last executing test programs: 10m34.945305713s ago: executing program 0 (id=2732): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) syz_open_pts(r5, 0x80) ioctl$TCSETSW2(r5, 0x402c542c, 0x0) read(r5, &(0x7f00000002c0)=""/228, 0xe4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) r6 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000000)={0x210a, r7}, 0x0) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r8, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x44) io_uring_enter(r2, 0x3516, 0x0, 0x200000000000000, 0x0, 0xfffffdcf) 10m30.841712207s ago: executing program 0 (id=2740): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f5", 0x2c}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f16700418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b0000e0ca84458033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99", 0x5e}, {&(0x7f0000001400)="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", 0xde5}], 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x30}, 0x40000) prctl$PR_MCE_KILL(0x4e, 0x1, 0xd7bea97be6413782) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x1) landlock_restrict_self(r3, 0x7) landlock_restrict_self(r2, 0x3) landlock_restrict_self(r3, 0x9) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0xa) landlock_restrict_self(r3, 0x1) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r2, 0x6) landlock_restrict_self(r3, 0x5) landlock_restrict_self(r2, 0xe) landlock_restrict_self(r2, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) 10m30.562243484s ago: executing program 0 (id=2742): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000640)=""/42, 0x2a}], 0x2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x9}}]}, 0x20}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000440)={0x20, 0x5, 0x11, "07eccb39332f8c578658960139d1f4901f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m27.426034067s ago: executing program 0 (id=2758): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_normal', 0x143000, 0xb2) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x500000000000000, 0x0, 0x8, 0x8, 0x1, r0, 0x0}]) 10m27.185956373s ago: executing program 0 (id=2760): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10132, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(r4, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_FLOW={0x8, 0xb, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40480d4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x100000000000000}, 0x0) r6 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r6, 0x7a98, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 10m24.338977591s ago: executing program 0 (id=2768): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r2, r2, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={r3}, &(0x7f0000000180)=0x8) r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0x3, 0xb5}, &(0x7f00000000c0), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (rerun: 32) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r7 = epoll_create1(0x80000) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x80000004}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0xa0000001}) (async, rerun: 32) epoll_pwait(r9, &(0x7f0000000600)=[{}], 0x4b, 0x1ff, 0x0, 0x0) (async, rerun: 32) close_range(r6, 0xffffffffffffffff, 0x0) (async) close(r9) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000003100010023bd7000ffdbdf250200000017001d008cf3f434790ebe800d114cfaaa3d27e4138dac001400c802000000000000000000000000000000009b1b07e2185963d984e7a30a98c62eae1a330c2744c2136943279c74a4779c6f78a70040d87f3c7f"], 0x40}, 0x1, 0x0, 0x0, 0x42800}, 0x0) 10m23.25913008s ago: executing program 32 (id=2768): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) tee(r2, r2, 0x8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={r3}, &(0x7f0000000180)=0x8) r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 0x3, 0xb5}, &(0x7f00000000c0), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) (async, rerun: 32) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') (rerun: 32) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r7 = epoll_create1(0x80000) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x80000004}) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)={0xa0000001}) (async, rerun: 32) epoll_pwait(r9, &(0x7f0000000600)=[{}], 0x4b, 0x1ff, 0x0, 0x0) (async, rerun: 32) close_range(r6, 0xffffffffffffffff, 0x0) (async) close(r9) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000003100010023bd7000ffdbdf250200000017001d008cf3f434790ebe800d114cfaaa3d27e4138dac001400c802000000000000000000000000000000009b1b07e2185963d984e7a30a98c62eae1a330c2744c2136943279c74a4779c6f78a70040d87f3c7f"], 0x40}, 0x1, 0x0, 0x0, 0x42800}, 0x0) 3m9.157794831s ago: executing program 4 (id=4178): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) pwritev2(r2, &(0x7f0000001b00)=[{&(0x7f00000000c0)="05", 0x1}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_gettime(0xa, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socket(0x840000000002, 0x3, 0xff) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@deltaction={0xdc, 0x31, 0x300, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0xdc}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', 0x0, 0x0) getpid() socket$pptp(0x18, 0x1, 0x2) ioctl$sock_FIOSETOWN(r3, 0x8901, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x28000, 0x0) ioctl$TIOCEXCL(r4, 0x540c) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x802b, 0x1, @thr={0x0, 0x0}}, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x301600, 0x0) ioctl$SG_IO(r6, 0x2285, 0x0) write$sysctl(r5, &(0x7f0000000100)='5\x00', 0x60) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2) unshare(0x8040480) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 3m4.555256498s ago: executing program 4 (id=4190): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="b40000000000000069105e0000000000040000000000fe009500000000000000df41081ca524461a31fd88f36bb2210cd7d8fe72d741c4fd099f4c4cf3ba118e54500fde67cbd6e7425ef54add7f0e535f"], 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x29, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 3m4.162523636s ago: executing program 4 (id=4193): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/167, 0xa7}], 0x3}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m4.056773298s ago: executing program 4 (id=4194): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r4 = socket$inet(0x2, 0x1, 0x28000000) sendto$inet(r4, &(0x7f00000005c0)="41fac591cc374f1335a50158520518d0c2867bfcf05037550a2acb593531c9080dadb30a1fcc60c0c73dab0acc6b450f8d89e49b1cc928acaa2e96c48ca5fc2b1f5ccc77816bc4c1db6bb09ea3048e53ac6758bcff9130203819a80b15c9709849a85f38b1714d92a0b54ea78c63c86c89bbdd1788123ac7ef3f73d5b69246a341df75ebf09ec228708c15a0f3d46bf1deb4c061b5ecff92d2eda52e02dab04fba7dc2e6e75d969f1a8efbb9ea7133dc306b6922731234ac91d8881818", 0xbd, 0x14004880, &(0x7f0000000680)={0x2, 0x4e23, @empty}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x13) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xd53}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000004c0)=0x2) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000000c0)={"49841ada71cfe011e10532489ef0a3127f9f67568978975321ebdb7108d333a8df648f920da594ae3a327a3f1292465c016dbc5261414bd85acd87473d61390f4bbded57a902b5deb9c23c641914f6b147db6146e946ce31b52ff43219cbc1574ebc8f47d0d2a02b89dc02c49f25471af4f2435dd40d0481fe6f0124e4aa9849c9b8358074976ba0dd502c77e65623e41c8ce041fe7058274e54be3d84f5aa382e9032df7a279d491a51e7480061ebb983305b23e584f6b47af6d615b2f0a182d7c0095f222a4a176472ebbd1021d2eb285ff99ea7601c4e25ecd4c055c59c3964e30b2f8567d69324b6828cc0e9c3528f1f4e27527d98bca370c165bfd88348ca0eb405029367247b738c6cce89e3efd4479d8f2fc7dbd015046860acb8a71106b920b09e661065bf765a03317feb4f54d4382ac41850982313319363b14557a5b8a18d60e425b3db6bcd35b03c810c9d398c9d91902878258419a4b02fc4bdc3b69da6c5c27f5a507005a24a3fef74f0b287c3a4cd1517537dc8cf5cf0efd75c11e803e972ecc24c500cc49001f231f74f7120f55004d5621655ba535c8c8a91d2fec5656526974aef9f08d835f6c3c7c570d047312da759708349121ee9f7078926baa412b4ae8076f6b7f2bf46ffe08878e0281bb42ace8eca796933daf7f65530e30eb6b0695a450e50aea20fcabb5fca187f8ee62b93dee581774cefb953b396e5b8a1e3cc1062b001082aa5a434d9f03407c4239d0fcb779eba5a32f473d142ac92042c2b140f12a0181a4d98a0a5a1c80de2363a80dfc365d26e0332ee63e84500f086fffded2d72500cfb5b3b16aefef5d5808f29e1c572df8af9ca90b714fe6c71a1097e58ccb7945341445d2a0c271f5d15a1462be10d757de7cfd980459469387c5049cebcdb62a24cf04418634944354b4690d4974a26ca113eefe5a71b23aa2fbd989f7b6fcf490ed465f219e70b3397dbc63e21b9d3998c4580570c40a2e75cb6845b34236f5a38dde94ae6fac7a994b21e829bdb618b0910b71608ed7893bc927afa06b1d08d18f684d7972e5467ddfebe1982924658db3e5aee3e443f1cd7017d7a27e6e2620673e9afd67c69ae555ec3e67863f1a9ac7d653d38125f51db870ffa8887c08c455a536d70ea0cae525218e8d06865b553b17bacd52630e4765af1036c834e96c193523d8b3bc399ac296fbe53ed4bd454c669f01cb0915cf9fc03b54d93fbc37ace112d4643c64842b60ee6b979703b6448fe7ddaab8d2fc2d417a12f138d61cc3ca311aa09adbad1a0647a62208ca7f9f2a9e6a6c42e6ae926b15d094886a7d6ae787c8238ab4c235541b1432b9e9407d18a0399dfa98b8ee84ccbe16bf8c30e7cf7071ab10eb8ffb0334d2b91135e3294efd14dd06db46be1032a472cdd54bd015f2937fe3d7d691fa9d0b55a0d5d17a9"}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x8001, 0xc5, 0xc, 0x1001, 0xc, 0xc, 0x0, 0x7fff, 0x1, 0x6, 0xffffffffffffffe3, 0x1, 0x3fd, 0xa, 0xe81, 0x8000000000000000], 0x4, 0xffe5af3657fef2de}) mknod(&(0x7f0000001240)='./file0\x00', 0x4, 0x400) mount$fuseblk(&(0x7f0000001280), &(0x7f00000012c0)='./file0\x00', 0x0, 0x141040, 0x0) lstat(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x3000)=nil, r3, 0x1000002, 0x13, r6, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs2/custom0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x100000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) 3m3.75799633s ago: executing program 4 (id=4199): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000640)=0x1) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000080)={0x281, 0x2}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r6, r5, 0x0, 0x40001) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)}, {&(0x7f0000000840)="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", 0x121}, {&(0x7f0000001400)="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", 0xa36}], 0x3, &(0x7f0000000780)=[{0x30, 0x1, 0xd784, "211a00a5822b81f9e4d7abdbeff0e84c3c14cd293550dfdb262a4e74ce"}], 0x30}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000020004000000000000400000085000000a400000094fffffffffffff82823a0ec96e3da5d7ab9d9662bd03030"], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x63}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/56], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300080000000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004800000000a0060803b0000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000004000000000000000fdff4bd633b6ffff02000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000009000000000000400001020000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) socket$alg(0x26, 0x5, 0x0) 3m2.848264207s ago: executing program 4 (id=4202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x240401) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x80085502, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001b80)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@binder={0x73622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000b80)=""/4096, 0x1000, 0x1, 0x17}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4f, 0x501b01) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0xc1105511, &(0x7f0000000040)) 3m1.871722418s ago: executing program 33 (id=4202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x240401) syz_usb_disconnect(r4) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x80085502, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001b80)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @flat=@binder={0x73622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000b80)=""/4096, 0x1000, 0x1, 0x17}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4f, 0x501b01) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0xc1105511, &(0x7f0000000040)) 14.444472029s ago: executing program 1 (id=4850): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = syz_usb_connect$rtl8150(0x2, 0x1, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_read(r3, 0x81, 0x14, &(0x7f0000000040)=""/20) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)={0x6}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000000c0)={'syzkaller1\x00', @local}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(r7, 0x0, 0x20, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9.98739923s ago: executing program 3 (id=4864): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679c, 0x80, 0x2000006, 0x403ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x4000043, 0x3, 0x3, 0x3}, 0x10) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000002c0)={0xcf, 0x7, 0x5, 0x7, 0x5, 0x0, 0x7, 0x1, 0x9e, 0x2, 0x1, 0x0, 0x8}, 0xe) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c080}, 0x20000090) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x40480d7, 0x1}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20400, 0x4c3524dedc3b6717) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYRES32=r11, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}}, 0x0) fcntl$notify(r8, 0x402, 0x30) io_uring_enter(r3, 0x3516, 0x0, 0xea, 0x0, 0x0) 9.177908355s ago: executing program 6 (id=4866): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x8, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x5c8, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 9.116837802s ago: executing program 1 (id=4867): r0 = socket$alg(0x26, 0x5, 0x0) pwritev2(r0, &(0x7f0000006c00)=[{&(0x7f0000005b40)="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", 0xf00}, {&(0x7f0000006b40)="112fe0a0f90dc0c051e53e51af019fba5e0c13d328d090bd492b73c15e1402c3da2a0b8dcdaa7b141e8c3bd0054dbafaa1ed7bce9de48e2d57b3f44899956759323c0193ab7dbf4bcfb28ca97fdea6", 0x4f}, {&(0x7f0000006bc0)="88aa499d71b5655428176797a3561c596c3d954ec69c4c815a40e010ae0e242d680d302d", 0x24}], 0x3, 0x8, 0x3, 0x15) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000440)}], 0x7}, 0x6}, {{&(0x7f0000001540)=@x25, 0x80, &(0x7f0000001600)=[{&(0x7f00000015c0)=""/29, 0x1d}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001640)=""/199, 0xc7}, {&(0x7f0000001740)=""/75, 0x4b}, {&(0x7f00000017c0)=""/218, 0xda}, {&(0x7f00000018c0)=""/229, 0xe5}, {&(0x7f00000019c0)=""/137, 0x89}], 0x5, &(0x7f0000001b00)=""/186, 0xba}, 0x3ff}, {{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000001f00)=[{0x0}, {&(0x7f0000001d00)=""/206, 0xce}, {&(0x7f0000001e00)=""/112, 0x70}, {&(0x7f0000001e80)=""/105, 0x69}], 0x4, &(0x7f0000001f40)=""/152, 0x98}, 0x8001}, {{&(0x7f0000002000)=@caif=@dbg, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002080)=""/229, 0xe5}, {&(0x7f0000002180)=""/212, 0xd4}, {&(0x7f0000002280)}, {&(0x7f00000022c0)=""/80, 0x50}, {&(0x7f0000002340)=""/220, 0xdc}, {&(0x7f0000002440)=""/205, 0xcd}, {&(0x7f0000002540)=""/99, 0x63}, {&(0x7f00000025c0)=""/196, 0xc4}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x9, &(0x7f0000003780)=""/200, 0xc8}, 0xb}, {{&(0x7f0000003880)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003900)=""/184, 0xb8}, {&(0x7f00000039c0)=""/34, 0x22}, {&(0x7f0000003a00)=""/21, 0x15}, {&(0x7f0000003a40)=""/193, 0xc1}, {&(0x7f0000003b40)=""/190, 0xbe}, {&(0x7f0000003c00)=""/240, 0xf0}], 0x6, &(0x7f0000003d80)=""/169, 0xa9}, 0x2}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000003e40)=""/191, 0xbf}, {&(0x7f0000003f00)=""/6, 0x6}, {&(0x7f0000003f40)=""/153, 0x99}, {&(0x7f0000004000)=""/96, 0x60}, {&(0x7f0000004080)=""/96, 0x60}, {&(0x7f0000004100)=""/19, 0x13}, {&(0x7f0000004140)=""/140, 0x8c}, {&(0x7f0000004200)=""/85, 0x55}, {&(0x7f0000004300)=""/25, 0x19}], 0x9, &(0x7f0000004400)=""/149, 0x95}, 0x9}], 0x7, 0x40000040, 0x0) r1 = io_uring_setup(0x330b, &(0x7f00000002c0)={0x0, 0xddb2, 0x1, 0x503fc, 0x8100014e}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmmsg$inet(r0, &(0x7f0000002280)=[{{&(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000005a40)=[{&(0x7f0000004680)="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", 0x1000}, {&(0x7f0000005680)="9ee2061b772d81e47dd35cb7f7cebf4561500343ef80df13e938d25a52255e1247894ccc0a717e20fc33d7ca5297eb3294fa4f69ceac0060d2401ad423479da7c735ed95f6b697f7b0ae12b5ba2d0ca44278e3980810a75e065a24aa37f54e9bc5f1655a4c081024c9e0854bf0fb16cb36590f54634371d085d7878a270929f3bb3a1188c18c3c2e2046f69b09b746f24083770bf63a6c08be", 0x99}, {&(0x7f0000005740)="20c76e28ca5f44b76ac31741f99d3c543a55fcb9f95efe5cec4fe898d1fa8ada5a3ca0184c6ec41a51f816e0be1cf810ed9ce13b80a8fbefdf269e1ffe312369fe876092f0fe053356bc5d76e66eabeaeaa8c4cc2b2919cc34bf3626b74a3d1e67268869c20d0cd47b72d911fe93f90795b6f7b00b2da6ce8aea68fb456ce57f575993ce958b9bbfd4e5161c9f58e91b81d6c8ad3f5501d81e38ff71057ed3bcefeddd", 0xa3}, {&(0x7f0000005800)="b53f4a9dfc999c9a5f1e2ae18a5af036c652e14cbf073a5bc724397cf13f3b14ade3bb00746fcd8b7cb7b74b575db05661bb8a484da07f40cbbd50135d67aee7bf692a8a4c6a38d6d799ccac95f6e5fee0a9eafdb7a990f88965d69c51fcb31d31cb611453d2f989e14be57f0b03eec7f8491bc29baccc99b01255dbf360599a5037836eb79a5633d52635cc260cc822a7402bdd26c9ff26d4bcef0e4c5a50bc6111d649670eeba4ff43", 0xaa}, {&(0x7f00000058c0)="5aee624a0f5b7bd7e11076dbfcc11af7046d411fa3abf6b2e789c4bbf28e0d712598049c92efe08289b49dd0ebee2812bcdc7d2a99c2d3392e2376b40ac6869cdaa303fee67e782f507164a11e089dd2f03ba711", 0x54}, {&(0x7f0000005940)="936e57b33ae921eaa83c29fd183b4ea551c3942eb9dc16897a283cf6523d8062303dda9713bff3f8c1538f3f589d649b135da89fe6cedc165e9fe6fd226c2c09694ad3560a1d543c46f161fe508d162bea1faa52abfae06a545c2bd293d65f81f46858a3ad4392e340937497b539dc09725a2d1d331840341bd1f4532144512ce7658d52e5a10e6ba629ba69efb47bf43f3d72debdfc2f5ebfe247daaa69cd670c4710f5c1de7336008dddc7c7584b42512691ab47200ae8571eb93319b5d372bcd17f4dcb1552bed4f1636b9e0bf2938e84e1149e152f2f25be945d1fed8b06c0", 0xe1}], 0x6, &(0x7f0000005ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x43f}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x8, 0xa, 0x0, 0x3, [0x401]}, @generic={0x44, 0x4, 'sE'}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf79}}], 0x58}}], 0x1, 0x8015) 8.931979529s ago: executing program 6 (id=4868): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x4) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 8.532570122s ago: executing program 1 (id=4870): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) socket$inet_smc(0x2b, 0x1, 0x0) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r4, 0x10, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="40000000000000000200c9dafccf142c0023000000000000ad589d4373140000000000000000000000000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000d5e7250bc837faad0a52c722d6f05ae441e28c76583bbd700ad679c17992e2ff5edf0e0a0c18d3a437a32071fb238e4cdbbd9f06383bfb84ffc6a5b0d427f7b20500000000000000df7f968eae0d8d9c78775da5b0064c7d2498e1c21bbf30d3c63c004091"], 0x110) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r8, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r9) 8.431041165s ago: executing program 5 (id=4871): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) lsm_get_self_attr(0x69, 0x0, &(0x7f0000001440), 0x6233b6c0c7f7c29d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x3, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004fc0)=ANY=[@ANYBLOB="2000000000000000100100000500004065584e90026834f7cbe2a50c2b9fde0000000000b443"], 0x30}, 0x0, 0x4, 0x1}) io_uring_enter(r3, 0x4203, 0x0, 0x2, 0x0, 0x0) 8.242562796s ago: executing program 3 (id=4872): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x1, 0x0, 0x4) syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x101000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x9}, {0xffff, 0xd}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x32, 0x3}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f00000009c0)={0x0, 0x0, 0xaf, "6c0b336ed01c605569ceccb3b5aab5a3110ae526d63ec3a437b3ffa8e3fa2fd46353b3ec742d4086f04cc2b296910bfa3c38372ac04808e9da49f147e85ca57a94445551c63440d8149514595dcf6a8b8a266dece850f56617a894f7720238303acd440dedde97edb62a908c5c5bbac4ba12c7cb39f24f93b2a74f5b4836a4548620fdb7fa0c6c9bc7dd4c631ab88aeff750f4a8195a296f80bc6e5b636a59110938825f0ff7c673061b124488c5f9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000700)={0x20, 0x83, 0x1, "95"}, 0x0, 0x0}) r7 = socket(0x10, 0x3, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000000080)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'fo\x00', 0x21, 0x0, 0x30}, 0x2c) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r8}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xc}]}, 0x40}}, 0x0) lseek(0xffffffffffffffff, 0xd, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000140)=""/235, 0xeb) 6.346789106s ago: executing program 5 (id=4875): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 5.815386374s ago: executing program 6 (id=4876): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000440000009"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0xfe}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000000000ef210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x4, 0x2) getdents64(r3, 0xffffffffffffffff, 0x43) 5.418506052s ago: executing program 6 (id=4877): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0002000001, 0xfa11, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = syz_usb_connect$rtl8150(0x2, 0x1, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_read(r3, 0x81, 0x14, &(0x7f0000000040)=""/20) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r5 = open(0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000100)={0x6}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000000c0)={'syzkaller1\x00', @local}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(r7, 0x0, 0x20, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.998851646s ago: executing program 3 (id=4878): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)={0xa, {0x5, 0x7, 0x10001, 0x8}}) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x1, 0x20001, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = syz_usb_connect(0x4, 0x3f, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRESOCT=r1, @ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRESDEC=r3, @ANYRES8, @ANYRESHEX, @ANYRESDEC=r0], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x80015b1a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x28, 0x12, 0x0, 0x5, 0x0, 0x25dfdbfe, {0x7, 0x0, 0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0xc, 0xe8, 0x0, 0x1, [@typed={0x8, 0x3f, 0x0, 0x0, @u32=0x101}]}]}, 0x28}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_mreqn(r7, 0x0, 0x24, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:10 1', 0x19) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000000101040000000000000000020000000800154000000064240001801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x50}}, 0x40c0) r9 = syz_usb_connect$uac1(0x1, 0xdc, &(0x7f0000000200)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x80000006}, 0x1c, 0x0}}], 0x1, 0x40000000) syz_usb_control_io$uac1(r9, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r9, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f00000012c0)={0x2c, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0xf87, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f510000fe8000000000000000000000000000aafe800000000000000000000000006b9fa1417217"], 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.764510044s ago: executing program 2 (id=4879): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xfffffdf7, &(0x7f00000005c0)={&(0x7f00000000c0)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x2, 0x104) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44020000", @ANYRES16=r1, @ANYBLOB="040001040000000000006700000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x40040}, 0x800) 4.425825365s ago: executing program 2 (id=4880): r0 = socket$alg(0x26, 0x5, 0x0) pwritev2(r0, &(0x7f0000006c00)=[{&(0x7f0000005b40)="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", 0xf00}, {&(0x7f0000006b40)="112fe0a0f90dc0c051e53e51af019fba5e0c13d328d090bd492b73c15e1402c3da2a0b8dcdaa7b141e8c3bd0054dbafaa1ed7bce9de48e2d57b3f44899956759323c0193ab7dbf4bcfb28ca97fdea6", 0x4f}, {&(0x7f0000006bc0)="88aa499d71b5655428176797a3561c596c3d954ec69c4c815a40e010ae0e242d680d302d", 0x24}], 0x3, 0x8, 0x3, 0x15) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000440)}], 0x7}, 0x6}, {{&(0x7f0000001540)=@x25, 0x80, &(0x7f0000001600)=[{&(0x7f00000015c0)=""/29, 0x1d}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001640)=""/199, 0xc7}, {&(0x7f0000001740)=""/75, 0x4b}, {&(0x7f00000017c0)=""/218, 0xda}, {&(0x7f00000018c0)=""/229, 0xe5}, {&(0x7f00000019c0)=""/137, 0x89}], 0x5, &(0x7f0000001b00)=""/186, 0xba}, 0x3ff}, {{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000001f00)=[{0x0}, {&(0x7f0000001d00)=""/206, 0xce}, {&(0x7f0000001e00)=""/112, 0x70}, {&(0x7f0000001e80)=""/105, 0x69}], 0x4, &(0x7f0000001f40)=""/152, 0x98}, 0x8001}, {{&(0x7f0000002000)=@caif=@dbg, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002080)=""/229, 0xe5}, {&(0x7f0000002180)=""/212, 0xd4}, {&(0x7f0000002280)}, {&(0x7f00000022c0)=""/80, 0x50}, {&(0x7f0000002340)=""/220, 0xdc}, {&(0x7f0000002440)=""/205, 0xcd}, {&(0x7f0000002540)=""/99, 0x63}, {&(0x7f00000025c0)=""/196, 0xc4}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x9, &(0x7f0000003780)=""/200, 0xc8}, 0xb}, {{&(0x7f0000003880)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003900)=""/184, 0xb8}, {&(0x7f00000039c0)=""/34, 0x22}, {&(0x7f0000003a00)=""/21, 0x15}, {&(0x7f0000003a40)=""/193, 0xc1}, {&(0x7f0000003b40)=""/190, 0xbe}, {&(0x7f0000003c00)=""/240, 0xf0}], 0x6, &(0x7f0000003d80)=""/169, 0xa9}, 0x2}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000003e40)=""/191, 0xbf}, {&(0x7f0000003f00)=""/6, 0x6}, {&(0x7f0000003f40)=""/153, 0x99}, {&(0x7f0000004000)=""/96, 0x60}, {&(0x7f0000004080)=""/96, 0x60}, {&(0x7f0000004100)=""/19, 0x13}, {&(0x7f0000004140)=""/140, 0x8c}, {&(0x7f0000004200)=""/85, 0x55}, {&(0x7f0000004300)=""/25, 0x19}], 0x9, &(0x7f0000004400)=""/149, 0x95}, 0x9}], 0x7, 0x40000040, 0x0) r1 = io_uring_setup(0x330b, &(0x7f00000002c0)={0x0, 0xddb2, 0x1, 0x503fc, 0x8100014e}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmmsg$inet(r0, &(0x7f0000002280)=[{{&(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000005a40)=[{&(0x7f0000004680)="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", 0x1000}, {&(0x7f0000005680)="9ee2061b772d81e47dd35cb7f7cebf4561500343ef80df13e938d25a52255e1247894ccc0a717e20fc33d7ca5297eb3294fa4f69ceac0060d2401ad423479da7c735ed95f6b697f7b0ae12b5ba2d0ca44278e3980810a75e065a24aa37f54e9bc5f1655a4c081024c9e0854bf0fb16cb36590f54634371d085d7878a270929f3bb3a1188c18c3c2e2046f69b09b746f24083770bf63a6c08be", 0x99}, {&(0x7f0000005740)="20c76e28ca5f44b76ac31741f99d3c543a55fcb9f95efe5cec4fe898d1fa8ada5a3ca0184c6ec41a51f816e0be1cf810ed9ce13b80a8fbefdf269e1ffe312369fe876092f0fe053356bc5d76e66eabeaeaa8c4cc2b2919cc34bf3626b74a3d1e67268869c20d0cd47b72d911fe93f90795b6f7b00b2da6ce8aea68fb456ce57f575993ce958b9bbfd4e5161c9f58e91b81d6c8ad3f5501d81e38ff71057ed3bcefeddd", 0xa3}, {&(0x7f0000005800)="b53f4a9dfc999c9a5f1e2ae18a5af036c652e14cbf073a5bc724397cf13f3b14ade3bb00746fcd8b7cb7b74b575db05661bb8a484da07f40cbbd50135d67aee7bf692a8a4c6a38d6d799ccac95f6e5fee0a9eafdb7a990f88965d69c51fcb31d31cb611453d2f989e14be57f0b03eec7f8491bc29baccc99b01255dbf360599a5037836eb79a5633d52635cc260cc822a7402bdd26c9ff26d4bcef0e4c5a50bc6111d649670eeba4ff43", 0xaa}, {&(0x7f00000058c0)="5aee624a0f5b7bd7e11076dbfcc11af7046d411fa3abf6b2e789c4bbf28e0d712598049c92efe08289b49dd0ebee2812bcdc7d2a99c2d3392e2376b40ac6869cdaa303fee67e782f507164a11e089dd2f03ba711", 0x54}, {&(0x7f0000005940)="936e57b33ae921eaa83c29fd183b4ea551c3942eb9dc16897a283cf6523d8062303dda9713bff3f8c1538f3f589d649b135da89fe6cedc165e9fe6fd226c2c09694ad3560a1d543c46f161fe508d162bea1faa52abfae06a545c2bd293d65f81f46858a3ad4392e340937497b539dc09725a2d1d331840341bd1f4532144512ce7658d52e5a10e6ba629ba69efb47bf43f3d72debdfc2f5ebfe247daaa69cd670c4710f5c1de7336008dddc7c7584b42512691ab47200ae8571eb93319b5d372bcd17f4dcb1552bed4f1636b9e0bf2938e84e1149e152f2f25be945d1fed8b06c0", 0xe1}], 0x6, &(0x7f0000005ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x43f}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x8, 0xa, 0x0, 0x3, [0x401]}, @generic={0x44, 0x4, 'sE'}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf79}}], 0x58}}], 0x1, 0x8015) 4.387474671s ago: executing program 2 (id=4881): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) connect$l2tp(r4, &(0x7f0000000380)={0x2, 0x0, @multicast1, 0x2}, 0x10) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f00000003c0)={0x2, 0x5623, @rand_addr=0x64010105}, 0x10) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x1300, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) 4.378419222s ago: executing program 5 (id=4882): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) 4.100375763s ago: executing program 5 (id=4883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) 4.042527305s ago: executing program 2 (id=4884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3.906628141s ago: executing program 1 (id=4885): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000600)=""/243, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000b32000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0xfffffffffffffd43, 0x3, 0xfffffffb}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000084}, 0x2000400c) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000200)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r7, 0x3b72, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000001c0000000002000001"]) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) 3.710698114s ago: executing program 5 (id=4886): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x400) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x1, 0x4) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2.617152925s ago: executing program 5 (id=4887): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) unshare(0x2040400) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_mtu(r2, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) get_mempolicy(0x0, 0x0, 0x180000, &(0x7f0000ffc000/0x4000)=nil, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x101380) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "f861", 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1231079e, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@mcast2, @loopback, [0xffff00, 0xff0000ff, 0x0, 0xff], [0xff, 0x0, 0xffffffff, 0xffffffff], 'vxcan1\x00', 'vlan1\x00', {}, {}, 0x88, 0x80, 0x3, 0x11}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x4, 0x0, 0xa3, {0x4}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 2.166008462s ago: executing program 6 (id=4888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r4 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={0xffffffffffffffff, r4, 0x1c, 0x0, @void}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x3f, 0x0, 0x0, 0x80, 0x5, 0x7, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5, r6], 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.767866323s ago: executing program 3 (id=4889): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20f39, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x1401, 0xffffffffffffffff, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x49, 0x4000, @fd_index=0x5, 0x4, 0x7, 0x1, 0x16, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x216437359a05d0e7, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x2, 0xae3, &(0x7f0000000280)="051dc21e1d8eb7e00b6e4e426d5be2db19c6695f0ac6da90", 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000006, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000780)={0x100000000, 0x220, "f5b8ec3b4ea8a3341d568c534716d3bf76f277868a27d006251e00", 0x5, 0x0, 0x3, 0xf3, 0xffffff7f, 0xf8000000, 0x9, 0x38970d6, [0x1, 0x5, 0xf, 0x3]}) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x10, 0x1, 0x9, 0x7, 0x2, 0x2, 0x3ff, 0x6}, 0x0) keyctl$revoke(0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', '', [], 0xa, "c7bb1b9d0398d1e784d82bc51615252d9e7e15f19637b5a408ac648b63dda23e06fb788e15cb503183f9fe621d850c9f8ebed3a82184a484d256cc15bfd98c8e3aa8711a3ee50a19838b2b85ed33b4f8603625bbaf6fa7d32b119b"}, 0x5f) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2801, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@gettaction={0x58, 0x32, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x84) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x148, 0x43, 0xa0, 0x148, 0x98, 0x258, 0x178, 0x178, 0x258, 0x178, 0x49, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010101, 0xff, 0x0, 'netpci0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x1, 0x3}, 0x12a, 0x98, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@state={{0x28}, {0xfffffffe}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x0, 0x5, '\x00', 'syz1\x00', {0xd063}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@addrtype={{0x30}, {0x4, 0x810, 0x0, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xb661, 0x2, 0x5, 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6e) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001480), 0x8002, 0x0) ioctl$FBIOGETCMAP(r7, 0x4604, &(0x7f0000001580)={0x7, 0x1, &(0x7f00000014c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socket$netlink(0x10, 0x3, 0x0) 1.672036683s ago: executing program 2 (id=4890): pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet6(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x45f}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000000)={0x3, 'vlan0\x00', {0x9}, 0x7}) r5 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r5], 0x0) 1.62724716s ago: executing program 1 (id=4891): r0 = socket$alg(0x26, 0x5, 0x0) pwritev2(r0, &(0x7f0000006c00)=[{&(0x7f0000005b40)="57de2bff2d827bb7b3b592bb68a5a4c39df4e7d641a42c7b6ec8a613fa0b3278e19c173e9b2b12c486b90a71d5dc6bc44493f22574231f882fc31fc8e7c084227ca7227b713a50783fe6a9d5ea649891cc27560eab8d9fcc66a5580f36b46bd3551179d31a3fc85f78134a778aa9c455a5e02783946684119c3f995b977ac433b4aa0f93296c9e154aaf73f72d9f15ec45e5b27c34776f1f896a2f5f21f0451e2e8bb4a3217aaa2ee5b7b63ad4e1563beee03b9d4acbb2d0c0677a699dcbd32ab44fc6ea4253276fdedc5f8a5ae1e78207ef23b891cf79bd008d991910a7bed1d63f38f81f3caf7d920f748760ae81cfec70e6c8c17431b16bed27782477a6ca1703807c86b1621682ed5ecbddf1b5616a5adc117da5b2cb291756b0c3057795ff4405253523389bd222028f34e4b36ea1dfb5528c417cd658b573e7885f5794013ae630a5d7545c62c6d6debcdf82d8b1bb00bfdf0c4ead21dfcc77b201c23778c94ac33ab5f7e99fbdb0766472fa5d35546207e9452ae70acbbe4458f4fd20817873fee3155bec6940edddee7abb57a84b60496f32dff94268e38b3762bbe7e19807f7ce605fd4addb50d06d8d976ed8987b681f16b9e7a0c375b36933a13883c98ba46ab2d7f9e0b52958dcd3cc60087b171e3585a44e018a247f944339053c3a08d88b048b4a3c4d58af6bce7baf3442dd44eab2cb335fa6ae8ab68fd440634a8fd354c7357356189be5fff4db392ef06f8b3ce7a49a76c9ce115e050a433a139031b45995c8894667e377906e74ae53b84b21cb2b835466f4a49fde381fb9d8b14901b4f8cc2de6ebc27a9699ddeae4ffc3588e36ca0622dd41f743a6d9b7dcba2d425ac40163b39a351d57c5602b609f8c68673065b246d0aa8196eadcf94c92fd32fc09b1a1153c9321c4b841b4739de821039d8bb08908d59d739c37ffcac6d183c0ab1fdfeb3eceefd0f3870f37a7b3846d2cc67a05eb8685d960ed80516b95a8e87531faea3bff5c2e884618aa4c1f0befc374397a11c0d2a007800b180f408bd49aeffd7481521faa2f7eebeeb73c50fb2415b56bad7aa0b1edaa3be8e6febe95e1b0eb16e0826b0dcbc3219fe7da9e0698f5dad18238b1d31f8f88f4dab1de63578276d55329f3458712325ecb22002e1695552360778a366145b3e74bd788d049bd92c9ee545221ad248f9fa172bd326563ba555e10392060b0e06a608574bba5b9b864edba33ada4103393ee38d3f425ed19ba645d3a94ecc4a43185d5afa0020388b4d6058e34058cbcae9f1e3fafd2626614fcc5f27858ba7c9aa343c0756000518767c5b41f4b4ef2ff8aa5ded16ecdfeac63f0cfb2076b515afbe2687b56cc832a7c50f980379541e25954dad2d080fcb92f94f45a4f09be8ca8303566dc2cb42757003b8df8afcb6b617e736bcddd58e000b9b4da911017f2e5859db0cfd1f0063c1b073720c542b6510514787d827461ca4ab50c454e8cac43528c76ff78ab03295e0c7d34280b9f130f3783b1590d9b55e86c2d4bc34c3b3657278c7953e2aed2cb4606e69587902b368a5304a9644053a4e42761106f1f73f53af2a5bc7c553a5e0514598fa150f59c6d18551b8387764bbf3ef0df23c4c5a29168bdae34809ddbeda8099a185c7da6a1da2356697c5875e3c654be656ef7a0d3377c004952d6765c8c55429e7b5efcd2f74066222ec95f085af8022bac2dcd00a3d2d18198e18047941332ccf1e6634999e1081254d5fde7e45c30e1d4e08c51e4837195394c5158ad9b037c5c75ca33d2f28db6bdfcf573d8c4f87a923de43f1e8aacc996aff089a762a048bfa56af2c97649d7db8dc1f46724a017ad4cf9ed8aaa786daf6126783e535ef8d9cc4f4250ea39f2bcc4fcff13fd3f411ae09fe4d273afce8fed74929bab37b1037887524ba12ebf9028727d33b0217d6d8feacc6b04efbf44c2bfb2afeb83af56fa12fbd2e8808dfe8eeb3225a4e2847b02d400c59bccf1d7b069914750233defe7c5d1a8fd12d294f827114eedbc8163340577ea98b62058d1ab9690ebe35e06e0b5d3389b3655a8631097bd3c36adfe01d2b777b0f8ca10e9fc0dad6b2c961ae500c22591ec8be5f51b153358b86451c796034b9c6abde9596432ec7119df81f21f3b2447ea8591ff3fc9b167179e209f353f93d343141e82b014bf27b7f804381bb6adeb88582d867ea39013b4fb43a10ee64996fa74532c86412cfd6682710226ccbd0aa7319d445580c74711eaa10901b61e7d9e604abc0089f7c3c9aaa299530ab1afcb90ce48a14f24acc32997891537211d9234fbab2faa9df9f3d8ce73a36349ee78518a8f78ccf7fe772ff3a98688fb4b9384b75c9a68664eaf81978a3958b21fa86746bf1c96dc0a9c5f74460e524afbe0c1a4603e2ef7e3754dad9abe597b93fdf774fdb5d3f8a15a03d2fb1ba878f5178b90066925f14cdd87a39b6feb0d923380415ca83afe8c8ff05bbd76687fd4c56c28c1e3c41ece7015e1f7687127a206e6165e3d2a86abd687d721c657b724903d5c085bcb1ef40592fc1c722d80f9f672de7d8a0b0dc1536425d238bf897f6c213aadcd13b6c3dfa6e1a6eba7c752a84e4951136a9e5cdf3a63fd540b502fa0e17eee9c021ccbc46e5f6c3cd4a8ac335c5c3f30d84eef3d5be787d871945e79613fbed248b1c5f483cf017bdead6bf46ec1bc9f97cf3d11a124c8612e0dc25b28b2b007b62055f651fc42ebd772353e5049b35cae66a68fc961376f0bcb61ed3754bb52b84213bca0d7fb985af479ba70e917dd72df1961e3dc98662a5d6b5342b934af64be7b51b1fde4f7ee90f983161a7c398ec9d3d05989779b3586d9840b30aaedef8a21c97ed7218e1f6692a6596450d332b1db50d449e76f5209dec35eb7c2f5cd166a0adc688cf5fff2ed7a38a06c9f180855a10493ced4e9dd79c4065bda8a387739586d4925945e50750a521755c2016b6e28306d77aa3744310f91a7ad84ffdcb73c602d823878523ab531e0bdb74e6a3369e40e95acd0a7ecc051de0d54ef0006e84294033d865d1db7a6e8be61635c66c03824dee7c574a7df489a48fecb9435c082a44b941f39b5f4f86c0731cffd3140985afdf80a541095890c493c53712f503162b44120bb97f2bc80f50a7664063d532aec32ba7886aeb61c19c17a6bd2f2305680fbb018d6bcddd13201a66336ab455b846cf339237d3a73b4e59fdc785568e4c3d04d542f40caca4d41cafa27803ec4e674d81a47534bb9a37ecb162728fd6f0740eae606d5385b6d95ed6f716ddcd884356df409790b3f09919164e6dc45a003bae17c11f90563041588c4062ab42ac08e133215e23313fa19e1cfdc830a28d5e8d1da4a1826f0e4d80aabb23f1382f3d9ef9de278113a3c89d64270c6650080c22cc99d5f9fcf691962b1536a0d14cdc2c605ca3ef154b5d118273c0ca2de1085af171df62999adb39c287470237ff856e44fd99672e7090a4e9ac29f9f0497d2a1b6876df2c83d228b43af8b38b83b26d67f34f8317b533ebc3c59890d55a6cbe0256cf57073bbb191b77c7316f8b8ae097374fe6e8ed9e821fc5a87a788465bdf287874c6edcf624b456c42b69f53ce9baf426794851c0584ddb6c858395d416851d5b83d6396155de4770a0595d6329e563a498f6c0ad25368c1226ac1cf72c666781f938778985b64353f66bd3c3841ba001d29b051f4a0aa8e8502d5b9dff5a5d96e4783e62ccbbc1fb1ccf19828f2af9da8d0e8e6b2ef75b58fa7a077f3ccdd181b197eda54912be4755a34d469a0a58ea4bb7959a1909c09c1b333a82b123c0f1c554716b73d864f6d7a1a8847c9e127af9ed71dad8f5464d49ea6b770a81f040b77309e57758204a6ae35b067798d77d84b001d2c22912bf1203cf6c184f337dbe1f0ddb69b22fc91aeeb3d6b3f8705b58fb8718746c678fe17618cd8e8be676d6b76c0a9e6533cf2e2a58151aff0be0180102a22d47b969ea56be1748a33a1fee7898f93698a1a0af3446b17b9ef008bd45724108130d6a7618691874b7412181ac16db1358a14067dee2ec3aceae4b292486c1875d3b99e23298d8a8d70facae776f21beec82bcc49e84992f93cf92527ea02b142f3e51c21d431820ff984d5043d7dd32260e292672bd5e5e7d557235a23106bb9770829155defb5e5b29e9407bf8fe26696c6bdec73c2bc5e271e42305061f886190959964f035a2114fa4ea082b02859429378569180a70e8b971645b3b9759ae64869a72ef8dd3117ec17a7b5197fdd76fc3906edffbdc64e32282f97c1f5ddd72f9e6fbe71ed835d7e2f4f3d6c0eb0ba379b7d10b87027c155d95475810e43a8f2dcf77a772208365db0cabe32b6668307cf57e092b8f3bf2bd37a3ac84ccfc2142760990f4c3d26e470fe9008b5c8fea4eda01a349afabf7381a6f3aa8ead8f12bb8ec4490deb245eaba061abb85ee116703e76f82939cfd78e50047c76f8a5918305a729b2e4cff43788bd006096bafdeab2f707cfd9494213420f0fd13ce3824c53379e9c4c60f5eaabd3bb6bd0eeb66ee652963070e5cfc84458b3308df41bc993a553b762379665c6167c2db4a5cbd54a2e78f50abfbdcb3686359f9d0ed13b18ce854c8427a6b09520084aa07e5ba39e7c979982bfbba7910156a91be738af6daf1811f9d66b8770464efe7b2c44a9b8f8053acfab0d1c076deafb62158ed5423580608f2bcdcd09f3ccf791484fa012a8e1f1af800fa8b1e7ea55479275270b4da216ab2a9a0dc357f1636ecc54c2139d044fd442db732970184e7c40fdbb4f2cf21d58612ddef7679c90e1ea82f4600f15f8fda926dfbbcb847f33f57fbbdb1fea825cdbcebf18e097e50113af84c871bee3a1e45ac98eadce82916d625f71437e5244eb625dd5afc0455c51ea003b81fa4a863013883317eb313f898dd99773dc23a06ab0b73f3773a2f8b9c165b2dc374cf35c5dbd50c9c8bf2099c2ecaa7cb188ef8f94c108b45a580080a13867eeb36d22db4a01d3a58bc1c1a9a771018d327d4c2153c36720e4bc40e2a424232f6b763918199bd7d13ed4188486daf9bc53274fc9f9ad9fb795443ef68ee567c2dc8feb27421380c36867dddab2f7cf0a8513099c97b75eca67c8cc43cb7c140a0a6965dd53c9a4854cce3a9e6bc381848b88ad52722ab1957ec909b4dc7bcb079d1adead3b81537976e039d4c6796ed8321e2f5b5af09ded81ea023bc4d69c6dd7de4288af48fae12c67a8163b101dd7bdfb098554595997639680355a0279a5dd7812b76c08517f3e6ed46e0c79c5848fe66fe4dbb3eadecf4a1256facb508f9c16f278f800bbbbae6c478a3cc70cdc8f1c1ce893e57b502a5f7a1e8475e4b14c8ad232a3d6d01886973c82cdf470068bffcd18c6f5d48f115bb078188d", 0xf00}, {&(0x7f0000006b40)="112fe0a0f90dc0c051e53e51af019fba5e0c13d328d090bd492b73c15e1402c3da2a0b8dcdaa7b141e8c3bd0054dbafaa1ed7bce9de48e2d57b3f44899956759323c0193ab7dbf4bcfb28ca97fdea6", 0x4f}, {&(0x7f0000006bc0)="88aa499d71b5655428176797a3561c596c3d954ec69c4c815a40e010ae0e242d680d302d", 0x24}], 0x3, 0x8, 0x3, 0x15) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/5, 0x5}, {&(0x7f0000000280)=""/217, 0xd9}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000440)}], 0x7}, 0x6}, {{&(0x7f0000001540)=@x25, 0x80, &(0x7f0000001600)=[{&(0x7f00000015c0)=""/29, 0x1d}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001640)=""/199, 0xc7}, {&(0x7f0000001740)=""/75, 0x4b}, {&(0x7f00000017c0)=""/218, 0xda}, {&(0x7f00000018c0)=""/229, 0xe5}, {&(0x7f00000019c0)=""/137, 0x89}], 0x5, &(0x7f0000001b00)=""/186, 0xba}, 0x3ff}, {{&(0x7f0000001bc0)=@rc, 0x80, &(0x7f0000001f00)=[{0x0}, {&(0x7f0000001d00)=""/206, 0xce}, {&(0x7f0000001e00)=""/112, 0x70}, {&(0x7f0000001e80)=""/105, 0x69}], 0x4, &(0x7f0000001f40)=""/152, 0x98}, 0x8001}, {{&(0x7f0000002000)=@caif=@dbg, 0x80, &(0x7f00000036c0)=[{&(0x7f0000002080)=""/229, 0xe5}, {&(0x7f0000002180)=""/212, 0xd4}, {&(0x7f0000002280)}, {&(0x7f00000022c0)=""/80, 0x50}, {&(0x7f0000002340)=""/220, 0xdc}, {&(0x7f0000002440)=""/205, 0xcd}, {&(0x7f0000002540)=""/99, 0x63}, {&(0x7f00000025c0)=""/196, 0xc4}, {&(0x7f00000026c0)=""/4096, 0x1000}], 0x9, &(0x7f0000003780)=""/200, 0xc8}, 0xb}, {{&(0x7f0000003880)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003900)=""/184, 0xb8}, {&(0x7f00000039c0)=""/34, 0x22}, {&(0x7f0000003a00)=""/21, 0x15}, {&(0x7f0000003a40)=""/193, 0xc1}, {&(0x7f0000003b40)=""/190, 0xbe}, {&(0x7f0000003c00)=""/240, 0xf0}], 0x6, &(0x7f0000003d80)=""/169, 0xa9}, 0x2}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000003e40)=""/191, 0xbf}, {&(0x7f0000003f00)=""/6, 0x6}, {&(0x7f0000003f40)=""/153, 0x99}, {&(0x7f0000004000)=""/96, 0x60}, {&(0x7f0000004080)=""/96, 0x60}, {&(0x7f0000004100)=""/19, 0x13}, {&(0x7f0000004140)=""/140, 0x8c}, {&(0x7f0000004200)=""/85, 0x55}, {&(0x7f0000004300)=""/25, 0x19}], 0x9, &(0x7f0000004400)=""/149, 0x95}, 0x9}], 0x7, 0x40000040, 0x0) r1 = io_uring_setup(0x330b, &(0x7f00000002c0)={0x0, 0xddb2, 0x1, 0x503fc, 0x8100014e}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) sendmmsg$inet(r0, &(0x7f0000002280)=[{{&(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000005a40)=[{&(0x7f0000004680)="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", 0x1000}, {&(0x7f0000005680)="9ee2061b772d81e47dd35cb7f7cebf4561500343ef80df13e938d25a52255e1247894ccc0a717e20fc33d7ca5297eb3294fa4f69ceac0060d2401ad423479da7c735ed95f6b697f7b0ae12b5ba2d0ca44278e3980810a75e065a24aa37f54e9bc5f1655a4c081024c9e0854bf0fb16cb36590f54634371d085d7878a270929f3bb3a1188c18c3c2e2046f69b09b746f24083770bf63a6c08be", 0x99}, {&(0x7f0000005740)="20c76e28ca5f44b76ac31741f99d3c543a55fcb9f95efe5cec4fe898d1fa8ada5a3ca0184c6ec41a51f816e0be1cf810ed9ce13b80a8fbefdf269e1ffe312369fe876092f0fe053356bc5d76e66eabeaeaa8c4cc2b2919cc34bf3626b74a3d1e67268869c20d0cd47b72d911fe93f90795b6f7b00b2da6ce8aea68fb456ce57f575993ce958b9bbfd4e5161c9f58e91b81d6c8ad3f5501d81e38ff71057ed3bcefeddd", 0xa3}, {&(0x7f0000005800)="b53f4a9dfc999c9a5f1e2ae18a5af036c652e14cbf073a5bc724397cf13f3b14ade3bb00746fcd8b7cb7b74b575db05661bb8a484da07f40cbbd50135d67aee7bf692a8a4c6a38d6d799ccac95f6e5fee0a9eafdb7a990f88965d69c51fcb31d31cb611453d2f989e14be57f0b03eec7f8491bc29baccc99b01255dbf360599a5037836eb79a5633d52635cc260cc822a7402bdd26c9ff26d4bcef0e4c5a50bc6111d649670eeba4ff43", 0xaa}, {&(0x7f00000058c0)="5aee624a0f5b7bd7e11076dbfcc11af7046d411fa3abf6b2e789c4bbf28e0d712598049c92efe08289b49dd0ebee2812bcdc7d2a99c2d3392e2376b40ac6869cdaa303fee67e782f507164a11e089dd2f03ba711", 0x54}, {&(0x7f0000005940)="936e57b33ae921eaa83c29fd183b4ea551c3942eb9dc16897a283cf6523d8062303dda9713bff3f8c1538f3f589d649b135da89fe6cedc165e9fe6fd226c2c09694ad3560a1d543c46f161fe508d162bea1faa52abfae06a545c2bd293d65f81f46858a3ad4392e340937497b539dc09725a2d1d331840341bd1f4532144512ce7658d52e5a10e6ba629ba69efb47bf43f3d72debdfc2f5ebfe247daaa69cd670c4710f5c1de7336008dddc7c7584b42512691ab47200ae8571eb93319b5d372bcd17f4dcb1552bed4f1636b9e0bf2938e84e1149e152f2f25be945d1fed8b06c0", 0xe1}], 0x6, &(0x7f0000005ac0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x43f}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x8, 0xa, 0x0, 0x3, [0x401]}, @generic={0x44, 0x4, 'sE'}, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf79}}], 0x58}}], 0x1, 0x8015) 1.469310787s ago: executing program 1 (id=4892): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) r1 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='xcnAr\xe7lo_\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='name', &(0x7f0000000140)='ccnA\xf6gr\xe7lo.', 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2, &(0x7f0000000880)={0x59a, {{0xa, 0x4e24, 0x0, @mcast1, 0x4}}, {{0xa, 0x4e20, 0xaef, @remote}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000004000070128bd700000000000047c00002400427902000000000000de78145a96f8fe46ca911ab98fcf0c00018006000600800a00"/68], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0x20004021) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = fsopen(&(0x7f0000000080)='exfat\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r8 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000080)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e1f, 0x0, 0x2}, {0xfffffffffffffffd, 0xb, 0x4, 0x400, 0x8001, 0x4, 0x0, 0xd3d}, {0x0, 0x200000000000000, 0x0, 0x3}, 0x7ffffffd, 0x1, 0x1}, {{@in6=@remote, 0x4d6, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x1, 0x0, 0x0, 0x0, 0x2c19}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x4f6, &(0x7f0000000400)={0x0, 0x15a7, 0x10, 0x0, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r9, 0x47bc, 0xf5, 0x0, 0x0, 0xfffffffffffffe61) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000001140)='\xeeo\x00\x00\x00}\'\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.318127085s ago: executing program 3 (id=4893): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) 1.247421082s ago: executing program 3 (id=4894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r3 = socket$netlink(0x10, 0x3, 0xc) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/20, 0x14}], 0x1, 0x9, 0x32a) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) shutdown(r0, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r6 = epoll_create(0x200004) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0xb0000009}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000340)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) umount2(&(0x7f0000000300)='./file0\x00', 0x4) umount2(&(0x7f0000000240)='./file0\x00', 0x4) accept4(r4, 0x0, &(0x7f0000000140), 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a003d00040000800400", @ANYRES32=r8], 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x8a0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0xd}, {0x6, 0x7}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x40c0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 735.573993ms ago: executing program 6 (id=4895): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0xfb, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x404cc01}, 0x20080000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000000)={0x5, 0x1, 0x8, 0xd69a}, 0x10) 0s ago: executing program 2 (id=4896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) kernel console output (not intermixed with test programs): rejected, failed to enable media [ 1405.047468][T23458] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4308'. [ 1405.057266][T23459] loop6: detected capacity change from 0 to 2560 [ 1405.070840][T23459] buffer_io_error: 48 callbacks suppressed [ 1405.070861][T23459] Buffer I/O error on dev loop6, logical block 0, async page read [ 1405.161055][T23458] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4308'. [ 1405.193632][T23459] Buffer I/O error on dev loop6, logical block 0, async page read [ 1405.319725][T23458] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1405.350850][T23459] Buffer I/O error on dev loop6, logical block 0, async page read [ 1405.358815][T23459] Buffer I/O error on dev loop6, logical block 0, async page read [ 1405.468209][T23459] Buffer I/O error on dev loop6, logical block 0, async page read [ 1405.481099][T23459] Buffer I/O error on dev loop6, logical block 0, async page read [ 1405.481171][T23459] Buffer I/O error on dev loop6, logical block 0, async page read [ 1405.481208][T23459] Buffer I/O error on dev loop6, logical block 0, async page read [ 1405.481227][T23459] ldm_validate_partition_table(): Disk read failed. [ 1405.481259][T23459] Buffer I/O error on dev loop6, logical block 0, async page read [ 1405.481291][T23459] Buffer I/O error on dev loop6, logical block 0, async page read [ 1405.481341][T23459] Dev loop6: unable to read RDB block 0 [ 1405.481512][T23459] loop6: unable to read partition table [ 1405.481728][T23459] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1407.226017][ T30] audit: type=1326 audit(1773078590.163:4534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23490 comm="syz.3.4317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3a339c799 code=0x0 [ 1407.646353][T23506] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4320'. [ 1407.830545][ T29] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1408.046918][ T29] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 1408.058549][ T29] usb 2-1: config 0 has no interface number 0 [ 1408.068629][ T29] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1408.079644][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.116650][ T29] usb 2-1: Product: syz [ 1408.129627][ T29] usb 2-1: Manufacturer: syz [ 1408.144425][ T29] usb 2-1: SerialNumber: syz [ 1408.169791][ T29] usb 2-1: config 0 descriptor?? [ 1408.191182][ T29] i2c-tiny-usb 2-1:0.4: version 6d.cc found at bus 002 address 008 [ 1408.279281][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4322'. [ 1408.288814][T23515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4322'. [ 1408.337055][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4322'. [ 1408.349214][T10660] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.433425][T23515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4322'. [ 1408.443448][T10660] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.477463][T23519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4322'. [ 1408.557097][T10660] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.569305][T10660] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1408.598977][ T29] (null): failure reading functionality [ 1408.613242][ T29] i2c i2c-11: connected i2c-tiny-usb device [ 1408.813298][ T29] usb 2-1: USB disconnect, device number 8 [ 1408.864040][T23539] tipc: Enabling of bearer rejected, failed to enable media [ 1408.920608][T23539] loop6: detected capacity change from 0 to 2560 [ 1408.927953][T23539] ldm_validate_partition_table(): Disk read failed. [ 1408.957989][T23539] Dev loop6: unable to read RDB block 0 [ 1408.999490][T23539] loop6: unable to read partition table [ 1409.028466][T23539] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1409.739798][T23558] __nla_validate_parse: 5 callbacks suppressed [ 1409.739814][T23558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4326'. [ 1409.860621][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1410.958143][T23564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4326'. [ 1411.717833][T23593] FAULT_INJECTION: forcing a failure. [ 1411.717833][T23593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.737859][T23593] CPU: 0 UID: 0 PID: 23593 Comm: syz.5.4330 Tainted: G L syzkaller #0 PREEMPT(full) [ 1411.737893][T23593] Tainted: [L]=SOFTLOCKUP [ 1411.737902][T23593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1411.737914][T23593] Call Trace: [ 1411.737923][T23593] [ 1411.737933][T23593] dump_stack_lvl+0xe8/0x150 [ 1411.737970][T23593] should_fail_ex+0x412/0x560 [ 1411.738003][T23593] _copy_from_user+0x2d/0xb0 [ 1411.738037][T23593] ___sys_sendmsg+0x1c6/0x360 [ 1411.738064][T23593] ? __pfx____sys_sendmsg+0x10/0x10 [ 1411.738105][T23593] ? lockdep_hardirqs_on+0x7a/0x110 [ 1411.738164][T23593] __sys_sendmmsg+0x27c/0x4e0 [ 1411.738190][T23593] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1411.738210][T23593] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1411.738256][T23593] ? ksys_write+0x242/0x270 [ 1411.738281][T23593] ? __pfx_ksys_write+0x10/0x10 [ 1411.738311][T23593] __x64_sys_sendmmsg+0xa0/0xc0 [ 1411.738334][T23593] do_syscall_64+0x14d/0xf80 [ 1411.738353][T23593] ? trace_irq_disable+0x3b/0x150 [ 1411.738384][T23593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.738407][T23593] ? clear_bhb_loop+0x40/0x90 [ 1411.738432][T23593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.738454][T23593] RIP: 0033:0x7f1e3479c799 [ 1411.738491][T23593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.738511][T23593] RSP: 002b:00007f1e355b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1411.738536][T23593] RAX: ffffffffffffffda RBX: 00007f1e34a15fa0 RCX: 00007f1e3479c799 [ 1411.738553][T23593] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 1411.738567][T23593] RBP: 00007f1e355b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.738580][T23593] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 1411.738593][T23593] R13: 00007f1e34a16038 R14: 00007f1e34a15fa0 R15: 00007f1e34b3fa48 [ 1411.738625][T23593] [ 1412.029733][T23598] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4333'. [ 1412.086287][T23598] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4333'. [ 1412.131738][T23598] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4333'. [ 1412.175524][T23606] autofs4:pid:23606:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(65021.1), cmd(0xc018937e) [ 1412.190952][T23606] autofs4:pid:23606:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 1412.290613][T22992] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1412.392441][T23618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4337'. [ 1412.402201][T23618] openvswitch: netlink: Flow actions attr not present in new flow. [ 1412.445649][T22992] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1412.456880][T22992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.469864][T22992] usb 2-1: config 0 descriptor?? [ 1412.475696][T23624] netlink: 'syz.2.4337': attribute type 1 has an invalid length. [ 1412.475718][T23624] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4337'. [ 1412.708625][T22992] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1412.912842][T23595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4332'. [ 1412.970874][T23595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4332'. [ 1413.491284][T22992] [drm:udl_init] *ERROR* Selecting channel failed [ 1413.695478][T22992] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1413.715190][T22992] [drm] Initialized udl on minor 2 [ 1413.839689][T22992] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1413.854210][T22992] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1413.871425][ T29] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1413.879700][ T29] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1413.889258][T22992] usb 2-1: USB disconnect, device number 9 [ 1414.080606][ T29] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1414.134199][T23670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.143822][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1414.152386][T23670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.321125][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 1414.400775][ T5832] usb 3-1: Using ep0 maxpacket: 16 [ 1414.414641][ T5832] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1414.461835][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1414.474273][ T5832] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1414.506497][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.604717][ T5832] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1414.616186][ T29] usb 4-1: config 0 descriptor?? [ 1414.623859][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.637763][ T29] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1414.645886][ T29] pwc: Warning: more than 1 configuration available. [ 1414.653452][ T5832] usb 3-1: Product: syz [ 1414.657670][ T5832] usb 3-1: Manufacturer: syz [ 1414.669805][ T5832] usb 3-1: SerialNumber: syz [ 1414.752608][T23678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4344'. [ 1414.965119][ T5832] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1414.984008][ T5832] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1415.343175][ T5832] usb 3-1: USB disconnect, device number 3 [ 1415.812307][T23715] FAULT_INJECTION: forcing a failure. [ 1415.812307][T23715] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.844901][T23715] CPU: 1 UID: 0 PID: 23715 Comm: syz.5.4347 Tainted: G L syzkaller #0 PREEMPT(full) [ 1415.844942][T23715] Tainted: [L]=SOFTLOCKUP [ 1415.844952][T23715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1415.844966][T23715] Call Trace: [ 1415.844976][T23715] [ 1415.844986][T23715] dump_stack_lvl+0xe8/0x150 [ 1415.845022][T23715] should_fail_ex+0x412/0x560 [ 1415.845053][T23715] ? sock_alloc_inode+0x28/0xc0 [ 1415.845082][T23715] should_failslab+0xa8/0x100 [ 1415.845112][T23715] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1415.845136][T23715] ? __lock_acquire+0x6b5/0x2cf0 [ 1415.845170][T23715] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1415.845196][T23715] sock_alloc_inode+0x28/0xc0 [ 1415.845221][T23715] alloc_inode+0x6a/0x1b0 [ 1415.845253][T23715] __sock_create+0x12d/0x9d0 [ 1415.845281][T23715] ? __lock_acquire+0x6b5/0x2cf0 [ 1415.845326][T23715] mptcp_subflow_create_socket+0xfb/0x800 [ 1415.845358][T23715] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1415.845388][T23715] ? do_raw_spin_lock+0x12b/0x2f0 [ 1415.845415][T23715] __mptcp_nmpc_sk+0x155/0x790 [ 1415.845444][T23715] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1415.845467][T23715] ? mptcp_setsockopt+0x10f4/0x36a0 [ 1415.845498][T23715] ? __local_bh_enable_ip+0xd0/0x130 [ 1415.845532][T23715] mptcp_setsockopt+0x10fc/0x36a0 [ 1415.845568][T23715] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1415.845600][T23715] ? __pfx_aa_sk_perm+0x10/0x10 [ 1415.845630][T23715] ? __fget_files+0x2a/0x420 [ 1415.845672][T23715] ? aa_sock_opt_perm+0xff/0x1a0 [ 1415.845701][T23715] ? sock_common_setsockopt+0x36/0xc0 [ 1415.845728][T23715] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1415.845758][T23715] do_sock_setsockopt+0x17c/0x1b0 [ 1415.845795][T23715] __x64_sys_setsockopt+0x13d/0x1b0 [ 1415.845833][T23715] do_syscall_64+0x14d/0xf80 [ 1415.845852][T23715] ? trace_irq_disable+0x3b/0x150 [ 1415.845882][T23715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.845904][T23715] ? clear_bhb_loop+0x40/0x90 [ 1415.845929][T23715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.845951][T23715] RIP: 0033:0x7f1e3479c799 [ 1415.845970][T23715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.845989][T23715] RSP: 002b:00007f1e355b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1415.846012][T23715] RAX: ffffffffffffffda RBX: 00007f1e34a15fa0 RCX: 00007f1e3479c799 [ 1415.846027][T23715] RDX: 0000000000000017 RSI: 0000000000000006 RDI: 0000000000000003 [ 1415.846039][T23715] RBP: 00007f1e355b9090 R08: 0000000000000004 R09: 0000000000000000 [ 1415.846052][T23715] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1415.846065][T23715] R13: 00007f1e34a16038 R14: 00007f1e34a15fa0 R15: 00007f1e34b3fa48 [ 1415.846097][T23715] [ 1415.846768][T23715] socket: no more sockets [ 1417.220874][T23726] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4349'. [ 1417.231583][T23726] fuse: Bad value for 'fd' [ 1417.243271][T23732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.289921][T23732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.313018][ T29] pwc: Failed to set LED on/off time (-71) [ 1417.339438][ T29] pwc: send_video_command error -71 [ 1417.352237][ T29] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1417.373627][ T29] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1417.407276][ T29] usb 4-1: USB disconnect, device number 105 [ 1418.016529][T23773] gretap0: entered promiscuous mode [ 1418.848856][T23819] openvswitch: netlink: IP tunnel dst address not specified [ 1419.403449][T23823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4363'. [ 1419.741952][ T30] audit: type=1326 audit(1773078602.673:4535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23832 comm="syz.1.4366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa28979c799 code=0x0 [ 1421.264433][T23854] netlink: 'syz.1.4370': attribute type 1 has an invalid length. [ 1421.282485][T23854] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4370'. [ 1422.046782][T23820] pimreg: entered allmulticast mode [ 1422.052785][T23821] pimreg: left allmulticast mode [ 1422.373847][T23879] openvswitch: netlink: IP tunnel dst address not specified [ 1422.431147][T23882] netlink: 'syz.5.4377': attribute type 1 has an invalid length. [ 1422.461469][T23882] netlink: 'syz.5.4377': attribute type 2 has an invalid length. [ 1422.496821][T23888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4381'. [ 1422.514316][ T30] audit: type=1326 audit(1773078605.453:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.3.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a339c799 code=0x7ffc0000 [ 1422.620103][ T30] audit: type=1326 audit(1773078605.453:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.3.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a339c799 code=0x7ffc0000 [ 1422.704628][ T30] audit: type=1326 audit(1773078605.453:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.3.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3a339c799 code=0x7ffc0000 [ 1422.798979][ T30] audit: type=1326 audit(1773078605.453:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.3.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a339c799 code=0x7ffc0000 [ 1422.877769][ T30] audit: type=1326 audit(1773078605.453:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.3.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd3a339c799 code=0x7ffc0000 [ 1422.902410][ T30] audit: type=1326 audit(1773078605.483:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.3.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a339c799 code=0x7ffc0000 [ 1423.147729][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.154355][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.163724][ T30] audit: type=1326 audit(1773078605.493:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.3.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd3a339c799 code=0x7ffc0000 [ 1423.270778][ T30] audit: type=1326 audit(1773078605.493:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.3.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3a339c799 code=0x7ffc0000 [ 1423.390292][ T30] audit: type=1326 audit(1773078605.493:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23889 comm="syz.3.4380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3a335cfce code=0x7ffc0000 [ 1423.498676][T23909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.538447][T23909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.595199][T23909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.605029][T23909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.720681][ T5893] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1423.728751][T22976] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1423.772652][T23928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4386'. [ 1423.870413][T22976] usb 4-1: device descriptor read/64, error -71 [ 1423.891867][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 1423.898416][ T5893] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1423.909258][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.941065][ T5893] usb 2-1: config 0 descriptor?? [ 1423.974246][ T5893] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1424.122452][T22976] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1424.162468][T23946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4392'. [ 1424.171990][T23946] team0: left promiscuous mode [ 1424.176832][T23946] team_slave_0: left promiscuous mode [ 1424.183441][T23946] team_slave_1: left promiscuous mode [ 1424.189444][T23946] bridge0: port 3(team0) entered disabled state [ 1424.198742][T23946] bridge_slave_1: left allmulticast mode [ 1424.204571][T23946] bridge_slave_1: left promiscuous mode [ 1424.211303][T23946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.222385][T23946] bridge_slave_0: left allmulticast mode [ 1424.228114][T23946] bridge_slave_0: left promiscuous mode [ 1424.234514][T23946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.270758][T22976] usb 4-1: device descriptor read/64, error -71 [ 1424.350336][T23958] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4393'. [ 1424.381192][T22976] usb usb4-port1: attempt power cycle [ 1424.550547][T22975] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1424.700096][T22975] usb 3-1: device descriptor read/64, error -71 [ 1424.730107][T22976] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1424.761300][T22976] usb 4-1: device descriptor read/8, error -71 [ 1424.960185][T22975] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1425.010186][T22976] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1425.041456][T22976] usb 4-1: device descriptor read/8, error -71 [ 1425.100307][T22975] usb 3-1: device descriptor read/64, error -71 [ 1425.150422][T22976] usb usb4-port1: unable to enumerate USB device [ 1425.222697][T22975] usb usb3-port1: attempt power cycle [ 1425.470743][T23977] netlink: 'syz.6.4395': attribute type 7 has an invalid length. [ 1425.570122][T22975] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1425.611124][T22975] usb 3-1: device descriptor read/8, error -71 [ 1425.890221][T22975] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1425.921247][T22975] usb 3-1: device descriptor read/8, error -71 [ 1426.030950][T22975] usb usb3-port1: unable to enumerate USB device [ 1426.394409][T23913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.405953][T23913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.416182][T23913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.429102][T23913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.442006][T23913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.452087][T23913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.462794][ T5893] gspca_sonixj: reg_w1 err -71 [ 1426.479668][ T5893] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1426.503864][ T5893] usb 2-1: USB disconnect, device number 10 [ 1426.708581][T24014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.722952][T24014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.850665][ T29] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1427.000740][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 1427.008711][ T29] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1427.023672][ T29] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1427.033943][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.055782][ T29] usb 4-1: Product: syz [ 1427.063385][ T29] usb 4-1: Manufacturer: syz [ 1427.068200][ T29] usb 4-1: SerialNumber: syz [ 1427.089876][ T29] usb 4-1: config 0 descriptor?? [ 1427.129030][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1427.255094][ T29] usb 4-1: setting power ON [ 1427.259685][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 1427.286391][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1427.414765][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1427.438104][ T29] usb 4-1: media controller created [ 1427.453665][T24036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4403'. [ 1427.473468][T24038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4404'. [ 1427.500781][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4403'. [ 1427.524401][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1427.593598][ T29] usb 4-1: selecting invalid altsetting 6 [ 1427.613789][ T29] usb 4-1: digital interface selection failed (-22) [ 1427.650684][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1427.674033][T24046] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4406'. [ 1427.686001][ T29] usb 4-1: setting power OFF [ 1427.694323][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 1427.733651][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1427.873822][ T29] (NULL device *): no alternate interface [ 1427.996663][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1428.059797][ T29] usb 4-1: USB disconnect, device number 110 [ 1429.903519][T24095] netlink: 'syz.3.4414': attribute type 4 has an invalid length. [ 1430.470901][ T29] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1430.655681][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 1430.744706][ T29] usb 4-1: config 0 has no interfaces? [ 1430.814537][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1430.833995][ T29] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1430.903074][ T29] usb 4-1: Manufacturer: syz [ 1430.921518][ T29] usb 4-1: config 0 descriptor?? [ 1431.212388][T24095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.226900][T24095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.490727][ T29] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1431.640710][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 1431.817966][ T29] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1431.839162][ T29] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1431.849579][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.863980][ T29] usb 2-1: Product: syz [ 1431.873125][ T29] usb 2-1: Manufacturer: syz [ 1431.887432][ T29] usb 2-1: SerialNumber: syz [ 1431.913646][T24173] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4420'. [ 1431.923145][ T29] usb 2-1: config 0 descriptor?? [ 1431.938930][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1431.967100][ T29] usb 2-1: setting power ON [ 1431.989261][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 1432.016944][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1432.051535][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1432.070869][ T29] usb 2-1: media controller created [ 1432.132974][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1432.234585][ T29] usb 2-1: selecting invalid altsetting 6 [ 1432.253089][ T29] usb 2-1: digital interface selection failed (-22) [ 1432.272731][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1432.309327][ T29] usb 2-1: setting power OFF [ 1432.325170][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 1432.355030][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1432.437175][ T29] (NULL device *): no alternate interface [ 1432.598812][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1432.898406][T22975] usb 2-1: USB disconnect, device number 11 [ 1433.544985][ T5921] usb 4-1: USB disconnect, device number 111 [ 1434.540288][ C1] sd 0:0:1:0: [sda] tag#8474 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1434.550812][ C1] sd 0:0:1:0: [sda] tag#8474 CDB: Read(6) 08 00 00 00 00 00 [ 1434.624953][T24247] FAULT_INJECTION: forcing a failure. [ 1434.624953][T24247] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.684933][T24247] CPU: 0 UID: 0 PID: 24247 Comm: syz.2.4430 Tainted: G L syzkaller #0 PREEMPT(full) [ 1434.684988][T24247] Tainted: [L]=SOFTLOCKUP [ 1434.684997][T24247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1434.685011][T24247] Call Trace: [ 1434.685020][T24247] [ 1434.685031][T24247] dump_stack_lvl+0xe8/0x150 [ 1434.685067][T24247] should_fail_ex+0x412/0x560 [ 1434.685101][T24247] should_failslab+0xa8/0x100 [ 1434.685131][T24247] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1434.685156][T24247] ? __kasan_kmalloc+0x93/0xb0 [ 1434.685181][T24247] ? __request_module+0x2ec/0x660 [ 1434.685209][T24247] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1434.685238][T24247] kstrdup+0x42/0x100 [ 1434.685269][T24247] __request_module+0x2ec/0x660 [ 1434.685304][T24247] ? __pfx___request_module+0x10/0x10 [ 1434.685338][T24247] ? kasan_quarantine_put+0xbb/0x1f0 [ 1434.685368][T24247] ? kfree+0x1c1/0x630 [ 1434.685386][T24247] ? nvmf_dev_write+0x1cce/0x2d90 [ 1434.685420][T24247] nvmf_dev_write+0x1ed6/0x2d90 [ 1434.685482][T24247] ? __pfx_nvmf_dev_write+0x10/0x10 [ 1434.685513][T24247] ? __lock_acquire+0x6b5/0x2cf0 [ 1434.685550][T24247] ? kstrtoull+0x12f/0x1d0 [ 1434.685601][T24247] ? bpf_lsm_file_permission+0x9/0x20 [ 1434.685628][T24247] ? security_file_permission+0x75/0x260 [ 1434.685654][T24247] ? rw_verify_area+0x255/0x4d0 [ 1434.685682][T24247] vfs_writev+0x4bd/0x990 [ 1434.685713][T24247] ? __pfx_nvmf_dev_write+0x10/0x10 [ 1434.685745][T24247] ? __pfx_vfs_writev+0x10/0x10 [ 1434.685797][T24247] ? __fget_files+0x2a/0x420 [ 1434.685834][T24247] ? __fget_files+0x3a0/0x420 [ 1434.685865][T24247] ? __fget_files+0x2a/0x420 [ 1434.685906][T24247] do_writev+0x154/0x2e0 [ 1434.685938][T24247] ? __pfx_do_writev+0x10/0x10 [ 1434.685979][T24247] do_syscall_64+0x14d/0xf80 [ 1434.685999][T24247] ? trace_irq_disable+0x3b/0x150 [ 1434.686030][T24247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.686055][T24247] ? clear_bhb_loop+0x40/0x90 [ 1434.686082][T24247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.686104][T24247] RIP: 0033:0x7f500a59c799 [ 1434.686125][T24247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1434.686146][T24247] RSP: 002b:00007f500b417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1434.686169][T24247] RAX: ffffffffffffffda RBX: 00007f500a815fa0 RCX: 00007f500a59c799 [ 1434.686186][T24247] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000005 [ 1434.686200][T24247] RBP: 00007f500b417090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.686214][T24247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.686227][T24247] R13: 00007f500a816038 R14: 00007f500a815fa0 R15: 00007f500a93fa48 [ 1434.686261][T24247] [ 1434.686347][T24247] nvme_fabrics: missing parameter 'transport=%s' [ 1434.996063][T24247] nvme_fabrics: missing parameter 'nqn=%s' [ 1435.064013][T24249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4431'. [ 1436.092663][T24277] FAULT_INJECTION: forcing a failure. [ 1436.092663][T24277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.126344][T24277] CPU: 0 UID: 0 PID: 24277 Comm: syz.6.4436 Tainted: G L syzkaller #0 PREEMPT(full) [ 1436.126371][T24277] Tainted: [L]=SOFTLOCKUP [ 1436.126378][T24277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1436.126387][T24277] Call Trace: [ 1436.126393][T24277] [ 1436.126401][T24277] dump_stack_lvl+0xe8/0x150 [ 1436.126427][T24277] should_fail_ex+0x412/0x560 [ 1436.126451][T24277] _copy_from_user+0x2d/0xb0 [ 1436.126477][T24277] ___sys_sendmsg+0x1c6/0x360 [ 1436.126496][T24277] ? __pfx____sys_sendmsg+0x10/0x10 [ 1436.126536][T24277] ? __fget_files+0x2a/0x420 [ 1436.126559][T24277] ? __fget_files+0x3a0/0x420 [ 1436.126589][T24277] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1436.126606][T24277] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1436.126635][T24277] ? __pfx_ksys_write+0x10/0x10 [ 1436.126660][T24277] do_syscall_64+0x14d/0xf80 [ 1436.126674][T24277] ? trace_irq_disable+0x3b/0x150 [ 1436.126697][T24277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.126712][T24277] ? clear_bhb_loop+0x40/0x90 [ 1436.126732][T24277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.126747][T24277] RIP: 0033:0x7f596f99c799 [ 1436.126762][T24277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.126777][T24277] RSP: 002b:00007f59708f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1436.126794][T24277] RAX: ffffffffffffffda RBX: 00007f596fc15fa0 RCX: 00007f596f99c799 [ 1436.126806][T24277] RDX: 0000000020004010 RSI: 0000200000000300 RDI: 0000000000000003 [ 1436.126816][T24277] RBP: 00007f59708f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.126826][T24277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.126835][T24277] R13: 00007f596fc16038 R14: 00007f596fc15fa0 R15: 00007f596fd3fa48 [ 1436.126859][T24277] [ 1436.738435][T24285] x_tables: duplicate underflow at hook 3 [ 1437.230307][T24305] x_tables: duplicate underflow at hook 1 [ 1438.280875][ T5832] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1438.460808][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 1438.468157][ T5832] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1438.494132][ T5832] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1438.517503][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.568028][ T5832] usb 2-1: Product: syz [ 1438.576232][ T5832] usb 2-1: Manufacturer: syz [ 1438.626831][ T5832] usb 2-1: SerialNumber: syz [ 1438.903650][ T5832] usb 2-1: BAAD HEADPHONE p_chmask mismatch [ 1438.997713][ T5832] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1439.048159][ T5832] usb 2-1: USB disconnect, device number 12 [ 1439.088751][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1439.188514][T24385] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4451'. [ 1439.200535][T24385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4451'. [ 1439.312149][T24387] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4452'. [ 1439.321556][T24387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4452'. [ 1439.443063][T24391] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1439.460861][T24391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1439.579670][T24401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4458'. [ 1439.750947][T24395] syzkaller1: entered promiscuous mode [ 1439.760848][T24395] syzkaller1: entered allmulticast mode [ 1440.101050][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1440.320667][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 1440.327531][ T29] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1440.339093][ T29] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1440.354377][T24392] delete_channel: no stack [ 1440.374780][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.386661][ T29] usb 3-1: Product: syz [ 1440.397818][ T29] usb 3-1: Manufacturer: syz [ 1440.407321][ T29] usb 3-1: SerialNumber: syz [ 1440.423984][ T29] usb 3-1: config 0 descriptor?? [ 1440.465157][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1440.473977][ T29] usb 3-1: setting power ON [ 1440.478706][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 1440.493079][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1440.505479][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1440.518252][ T29] usb 3-1: media controller created [ 1440.549811][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1440.807337][ T29] usb 3-1: selecting invalid altsetting 6 [ 1441.018595][ T29] usb 3-1: digital interface selection failed (-22) [ 1441.044655][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1441.338459][ T29] usb 3-1: setting power OFF [ 1441.370138][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 1441.375958][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1441.432451][ T29] (NULL device *): no alternate interface [ 1441.531224][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1441.573061][ T29] usb 3-1: USB disconnect, device number 8 [ 1441.883007][T24476] binder: 24475:24476 ioctl 4068aea3 200000000140 returned -22 [ 1441.900778][T24476] netlink: 'syz.6.4470': attribute type 5 has an invalid length. [ 1441.901602][ T29] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1442.081475][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 1442.089060][ T29] usb 3-1: config 2 has an invalid interface number: 194 but max is 0 [ 1442.099320][ T29] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.157661][ T29] usb 3-1: config 2 has no interface number 0 [ 1442.168465][ T29] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1442.206292][ T29] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1442.280615][ T29] usb 3-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1442.327886][ T29] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1442.347892][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.794366][T24500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4476'. [ 1442.804042][T24500] tipc: Enabling of bearer rejected, failed to enable media [ 1442.850804][T24495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1442.862714][T24500] loop6: detected capacity change from 0 to 2560 [ 1442.881202][T24500] buffer_io_error: 32 callbacks suppressed [ 1442.881265][T24500] Buffer I/O error on dev loop6, logical block 0, async page read [ 1442.898797][T24495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.908092][T24500] Buffer I/O error on dev loop6, logical block 0, async page read [ 1442.964890][T24500] Buffer I/O error on dev loop6, logical block 0, async page read [ 1442.978080][T24500] Buffer I/O error on dev loop6, logical block 0, async page read [ 1442.996424][T24500] Buffer I/O error on dev loop6, logical block 0, async page read [ 1443.007299][T24500] Buffer I/O error on dev loop6, logical block 0, async page read [ 1443.016344][T24500] Buffer I/O error on dev loop6, logical block 0, async page read [ 1443.025039][T24500] Buffer I/O error on dev loop6, logical block 0, async page read [ 1443.064744][T24500] ldm_validate_partition_table(): Disk read failed. [ 1443.074505][T24500] Buffer I/O error on dev loop6, logical block 0, async page read [ 1443.088757][T24500] Buffer I/O error on dev loop6, logical block 0, async page read [ 1443.099765][T24500] Dev loop6: unable to read RDB block 0 [ 1443.108447][T24500] loop6: unable to read partition table [ 1443.134128][T24500] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1443.612543][ T29] usb 3-1: string descriptor 0 read error: -71 [ 1443.662182][ T29] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1443.764436][T24542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.841382][T24542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.903580][ T29] snd-usb-audio 3-1:2.194: probe with driver snd-usb-audio failed with error -12 [ 1443.923003][ T29] usb 3-1: USB disconnect, device number 9 [ 1445.742737][T24599] tipc: Enabled bearer , priority 0 [ 1445.751208][T24599] syzkaller0: entered promiscuous mode [ 1445.756771][T24599] syzkaller0: entered allmulticast mode [ 1445.788707][T24599] tipc: Resetting bearer [ 1446.358357][T24595] tipc: Resetting bearer [ 1446.509229][T24595] tipc: Disabling bearer [ 1446.604825][T24607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4487'. [ 1446.615121][T24607] tipc: Enabling of bearer rejected, failed to enable media [ 1446.756985][T24611] loop6: detected capacity change from 0 to 2560 [ 1446.771604][T24611] ldm_validate_partition_table(): Disk read failed. [ 1446.790836][T24611] Dev loop6: unable to read RDB block 0 [ 1446.812929][T24611] loop6: unable to read partition table [ 1446.895984][T24611] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1447.210528][T19899] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1447.380690][T19899] usb 2-1: Using ep0 maxpacket: 8 [ 1447.437843][T19899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.526436][T19899] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1447.591778][T19899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.624256][T19899] usb 2-1: Product: syz [ 1447.628501][T19899] usb 2-1: Manufacturer: syz [ 1447.662862][T19899] usb 2-1: SerialNumber: syz [ 1447.691700][T19899] usb 2-1: config 0 descriptor?? [ 1447.767633][T24633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.787614][T24633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.830230][T22975] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1448.372713][T22975] usb 4-1: Using ep0 maxpacket: 8 [ 1448.379686][T22975] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1448.391863][T22975] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1448.410065][T22975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.422062][T22975] usb 4-1: Product: syz [ 1448.426295][T22975] usb 4-1: Manufacturer: syz [ 1448.437244][T22975] usb 4-1: SerialNumber: syz [ 1448.495799][T22975] usb 4-1: config 0 descriptor?? [ 1448.516478][T22975] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1448.530156][T22975] usb 4-1: setting power ON [ 1448.536328][T22975] dvb-usb: bulk message failed: -22 (2/0) [ 1448.561538][T22975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1448.578819][T22975] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1448.594036][T22975] usb 4-1: media controller created [ 1448.620366][T22975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1448.697053][T22975] usb 4-1: selecting invalid altsetting 6 [ 1448.736824][T22975] usb 4-1: digital interface selection failed (-22) [ 1448.759749][T22975] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1448.784966][T22975] usb 4-1: setting power OFF [ 1448.888709][T22975] dvb-usb: bulk message failed: -22 (2/0) [ 1448.919074][T22975] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1448.953758][T22975] (NULL device *): no alternate interface [ 1449.029513][T22975] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1449.327525][T22975] usb 4-1: USB disconnect, device number 112 [ 1449.737957][T24688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4500'. [ 1449.756027][T24688] tipc: Enabling of bearer rejected, failed to enable media [ 1449.782952][T24688] loop6: detected capacity change from 0 to 2560 [ 1449.802324][T24688] buffer_io_error: 32 callbacks suppressed [ 1449.802339][T24688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1449.839415][T24688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1449.848731][T24688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1449.859188][T24688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1449.930790][T24688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1450.002990][T22975] usb 2-1: USB disconnect, device number 13 [ 1450.075469][T24688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1450.084077][T24688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1450.132669][T24688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1450.158720][T24688] ldm_validate_partition_table(): Disk read failed. [ 1450.167255][T24688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1450.175897][T24688] Buffer I/O error on dev loop6, logical block 0, async page read [ 1450.237402][T24688] Dev loop6: unable to read RDB block 0 [ 1450.244084][T24688] loop6: unable to read partition table [ 1450.264670][T24688] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1450.431492][T22975] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1450.601198][T22975] usb 2-1: Using ep0 maxpacket: 16 [ 1450.645191][T22975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.693306][T22975] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1451.118072][T22975] usb 2-1: New USB device found, idVendor=046d, idProduct=0921, bcdDevice=ab.34 [ 1451.158613][T22975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.168592][T22975] usb 2-1: Product: syz [ 1451.178178][T22975] usb 2-1: Manufacturer: syz [ 1451.184538][T22975] usb 2-1: SerialNumber: syz [ 1451.211125][T22975] usb 2-1: config 0 descriptor?? [ 1451.216467][T24722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.345200][T24722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.713827][T24731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.740551][T24731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1453.188152][T24758] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4511'. [ 1453.529072][ T5832] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1453.643751][T22975] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 1453.691316][T24770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1453.746447][T24770] tipc: Enabling of bearer rejected, failed to enable media [ 1453.761485][T22975] usb 2-1: USB disconnect, device number 14 [ 1453.836456][T24782] loop6: detected capacity change from 0 to 2560 [ 1454.002976][T24782] ldm_validate_partition_table(): Disk read failed. [ 1454.053686][T24782] Dev loop6: unable to read RDB block 0 [ 1454.088602][T24782] loop6: unable to read partition table [ 1454.132725][T24782] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1455.735885][T24810] kAFS: unable to lookup cell '(,' [ 1456.159132][T24826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4519'. [ 1456.231762][T24823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4518'. [ 1456.241029][T24823] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1456.285977][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1456.285998][ T30] audit: type=1800 audit(1773078639.223:4551): pid=24821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4518" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1456.483706][T24834] netlink: 'syz.5.4523': attribute type 7 has an invalid length. [ 1456.652795][T24828] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000006' [ 1456.691732][T24834] netlink: 'syz.5.4523': attribute type 8 has an invalid length. [ 1456.752488][T24838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4522'. [ 1456.825112][T24840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4524'. [ 1456.836256][T24840] tipc: Enabling of bearer rejected, failed to enable media [ 1457.122364][T24840] loop6: detected capacity change from 0 to 2560 [ 1457.162592][T24840] buffer_io_error: 32 callbacks suppressed [ 1457.162608][T24840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1457.227725][T24840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1457.276086][T24840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1457.310702][T24840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1457.350135][T24840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1457.358255][T24840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1457.378525][T24840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1457.410487][T24840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1457.440171][T24840] ldm_validate_partition_table(): Disk read failed. [ 1457.479506][T24840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1457.530276][T24840] Buffer I/O error on dev loop6, logical block 0, async page read [ 1457.548484][T24840] Dev loop6: unable to read RDB block 0 [ 1457.570365][T24840] loop6: unable to read partition table [ 1457.600168][T24840] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1458.124586][T24870] binder: 24863:24870 ioctl c0306201 0 returned -14 [ 1458.323172][T24885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4534'. [ 1458.368458][T24891] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4536'. [ 1458.489254][T24891] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4536'. [ 1458.595255][ T5832] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1458.755629][T24897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4537'. [ 1458.765345][T24897] tipc: Enabling of bearer rejected, failed to enable media [ 1458.775339][ T5832] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1458.793671][T24895] loop6: detected capacity change from 0 to 2560 [ 1458.806323][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.832709][ T5832] usb 4-1: config 0 descriptor?? [ 1458.841995][T24895] ldm_validate_partition_table(): Disk read failed. [ 1458.856934][T24895] Dev loop6: unable to read RDB block 0 [ 1458.894933][T24895] loop6: unable to read partition table [ 1458.982896][T24895] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1459.287906][ T5832] ath6kl: Failed to read usb control message: -32 [ 1459.588500][ T5832] ath6kl: Unable to read the bmi data from the device: -32 [ 1459.648318][ T5832] ath6kl: Unable to recv target info: -32 [ 1459.689267][ T5832] ath6kl: Failed to init ath6kl core: -32 [ 1459.702658][ T5832] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 1459.804480][ T5832] usb 4-1: USB disconnect, device number 113 [ 1460.294876][T24927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4540'. [ 1460.335979][T24934] IPv6: sit1: Disabled Multicast RS [ 1460.342208][T24934] sit1: entered allmulticast mode [ 1460.649727][T24942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4543'. [ 1461.752191][T24973] netlink: 'syz.6.4548': attribute type 4 has an invalid length. [ 1461.994799][T24978] FAULT_INJECTION: forcing a failure. [ 1461.994799][T24978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.036068][T24978] CPU: 0 UID: 0 PID: 24978 Comm: syz.5.4550 Tainted: G L syzkaller #0 PREEMPT(full) [ 1462.036105][T24978] Tainted: [L]=SOFTLOCKUP [ 1462.036113][T24978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1462.036128][T24978] Call Trace: [ 1462.036137][T24978] [ 1462.036146][T24978] dump_stack_lvl+0xe8/0x150 [ 1462.036183][T24978] should_fail_ex+0x412/0x560 [ 1462.036217][T24978] _copy_from_user+0x2d/0xb0 [ 1462.036251][T24978] __sys_sendto+0x2b0/0x710 [ 1462.036286][T24978] ? __pfx___sys_sendto+0x10/0x10 [ 1462.036315][T24978] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1462.036350][T24978] ? __fget_files+0x3a0/0x420 [ 1462.036394][T24978] ? ksys_write+0x242/0x270 [ 1462.036431][T24978] ? __pfx_ksys_write+0x10/0x10 [ 1462.036460][T24978] __x64_sys_sendto+0xde/0x100 [ 1462.036496][T24978] do_syscall_64+0x14d/0xf80 [ 1462.036516][T24978] ? trace_irq_disable+0x3b/0x150 [ 1462.036547][T24978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.036570][T24978] ? clear_bhb_loop+0x40/0x90 [ 1462.036597][T24978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.036618][T24978] RIP: 0033:0x7f1e3479c799 [ 1462.036640][T24978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1462.036660][T24978] RSP: 002b:00007f1e355b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1462.036683][T24978] RAX: ffffffffffffffda RBX: 00007f1e34a15fa0 RCX: 00007f1e3479c799 [ 1462.036699][T24978] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1462.036713][T24978] RBP: 00007f1e355b9090 R08: 00002000000000c0 R09: 000000000000001c [ 1462.036728][T24978] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1462.036741][T24978] R13: 00007f1e34a16038 R14: 00007f1e34a15fa0 R15: 00007f1e34b3fa48 [ 1462.036774][T24978] [ 1464.044040][T25005] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4559'. [ 1464.151678][T25008] loop2: detected capacity change from 0 to 7 [ 1464.186120][T25008] Dev loop2: unable to read RDB block 7 [ 1464.204077][T25008] loop2: unable to read partition table [ 1464.210226][T25008] loop2: partition table beyond EOD, truncated [ 1464.221039][T25010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.231159][T25010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.252261][T25008] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1464.326637][ T5192] Dev loop2: unable to read RDB block 7 [ 1464.332943][ T5192] loop2: unable to read partition table [ 1464.341778][ T5192] loop2: partition table beyond EOD, truncated [ 1464.647172][T25020] Cannot find add_set index 2 as target [ 1464.904509][ T5192] Dev loop2: unable to read RDB block 7 [ 1464.923491][ T5192] loop2: unable to read partition table [ 1464.934692][ T5192] loop2: partition table beyond EOD, truncated [ 1465.050115][T22975] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1465.310262][T22975] usb 3-1: Using ep0 maxpacket: 16 [ 1465.321549][T22975] usb 3-1: config 0 has no interfaces? [ 1465.336128][T22975] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1465.348644][T22975] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1465.360625][T22975] usb 3-1: Manufacturer: syz [ 1465.388388][T22975] usb 3-1: config 0 descriptor?? [ 1465.480088][ T5893] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1465.643537][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 1465.667961][ T5893] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1465.679126][ T5893] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1465.689636][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.721224][ T5893] usb 2-1: Product: syz [ 1465.727872][ T5893] usb 2-1: Manufacturer: syz [ 1465.740241][ T5893] usb 2-1: SerialNumber: syz [ 1465.831563][T25020] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1465.860273][ T5893] usb 2-1: config 0 descriptor?? [ 1465.873556][ T5893] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1465.884631][ T5893] usb 2-1: setting power ON [ 1465.889168][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 1465.923983][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1465.934274][ T5893] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1465.949703][ T5893] usb 2-1: media controller created [ 1466.005625][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1466.123040][ T5893] usb 2-1: selecting invalid altsetting 6 [ 1466.130896][ T5893] usb 2-1: digital interface selection failed (-22) [ 1466.144419][ T5893] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1466.163313][ T5893] usb 2-1: setting power OFF [ 1466.174406][ T5893] dvb-usb: bulk message failed: -22 (2/0) [ 1466.193370][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1466.222985][ T5893] (NULL device *): no alternate interface [ 1466.356570][ T5893] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1466.549109][T25095] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4570'. [ 1466.941608][T25104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.986170][T25104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.044241][T25111] FAULT_INJECTION: forcing a failure. [ 1467.044241][T25111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1467.083919][T25111] CPU: 1 UID: 0 PID: 25111 Comm: syz.6.4575 Tainted: G L syzkaller #0 PREEMPT(full) [ 1467.083956][T25111] Tainted: [L]=SOFTLOCKUP [ 1467.083965][T25111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1467.083979][T25111] Call Trace: [ 1467.083988][T25111] [ 1467.083997][T25111] dump_stack_lvl+0xe8/0x150 [ 1467.084039][T25111] should_fail_ex+0x412/0x560 [ 1467.084073][T25111] _copy_from_user+0x2d/0xb0 [ 1467.084108][T25111] ___sys_sendmsg+0x1c6/0x360 [ 1467.084136][T25111] ? __pfx____sys_sendmsg+0x10/0x10 [ 1467.084194][T25111] ? __fget_files+0x2a/0x420 [ 1467.084225][T25111] ? __fget_files+0x3a0/0x420 [ 1467.084266][T25111] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1467.084291][T25111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1467.084323][T25111] ? __pfx_ksys_write+0x10/0x10 [ 1467.084359][T25111] do_syscall_64+0x14d/0xf80 [ 1467.084379][T25111] ? trace_irq_disable+0x3b/0x150 [ 1467.084411][T25111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.084432][T25111] ? clear_bhb_loop+0x40/0x90 [ 1467.084460][T25111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.084480][T25111] RIP: 0033:0x7f596f99c799 [ 1467.084501][T25111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1467.084521][T25111] RSP: 002b:00007f59708f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1467.084545][T25111] RAX: ffffffffffffffda RBX: 00007f596fc15fa0 RCX: 00007f596f99c799 [ 1467.084562][T25111] RDX: 0000000004040844 RSI: 0000200000000080 RDI: 0000000000000004 [ 1467.084577][T25111] RBP: 00007f59708f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.084590][T25111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.084604][T25111] R13: 00007f596fc16038 R14: 00007f596fc15fa0 R15: 00007f596fd3fa48 [ 1467.084639][T25111] [ 1467.691042][ T29] usb 3-1: USB disconnect, device number 11 [ 1468.060666][ T29] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1468.159873][ C0] hrtimer: interrupt took 40159 ns [ 1468.232350][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.259925][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1468.304747][ T29] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1468.343214][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.386534][ T29] usb 3-1: config 0 descriptor?? [ 1468.754634][T25147] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4583'. [ 1468.845182][ T29] cp2112 0003:10C4:EA90.0066: unknown main item tag 0x0 [ 1468.880114][ T29] cp2112 0003:10C4:EA90.0066: unknown main item tag 0x0 [ 1468.901734][ T29] cp2112 0003:10C4:EA90.0066: unknown main item tag 0x0 [ 1468.938776][ T29] cp2112 0003:10C4:EA90.0066: unknown main item tag 0x0 [ 1468.946011][T25150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1468.946780][T25150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1468.967366][ T29] cp2112 0003:10C4:EA90.0066: unknown main item tag 0x0 [ 1468.984705][ T29] cp2112 0003:10C4:EA90.0066: unknown main item tag 0x0 [ 1468.992522][ T29] cp2112 0003:10C4:EA90.0066: unknown main item tag 0x0 [ 1469.022213][ T29] cp2112 0003:10C4:EA90.0066: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1469.104461][ T29] cp2112 0003:10C4:EA90.0066: Part Number: 0x82 Device Version: 0xFE [ 1469.384715][ T29] cp2112 0003:10C4:EA90.0066: error requesting SMBus config [ 1469.410623][ T29] cp2112 0003:10C4:EA90.0066: probe with driver cp2112 failed with error -32 [ 1469.461471][T25174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.481798][T25174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.887004][ T29] usb 3-1: USB disconnect, device number 12 [ 1470.849648][ T5893] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1471.080242][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 1471.088174][ T5893] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1471.106248][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1471.123511][ T5893] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1471.132909][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.157300][ T5893] usb 4-1: Product: syz [ 1471.161758][ T5893] usb 4-1: Manufacturer: syz [ 1471.170069][ T5893] usb 4-1: SerialNumber: syz [ 1471.198143][ T5893] usb 4-1: config 0 descriptor?? [ 1471.429909][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1471.447414][ T5893] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input168 [ 1471.504333][ T5893] imon:send_packet: packet tx failed (-71) [ 1471.530153][ T5893] imon 4-1:0.0: panel buttons/knobs setup failed [ 1471.641692][T25225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.656147][ T5893] rc_core: IR keymap rc-imon-pad not found [ 1471.666867][T25225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.676394][ T5893] Registered IR keymap rc-empty [ 1471.694095][ T5893] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1471.706690][ T5893] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1471.740919][ T5893] imon:send_packet: packet tx failed (-71) [ 1471.770438][ T5893] imon 4-1:0.0: remote input dev register failed [ 1471.777263][ T5893] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 1471.836685][ T5893] imon 4-1:0.0: unable to initialize intf0, err 0 [ 1471.853932][ T5893] imon:imon_probe: failed to initialize context! [ 1471.861800][ T5893] imon 4-1:0.0: unable to register, err -19 [ 1471.876026][ T5893] usb 4-1: USB disconnect, device number 114 [ 1472.186904][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4599'. [ 1472.280886][T25276] binder: 25268:25276 ioctl 402c542b 200000002680 returned -22 [ 1472.318532][T25276] binder: 25268:25276 ioctl 8904 200000000000 returned -22 [ 1472.328749][T25276] trusted_key: encrypted_key: insufficient parameters specified [ 1472.338074][T25276] trusted_key: encrypted_key: insufficient parameters specified [ 1472.365237][T25276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.376725][T25276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.396040][T25276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.423099][T25276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.500119][ T5893] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1472.652103][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.673066][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.702559][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1472.720926][ T5893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1472.730640][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.751194][ T5893] usb 4-1: config 0 descriptor?? [ 1473.098915][T25320] IPVS: set_ctl: invalid protocol: 52653 63.195.110.150:7888 [ 1473.174066][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 1473.180235][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1473.197411][ T5893] usb 4-1: USB disconnect, device number 115 [ 1473.469846][T25356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4617'. [ 1473.494898][T25356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4617'. [ 1473.740712][T19899] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1473.890684][T19899] usb 3-1: Using ep0 maxpacket: 32 [ 1473.910627][T19899] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1473.922044][T19899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.931781][T19899] usb 3-1: Product: syz [ 1473.937293][T19899] usb 3-1: Manufacturer: syz [ 1473.945824][T19899] usb 3-1: SerialNumber: syz [ 1473.968428][T19899] usb 3-1: config 0 descriptor?? [ 1473.987079][T19899] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1473.997959][T19899] dvb-usb: bulk message failed: -22 (4/0) [ 1474.017438][T19899] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1474.043157][T19899] dvb-usb: bulk message failed: -22 (5/0) [ 1474.055710][T19899] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1474.078182][T19899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1474.089406][T19899] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1474.098903][T19899] usb 3-1: media controller created [ 1474.124197][T19899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1474.149681][T19899] usb 3-1: selecting invalid altsetting 3 [ 1474.156257][T19899] ttusb2: set interface to alts=3 failed [ 1474.264566][T25404] ip6t_srh: unknown srh invflags 4000 [ 1474.574747][T25362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.623775][T19899] DVB: Unable to find symbol tda10086_attach() [ 1474.632411][T25362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.760823][T19899] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1474.774854][T19899] dvb-usb: bulk message failed: -22 (4/0) [ 1474.784876][T19899] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1474.950552][T19899] dvb-usb: bulk message failed: -22 (5/0) [ 1474.956353][T19899] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1474.973450][T25362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.988239][T19899] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1475.012635][T25362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1475.233458][T19899] usb 3-1: USB disconnect, device number 13 [ 1475.287944][T19899] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1475.885041][T25439] FAULT_INJECTION: forcing a failure. [ 1475.885041][T25439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1475.932095][T25441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4629'. [ 1475.945050][T25439] CPU: 0 UID: 0 PID: 25439 Comm: syz.2.4630 Tainted: G L syzkaller #0 PREEMPT(full) [ 1475.945086][T25439] Tainted: [L]=SOFTLOCKUP [ 1475.945096][T25439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1475.945109][T25439] Call Trace: [ 1475.945119][T25439] [ 1475.945128][T25439] dump_stack_lvl+0xe8/0x150 [ 1475.945165][T25439] should_fail_ex+0x412/0x560 [ 1475.945199][T25439] _copy_to_user+0x31/0xb0 [ 1475.945236][T25439] simple_read_from_buffer+0xe1/0x170 [ 1475.945272][T25439] proc_fail_nth_read+0x1bb/0x230 [ 1475.945308][T25439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1475.945342][T25439] ? rw_verify_area+0x2a6/0x4d0 [ 1475.945365][T25439] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1475.945398][T25439] vfs_read+0x20c/0xa70 [ 1475.945419][T25439] ? fdget_pos+0x246/0x320 [ 1475.945457][T25439] ? __pfx___mutex_lock+0x10/0x10 [ 1475.945480][T25439] ? __pfx_vfs_read+0x10/0x10 [ 1475.945512][T25439] ? __fget_files+0x2a/0x420 [ 1475.945548][T25439] ? __fget_files+0x3a0/0x420 [ 1475.945578][T25439] ? __fget_files+0x2a/0x420 [ 1475.945620][T25439] ksys_read+0x150/0x270 [ 1475.945646][T25439] ? __pfx_ksys_read+0x10/0x10 [ 1475.945679][T25439] do_syscall_64+0x14d/0xf80 [ 1475.945698][T25439] ? trace_irq_disable+0x3b/0x150 [ 1475.945729][T25439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.945753][T25439] ? clear_bhb_loop+0x40/0x90 [ 1475.945778][T25439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.945800][T25439] RIP: 0033:0x7f500a55cfce [ 1475.945822][T25439] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1475.945842][T25439] RSP: 002b:00007f500b3f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1475.945866][T25439] RAX: ffffffffffffffda RBX: 00007f500b3f66c0 RCX: 00007f500a55cfce [ 1475.945884][T25439] RDX: 000000000000000f RSI: 00007f500b3f60a0 RDI: 0000000000000009 [ 1475.945898][T25439] RBP: 00007f500b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.945912][T25439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.945926][T25439] R13: 00007f500a816128 R14: 00007f500a816090 R15: 00007f500a93fa48 [ 1475.945961][T25439] [ 1476.878927][ T29] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1477.055615][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 1477.066675][ T29] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.096105][ T29] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.305155][ T29] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1477.322355][ T29] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1477.340673][ T29] usb 3-1: Product: syz [ 1477.347461][ T29] usb 3-1: Manufacturer: syz [ 1477.413477][ T29] hub 3-1:4.0: USB hub found [ 1477.452353][T25493] loop5: detected capacity change from 0 to 7 [ 1477.506128][T25493] Dev loop5: unable to read RDB block 7 [ 1477.520853][T25493] loop5: unable to read partition table [ 1477.541032][T25493] loop5: partition table beyond EOD, truncated [ 1477.555987][T25493] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1477.616261][ T29] hub 3-1:4.0: 2 ports detected [ 1478.250740][ T5921] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1478.463369][ T5921] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1478.467881][T25547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.497660][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.509053][T25547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.549623][ T5921] usb 4-1: Product: syz [ 1478.556293][ T5921] usb 4-1: Manufacturer: syz [ 1478.571005][ T5921] usb 4-1: SerialNumber: syz [ 1478.584582][ T5921] usb 4-1: config 0 descriptor?? [ 1478.609167][ T5921] hub 4-1:0.0: bad descriptor, ignoring hub [ 1478.672487][ T5921] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1478.686618][ T5192] Dev loop5: unable to read RDB block 7 [ 1478.703229][ T5192] loop5: unable to read partition table [ 1478.724411][ T5192] loop5: partition table beyond EOD, truncated [ 1478.811641][ T5921] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1478.820849][ T29] hub 3-1:4.0: activate --> -90 [ 1478.891470][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1478.921147][ T5921] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1478.929700][ T5921] usb 4-1: media controller created [ 1478.959202][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1479.064989][ T5921] DVB: Unable to find symbol dib7000p_attach() [ 1479.071429][ T5921] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1479.160419][ T5921] rc_core: IR keymap rc-dib0700-rc5 not found [ 1479.167389][ T5921] Registered IR keymap rc-empty [ 1479.173113][ T5921] dvb-usb: could not initialize remote control. [ 1479.179401][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1479.228464][T25463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.246958][T25463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.267999][ T29] usb 3-1-port2: cannot warm reset (err = -71) [ 1479.277677][T19899] usb 3-1: USB disconnect, device number 14 [ 1479.464521][T25647] syzkaller0: entered promiscuous mode [ 1479.471208][T25647] syzkaller0: entered allmulticast mode [ 1479.483522][T25647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4647'. [ 1480.844293][T25688] netlink: 'syz.6.4651': attribute type 2 has an invalid length. [ 1481.007384][ T29] usb 4-1: USB disconnect, device number 116 [ 1481.095236][ T29] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1481.212588][T25706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.225941][T25706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.396388][T25706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.573832][T25706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.602056][T25706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.976202][T25706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.054795][T25706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.100761][T25706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1482.931551][ T29] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1482.982122][T25742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1482.993772][T25742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.155440][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1483.172414][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1483.255338][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1483.289234][ T29] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1483.357536][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.500934][ T5832] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1483.573760][ T29] usb 3-1: config 0 descriptor?? [ 1483.710786][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 1483.802458][ T5832] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1483.812601][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.847370][ T5832] usb 4-1: config 0 descriptor?? [ 1483.883826][ T5832] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1483.893026][ T5832] pwc: Warning: more than 1 configuration available. [ 1484.057972][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1484.066106][ T29] usbhid 3-1:0.0: can't add hid device: -32 [ 1484.072939][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1484.103059][ T29] usb 3-1: USB disconnect, device number 15 [ 1484.586147][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.594455][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.120103][ T29] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1485.323083][ T29] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1485.333284][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.357787][ T29] usb 3-1: Product: syz [ 1485.387337][ T29] usb 3-1: Manufacturer: syz [ 1485.405996][ T29] usb 3-1: SerialNumber: syz [ 1485.431861][ T29] usb 3-1: config 0 descriptor?? [ 1485.461399][ T29] hub 3-1:0.0: bad descriptor, ignoring hub [ 1485.478582][ T29] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1485.824601][ T29] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1485.929786][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1485.948124][ T29] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1485.971294][ T29] usb 3-1: media controller created [ 1486.008408][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1486.246517][ T29] DVB: Unable to find symbol dib7000p_attach() [ 1486.302617][ T29] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1486.416659][ T5832] pwc: Failed to set LED on/off time (-71) [ 1486.475376][ T5832] pwc: send_video_command error -71 [ 1486.499403][ T29] rc_core: IR keymap rc-dib0700-rc5 not found [ 1486.514700][ T29] Registered IR keymap rc-empty [ 1486.525940][ T5832] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1486.536331][ T29] dvb-usb: could not initialize remote control. [ 1486.556397][ T29] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1486.570773][ T5832] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1486.639277][ T5832] usb 4-1: USB disconnect, device number 117 [ 1486.781667][T25839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4668'. [ 1487.097033][T25850] FAULT_INJECTION: forcing a failure. [ 1487.097033][T25850] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.136863][T25850] CPU: 0 UID: 0 PID: 25850 Comm: syz.1.4670 Tainted: G L syzkaller #0 PREEMPT(full) [ 1487.136899][T25850] Tainted: [L]=SOFTLOCKUP [ 1487.136906][T25850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1487.136916][T25850] Call Trace: [ 1487.136922][T25850] [ 1487.136929][T25850] dump_stack_lvl+0xe8/0x150 [ 1487.136956][T25850] should_fail_ex+0x412/0x560 [ 1487.136980][T25850] should_failslab+0xa8/0x100 [ 1487.137000][T25850] ? skb_clone+0x212/0x3a0 [ 1487.137016][T25850] kmem_cache_alloc_noprof+0x87/0x650 [ 1487.137039][T25850] skb_clone+0x212/0x3a0 [ 1487.137056][T25850] __netlink_deliver_tap+0x404/0x850 [ 1487.137087][T25850] ? netlink_deliver_tap+0x2e/0x1b0 [ 1487.137109][T25850] netlink_deliver_tap+0x19c/0x1b0 [ 1487.137130][T25850] netlink_sendskb+0x68/0x140 [ 1487.137150][T25850] netlink_unicast+0x3a3/0x9b0 [ 1487.137174][T25850] ? __pfx_netlink_unicast+0x10/0x10 [ 1487.137199][T25850] netlink_rcv_skb+0x2b6/0x4b0 [ 1487.137221][T25850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.137237][T25850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1487.137269][T25850] ? down_read+0x272/0x2e0 [ 1487.137285][T25850] ? genl_rcv+0xd/0x40 [ 1487.137300][T25850] genl_rcv+0x28/0x40 [ 1487.137313][T25850] netlink_unicast+0x80f/0x9b0 [ 1487.137338][T25850] ? __pfx_netlink_unicast+0x10/0x10 [ 1487.137357][T25850] ? netlink_sendmsg+0x650/0xb40 [ 1487.137376][T25850] ? skb_put+0x11b/0x210 [ 1487.137401][T25850] netlink_sendmsg+0x813/0xb40 [ 1487.137429][T25850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.137453][T25850] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1487.137475][T25850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1487.137495][T25850] ____sys_sendmsg+0x972/0x9f0 [ 1487.137516][T25850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.137538][T25850] ? import_iovec+0x73/0xa0 [ 1487.137565][T25850] ___sys_sendmsg+0x2a5/0x360 [ 1487.137584][T25850] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.137630][T25850] ? __fget_files+0x2a/0x420 [ 1487.137658][T25850] ? __fget_files+0x3a0/0x420 [ 1487.137688][T25850] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1487.137705][T25850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1487.137728][T25850] ? __pfx_ksys_write+0x10/0x10 [ 1487.137753][T25850] do_syscall_64+0x14d/0xf80 [ 1487.137767][T25850] ? trace_irq_disable+0x3b/0x150 [ 1487.137790][T25850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.137805][T25850] ? clear_bhb_loop+0x40/0x90 [ 1487.137824][T25850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.137840][T25850] RIP: 0033:0x7fa28979c799 [ 1487.137855][T25850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.137868][T25850] RSP: 002b:00007fa28a620028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.137885][T25850] RAX: ffffffffffffffda RBX: 00007fa289a15fa0 RCX: 00007fa28979c799 [ 1487.137896][T25850] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1487.137906][T25850] RBP: 00007fa28a620090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.137916][T25850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.137925][T25850] R13: 00007fa289a16038 R14: 00007fa289a15fa0 R15: 00007fa289b3fa48 [ 1487.137949][T25850] [ 1487.161837][ T5832] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 1487.487131][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4671'. [ 1487.496660][T25853] bridge_slave_1: left promiscuous mode [ 1487.503012][T25853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.533702][T25853] bridge_slave_0: left promiscuous mode [ 1487.539469][T25853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.582060][ T5921] usb 3-1: USB disconnect, device number 16 [ 1487.715649][ T5921] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1487.970689][ T5832] usb 4-1: Invalid ep0 maxpacket: 64 [ 1488.033391][T25885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4672'. [ 1488.043249][T25885] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1488.073431][ T30] audit: type=1800 audit(1773078671.013:4552): pid=25870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4672" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1488.160333][ T5921] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1488.161178][ T5832] usb 4-1: new low-speed USB device number 119 using dummy_hcd [ 1488.376157][ T5921] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1488.388151][ T5921] usb 3-1: config 0 has no interface number 0 [ 1488.405105][ T5832] usb 4-1: Invalid ep0 maxpacket: 64 [ 1488.514287][ T5832] usb usb4-port1: attempt power cycle [ 1488.530090][ T5921] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1488.555499][ T5921] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1488.565448][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.626160][ T5921] usb 3-1: Product: syz [ 1488.705584][ T5921] usb 3-1: Manufacturer: syz [ 1488.717205][ T5921] usb 3-1: SerialNumber: syz [ 1488.771235][ T5921] usb 3-1: config 0 descriptor?? [ 1488.880744][ T5832] usb 4-1: new low-speed USB device number 120 using dummy_hcd [ 1488.981982][ T5832] usb 4-1: Invalid ep0 maxpacket: 64 [ 1489.120772][ T5832] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 1489.142697][ T5832] usb 4-1: Invalid ep0 maxpacket: 64 [ 1489.148524][ T5832] usb usb4-port1: unable to enumerate USB device [ 1489.420922][ T5921] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 1491.176497][T25946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4686'. [ 1491.188496][T25946] tipc: Enabling of bearer rejected, failed to enable media [ 1491.203266][ T5921] usb 3-1: USB disconnect, device number 17 [ 1491.387523][T25946] loop6: detected capacity change from 0 to 2560 [ 1491.425031][T25946] buffer_io_error: 32 callbacks suppressed [ 1491.425052][T25946] Buffer I/O error on dev loop6, logical block 0, async page read [ 1491.467836][T25946] Buffer I/O error on dev loop6, logical block 0, async page read [ 1491.481429][T25946] Buffer I/O error on dev loop6, logical block 0, async page read [ 1491.504961][T25946] Buffer I/O error on dev loop6, logical block 0, async page read [ 1491.551775][T25946] Buffer I/O error on dev loop6, logical block 0, async page read [ 1491.559676][T25946] Buffer I/O error on dev loop6, logical block 0, async page read [ 1491.625439][T25946] Buffer I/O error on dev loop6, logical block 0, async page read [ 1491.640841][T25946] Buffer I/O error on dev loop6, logical block 0, async page read [ 1491.659336][T25946] ldm_validate_partition_table(): Disk read failed. [ 1491.760227][ T30] audit: type=1804 audit(1773078674.663:4553): pid=25960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.4687" name="bus" dev="ramfs" ino=119230 res=1 errno=0 [ 1491.784007][T25946] Buffer I/O error on dev loop6, logical block 0, async page read [ 1491.857035][T25946] Buffer I/O error on dev loop6, logical block 0, async page read [ 1491.876638][T25946] Dev loop6: unable to read RDB block 0 [ 1492.147729][T25946] loop6: unable to read partition table [ 1492.215131][T25946] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1492.654648][T25983] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4691'. [ 1492.799240][T25992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1492.808483][T25992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.400759][ T29] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1493.594712][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1493.606870][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.651618][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1493.665830][ T29] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1493.681438][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.719173][ T29] usb 4-1: config 0 descriptor?? [ 1493.735679][T26011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.810946][T26011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.148276][ T29] usbhid 4-1:0.0: can't add hid device: -71 [ 1494.155279][ T29] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1494.194487][ T29] usb 4-1: USB disconnect, device number 122 [ 1494.304052][T26037] netlink: 'syz.6.4701': attribute type 11 has an invalid length. [ 1494.320812][T26037] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.4701'. [ 1494.333789][T26037] vivid-002: disconnect [ 1494.353199][T26037] misc userio: No port type given on /dev/userio [ 1494.369527][T26037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1494.384640][T26037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1494.676321][T26043] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4703'. [ 1495.120229][ T5921] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1495.310230][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 1495.325862][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1495.340299][ T5921] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1495.349699][ T5921] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.440780][ T5921] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1495.464073][ T5921] usb 3-1: config 1 has no interface number 1 [ 1495.491719][ T5921] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1495.613841][ T5921] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1495.858126][ T5921] usb 3-1: config 1 interface 2 has no altsetting 0 [ 1495.941149][ T5921] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1495.954167][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.016929][ T5921] usb 3-1: Product: syz [ 1496.030961][ T5921] usb 3-1: Manufacturer: syz [ 1496.050359][ T5921] usb 3-1: SerialNumber: syz [ 1496.497833][ T5921] usb 3-1: USB disconnect, device number 18 [ 1496.925198][T22521] Bluetooth: hci2: command 0x0406 tx timeout [ 1497.369017][T26066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4701'. [ 1497.602077][T26103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.627318][T26103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.851301][T26037] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4701'. [ 1499.322099][T26066] vivid-002: reconnect [ 1499.330096][ T5893] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1499.398843][T26121] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1499.417020][T26121] bond1 (unregistering): Released all slaves [ 1499.494829][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.507310][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.531638][ T5893] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1499.558530][ T5893] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1499.568235][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.593208][ T5893] usb 4-1: config 0 descriptor?? [ 1499.654313][T26239] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4718'. [ 1500.036958][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 1500.052451][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1500.143684][ T5893] usb 4-1: USB disconnect, device number 123 [ 1500.207605][T26255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4721'. [ 1500.257535][T26255] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4721'. [ 1500.329372][T26255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4721'. [ 1500.551595][ T29] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1500.742402][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.753186][ T29] usb 3-1: config 0 has no interfaces? [ 1500.758684][ T29] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1500.768793][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.788924][ T29] usb 3-1: config 0 descriptor?? [ 1501.027880][ T5921] usb 3-1: USB disconnect, device number 19 [ 1501.472424][T26301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.482212][T26301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1501.798497][T26315] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4730'. [ 1501.914895][T26322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4732'. [ 1501.925020][T26322] bridge_slave_1: left allmulticast mode [ 1501.931154][T26322] bridge_slave_1: left promiscuous mode [ 1501.937365][T26322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.041964][T26320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4729'. [ 1502.165654][ T30] audit: type=1800 audit(1773078685.103:4554): pid=26314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4729" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1502.266037][T26322] bridge_slave_0: left allmulticast mode [ 1502.272804][T26322] bridge_slave_0: left promiscuous mode [ 1502.291521][T26322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.615234][T26332] FAULT_INJECTION: forcing a failure. [ 1502.615234][T26332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.852977][T26332] CPU: 1 UID: 0 PID: 26332 Comm: syz.1.4734 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.853012][T26332] Tainted: [L]=SOFTLOCKUP [ 1502.853021][T26332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1502.853042][T26332] Call Trace: [ 1502.853051][T26332] [ 1502.853061][T26332] dump_stack_lvl+0xe8/0x150 [ 1502.853102][T26332] should_fail_ex+0x412/0x560 [ 1502.853136][T26332] _copy_from_user+0x2d/0xb0 [ 1502.853171][T26332] ___sys_sendmsg+0x1c6/0x360 [ 1502.853199][T26332] ? __pfx____sys_sendmsg+0x10/0x10 [ 1502.853256][T26332] ? __fget_files+0x2a/0x420 [ 1502.853288][T26332] ? __fget_files+0x3a0/0x420 [ 1502.853329][T26332] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1502.853354][T26332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1502.853385][T26332] ? __pfx_ksys_write+0x10/0x10 [ 1502.853420][T26332] do_syscall_64+0x14d/0xf80 [ 1502.853440][T26332] ? trace_irq_disable+0x3b/0x150 [ 1502.853471][T26332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.853493][T26332] ? clear_bhb_loop+0x40/0x90 [ 1502.853520][T26332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.853542][T26332] RIP: 0033:0x7fa28979c799 [ 1502.853562][T26332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.853581][T26332] RSP: 002b:00007fa28a620028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1502.853604][T26332] RAX: ffffffffffffffda RBX: 00007fa289a15fa0 RCX: 00007fa28979c799 [ 1502.853620][T26332] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1502.853634][T26332] RBP: 00007fa28a620090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.853647][T26332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.853660][T26332] R13: 00007fa289a16038 R14: 00007fa289a15fa0 R15: 00007fa289b3fa48 [ 1502.853694][T26332] [ 1505.045955][T26365] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4742'. [ 1505.196074][T26368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.229889][T26368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.529633][T26398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.551937][T26398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.942817][T26418] netlink: 'syz.2.4749': attribute type 4 has an invalid length. [ 1505.960960][T26418] netlink: 'syz.2.4749': attribute type 4 has an invalid length. [ 1505.976048][T26418] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1508.134943][T26465] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1508.150983][T26467] FAULT_INJECTION: forcing a failure. [ 1508.150983][T26467] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.180871][T26467] CPU: 1 UID: 0 PID: 26467 Comm: syz.5.4757 Tainted: G L syzkaller #0 PREEMPT(full) [ 1508.180907][T26467] Tainted: [L]=SOFTLOCKUP [ 1508.180916][T26467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1508.180929][T26467] Call Trace: [ 1508.180938][T26467] [ 1508.180948][T26467] dump_stack_lvl+0xe8/0x150 [ 1508.180984][T26467] should_fail_ex+0x412/0x560 [ 1508.181025][T26467] should_failslab+0xa8/0x100 [ 1508.181054][T26467] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1508.181079][T26467] ? __alloc_skb+0x186/0x7d0 [ 1508.181108][T26467] ? __alloc_skb+0x1d0/0x7d0 [ 1508.181136][T26467] ? __local_bh_enable_ip+0xd0/0x130 [ 1508.181169][T26467] __alloc_skb+0x1d0/0x7d0 [ 1508.181204][T26467] inet_rtm_getroute+0x828/0x2930 [ 1508.181242][T26467] ? kasan_quarantine_put+0xbb/0x1f0 [ 1508.181265][T26467] ? lockdep_hardirqs_on+0x7a/0x110 [ 1508.181297][T26467] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 1508.181349][T26467] ? __local_bh_enable_ip+0xd0/0x130 [ 1508.181382][T26467] ? __dev_queue_xmit+0x1e78/0x3890 [ 1508.181403][T26467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.181449][T26467] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 1508.181472][T26467] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1508.181506][T26467] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1508.181563][T26467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1508.181590][T26467] ? ref_tracker_free+0x693/0x840 [ 1508.181618][T26467] ? __copy_skb_header+0xa3/0x4a0 [ 1508.181641][T26467] ? __pfx_ref_tracker_free+0x10/0x10 [ 1508.181668][T26467] ? __skb_clone+0x63/0x7a0 [ 1508.181698][T26467] netlink_rcv_skb+0x232/0x4b0 [ 1508.181729][T26467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1508.181762][T26467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1508.181803][T26467] ? netlink_deliver_tap+0x2e/0x1b0 [ 1508.181840][T26467] netlink_unicast+0x80f/0x9b0 [ 1508.181874][T26467] ? __pfx_netlink_unicast+0x10/0x10 [ 1508.181902][T26467] ? netlink_sendmsg+0x650/0xb40 [ 1508.181928][T26467] ? skb_put+0x11b/0x210 [ 1508.181963][T26467] netlink_sendmsg+0x813/0xb40 [ 1508.182001][T26467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1508.182034][T26467] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1508.182064][T26467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1508.182092][T26467] ____sys_sendmsg+0x972/0x9f0 [ 1508.182123][T26467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1508.182153][T26467] ? import_iovec+0x73/0xa0 [ 1508.182190][T26467] ___sys_sendmsg+0x2a5/0x360 [ 1508.182217][T26467] ? __pfx____sys_sendmsg+0x10/0x10 [ 1508.182274][T26467] ? __fget_files+0x2a/0x420 [ 1508.182304][T26467] ? __fget_files+0x3a0/0x420 [ 1508.182346][T26467] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1508.182370][T26467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1508.182402][T26467] ? __pfx_ksys_write+0x10/0x10 [ 1508.182437][T26467] do_syscall_64+0x14d/0xf80 [ 1508.182456][T26467] ? trace_irq_disable+0x3b/0x150 [ 1508.182488][T26467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.182509][T26467] ? clear_bhb_loop+0x40/0x90 [ 1508.182536][T26467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.182566][T26467] RIP: 0033:0x7f1e3479c799 [ 1508.182586][T26467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.182605][T26467] RSP: 002b:00007f1e355b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1508.182628][T26467] RAX: ffffffffffffffda RBX: 00007f1e34a15fa0 RCX: 00007f1e3479c799 [ 1508.182644][T26467] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 1508.182658][T26467] RBP: 00007f1e355b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.182672][T26467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.182686][T26467] R13: 00007f1e34a16038 R14: 00007f1e34a15fa0 R15: 00007f1e34b3fa48 [ 1508.182719][T26467] [ 1509.036147][T26475] FAULT_INJECTION: forcing a failure. [ 1509.036147][T26475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.085201][T26475] CPU: 0 UID: 0 PID: 26475 Comm: syz.3.4759 Tainted: G L syzkaller #0 PREEMPT(full) [ 1509.085237][T26475] Tainted: [L]=SOFTLOCKUP [ 1509.085247][T26475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1509.085261][T26475] Call Trace: [ 1509.085270][T26475] [ 1509.085280][T26475] dump_stack_lvl+0xe8/0x150 [ 1509.085316][T26475] should_fail_ex+0x412/0x560 [ 1509.085352][T26475] _copy_from_user+0x2d/0xb0 [ 1509.085388][T26475] ___sys_recvmsg+0x175/0x590 [ 1509.085411][T26475] ? __lock_acquire+0x6b5/0x2cf0 [ 1509.085447][T26475] ? __pfx____sys_recvmsg+0x10/0x10 [ 1509.085518][T26475] do_recvmmsg+0x334/0x800 [ 1509.085551][T26475] ? __pfx_do_recvmmsg+0x10/0x10 [ 1509.085586][T26475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1509.085626][T26475] __x64_sys_recvmmsg+0x198/0x250 [ 1509.085653][T26475] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1509.085689][T26475] do_syscall_64+0x14d/0xf80 [ 1509.085708][T26475] ? trace_irq_disable+0x3b/0x150 [ 1509.085740][T26475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.085763][T26475] ? clear_bhb_loop+0x40/0x90 [ 1509.085791][T26475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.085813][T26475] RIP: 0033:0x7fd3a339c799 [ 1509.085840][T26475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.085860][T26475] RSP: 002b:00007fd3a15f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1509.085884][T26475] RAX: ffffffffffffffda RBX: 00007fd3a3616090 RCX: 00007fd3a339c799 [ 1509.085900][T26475] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1509.085915][T26475] RBP: 00007fd3a15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.085929][T26475] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1509.085943][T26475] R13: 00007fd3a3616128 R14: 00007fd3a3616090 R15: 00007fd3a373fa48 [ 1509.085975][T26475] [ 1509.286752][ T30] audit: type=1326 audit(1773078692.023:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26476 comm="syz.5.4761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e3479c799 code=0x0 [ 1509.397842][T26489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.406947][T26489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.271966][T26501] FAULT_INJECTION: forcing a failure. [ 1510.271966][T26501] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.313951][T26501] CPU: 0 UID: 0 PID: 26501 Comm: syz.6.4765 Tainted: G L syzkaller #0 PREEMPT(full) [ 1510.313978][T26501] Tainted: [L]=SOFTLOCKUP [ 1510.313984][T26501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1510.313994][T26501] Call Trace: [ 1510.314000][T26501] [ 1510.314007][T26501] dump_stack_lvl+0xe8/0x150 [ 1510.314034][T26501] should_fail_ex+0x412/0x560 [ 1510.314058][T26501] should_failslab+0xa8/0x100 [ 1510.314079][T26501] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1510.314098][T26501] ? __alloc_skb+0x1d0/0x7d0 [ 1510.314119][T26501] ? __local_bh_enable_ip+0xd0/0x130 [ 1510.314143][T26501] __alloc_skb+0x1d0/0x7d0 [ 1510.314168][T26501] netlink_dump+0x1ef/0xe80 [ 1510.314190][T26501] ? rcu_is_watching+0x15/0xb0 [ 1510.314213][T26501] ? cap_capable+0x123/0x490 [ 1510.314227][T26501] ? rcu_is_watching+0x15/0xb0 [ 1510.314250][T26501] ? __pfx_netlink_dump+0x10/0x10 [ 1510.314269][T26501] ? security_capable+0xb9/0x2c0 [ 1510.314344][T26501] __netlink_dump_start+0x5cb/0x7e0 [ 1510.314388][T26501] inet_diag_handler_cmd+0x1e0/0x2c0 [ 1510.314408][T26501] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 1510.314428][T26501] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 1510.314442][T26501] ? __pfx_inet_diag_dump+0x10/0x10 [ 1510.314456][T26501] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 1510.314473][T26501] ? sock_diag_lock_handler+0x19/0x290 [ 1510.314493][T26501] ? sock_diag_lock_handler+0x19/0x290 [ 1510.314517][T26501] sock_diag_rcv_msg+0x4cc/0x600 [ 1510.314549][T26501] netlink_rcv_skb+0x232/0x4b0 [ 1510.314576][T26501] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1510.314611][T26501] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1510.314642][T26501] ? netlink_deliver_tap+0x2e/0x1b0 [ 1510.314670][T26501] netlink_unicast+0x80f/0x9b0 [ 1510.314695][T26501] ? __pfx_netlink_unicast+0x10/0x10 [ 1510.314715][T26501] ? netlink_sendmsg+0x650/0xb40 [ 1510.314740][T26501] ? skb_put+0x11b/0x210 [ 1510.314779][T26501] netlink_sendmsg+0x813/0xb40 [ 1510.314807][T26501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1510.314830][T26501] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1510.314852][T26501] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1510.314872][T26501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1510.314892][T26501] sock_write_iter+0x49b/0x4f0 [ 1510.314925][T26501] ? __pfx_sock_write_iter+0x10/0x10 [ 1510.314957][T26501] do_iter_readv_writev+0x619/0x8c0 [ 1510.314977][T26501] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1510.314998][T26501] ? bpf_lsm_file_permission+0x9/0x20 [ 1510.315016][T26501] ? security_file_permission+0x75/0x260 [ 1510.315034][T26501] ? rw_verify_area+0x255/0x4d0 [ 1510.315052][T26501] vfs_writev+0x33c/0x990 [ 1510.315078][T26501] ? __pfx_vfs_writev+0x10/0x10 [ 1510.315108][T26501] ? __fget_files+0x2a/0x420 [ 1510.315133][T26501] ? __fget_files+0x3a0/0x420 [ 1510.315155][T26501] ? __fget_files+0x2a/0x420 [ 1510.315183][T26501] do_writev+0x154/0x2e0 [ 1510.315204][T26501] ? __pfx_do_writev+0x10/0x10 [ 1510.315232][T26501] do_syscall_64+0x14d/0xf80 [ 1510.315245][T26501] ? trace_irq_disable+0x3b/0x150 [ 1510.315267][T26501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.315283][T26501] ? clear_bhb_loop+0x40/0x90 [ 1510.315301][T26501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.315316][T26501] RIP: 0033:0x7f596f99c799 [ 1510.315330][T26501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.315343][T26501] RSP: 002b:00007f59708f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1510.315359][T26501] RAX: ffffffffffffffda RBX: 00007f596fc15fa0 RCX: 00007f596f99c799 [ 1510.315370][T26501] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 1510.315380][T26501] RBP: 00007f59708f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1510.315389][T26501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.315399][T26501] R13: 00007f596fc16038 R14: 00007f596fc15fa0 R15: 00007f596fd3fa48 [ 1510.315455][T26501] [ 1510.830905][T26505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.868708][T26505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.459593][T26519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1511.480451][T26519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1511.534710][T26519] erspan0: entered promiscuous mode [ 1511.554964][T26519] gretap0: entered promiscuous mode [ 1511.566029][T26524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.576586][T26519] debugfs: 'hsr0' already exists in 'hsr' [ 1511.592814][T26524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.601220][T26519] Cannot create hsr debugfs directory [ 1512.010944][ T5921] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1512.360030][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 1512.371793][ T5921] usb 3-1: config 2 has an invalid interface number: 194 but max is 0 [ 1512.380712][ T5921] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.393570][ T5921] usb 3-1: config 2 has no interface number 0 [ 1512.441089][ T5921] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1512.452825][ T5921] usb 3-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1512.551854][ T5921] usb 3-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1512.566002][ T5921] usb 3-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 1512.575491][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.583651][ T5832] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1512.921511][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.936236][ T5832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1513.006930][ T5832] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1513.017383][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.049431][ T5832] usb 4-1: config 0 descriptor?? [ 1513.571883][ T5921] usb 3-1: string descriptor 0 read error: -71 [ 1513.597578][ T5921] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1514.180440][ T5826] udevd[5826]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 1514.229722][ T5826] udevd[5826]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1514.366251][ T5921] snd-usb-audio 3-1:2.194: probe with driver snd-usb-audio failed with error -12 [ 1514.408012][ T5921] usb 3-1: USB disconnect, device number 20 [ 1514.730103][ T5921] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1514.870173][ T5921] usb 3-1: device descriptor read/64, error -71 [ 1515.120776][ T5921] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1515.216952][ T5832] usbhid 4-1:0.0: can't add hid device: -71 [ 1515.366748][ T5832] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1515.375990][ T5921] usb 3-1: device descriptor read/64, error -71 [ 1515.406765][ T5832] usb 4-1: USB disconnect, device number 124 [ 1515.438876][ T29] hid-generic 0000:0000:0000.0067: unknown main item tag 0x0 [ 1515.498898][ T29] hid-generic 0000:0000:0000.0067: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1515.519587][ T5921] usb usb3-port1: attempt power cycle [ 1515.712839][T26631] fido_id[26631]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1515.890139][ T5921] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1515.914158][ T5921] usb 3-1: device descriptor read/8, error -71 [ 1515.976094][T26639] loop9: detected capacity change from 0 to 7 [ 1515.990534][T26639] Dev loop9: unable to read RDB block 7 [ 1515.997832][T26639] loop9: unable to read partition table [ 1516.061176][T26639] loop9: partition table beyond EOD, truncated [ 1516.081917][T26639] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1516.192274][ T5921] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1516.224911][ T5921] usb 3-1: device descriptor read/8, error -71 [ 1516.340914][ T5921] usb usb3-port1: unable to enumerate USB device [ 1517.085204][T26664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4783'. [ 1517.095489][T26664] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1518.111902][T26688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4786'. [ 1518.987424][T26708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.071906][T26708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1519.244121][T26708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.266706][T26708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.338272][T26780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.363016][T26780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.079448][T26824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.101300][T26824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.532169][T26845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4805'. [ 1526.561004][T26845] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1526.728538][ T30] audit: type=1800 audit(1773078709.663:4556): pid=26840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4805" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1528.638173][T26876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.682878][T26876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.855053][T26876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.890955][T26876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.940643][ T5921] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1529.111651][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1529.358126][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1529.384540][ T5921] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1529.410377][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.428449][ T5921] usb 3-1: config 0 descriptor?? [ 1529.860203][ T5921] cp2112 0003:10C4:EA90.0068: unknown main item tag 0x0 [ 1529.867254][ T5921] cp2112 0003:10C4:EA90.0068: unknown main item tag 0x0 [ 1529.874618][ T5921] cp2112 0003:10C4:EA90.0068: unknown main item tag 0x0 [ 1529.882113][ T5921] cp2112 0003:10C4:EA90.0068: unknown main item tag 0x0 [ 1529.889161][ T5921] cp2112 0003:10C4:EA90.0068: unknown main item tag 0x0 [ 1529.897530][ T5921] cp2112 0003:10C4:EA90.0068: unknown main item tag 0x0 [ 1529.906004][ T5921] cp2112 0003:10C4:EA90.0068: unknown main item tag 0x0 [ 1529.921034][ T5921] cp2112 0003:10C4:EA90.0068: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1530.053713][ T5921] cp2112 0003:10C4:EA90.0068: Part Number: 0x82 Device Version: 0xFE [ 1530.076619][T26914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4817'. [ 1530.254800][ T5921] cp2112 0003:10C4:EA90.0068: error requesting SMBus config [ 1530.281225][ T5921] cp2112 0003:10C4:EA90.0068: probe with driver cp2112 failed with error -32 [ 1530.584279][T26922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4819'. [ 1530.714379][T26922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.725588][T26922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.776166][ T5893] usb 3-1: USB disconnect, device number 25 [ 1531.793936][T12915] Bluetooth: hci2: unexpected event for opcode 0xd48f [ 1534.046156][T26991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4828'. [ 1534.374588][T19899] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1534.719788][T19899] usb 4-1: Using ep0 maxpacket: 16 [ 1534.761018][T19899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.774870][T27013] FAULT_INJECTION: forcing a failure. [ 1534.774870][T27013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.784458][T19899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1534.876567][T19899] usb 4-1: New USB device found, idVendor=046d, idProduct=0921, bcdDevice=ab.34 [ 1534.894117][T19899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.984086][T19899] usb 4-1: Product: syz [ 1534.989538][T19899] usb 4-1: Manufacturer: syz [ 1535.033925][T19899] usb 4-1: SerialNumber: syz [ 1535.053636][T27013] CPU: 0 UID: 0 PID: 27013 Comm: syz.2.4834 Tainted: G L syzkaller #0 PREEMPT(full) [ 1535.053662][T27013] Tainted: [L]=SOFTLOCKUP [ 1535.053668][T27013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1535.053678][T27013] Call Trace: [ 1535.053685][T27013] [ 1535.053692][T27013] dump_stack_lvl+0xe8/0x150 [ 1535.053719][T27013] should_fail_ex+0x412/0x560 [ 1535.053744][T27013] _copy_from_user+0x2d/0xb0 [ 1535.053769][T27013] ___sys_recvmsg+0x175/0x590 [ 1535.053784][T27013] ? get_pid_task+0x20/0x1f0 [ 1535.053797][T27013] ? get_pid_task+0x20/0x1f0 [ 1535.053814][T27013] ? __pfx____sys_recvmsg+0x10/0x10 [ 1535.053866][T27013] ? __fget_files+0x3a0/0x420 [ 1535.053910][T27013] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1535.053939][T27013] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1535.053967][T27013] ? __pfx_ksys_write+0x10/0x10 [ 1535.053992][T27013] do_syscall_64+0x14d/0xf80 [ 1535.054007][T27013] ? trace_irq_disable+0x3b/0x150 [ 1535.054029][T27013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.054046][T27013] ? clear_bhb_loop+0x40/0x90 [ 1535.054065][T27013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1535.054081][T27013] RIP: 0033:0x7f500a59c799 [ 1535.054096][T27013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1535.054110][T27013] RSP: 002b:00007f500b417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1535.054127][T27013] RAX: ffffffffffffffda RBX: 00007f500a815fa0 RCX: 00007f500a59c799 [ 1535.054139][T27013] RDX: 0000000000000000 RSI: 0000200000001700 RDI: 0000000000000003 [ 1535.054149][T27013] RBP: 00007f500b417090 R08: 0000000000000000 R09: 0000000000000000 [ 1535.054158][T27013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1535.054168][T27013] R13: 00007f500a816038 R14: 00007f500a815fa0 R15: 00007f500a93fa48 [ 1535.054191][T27013] [ 1535.135347][T19899] usb 4-1: config 0 descriptor?? [ 1535.768349][ T30] audit: type=1800 audit(1773078718.493:4557): pid=27028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4835" name="bus" dev="tmpfs" ino=2925 res=0 errno=0 [ 1536.928248][T27051] kvm: pic: non byte write [ 1536.934172][T27051] kvm: pic: non byte write [ 1536.986218][T27051] geneve2: entered promiscuous mode [ 1537.401418][T19899] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 1537.517437][T19899] usb 4-1: USB disconnect, device number 125 [ 1537.606054][T27082] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4841'. [ 1538.728262][T27106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.778394][T27106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1538.920592][ T5893] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1538.972780][T27106] @ÿ: renamed from veth0_vlan [ 1539.140320][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 1539.411201][ T5893] usb 3-1: config 1 has an invalid interface number: 228 but max is 0 [ 1539.448664][ T5893] usb 3-1: config 1 has no interface number 0 [ 1539.493444][ T5893] usb 3-1: config 1 interface 228 has no altsetting 0 [ 1539.545935][ T5893] usb 3-1: New USB device found, idVendor=0a5c, idProduct=396e, bcdDevice=21.b9 [ 1539.590850][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.598971][ T5893] usb 3-1: Product: syz [ 1539.666560][ T5893] usb 3-1: Manufacturer: syz [ 1539.699878][ T5893] usb 3-1: SerialNumber: syz [ 1542.008656][T27143] fuse: Bad value for 'fd' [ 1542.119246][ T5893] usb 3-1: USB disconnect, device number 26 [ 1542.486825][T27156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4853'. [ 1542.654889][T27160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1542.745576][T27160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.320043][ T5921] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1543.399027][T27199] FAULT_INJECTION: forcing a failure. [ 1543.399027][T27199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1543.419168][T27199] CPU: 1 UID: 0 PID: 27199 Comm: syz.3.4860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1543.419205][T27199] Tainted: [L]=SOFTLOCKUP [ 1543.419214][T27199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1543.419228][T27199] Call Trace: [ 1543.419237][T27199] [ 1543.419247][T27199] dump_stack_lvl+0xe8/0x150 [ 1543.419284][T27199] should_fail_ex+0x412/0x560 [ 1543.419317][T27199] _copy_to_user+0x31/0xb0 [ 1543.419354][T27199] simple_read_from_buffer+0xe1/0x170 [ 1543.419391][T27199] proc_fail_nth_read+0x1bb/0x230 [ 1543.419426][T27199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1543.419461][T27199] ? rw_verify_area+0x2a6/0x4d0 [ 1543.419483][T27199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1543.419516][T27199] vfs_read+0x20c/0xa70 [ 1543.419538][T27199] ? fdget_pos+0x246/0x320 [ 1543.419575][T27199] ? __pfx___mutex_lock+0x10/0x10 [ 1543.419599][T27199] ? __pfx_vfs_read+0x10/0x10 [ 1543.419625][T27199] ? __fget_files+0x2a/0x420 [ 1543.419666][T27199] ? __fget_files+0x3a0/0x420 [ 1543.419697][T27199] ? __fget_files+0x2a/0x420 [ 1543.419739][T27199] ksys_read+0x150/0x270 [ 1543.419765][T27199] ? __pfx_ksys_read+0x10/0x10 [ 1543.419800][T27199] do_syscall_64+0x14d/0xf80 [ 1543.419821][T27199] ? trace_irq_disable+0x3b/0x150 [ 1543.419852][T27199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.419883][T27199] ? clear_bhb_loop+0x40/0x90 [ 1543.419910][T27199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.419931][T27199] RIP: 0033:0x7fd3a335cfce [ 1543.419952][T27199] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1543.419971][T27199] RSP: 002b:00007fd3a15f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1543.419994][T27199] RAX: ffffffffffffffda RBX: 00007fd3a15f66c0 RCX: 00007fd3a335cfce [ 1543.420010][T27199] RDX: 000000000000000f RSI: 00007fd3a15f60a0 RDI: 0000000000000005 [ 1543.420025][T27199] RBP: 00007fd3a15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.420039][T27199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.420052][T27199] R13: 00007fd3a3616128 R14: 00007fd3a3616090 R15: 00007fd3a373fa48 [ 1543.420087][T27199] [ 1543.946919][ T5921] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1543.967292][ T5921] usb 3-1: config 0 has no interface number 0 [ 1543.988129][ T5921] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1544.243942][ T5921] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1544.253675][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.460512][ T5921] usb 3-1: Product: syz [ 1544.503064][ T5921] usb 3-1: Manufacturer: syz [ 1544.507734][ T5921] usb 3-1: SerialNumber: syz [ 1544.545609][T27220] fuse: Bad value for 'user_id' [ 1544.560195][ T5921] usb 3-1: config 0 descriptor?? [ 1544.575899][T27221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.586099][T27220] fuse: Bad value for 'user_id' [ 1544.655345][T27221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.295969][ T5921] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 1545.513476][T27235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4865'. [ 1546.024300][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.031537][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.537453][T22975] usb 3-1: USB disconnect, device number 27 [ 1547.091279][ T5893] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1547.369372][ T30] audit: type=1326 audit(1773078730.303:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27282 comm="syz.2.4874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f500a59c799 code=0x0 [ 1547.452090][ T5893] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1547.519015][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.528472][ T5893] usb 4-1: Product: syz [ 1547.533059][ T5893] usb 4-1: Manufacturer: syz [ 1547.548255][ T5893] usb 4-1: SerialNumber: syz [ 1547.569606][ T5893] usb 4-1: config 0 descriptor?? [ 1547.610155][ T5893] hub 4-1:0.0: bad descriptor, ignoring hub [ 1547.680224][ T5893] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1547.834774][ T5893] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1547.858718][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1547.889292][ T5893] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1547.918633][ T5893] usb 4-1: media controller created [ 1547.988754][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1548.168619][ T5893] DVB: Unable to find symbol dib7000p_attach() [ 1548.209859][ T5893] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1548.412284][ T5893] rc_core: IR keymap rc-dib0700-rc5 not found [ 1548.453216][ T5893] Registered IR keymap rc-empty [ 1548.458345][ T5893] dvb-usb: could not initialize remote control. [ 1548.494046][ T5893] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1549.228003][T27308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4876'. [ 1549.493862][ T29] usb 4-1: USB disconnect, device number 126 [ 1550.069233][ T29] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1550.449046][T27339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4881'. [ 1550.510761][ T29] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 1550.531862][T27339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4881'. [ 1550.650697][ T29] usb 4-1: device descriptor read/64, error -71 [ 1550.890635][ T29] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 1551.020761][ T29] usb 4-1: device descriptor read/64, error -71 [ 1551.130944][ T29] usb usb4-port1: attempt power cycle [ 1551.600741][ T29] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 1552.066072][ T29] usb 4-1: device descriptor read/8, error -71 [ 1552.352269][ T29] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 1552.384497][ T29] usb 4-1: device descriptor read/8, error -71 [ 1552.510823][ T29] usb usb4-port1: unable to enumerate USB device [ 1553.580512][T19899] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1553.738724][T19899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1553.749616][T19899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1553.761630][T19899] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1553.777795][T19899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1553.796939][T19899] usb 3-1: SerialNumber: syz [ 1553.920105][ T5921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1554.049391][T19899] usb 3-1: 0:2 : does not exist [ 1554.136944][ T5921] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1554.146064][ T5921] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1554.156380][ T5921] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.173145][T19899] usb 3-1: USB disconnect, device number 28 [ 1554.175852][ T5921] usb 4-1: config 220 has no interface number 2 [ 1554.200397][ T5921] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1554.314806][ T5921] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1554.339485][ T5921] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1554.357627][ T5921] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1554.457257][ T5921] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1554.467180][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.475340][ T5921] usb 4-1: Product: syz [ 1554.480651][ T5921] usb 4-1: Manufacturer: syz [ 1554.491180][ T5921] usb 4-1: SerialNumber: syz [ 1554.728368][ T5921] usb 4-1: selecting invalid altsetting 0 [ 1554.747249][ T5921] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1554.763324][ T5921] uvcvideo 4-1:220.0: No valid video chain found. [ 1554.876298][ T5921] usb 4-1: selecting invalid altsetting 0 [ 1554.900307][ T5921] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1554.946912][ T5921] usb 4-1: USB disconnect, device number 5 [ 1555.007879][ T31] INFO: task kworker/0:1:11345 blocked for more than 143 seconds. [ 1555.035106][ T31] Tainted: G L syzkaller #0 [ 1555.080980][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1555.110030][ T31] task:kworker/0:1 state:D stack:21768 pid:11345 tgid:11345 ppid:2 task_flags:0x4288160 flags:0x00080000 [ 1555.138155][ T31] Workqueue: usb_hub_wq hub_event [ 1555.165717][ T31] Call Trace: [ 1555.179005][ T31] [ 1555.182544][ T31] __schedule+0x15dd/0x52d0 [ 1555.187325][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1555.192741][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1555.197879][ T31] ? __pfx___schedule+0x10/0x10 [ 1555.205150][ T31] ? schedule+0x90/0x360 [ 1555.220539][ T31] schedule+0x164/0x360 [ 1555.230169][ T31] schedule_timeout+0xc3/0x2c0 [ 1555.240737][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1555.259419][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1555.284520][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1555.361012][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1555.366376][ T31] ? wait_for_completion+0x274/0x5e0 [ 1555.372123][ T31] wait_for_completion+0x2cc/0x5e0 [ 1555.377421][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1555.383644][ T31] i2c_del_adapter+0x5c0/0x790 [ 1555.388548][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1555.394258][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1555.401033][ T31] ? kfree+0x1c1/0x630 [ 1555.405326][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 1555.641785][ T31] dvb_usb_device_exit+0x1cb/0x360 [ 1555.647149][ T31] ? __pfx_rpm_resume+0x10/0x10 [ 1555.652579][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 1555.659036][ T31] ? usb_disable_interface+0x31d/0x350 [ 1555.665242][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1555.672724][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1555.678932][ T31] usb_unbind_interface+0x26e/0x910 [ 1555.684761][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1555.700649][ T31] device_release_driver_internal+0x4d9/0x860 [ 1555.707071][ T31] bus_remove_device+0x34d/0x440 [ 1555.715859][ T31] device_del+0x527/0x8f0 [ 1555.720959][ T31] ? usb_disconnect+0xf8/0x990 [ 1555.725960][ T31] ? __pfx_device_del+0x10/0x10 [ 1555.731419][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1555.736642][ T31] usb_disable_device+0x3d4/0x8d0 [ 1555.742324][ T31] usb_disconnect+0x32f/0x990 [ 1555.747244][ T31] hub_event+0x1cc9/0x4f30 [ 1555.752506][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1555.757622][ T31] ? __pfx_hub_event+0x10/0x10 [ 1555.763175][ T31] ? process_scheduled_works+0xa25/0x1830 [ 1555.769069][ T31] ? process_scheduled_works+0xa25/0x1830 [ 1555.775350][ T31] process_scheduled_works+0xb02/0x1830 [ 1555.782887][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1555.789105][ T31] ? assign_work+0x3d5/0x5e0 [ 1555.795166][ T31] worker_thread+0xa50/0xfc0 [ 1555.802905][ T31] kthread+0x388/0x470 [ 1555.807115][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1555.815142][ T31] ? __pfx_kthread+0x10/0x10 [ 1555.819871][ T31] ret_from_fork+0x51e/0xb90 [ 1555.827436][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1555.834060][ T31] ? __switch_to+0xc7d/0x1450 [ 1555.839100][ T31] ? __pfx_kthread+0x10/0x10 [ 1555.844090][ T31] ret_from_fork_asm+0x1a/0x30 [ 1555.849235][ T31] [ 1555.860659][ T31] [ 1555.860659][ T31] Showing all locks held in the system: [ 1555.869006][ T31] 1 lock held by khungtaskd/31: [ 1555.875589][ T31] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1555.896288][ T31] 2 locks held by getty/5588: [ 1555.902574][ T31] #0: ffff888036ef90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1555.915171][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1555.979383][ T31] 5 locks held by kworker/0:1/11345: [ 1555.985012][ T31] #0: ffff88801fa95948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1555.996866][ T31] #1: ffffc90003097c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1556.011820][ T31] #2: ffff888029d93198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1556.027266][ T31] #3: ffff88802b7aa198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 1556.037683][ T31] #4: ffff88804c457160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 1556.048725][ T31] 1 lock held by syz.3.4894/27399: [ 1556.054181][ T31] #0: ffffffff8e764540 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1556.064622][ T31] 1 lock held by syz.1.4897/27458: [ 1556.070759][ T31] [ 1556.073658][ T31] ============================================= [ 1556.073658][ T31] [ 1556.093586][ T31] NMI backtrace for cpu 0 [ 1556.093613][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1556.093634][ T31] Tainted: [L]=SOFTLOCKUP [ 1556.093640][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1556.093650][ T31] Call Trace: [ 1556.093656][ T31] [ 1556.093663][ T31] dump_stack_lvl+0xe8/0x150 [ 1556.093689][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1556.093709][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1556.093731][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1556.093753][ T31] sys_info+0x135/0x170 [ 1556.093769][ T31] watchdog+0xfd9/0x1030 [ 1556.093802][ T31] ? watchdog+0x21a/0x1030 [ 1556.093831][ T31] kthread+0x388/0x470 [ 1556.093846][ T31] ? __pfx_watchdog+0x10/0x10 [ 1556.093868][ T31] ? __pfx_kthread+0x10/0x10 [ 1556.093883][ T31] ret_from_fork+0x51e/0xb90 [ 1556.093907][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1556.093926][ T31] ? __switch_to+0xc7d/0x1450 [ 1556.093945][ T31] ? __pfx_kthread+0x10/0x10 [ 1556.093961][ T31] ret_from_fork_asm+0x1a/0x30 [ 1556.094019][ T31] [ 1556.094029][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1556.212147][ C1] NMI backtrace for cpu 1 [ 1556.212169][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1556.212194][ C1] Tainted: [L]=SOFTLOCKUP [ 1556.212201][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1556.212214][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1556.212248][ C1] Code: fe 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 82 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1556.212265][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1556.212281][ C1] RAX: 0000000001f61e63 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 1556.212295][ C1] RDX: 0000000000000001 RSI: ffffffff8def4b2d RDI: ffffffff8c27b380 [ 1556.212309][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 1556.212324][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff90118bb0 [ 1556.212338][ C1] R13: 1ffff11003ad8000 R14: 0000000000000001 R15: 0000000000000001 [ 1556.212350][ C1] FS: 0000000000000000(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 1556.212366][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1556.212378][ C1] CR2: 000020000024e030 CR3: 0000000031a16000 CR4: 00000000003526f0 [ 1556.212396][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1556.212409][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1556.212422][ C1] Call Trace: [ 1556.212429][ C1] [ 1556.212436][ C1] default_idle+0x9/0x20 [ 1556.212455][ C1] default_idle_call+0x72/0xb0 [ 1556.212476][ C1] do_idle+0x1bd/0x500 [ 1556.212500][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1556.212523][ C1] ? __pfx_do_idle+0x10/0x10 [ 1556.212559][ C1] cpu_startup_entry+0x43/0x60 [ 1556.212584][ C1] start_secondary+0x101/0x110 [ 1556.212607][ C1] common_startup_64+0x13e/0x147 [ 1556.212633][ C1] [ 1556.506905][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1556.513838][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1556.524553][ T31] Tainted: [L]=SOFTLOCKUP [ 1556.528902][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1556.538989][ T31] Call Trace: [ 1556.542295][ T31] [ 1556.545256][ T31] vpanic+0x56c/0xa60 [ 1556.549281][ T31] ? __pfx___schedule+0x10/0x10 [ 1556.554167][ T31] ? __pfx_vpanic+0x10/0x10 [ 1556.558705][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1556.563950][ T31] panic+0xc5/0xd0 [ 1556.567710][ T31] ? __pfx_panic+0x10/0x10 [ 1556.572193][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1556.577597][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1556.583781][ T31] watchdog+0x1023/0x1030 [ 1556.588155][ T31] ? watchdog+0x21a/0x1030 [ 1556.592609][ T31] kthread+0x388/0x470 [ 1556.596700][ T31] ? __pfx_watchdog+0x10/0x10 [ 1556.601420][ T31] ? __pfx_kthread+0x10/0x10 [ 1556.606215][ T31] ret_from_fork+0x51e/0xb90 [ 1556.610844][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1556.616000][ T31] ? __switch_to+0xc7d/0x1450 [ 1556.620718][ T31] ? __pfx_kthread+0x10/0x10 [ 1556.625359][ T31] ret_from_fork_asm+0x1a/0x30 [ 1556.630189][ T31] [ 1556.633831][ T31] Kernel Offset: disabled [ 1556.638197][ T31] Rebooting in 86400 seconds..