ffffc90004017c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 965.897710][ T31] #2: ffff888029f0a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 965.906828][ T31] #3: ffff88803503f198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 965.927125][ T31] #4: ffff88807c7a2160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 965.945687][ T31] 3 locks held by udevd/5952: [ 965.950610][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 965.960680][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 965.970572][ T31] #2: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 965.979630][ T31] 3 locks held by kworker/u8:11/7032: [ 965.985006][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 965.995095][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 966.004074][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 966.013305][ T31] 2 locks held by syz.6.4076/19888: [ 966.018631][ T31] #0: ffffffff8fbcc908 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 966.027697][ T31] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 966.038915][ T31] [ 966.041281][ T31] ============================================= [ 966.041281][ T31] [ 966.055940][ T31] NMI backtrace for cpu 0 [ 966.055956][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 966.055970][ T31] Tainted: [L]=SOFTLOCKUP [ 966.055974][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 966.055980][ T31] Call Trace: [ 966.055984][ T31] [ 966.055990][ T31] dump_stack_lvl+0xe8/0x150 [ 966.056021][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 966.056041][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 966.056062][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 966.056084][ T31] sys_info+0x135/0x170 [ 966.056099][ T31] watchdog+0xfd9/0x1030 [ 966.056126][ T31] ? watchdog+0x21a/0x1030 [ 966.056153][ T31] kthread+0x388/0x470 [ 966.056171][ T31] ? __pfx_watchdog+0x10/0x10 [ 966.056192][ T31] ? __pfx_kthread+0x10/0x10 [ 966.056209][ T31] ret_from_fork+0x51e/0xb90 [ 966.056232][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 966.056251][ T31] ? __switch_to+0xc7d/0x1450 [ 966.056274][ T31] ? __pfx_kthread+0x10/0x10 [ 966.056291][ T31] ret_from_fork_asm+0x1a/0x30 [ 966.056327][ T31] [ 966.167640][ T31] Sending NMI from CPU 0 to CPUs 1: [ 966.172869][ C1] NMI backtrace for cpu 1 [ 966.172889][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.172909][ C1] Tainted: [L]=SOFTLOCKUP [ 966.172915][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 966.172924][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 966.172950][ C1] Code: 7e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 1d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 966.172963][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 966.172977][ C1] RAX: 0000000001993b8b RBX: ffffffff819a80dd RCX: 0000000080000001 [ 966.172988][ C1] RDX: 0000000000000001 RSI: ffffffff8def2b4b RDI: ffffffff8c27aa00 [ 966.172999][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 966.173011][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901185b0 [ 966.173021][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001 [ 966.173032][ C1] FS: 0000000000000000(0000) GS:ffff888125564000(0000) knlGS:0000000000000000 [ 966.173045][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.173055][ C1] CR2: 0000000000000000 CR3: 000000001ebc2000 CR4: 00000000003526f0 [ 966.173069][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000350 [ 966.173078][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 966.173088][ C1] Call Trace: [ 966.173096][ C1] [ 966.173102][ C1] default_idle+0x9/0x20 [ 966.173117][ C1] default_idle_call+0x72/0xb0 [ 966.173134][ C1] do_idle+0x1bd/0x500 [ 966.173152][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 966.173173][ C1] ? __pfx_do_idle+0x10/0x10 [ 966.173198][ C1] cpu_startup_entry+0x43/0x60 [ 966.173223][ C1] start_secondary+0x101/0x110 [ 966.173241][ C1] common_startup_64+0x13e/0x147 [ 966.173261][ C1] [ 966.375180][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 966.382211][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 966.392994][ T31] Tainted: [L]=SOFTLOCKUP [ 966.397329][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 966.407381][ T31] Call Trace: [ 966.410649][ T31] [ 966.413578][ T31] vpanic+0x56c/0xa60 [ 966.417569][ T31] ? __pfx___schedule+0x10/0x10 [ 966.422410][ T31] ? __pfx_vpanic+0x10/0x10 [ 966.426908][ T31] ? __pfx_console_unlock+0x10/0x10 [ 966.432109][ T31] panic+0xc5/0xd0 [ 966.435822][ T31] ? __pfx_panic+0x10/0x10 [ 966.440250][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 966.445614][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 966.451760][ T31] watchdog+0x1023/0x1030 [ 966.456086][ T31] ? watchdog+0x21a/0x1030 [ 966.460498][ T31] kthread+0x388/0x470 [ 966.464553][ T31] ? __pfx_watchdog+0x10/0x10 [ 966.469217][ T31] ? __pfx_kthread+0x10/0x10 [ 966.473788][ T31] ret_from_fork+0x51e/0xb90 [ 966.478368][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 966.483470][ T31] ? __switch_to+0xc7d/0x1450 [ 966.488229][ T31] ? __pfx_kthread+0x10/0x10 [ 966.492807][ T31] ret_from_fork_asm+0x1a/0x30 [ 966.497574][ T31] [ 966.500970][ T31] Kernel Offset: disabled [ 966.505279][ T31] Rebooting in 86400 seconds..