last executing test programs: 13.596949944s ago: executing program 3 (id=1220): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000001640)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000240)=""/153, 0x99}, {&(0x7f0000000340)}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000380)=""/205, 0xcd}, {&(0x7f0000000480)=""/64, 0x40}], 0x6, &(0x7f0000000540)=""/92, 0x5c}, 0x45c}], 0x1, 0x2000, &(0x7f0000001680)={0x77359400}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpgid(0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, 0xffffffffffffffff, 0x800000000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040cb06a7810000000000010902"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r3, &(0x7f0000002f40)=""/4090, 0xffa) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r2], 0x24}}, 0x4000000) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="700000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008f800000000000008000200ac1e00010c000280050001000000000008000740000000010c0010800800014000000000"], 0x70}}, 0x0) 12.993825771s ago: executing program 1 (id=1221): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000440)='./file1\x00', 0x0, 0x10, r1}, 0x18) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0xffff, 0x202, 0x200000000002, 0x100, 0x8, 0x5}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0xfd37bffca907dbde, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2f00000900000000000000000000000d274c64687b8e51000e0000000000000014ffa0a8417d2826292121287b2b00"], 0x2f) r7 = syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000) preadv(r7, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)=""/163, 0xfffffd89}], 0x2, 0x205, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x1}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000300)={0x1, 0x1, 0x4, 0x10000403}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x1010, r7, 0xc369d000) syz_open_dev$ptys(0xc, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r0, 0x400, 0x0) 9.936350412s ago: executing program 1 (id=1227): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x80000003, 0x93405ca6c14f7064) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x100000000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmmsg$unix(r0, &(0x7f0000008c40)=[{{&(0x7f0000006200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000006400)=[{&(0x7f0000006280)="8e8abf0a946f373a2e2e9b244df50119c39846f70357b377d6426bd11cb377f2981e543a0769361c4bfcdc180c358f99d2b393f200406ac7b56985b7794dec68b6b8109ce61e114ead26d71797e45b2f11de1a502171225435cd1243b434c931654cf18d353f5a8104d4c4d1cf66c5bb22592793b0e0a63f49302b70119f158170d616cdac4ebee544fd3e8a9d0d79da4664dd2488b140c3b0636df2fd54ad464c0fe422f0914196d3c5324066c41528ce47c006a2fa", 0xb6}, {&(0x7f0000006380)="2db3d11d803e8a461d35d470926bbea542041987545a00d522985fdccf39850fde9cb32015037f5aed96a0d1811b2ce2b78e4eeb62283a7ca49947bac1c2eb778ab7171a103a9ab9138a57e06ac93942f5999f3c836ac205601ad644c8ad353e05", 0x61}], 0x2, &(0x7f0000006540)=[@cred={{0x1c}}], 0x20, 0x5}}, {{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000003e80)="0986aa832c3c7cbf23e7551f43c0c7ea2f37cc5bb882731b9f260251d745f8e26e19bf9f24edacf495c4bf2d886448613afb85a68c46a7ff463d4dc0c8060e8ebe42d5c00d19881b4134cb34799ce188860f4e5f85dc763158019614ef53120203a028a27573496b2e16db1a952cad051e4000e972dc1b409d3f2a0dc0430c7403939a9cd8e1fd609e3d0e2ce0f3946559ee1a71862c931084", 0x99}, {&(0x7f0000006600)="0a2291dc9a3a9c4510b1586ef5940844f2b56d2dd425843fe5f2147f6b32e8d7200dd70100c3f2a9552e58e64ef8806effa65d0933aab745a2110b195660bbed90277f6652a86003d341a4764040f5a1616350453c4878b1d37b61102f879dbb69f90c88b9c1019ad2875e84e0c8600a075fe8da8bc4425da011e652cf6a6926d16b916a4417480784be63f3b32958a18fc36d46f4c35623d6cbf54e91b28c362b09540df12d3620c5029b130377ef64f7d1b79c011a3c95ac7080ca2df524c134d1cd9de6b83751c932f54a2cebfc84c7eacd42e154f29b675e724edc38", 0xde}, {&(0x7f0000006700)="c98826e22d976b323ef0c7724af78b42fcd9047ce14ac4a7ca9dc25537ba0aa3cb0bcef52823", 0x26}, {&(0x7f0000006740)="da73ac8570e5522c4811017f150439bacc2ae3b4668f009b6deeff86d8689f03eea9950065e27a432ca607e1007175b75b0cb76c78bff845c392dda33d220348541033deb515ed664917c62e789a89e22040296055f820bc51e7e60ec993ddb533f05f1aeac5f5e59ea5cf7383c3854a11169cfbd89ba4c17273326b2f0b97e20680f20bedd3e8d7cbab4088dff53dc3c475bab9666efdd4e7f2265e9fce2d3482a6a9e149698f3cd07df036c5b61614c618773066411742c3a92bcbc84d3a957835cacd101605b1ad2d2ddda10f95", 0xcf}, {&(0x7f0000006840)="7cf663280eb2b07fb9eadb9c1f939bef0d0020d4ce6a894f11126564c7eac063e21270fadc1941d1e7eafb0a63cbb849b7ebfb79382c30542f2f23a93b26158172f2c3bda51a3256a0bfc2eac446d3544525e932c37a374f76869626c725df64daee02fbf769973fa90a822814eb2aa4", 0x70}, {&(0x7f0000003dc0)="54da8e72716f7a2ebdc0387f43e3515673884be25115d531a448aa8ee9260d6b4dae946b49758be61b4e0b4af18275439ae185f235f10b693fd26f85e9be3f5a9769522ca6cde79e69c11cd8f1dd30600f1d69d84201caa51ee9b0d21ca3fc5de0adf97efb683e1d54a08cb237e23904b6af5ac8d24d1a243a9e0f72498e44b22e469db3629bc4893ff1d000000000000000", 0x92}], 0x6, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x40, 0xc800}}, {{&(0x7f0000006a40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000006bc0)=[{&(0x7f0000006ac0)="2c3b4c5a978602bf038e3ab1f7debcb059075fd20e7e63fa16c46b396c341e17bbe880d9fc0c39b8f99e37d7ddedd806976a6f29c3054741a1e1997eeb7467ef1468469dc4b7318e3fd1d0fd8f072e60a586ff7543cba3a51715b8b9d7adb3cae0adf5c056ddc1075bdaf1b1a902a85dd65cdc07f542f330c71d610f37ff5689394089f4c70037afb655a867c9aa0fa6d2933a87d0dce96b6e8446e5014166a1a1c8e013413758b17a8de55234cb7233972cf274d3b1398a76352641af779caa6e3a", 0xc2}], 0x1}}], 0x3, 0xc085) recvmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000000280)=@l2, 0x80, &(0x7f0000000140)=[{&(0x7f0000000b80)=""/131, 0x83}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000d40)=""/106, 0x6a}, {&(0x7f0000000dc0)=""/231, 0xe7}], 0x3, &(0x7f0000000f00)=""/97, 0xfffffffffffffcf8}, 0x20f1}, {{&(0x7f0000000f80)=@l2, 0x80, &(0x7f0000001000)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1, &(0x7f00000021c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001040)=@phonet, 0x80, &(0x7f00000031c0)=[{&(0x7f00000010c0)=""/148, 0x94}], 0x1, &(0x7f0000003200)=""/6, 0x6}, 0x7fffffff}, {{&(0x7f0000003240)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003780)=[{&(0x7f00000032c0)=""/224, 0xe0}, {&(0x7f00000033c0)=""/122, 0x7a}, {&(0x7f0000003440)=""/124, 0x7c}, {&(0x7f00000034c0)=""/233, 0xe9}, {&(0x7f00000035c0)=""/160, 0xa0}, {&(0x7f0000003680)=""/166, 0xa6}, {&(0x7f0000003740)=""/5, 0x5}], 0x7, &(0x7f0000003800)=""/98, 0x62}, 0x1}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x0, 0x1, 0xb41, 0x100000000008, 0xa, 0x4000, 0x3}, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0x1) 9.580599941s ago: executing program 3 (id=1230): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48", 0xab}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402a", 0x19}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {0x0}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.528724739s ago: executing program 1 (id=1231): syz_80211_inject_frame(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) gettid() socket$inet_sctp(0x2, 0x1, 0x84) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000008c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x2, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x7}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x3, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x2, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xf3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x0, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0xffffffff, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x4, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0x5, 0x6, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x2000007}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f, 0x1}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0x400, 0x9, 0x2, 0x8}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x1, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000091c2f20c81403006c05010203010902"], 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 8.042865614s ago: executing program 3 (id=1233): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) (fail_nth: 2) 7.268490044s ago: executing program 3 (id=1235): socket$inet6_tcp(0xa, 0x1, 0x0) getpid() unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x940d, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000180)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0xc, @private=0xa010100, 0x15, 0x1, 'lc\x00', 0x28, 0x0, 0x77}, 0xffffffffffffff8b) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x0, 0x8, 0x7b}, {@remote, 0x4e20, 0x10000, 0xc, 0x9}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 6.479835235s ago: executing program 0 (id=1238): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d59809050902200002000509050412"], 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) syz_usb_connect(0x4, 0x5ca, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x65, 0x79, 0x40, 0x8, 0x1645, 0x8005, 0x19b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b8, 0x1, 0x5, 0x9, 0x0, 0xc, [{{0x9, 0x4, 0x1f, 0x1, 0xe, 0x38, 0x16, 0x63, 0x7, [@generic={0xda, 0xd, "d1760f31ecdac0381551c42483aff49b1a5699be021842dccce3e7513c9ba4f6639897ffb0bd3134c0e7421be02fb838b45a4044fbeed56c41898b650e4ed4c3fae9d146b6c27208732cb1f39ec9bd3c65b864367503ae60016479f46ddaff19f37e6678c6788dd113d6ea3476c335264eaff8ab47d4c621371bca0a47f1fa456d71aa3d4b333b5539b1b18e3a408c23aee472e35e6bab8780bd0641792784d70214f39f73be1fac99a3dce7e1f54df2e13d6a675ebbd51de69c5d211a580c424dbe257d9e9d5e209d7ef4e8e406ce748454048f600d3040"}], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x1, 0x2, [@generic={0xeb, 0x4, "cefda5f9908a18eb815bf7206054225e2d9941dc384524774a7eab575da7fa260658b1d702166854a18bdd537fa6318fcdf769aa27647f8bd7e3d7c7762f0826b25bdf03c434b6cefdb884f8b15790e05bd882cbab3d34d1a9049d9cec7630bb17e207d8be1c19bca97a487355095ccf22f01629a84185a1e50fa88939a7fb25a94b5ee8ed9641a05fb2c1228918069b7e03c3f34924c287306f104f22ee4554349fa69165d2caf29ab5582c4525395a29bc1ca7821d94cd8e45cbb33ac3178b5e62bf8e6cf7e95f9a77779c59eb3a048b277f17f1b67b37d5fe6043b0b4ba1957e7e91eec9a0e0e24"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x4, 0x18, 0x80}}, {{0x9, 0x5, 0x5, 0x1c, 0x200, 0x5, 0xa, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0xf, 0x14, 0x20, 0x2, 0x4, 0x10, [@generic={0xa8, 0x23, "dde200b92932923075cbf34baeee27556f41feadc48fdb84f938e33d01158c0e1170045ef59b48cda1fbb6bda53a92145943af9a0efae30c5a6059a29e6f3adbc084b06e87183ebe26bbaf936763322cfed095f1c22e02af732a3811f43eeefba67b95ce90d0f87ab9abe488bbacba8f92586a15eac127c0bc6692729e1688800d2f688ebb7d30856eb49537b4e12b627f311dae19b56d08c1a3e3338788fade0baf2019dab4"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0xf}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x4, 0x4, 0x9}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x3, 0x3, 0x81, [@generic={0xf4, 0xf, "d47b3a86bde5c4eddf018fe8fac3a5a23ece832ef20daaeaf961848996d5cfb331d1a4f11948c27a0e57f248e96f0cc60209b404706c58db949cc81c02e992499a95e3271f6d9e04c8b89d70e8de38ab6efeb12fc2c4de1584b6331e837a5aff3993229a4c0cfaa05bc3932f12d82aadf507e44caeffec327e8eb6058719cd35b6a1e7e3ccbed585a4ddcbfce551ee23eee5b78aff490e6594ec430721e793e841a252c6f5cd0db3e9c23c16e749c014047a7d3e49fafb0f5ebc1da30db17a35915dd4ba826dd377ca042aa5bd9980adb7c349ead2ac5e554116c77bf4160c39067e63cb4ed9289ae2eba859ce363013bb4f"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x5, 0x8, 0x7f, [@generic={0x11, 0x5, "a38536e1ac118156ee77ba3e9a4157"}, @generic={0xc2, 0x23, "cd581f2d00cdd76fe2ec92b5e7d1c572c527d996d097f92e6864338c27d3c36ef22e6f896ef009b06b01c07b6f8c48a5939eaa0196e929648ee5d07d653f096027fb490ee7158be8165f29b83c7091626c933b45edc3630487ab79b852561ae38820f00b3c67445f6e4033dbd1d63c48cd5bc35edeac637ce7fb6f056dcf940dd6a85ee4bc361f7983357f4f90bd116a0422102951a84f73de3af54d61d91a437b0780c613c24ad86b5f289d9433e58913ec67b4ddb295083baea1d29d119298"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x9, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x81}, @generic={0x45, 0xf, "e8dc889630a11b1a9218ad4ae3e1eeec940f5aff345255e956e81feb5990d4326e3496fe1ac4335289630b4c30abecc676d226e1282c09d6cbf656f16000d95a82cf75"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xd, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x68, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x8, 0x3a}}, {{0x9, 0x5, 0xd, 0x8, 0x270, 0x8, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfd, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x7}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x6, 0x8, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x5}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x7f, 0x8, 0x3, [@generic={0x62, 0x10, "f8e5785e42f373c9392b0968395f028cfd0f797bf98801c94be8616e8bc2dd37cc77b220bfc2872936969fc05145550064c8a4a37becc267f0c155f27bf3c0947eb5d94317441adf5b7003d707d5c93820f20bf7e9bffa7915d66df69aa30763"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x9}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xc, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1a, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x101}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x9, 0x17, 0x8, 0x0, 0x1}, 0x19, &(0x7f0000000680)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "f02d0f8c6d24b607a1dcc09006397040"}]}, 0x2, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x405}}, {0x1d, &(0x7f0000000700)=@string={0x1d, 0x3, "597ab091adf2eb99ded34bc447f083571785dc3b03ce195f6c403b"}}]}) 5.596286216s ago: executing program 2 (id=1241): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x80000003, 0x93405ca6c14f7064) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x100000000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmmsg$unix(r0, &(0x7f0000008c40)=[{{&(0x7f0000006200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000006400)=[{&(0x7f0000006280)="8e8abf0a946f373a2e2e9b244df50119c39846f70357b377d6426bd11cb377f2981e543a0769361c4bfcdc180c358f99d2b393f200406ac7b56985b7794dec68b6b8109ce61e114ead26d71797e45b2f11de1a502171225435cd1243b434c931654cf18d353f5a8104d4c4d1cf66c5bb22592793b0e0a63f49302b70119f158170d616cdac4ebee544fd3e8a9d0d79da4664dd2488b140c3b0636df2fd54ad464c0fe422f0914196d3c5324066c41528ce47c006a2fa", 0xb6}, {&(0x7f0000006380)="2db3d11d803e8a461d35d470926bbea542041987545a00d522985fdccf39850fde9cb32015037f5aed96a0d1811b2ce2b78e4eeb62283a7ca49947bac1c2eb778ab7171a103a9ab9138a57e06ac93942f5999f3c836ac205601ad644c8ad353e05", 0x61}], 0x2, &(0x7f0000006540)=[@cred={{0x1c}}], 0x20, 0x5}}, {{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000003e80)="0986aa832c3c7cbf23e7551f43c0c7ea2f37cc5bb882731b9f260251d745f8e26e19bf9f24edacf495c4bf2d886448613afb85a68c46a7ff463d4dc0c8060e8ebe42d5c00d19881b4134cb34799ce188860f4e5f85dc763158019614ef53120203a028a27573496b2e16db1a952cad051e4000e972dc1b409d3f2a0dc0430c7403939a9cd8e1fd609e3d0e2ce0f3946559ee1a71862c931084", 0x99}, {&(0x7f0000006600)="0a2291dc9a3a9c4510b1586ef5940844f2b56d2dd425843fe5f2147f6b32e8d7200dd70100c3f2a9552e58e64ef8806effa65d0933aab745a2110b195660bbed90277f6652a86003d341a4764040f5a1616350453c4878b1d37b61102f879dbb69f90c88b9c1019ad2875e84e0c8600a075fe8da8bc4425da011e652cf6a6926d16b916a4417480784be63f3b32958a18fc36d46f4c35623d6cbf54e91b28c362b09540df12d3620c5029b130377ef64f7d1b79c011a3c95ac7080ca2df524c134d1cd9de6b83751c932f54a2cebfc84c7eacd42e154f29b675e724edc38", 0xde}, {&(0x7f0000006700)="c98826e22d976b323ef0c7724af78b42fcd9047ce14ac4a7ca9dc25537ba0aa3cb0bcef52823", 0x26}, {&(0x7f0000006740)="da73ac8570e5522c4811017f150439bacc2ae3b4668f009b6deeff86d8689f03eea9950065e27a432ca607e1007175b75b0cb76c78bff845c392dda33d220348541033deb515ed664917c62e789a89e22040296055f820bc51e7e60ec993ddb533f05f1aeac5f5e59ea5cf7383c3854a11169cfbd89ba4c17273326b2f0b97e20680f20bedd3e8d7cbab4088dff53dc3c475bab9666efdd4e7f2265e9fce2d3482a6a9e149698f3cd07df036c5b61614c618773066411742c3a92bcbc84d3a957835cacd101605b1ad2d2ddda10f95", 0xcf}, {&(0x7f0000006840)="7cf663280eb2b07fb9eadb9c1f939bef0d0020d4ce6a894f11126564c7eac063e21270fadc1941d1e7eafb0a63cbb849b7ebfb79382c30542f2f23a93b26158172f2c3bda51a3256a0bfc2eac446d3544525e932c37a374f76869626c725df64daee02fbf769973fa90a822814eb2aa4", 0x70}, {&(0x7f0000003dc0)="54da8e72716f7a2ebdc0387f43e3515673884be25115d531a448aa8ee9260d6b4dae946b49758be61b4e0b4af18275439ae185f235f10b693fd26f85e9be3f5a9769522ca6cde79e69c11cd8f1dd30600f1d69d84201caa51ee9b0d21ca3fc5de0adf97efb683e1d54a08cb237e23904b6af5ac8d24d1a243a9e0f72498e44b22e469db3629bc4893ff1d000000000000000", 0x92}], 0x6, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x40, 0xc800}}, {{&(0x7f0000006a40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000006bc0)=[{&(0x7f0000006ac0)="2c3b4c5a978602bf038e3ab1f7debcb059075fd20e7e63fa16c46b396c341e17bbe880d9fc0c39b8f99e37d7ddedd806976a6f29c3054741a1e1997eeb7467ef1468469dc4b7318e3fd1d0fd8f072e60a586ff7543cba3a51715b8b9d7adb3cae0adf5c056ddc1075bdaf1b1a902a85dd65cdc07f542f330c71d610f37ff5689394089f4c70037afb655a867c9aa0fa6d2933a87d0dce96b6e8446e5014166a1a1c8e013413758b17a8de55234cb7233972cf274d3b1398a76352641af779caa6e3a", 0xc2}], 0x1}}], 0x3, 0xc085) recvmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000000280)=@l2, 0x80, &(0x7f0000000140)=[{&(0x7f0000000b80)=""/131, 0x83}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000d40)=""/106, 0x6a}, {&(0x7f0000000dc0)=""/231, 0xe7}], 0x3, &(0x7f0000000f00)=""/97, 0xfffffffffffffcf8}, 0x20f1}, {{&(0x7f0000000f80)=@l2, 0x80, &(0x7f0000001000)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1, &(0x7f00000021c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001040)=@phonet, 0x80, &(0x7f00000031c0)=[{&(0x7f00000010c0)=""/148, 0x94}], 0x1, &(0x7f0000003200)=""/6, 0x6}, 0x7fffffff}, {{&(0x7f0000003240)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003780)=[{&(0x7f00000032c0)=""/224, 0xe0}, {&(0x7f00000033c0)=""/122, 0x7a}, {&(0x7f0000003440)=""/124, 0x7c}, {&(0x7f00000034c0)=""/233, 0xe9}, {&(0x7f00000035c0)=""/160, 0xa0}, {&(0x7f0000003680)=""/166, 0xa6}, {&(0x7f0000003740)=""/5, 0x5}], 0x7, &(0x7f0000003800)=""/98, 0x62}, 0x1}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x0, 0x1, 0xb41, 0x100000000008, 0xa, 0x4000, 0x3}, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0x1) 5.239787938s ago: executing program 2 (id=1242): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x1}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x44, &(0x7f0000000080)="058106df7eb61b25faaa49ab5bd6a73ff1172d127c4bc491b5a7a37bee3dc0bfc4ba45a7d29c2346d3dc0128f220d54e5f998fcd514ae90a092238db295308bfa62b9774", 0x5e, 0x0, &(0x7f0000000100)="3ba0d196a7570260d1314c2a00a72a269b6f2c7eaa5adf871eb2817d973964828417025dc996ff853a9246877730963e39d8661b20d997c6cb213f3e9e9c5d0b61f48639ef82f65f466c09155c4c7bfadd97d072074302c5488dbc6e0b4a"}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x400}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x100000001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xa6c9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x2c0400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$hidraw(&(0x7f00000003c0), 0x61, 0x410000) ioctl$HIDIOCGRDESC(r4, 0x90044802, &(0x7f0000000400)={0xde6, "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"}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000001440)) syz_clone(0x200, &(0x7f0000001480)="0aca8c53c08250c5ca487efbb165530cc7d3d0aedb5963319d7647df4742a40145d10dc821f9fa45e4f102a0583db035eb75ced245e93e870c4f24f8fee3032d0916465e6b603ec280e1d483044fc94c4ecd4fb143f52baa70bb9dd2e359888712489ffc8641", 0x66, &(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)="c583e8e9a6b9e7d09e089c61cdf5566974c7d5f399807eb49bdf33fd84c40d58e8cef0282fe247960e2af8613e7d20212a45b35f42b461b204fe919b8e75d9f7f18b92bd3fc7700fcb95608952c6bd26b2359338f744f0c80db425aece886d6c34bbc6bcef924b2a939f10f6bf115c685c430c666eb13e03de9aeb0302f647d5d3db06249eecc61a15676cc16820cbc84df303556b92") ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000004e00)={{r3, &(0x7f0000001640)='/\x00', 0x169002, &(0x7f0000001680)={@align=0x8, {0x444, 0x7c8, 0x2, 0xfffffffffffffff8}}, 0x6, &(0x7f00000016c0)={@_ha_fsid}, &(0x7f0000001700)=0x60b}, 0x8, &(0x7f0000004d00)=[{0x2, 0x7f, &(0x7f0000001740)='\\\xd1$-\x00', &(0x7f0000001780)="448158a024695db75d8bf02f2fa9ddba700bd4cee42be373558cbdd22e34b780bd90cf9c69a0960aa64905d424af98f1b59b011794320031296a8940456f96aa5775c0c00c3e7848550587d14bcead161dd736a8351e3d401c68f2a42e292130385c0f543ce29f3a3945541bb7d959ac020c722478fe18b1ca046801d490bf6869cf4344f457d2b6efbf8900794423e393e06d22ca77e8265e830b8530c839fcef983b7c10175d09d69bde13ed436497e74b1b90eff73cc0f5e915c5611dbd65b3931e7f3b7c797bdaf909972616b8ed63a220518dbfc8dbff2bd6d253705d08dfea69216858c44a2d3d7303e678c2990afe8655dd7695a2ca9e03ab25f832d069f2e524bdb1eace7f127ccf00b37680e18a6549a2c4c19b68927766fd01efc7f9f81824f2dd2ac6778296d3198da017be7f11b171eca4e5d3f297d323d6f38e1d600bbcb566155abab17cd1df41f5d8532683fe56d2c16032fcbf6ea1ead64a77ebcd8d11aae51233b5e87059ca08552ebd201dac24b1906268289bb1c603510e40899246a343cc100cb8c9b4d98e5103f8451d3ce5e364742e87f90f44d9846ce6a72b497dad7b5e56c8fb4e3d7c5eabbe21a9e945d324c5c62d2a3e81e2758ea75c77f84c3a4926639b53c840b7a869b68a65550f587f9f79e5cfb13c7e24afcbc2ec1adbb2cb306abdf71c89bffd6b3b02d94ff16d95f13a84ceae98aa242555a4b2a94b5cfa6063c15793322ea8410d3c38eadb9b0ca993d36154456c921b90e75db8b19502fe75bce5d5358ba614911ee4927182012fb0dcbbd53047d8d3cbde8c95ae643621ab48e22a9adcb3d5cbd6dc5f41422692b7a4672666283959abc6a867b48a1fec222cee187fa447564bb9b1b9f51d3a9ef18717a4114ac5e6fd5989bd432f57d9673d4c4b4ab7b9ec10571dc447d56d369a4cfe394b83e6c6c4b8525cb42e396afb00d3c8bd5af75ba38edd4986bdc9e450fbf624706eb5babb135d8c897f0c6919e1e503972ee58100ccd57610fd044d8f656fe488a82178adfa7ebd27c6483f29795e14d42012051dee8d630301114f3cf0eec05586af95a7b813f1acfa4430d04e72111330926f41e594a9e60c51e3762823745098e23c5f8c77b463577606b32afa780d33d0343ce1751d808c942dd4471055323d6b907db2873c56bbaf3ea2b4c33397ca52d65920bc032b502ed424566eda5d6b46a6baf0948d490fc1390e86a51b9de60ac3bef5696d294ff3b1648829f008479e3f6f6fac8ee3bb94bd35c4a1a445280945f8afcb766128024a703b60223ed8d51af8cd0c84daa18f1fb36b2c3f2f23d60d4ac20f251d156036296aa2bd9f08d2e32931a0872f99f17ecdc154c12dc59d72dbd8c0823d19e27592b593ab07e93c250b921278b9dc0e1106581a4873d9ac19bdcb3663a08c3a77c62389a2ee588cf8ad48380a107e606817373f2c3cb3316eb751a159c4d0bf0b5efa8cf4f488be39ccb8dee0e32f33b57ecaf1632cf90298c6c5e1860de3f6efeb83db36f631e29cf729fc50d04bbdffebcc6399142fa9a693570179aaebadeac271635bdebcf0a77b0bc9075f25b192967ce9a10906ad53e2f2da702956b9540c70daeb882f029aab1cad1a022c4d686e495d5e7cae5b2f5e54011d11e4eb4499f09ad1ec1dfbd424844479da9849ae935266fbfff2aea0f1d52d4ec6003346c41b929268697d82d3f22ac3af3d02836218832262e65f1e9cdbea95a46938e205e466650bf3ac9bcc649603b195f24ab2de01de63c0d64d7d2857594d2713a85e049265cc59a071d21027eb92daf636779aeb46fde5b430878a92bec8d963b1630e5caf9af26eed8114dd2ad9d03ad9ed43fe2422d90abe05a12eeedde87cc21beeae790c4e71af934482094c55231f694997b0570937ff8b848dff52e29af9efd98cb920c4c5515ea648ae73ef1b7d383583768c702b318d0fb5b014b10927bbb9f03a39ec420cdf59a73ec79f5c6c7f07e8e71e59643f7c203a2da7975a22b07e9e909ce73fd9e1e59058d9c1228df85c23329c3ef455f5e0886fc9096c6e04022dc367459868908563765d883a42cc69373079722d3c773d605412a3ee660b8b088b690026ce8e496ace5138276da7a789ab8e1539a44a97dbf82bb4e06385120140b738dbce1a8aad32fbdd47c6148a44c189a366ea33e1354500f2101fa019578b4fcfc8dd612812c158ba583072b8cf8a75386549c541961a44bb45cd8f81ef050d5fff1551181ae8cbecfa821b35372152b9682f7bcaa8239587ccea42f2ec8509e401e548c38f9d7eb24ab2312e05c96c51327ca200000c7f33fa7978c42977ff4aa9f8ea6bef99df476687f1ac1d1d333c8408d2c1e0b522be8f48ef5a3edf1901f55b6878700b79659645ee1418b3c0458ed231e35e3b4386abe5ff5bb801ee8ce66f61bfe8e8957b9b03eaeea337c914987b5b6bf68ccd17dd46b2a754bf607c0cd85824586281600c5daf69ea843ac43084228f667bb23c7dc05d417875c88ae95d298e10b590756274b6eb0e003265d8cca347d873332f230be2a71dac2b06253add5ea4e58203757237233bb972aeed65b94cbeb62b909c5d14d81edb7d21d331ae5b4447b03705f8ab905f53c6e3ac7c3ea9716810de945887ad9a037bf22a3a3fa3b53afd8bbd44842e39e96bbd14896fda825877e164aec08edea0bbdb3eb3907f2ad9ddb90de7bd76e84c510909af9a195acd815c0a8176a0252a6ba5ec184d54ca2d0b45ddf991870b95e8510180e0f577c2ed145e851e7bcd38788597ed797991d22a5f03e31b82d245711abd737e166ffc999ea257bddb28dd230c2178d403a9be2c2a845c4e9b8e7318c4bb88f89352fffadb82bcdc4efa866c799e116ab3e83f3cd5ca761d807315b3bddfdf3eb1fedabffde36776e4af7645cbce695206be36fc6d71f07419d7971e58429d773db3b788716981fe40afa5ba987d7bae231a0fef52fd43049d83acf0b7c51dc989536ffc909a8b0badd0178ba1b2c707ebdb6c4557a5a8e2cb6f23a7e2dd5d1b75e9b62d0eab5d5edcb989b8349b76b2819cda12d011d666901853d8202404f4279a6e9523869c68ad7cf6ab501e5ac7b50125b97bdf25b7adc178e3d4d467e2f67760b4d82f20ec7e0d1479ea3649447093f57538c690b424443a8aaa0239ed7986100624d97ca744f9d18f1b12a8df6eaf4e4300269403dbf85c19a814f33ab5b8cb7cbc7274b78c7ba8740e202401699ecc64902071d1f502baccfb4ccff5c9ef2bc5e7bbc9d2d68262a1992c409e269993555a00cd551a1b798ade462ad448938c4dd9b32497c9d837132b309bc2cfa0341795cf19ebe8c5e96aea1da00b159ecd4c6d135b857d134c36da14eeacda3fe4e55e04517719ad037d646e560edf5f0e9c6962874f00779a2acd1cbbbcc05b6bb9a281e3819a962c37a69a54c27038c76baf2d26af846c9674ab52d360386f4ba59a1b322dc80043d958cd5c04391d12044ed466d251b13c6b0d0e140b983075ec711cb44f266779d28d74a624c6c80bd7d9e6871e92c4ff15c95d93b9185364ca130c96f390914bdb99cbadc13a3b31aa4d829c342905640105c0614805e2c4115ab504fcc22163f9758f0119782c8ce0c3163fec9e2d7a4064e8c549879c198bc9cbd64ba41cf47c5f0dab570d223332f8b1bea97ef73e85ac571b2d7d07c0b6d23502c0263df1fccfb4292e14cf9a0f9a52ab67e56f326308fc8754f354daa217e331dbf993c60916b953a0aab5fee1c8c57b35268ff3cf4ccec05dcc155b7b0d5ad7a0279796f26c6a94f96f77e4dd23247f24303f50c4b4224977dd80281968f332c433305d4d39c91c5cb4a86bdc402626dffedf8be48c1fd547dfa5636aaaf6b6314275591f496b2a8af44f5e8498cf7a9009af20ad6d042628c0a1dbdbe8b04c1737e59c203acd52ba5487e88751b0744470863c9cf9f39362c360f5ad8972394af6a1e838d56da357bf65969c417ba18209d69a4e30bfd371ad6ea1c4a653cb6330d8b824429dd63fd097a23e6446721b4576ab108f07ed19065c6634588db599a1db11e6999f91d0e649837c2947ec8e3bcfb1001df3b592cde0342b2f0b23a06aa03c2dafd8f151431f1ac25ee0b5075e5b3560365758793a3e0b59e2961b9551a01ad21676a208f05863342f32f2a1795fabc223082c649aa48f79ac3c0f68e91aa93be2542d5e16aacc952cc378b0d77f6738622875f69b988dcae1929d408d025cf052e22db4a6ee41cdcc3146b6a9dca0263b0428eae55f0901057b50152635e6c748c2c69660870c8a090f60d084ce5a48730d2d8b2a9f2d83a384de3d44b360956a56f7cc80d5644381f0458bfc320cf646ea783c88355208b9f5cac7ea82a928c2d6e49a3ab8457baa2d725d2730ee8182d557ee923462b64afb3903ac905145db3cc827553806b3b6f5c1de9e05dc17a7fbe797b2ab5bde322d43afaf9fc9278f1f0d2ebf59c0f7416ef7c1cee4e0a016742178ed5caae48d342c5a2352d8946ee1ae659b6d71030ba03f9a8c9025c62a31a4200fb10f356931f219de6b5c7a764d37413335b329cb58a4f5d81c7db23769a821b3f04de4785d9f72439e897ef1b5c820ab9a7956905cc8c4cf81d1a8be133ffaca02694f27a4d26e4e40ce0d90d0fe9861c93d2d2584a0815477f99be9913aa31788a1747d3cd39301e11b94118f6ae134967b6ea9c964dd1cd098ecb43f9ed772e43f0e39382287015552566171746c8be6b9ead73486d3770b30162ce8fea43b16932e2bf745aa43c450284fd490ab767abbb367bf3faa8ae82c4b386e9f8b874ae59026f040b77f873eb2844b53a7fd49479c59d3b04c864aeef9e76290ba9c601e674b0cd2289a8709233eecb3f1108f9b0f2b004f71d1cf62679c5bfbb4c102a2ca90c039e1759e77bf66bb028b6a932d387c56c02ee8906b796e2be004226760e334eef90e9515492c8a29baec41ceb3abc42e65fece78ffbfd54a2e025eb7f35bedabf11964ea53e71f601c30532d36998219464bcdf902f215bd34983cf143ea6935ed899bfdb2dbf017f0504ee31dce38f6ecab1369197dbc8685067ac1605c004709f1df79c0ebcee2f345c5b4b10c4080efcb64a17b8d5a895b5acc95e7be662849ac085dd278d9f37f5f2c47a19d3e8bc8c9789e0cc4367d60bb4aa3fd5f3745fc835dea7e96a2303a1f61eb8d66816c7c3cea8c7d859dfd87dcdd4f510092249b9acf2f73b0d0cbfccb72e2dbc995be6af95888088bf895da46267245e50a6503fc0222153ea4658250ecc8b558bf529ed7e752b51ebb4d53b536c5715f66c0056fceb1b8fa987b599f5ee35fa2522cb0c8f376b65fa1aca2a749ebb340dff1888950a60d6da183afca70d0bafefc2c467eaa8ab07d19c3812ce16263a0ca753224b72974783f4cfe67cef01a0e420e2ac6a519afea459938a3419bc7962bd86830499ce80b3385a631a0f318f0b8c90bd972b0217efe0edcbd472f03d8b112ee3d0c33ae0c5e5922bd230ac20d4306a99d2402f9bb0a139696e8cdbc1fd9121ec9aa93321e53a05f9451c611a6289c231953f5d732d54008ac04a1fac79ea3f47d913ce2dff6116a13c29739283418f712a5ff469f99cf6f38e1061107c0da68aebea9b15860894050c0e226ada54a0f8de52e6e4dad43f10a9ad259dc49000a1e5f2504396a0ef550fe7e61cb33160c8bbabcab9f5d2935f6ff7c4aabae24544a4ffc99f54b559db237e4fbde402f625959b30daac89c", 0x1000, 0x18}, {0x1, 0x3, &(0x7f0000002780)='\x00', &(0x7f00000027c0), 0x0, 0x28}, {0x2, 0x401, &(0x7f0000002800)=')@:.@[\x00', &(0x7f0000002840)="70c3c69840df1a3e30eb7ec886f2f75ebc370e25c4c992f25eae66f42c423190459bd7dee9d2fa63e57a069cf515c6bd3233c411eea4d8a7d956b22312ed328d029214e0a614c986cd60b5ad3b478e6f581f0cca3d69516c36a9aa569f507ec5007078781f92192f9c7f83a34f9288a3e04cca6de7d5c1448bf4bd415ef2a2ce6c7863c5107ee76353f62739da48c53cf4abdcaaa137f2ebd39f507ff3efcfb1dcbb2d6c7b6a5af5a8d9db45df69191eacd25888928a269bc4257dca0644442b657c6ef1b2104bed2539826b5a9e5d0df50ed14005648cd085b0316f01a0fdfa71cc6d1d3c5efebeaf042fd1267bad041136924ee7e6b6a8ce652534267d4c1b27ddb7b6fe41052cf8d5a3914b32e3288cfa7343b10460461f934e1e93fb251c15e6ac866510c8fac04ec975363a6cf7365e4bc124830b9da580429cc7ce7ef707cf1bcf44734b0a47cd6ea3dbdbf90b00b3b493dfb4f187cefc648e5e4e36cb7b8cce1928968b0e90406bb89aa6fa1be9026a33833229af176a3ca27d61b1524e747ee9c08835559651066469fa16bc22624f959b51869468f4f0eed87d3d43cd318dbba0b3a106ae6ad979b40ce7e257dc01cc064bda92d7aeebe206b9d2c7dc5684b0e91bcb775ba64c2a6f5153d11093ebbc9ef6015587f7935eb55aa87b6c1a130baa145addcf0412fda217ad88b52d780d7a6693f5be2b4eda804bcff7540dcf879a3c8369dfb261047556e0a674dbeb627f9b7a76f90b70ef5081409f44ae458a7ccc534c062f2e2e161e9e40d138898f2b8561e9c9ef22187273582cd325a485d52408840f99c7cf6059a5b5a0502cd925a6fb51f2db1d744086be69cec64cf572f9f322724cc4eb8056adf20389b192e2bb89e9bdf63598facb363fb6c0e154067d960e2a1d0631b8431fe48612866d8e99300eab487518519c87184f3643f5aa65d854f51da12c3666ec9662dafccb25f21fd7af58c079ca32d1e753cf55205f1f7a77125a523b758f5db313a7c46b86aa60576c19e7aa1d121fc04a7359fc3b865a554baf306da77a969d2648c5b4429cff2d7c208306ec72c98943e29af378d55b3cce9a712e4399697ccaac966211c1d7488e5d7c6748b9824523e3cc9d72ca889fb07b76ca8dad8e36ad16ee4aef099dd9fc379e30cf1319100d3f55c6ed294410edf9c148932077696365748b6b8bcdd6ea35cdee4cad74cc9358062a1a2ad2f427956d69a623ae4b644209fdfad34013b5c16b58e6a672c3d8af1017a2aab54938866c6bd367c36c9e018205d7111b3b8f6cbaceff373a26b3a2e2cae1d9a377dc1aeb51f44aa788cc03ca23a99beca6505aab007a6c32672230f32461b000af181b115a1fc44dbbeabd03d85389cf91e14efccf9d27e2ac27929084f4bcfff6a9727d51a433ce42239909f44ec11bc2493c9e09eae4bd64cfb4046568e3a2ad9756993712d355206545afa03e536732eab97d78e8166146d34e5d7f7edd3933eeda87ecb89c8b93d90f9f6b9374200f9743da2b243629fa50c021995f49e66ddd0f3441477c9cce3e854dd02c811e023c3cd341946318cb7732ed0fc8eff4ad894b3943452d54e9a77eba85c594a1ccff9784bdeae7c3f3f9a9cd86ca4d1f4642e4f0817685e643fb623e3b9c03947f395a9edede2b9497924387572adf962bd5573b1a27a4ecdb77df7b0771dc2b9653f98e2bd7b2b4764e18f93c1c9cbe5ff215452c56275f35f0d3c2d6dfeb9abea64db30c265504047bcb110955ea97f9afe780b413bc0b68bfadff1e1e24cbab3e1e8aceed2c4c1d79678eb359261611dfeb69d46fd67a1f3ecb7f295787bb520658cf6369e4bba8f0ba650fc0b9ca7a8c3df4f30846c974ee97bae429de34a54cd585a5ffd85cd506330bdaf2eec96cbfc8b081a6bad35043167563365f77638d611521b31106e0b1d879c5a587bded9dae6a17dafee0e2780d95ffd0a037820a06b282fcc77378cc741b2c504e3451477562126b781d7109e8f4bd9068271c7ee014bf948f96f48351282c65e0148178faa332ff5695f7fd07cff2e2f7b68060a24588c89c7180347d09963144d0532cc062354f86fd18b95716f30f5daf73205e6d2cd2c8ea38e400eb64819534d24412b98673e9c2a306fed1e81a7125276669b67feb4ee3bf0aa178e0f8c19ca7c52a6f7e1995b51921438a384f46cc666c8bebe341a13e9c5032f0e1da5837d46d18b2ee28b79fa666f393b8988f4aacc8890d911aeaf2f1067f1cafa029d4dd17c9272ad9cd1a806e10285a9c0eb012a95dd19b66631fa204477cdd46d90d0fba269828f508326b256179b8190dbaa8a61a27532d3b44b331d68c13dc09d3255d92f36b1e885a4d876ce0afa1715ecb9521a1864895736e312b81530777d5052bb3215c3b305ed479d02154ad83e351bd4b3c389517220c2aea1697e1d6a43fcb99e68ab61c8519feee03cf2ad210cfebb17e4d1c127af7c187dee1412fa4f25710dfe3b1b90ce69a233c876815146e2de3f198b1088055e78d55fbc8b09cfa7ea283de24d82a5a9e86a9eabd2458efa154564631ce0b03321a80a7d50da5bf7cb1b7420ba0d62f701209cfcc7416de212024d8442dbc1b7178fce9a23089fa94483d214e2653b19e069d3ad36bd513fca298145725eb93e7fdc38280b2208ffd12314072e1835e6e8471d465012b1467898a020cb0b122268a703971e48846e59b0d2f99f6b0334aecbab6f111ae20fbe237f2437b5d61809346d39d6add1d9346a348411be5b684a78eb7b27edb636740d4d56d41100fadf396c7dc6a7080002862173676fa9b19bfe9e7381959ae467e1be2522994528e1a1b531d5e2457454dc3eac63a8384dfb6446e49684b22d26ccf747347ad9037c24fa1687d968c69d115f0ef46007e5cb67f37f27e31fc9dc42b4c7a96585ed7a81cda2e8e7784b00489a5cd2ee6c55a480d90048581c61de9de8a0bf6d9bb305b778a6501465bf1dba698c207d1c2194361175ac858ef634ac8296f31e55e5317e796fc70139b3e6b21b2a90c3e0dd7713513c84d198c1be9f673e1b07ed3905e654b2d9dd5982c1978b3baab561815ba4309c9bb9051d0f32d28198ce8b7b2669b5be0c6efc6ea220d10c05efbcc71a8ede3e14e7d877a64e109ac60beeafe0185d490c08d9589ff69cade9fad357026abb0d59612179b277b90527b292b71a6d3c6f10c3eb74139ea3a6aac761cbe6fc9bcc47b2ab979e7d40b7f39a9b5af60094ce51f6e76d5f3c80ba5d11b27615917fc254bcf54d8a509ab0812532b68734e610e96befc96834fe16800af574cda7847ad3e5e63352e51a6b74725a84c382a4ebfa877d9d6fdcd8f4417dc73df6ce3e09f796f743ee37458a0435cb8506e3e29c7f6c3d692e728ed02998c83e4fc01a4ba545fb4ef94b25280b50f712757180b206e0c953ed32c0213b8dfeee6992e31c0437bf7b950f2bde176c6c89012a3e63952b6249a0e147c4e6d3d87bd50a06fc7b5daeb6882376436acf2e2ca352a6e9501dd7a99aca553ea2fbe2d6e70d5ebd6bbd4f51f1402757a8fc2d4c0e0601c945dddf8b3a956158703ae73182c5dc4d7a02d3a9a782c2eb5c80ef7b005426727a299bdff1c2f152765f02e5c3d17bccac082d5b7aac9364db5e0c91bf821f36795cccf7d3bbc3f2102ad6ceb515a867a6845047bb266a10bfd523d71682e95a5d296a4b0f81818e03acb045e91a774b70aca4945a67241d7f1a814362f0e4b5e3606d94554d3649fa0c1b86fd0a630a8f8f3619abd33a2835bf7632c00d7303232d80fb879397f81677b6aba35e71c90a2342a7f1c5d37f8ed74104a5e249332069f6dd360e8b4c4b239e00cf129fdaf9142196e623884ae33cb919ea4e69cdfda5018568935e17075b9c954ff48f3bbaf8ef964901f870468034f8bd3bc0289ab54000e98c8bd21d1a8d78e04ea29d824aeadebe1d170a16fbb60dab4873d8bc666175da789ec8cb1957f9f9ee824b5a4291322e126db75e64fef2fe212a87c58560cd52074a7d5faeb51efc6a8f68a7aad68f7f8cb0fba4a2e1e13be174c93b91f863e66ecd14e821a10ac3b24f311d08c0f8b850498518aef7a6568dd8c932681a03d0eb21712f319096d4e2b33972d8bde7e4effdb76f2cc292cbd31b5c766f58ae5e99f9ca332b2443ea447856e90960d3e0a1ff0c6a610c8a2e484a7c5077b0a284daba14fd460537c2e3ec40da27bdd5047b889f7216b8a4e4a1bf1f47368d400974f3a1e3ab7b08da049a1f13f8e40ac08dcb6977fe6e1216c0b6961c844cccc9092333fe457eae9ba057c4604a30e510055a934e89a38ea31ea237c8e4948bc005d20dedef679b17b244ff365b1cf9a940bbf987f945fb5ca0c7e26931fc3bfc735100b3313be5f04cde864514d7521d896ef3797cfac3250e33c54687261114e0d531369be464b7182efecc0f3b9ff6a94a2995c79ca16efa34c95aa8e8b2cbb9a2bfd42b84cb87d24a84d16fc394b0644ffcdf3bc34018e4293c964fc08193b8d20de235fb77b8644ac1d0d6b713d4b8baa99f67023ac6d3aed57053447055622002b91ab6f5a4a583cb19050c1b19a8e8293f7e997828a7a9cfa137cc03123ab572ab8dada5af57bc3eae8d40292343ad395169ee3b064d07cd4c94e47b9e5875d1e12e9a01608899b0b95f2c4e829c78a20b4f4a2480d4d3883e572766e3ab51a5c6dc8a62a132f99b5bea8b8abf4840b54aa70951d97180329447d0859cf767c355249e85ffdbdc72db48c8353de4e39790f839f911b075693b8515c0de995b7c1df6f5eb01c7abc6103155e42e3bfaec2ceca98fbd3ae0db553d75061895721532edc1968fe1358f0bfbeb06d529710124d32e72eca25a101a323d15ac0ad19fab944acfba985cc0d76ccf400e54b486b0c42727593d2d7653d94aad82a1dd92db3071d5fd1604cbde314c0cc0aef748a1a0c11d737d7ec6333308ecf63b1a175ad0156e5aebd12c986f1fb0e31ff224af6e206988caa432ae073baec31d0dd06485adc87f8e93f0d6ad68c52d9d64e042edb8c849baf4fa287a01a1194cb175f800871d087d15adbfec3c2be27c3ac3bc8f816f14605240d1e93a94ffb2ea3450b5afd3567390943b884291135860dfb1b336a556a661f8f72815914e5118e1dd1f96c5997984d5b36c7a35d6293c99f5c18598f9b40f64baa4cd15fa0039d8db9477b131f22a273672271e56c49f0a0e78d91e3757c3aec0f827e77a263a344250b92ebfcb289f24f1844aaf0b0e4b1c96576fcdfe6da3480d7de420e385eb12a528de3f782bf9859f794156ccdb736a67e1d0d021df6f64b6f407c6635ecb74267c48efce024025f6c7c9413637f9432e102e527428676c68e0b369c52dd45a9ad5d8cdc38c8509551b10677dc69d3776c074ac2e6414442b1dce375da01e0b09d35d6ddd861dff34852b5a0175f0e48188bfb4b23cc6e57bef5e66a7eed6515a2520c6c09ef0de12125dd89cec4b9e3ef0a6206e30dd291003e0f9893a420e5bc4a73df0572b482366982dc70314312734279a7cf1b32cdad35dd127df0376703436dbf35f6b5f363f7c5e4ab5747fd4e65132c234be6f0707c415be87e42e9d0ed8fa13da9ee7993d65dc6dbdcb2c7c59daef353464244ab262e40a872c321271692769b48dd4adf1ac101bdfb2c7bc34e609205371270a9581d6c8e20e512bfe71b215b0eb5b5fcdc931376483ae92a958eb49ee1c82631c63d422d5d38d8deddac6bf44ffd43ba8ff181e5beea871c22", 0x1000, 0x10}, {0x2, 0x4, &(0x7f0000003840)='\x0eY.\x00', &(0x7f0000003880)="c1756daec93b95108218b567418d0c0f9ffd3ab95ded525f52cd26e58cc9e4471b3bdfb7b034cf809b0d57ad67d40c14c077034c45f078a91e5218e6e798d2fb7240e6232ea8f9559d48fe4ef3d0b24b8344c94b01ab19f68f6b5ca1bfb8b82f7ef48973e44214489cb2f3f487f163a1fb84cc4c3566046b1a81b2c769e49a75542557f6c0cd1c6fd2a8bc6e55f9aeac331e344640af7d0ae80989c20948cedc7bb7b1d26de6f22a1c3ebac59e4ab573f7d76d8235789f35e28ec5665c2e0873a4a35c975b471d3833747ef6b6ba6e457b1692403e9130e06adbb7ed27df279d4fdbbc934528d0d521fd9d29", 0xec}, {0x1, 0x7, &(0x7f0000003980)='[()/--}#\x00', &(0x7f00000039c0)="9a028c172b18e6d6bfee1285257c40d4b4e16b896a78c3d17291a5a818187f01c92131a28533173a4b781b0b39e98d89322a8502c8f2e7c7487031491ebe850d9c42a753e915ad0219cad67f90ed176f02d7eb76d5db8f24ce5b828b619363f124356d7a3cc1b840d552ac5e8ab05a07f804a92a1a466c89ca56c0c7045c69754f52d955842ca0980c22efacc50461737c2a3fc51b06b241b0d11fe877e6c822da5521e222661de64803d80a0390ce1b690fb223eaade59f18d86034449a4149c0b10e903a5ad3698133e32a", 0xcc, 0x32}, {0x1, 0x3, &(0x7f0000003ac0)='\x00', &(0x7f0000003b00)="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", 0x1000, 0xfefcf7cc9d6c4683}, {0x3, 0xa, &(0x7f0000004b00)='\x00', &(0x7f0000004b40)="eb757705e01629da83413287a5c8f47ddf6e16ef466f735f2808fc3db7ed27e216a735022db8444edb76357eb6c86f5723a6ca539d7ad97861a87c3aab20bba8209491d9b38d6cdbe66b35d1347c6713ce5135059404619ea2b2f1eed6312d5a8ba1e76551ce7d1c87025c420d6b0a45b01e90610eda6db77131f32f20968c19cc99e62042df7b275ff418058431b8e09543e4a07fcfa347b98174f40e26e66b5ce307354f75fa1f4996c1007dcc79f4f17ff3b21df4f74c3e74975b23231d98", 0xc0, 0x18}, {0x1, 0x6, &(0x7f0000004c00)='\x00', &(0x7f0000004c40)="aa4c74289943d507c63d2de1b8248ac69f6097714111d30cb1f9d8d88d4dc1457d32a1fe57e8c22fdf528182125166dfd7dd9804ea84f2094d474a10a2a774dc06c89e213d843c09d904025db81177bd2d48f4981bff0dbc915e6c0160606ef4a829c2ceab489db4e123fdb3799e22981514d22c494ad1934da94e3a8782b481118086252f066b00f2de569498f7b23a829c4b86335b8a06af1c1b23b290ae", 0x9f, 0xa}]}) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000004e80)='./file0\x00', 0x100) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000004ec0)='wg1\x00', 0x4) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x100000a, 0x10010, r5, 0x0) ioctl$XFS_IOC_GETPARENTS(r6, 0xc028583e, &(0x7f0000005040)={{[0x8, 0x7ff, 0x5, 0x5]}, 0x0, 0x6, 0x401, 0x0, &(0x7f0000004f00)}) prctl$PR_GET_NAME(0x10, &(0x7f0000005080)=""/228) r8 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r8, &(0x7f0000007c00)=[{{&(0x7f0000005180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000005280)=[{&(0x7f0000005200)=""/21, 0x15}, {&(0x7f0000005240)=""/24, 0x18}], 0x2}, 0x2}, {{&(0x7f00000052c0)=@can, 0x80, &(0x7f0000005440)=[{&(0x7f0000005340)=""/158, 0x9e}, {0x0}], 0x2, &(0x7f0000005480)=""/224, 0xe0}, 0x2}, {{&(0x7f0000005580)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000006840)=[{&(0x7f0000005600)=""/123, 0x7b}, {&(0x7f0000005680)=""/143, 0x8f}, {&(0x7f0000005740)=""/4096, 0x1000}, {&(0x7f0000006740)=""/28, 0x1c}, {&(0x7f0000006780)=""/119, 0x77}, {&(0x7f0000006800)}], 0x6, &(0x7f00000068c0)=""/230, 0xe6}, 0x4}, {{&(0x7f00000069c0)=@xdp, 0x80, &(0x7f0000006a80)=[{&(0x7f0000006a40)=""/56, 0x38}], 0x1, &(0x7f0000006ac0)=""/4096, 0x1000}, 0x40}, {{&(0x7f0000007ac0)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000007bc0)=[{&(0x7f0000007b40)=""/123, 0x7b}], 0x1}, 0x3}], 0x5, 0x141, &(0x7f0000007d40)={0x0, 0x3938700}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000007d80)={{0x1, 0x1, 0x7, 0x2, 0xffffffff}, 0x4, 0x4}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) syz_io_uring_setup(0x697f, &(0x7f0000007e00)={0x0, 0x9915, 0x200, 0x2, 0xb9, 0x0, r5}, &(0x7f0000007e80), &(0x7f0000007ec0)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000007f00)=@IORING_OP_NOP={0x0, 0x41}) ioctl$XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000007f40)) socket$kcm(0x29, 0x7, 0x0) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000007f80)=@overlay={0x428, 0x1, 0x4, 0x200, 0x1, {0x77359400}, {0x2, 0x1, 0x4, 0x9, 0x9, 0x3, "2ff74436"}, 0x4, 0x3, {}, 0xff, 0x0, r5}) 4.804567276s ago: executing program 2 (id=1243): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40041) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="050000000000000000000200000008000300"], 0x80}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000094}, 0xc800) 4.67600386s ago: executing program 0 (id=1244): r0 = socket(0x848000000015, 0x805, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000e80)={{0x80000000, 0x0, 0x2, [0x2]}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000980)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009ef8b089862373fbbcb281062d3fc112ea6ddad96dc28f062d667821f72a40b9842bc6c9", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e1fffffffffeffffff0000004c36047abadce49dee959faa84cf1e9da3d7ea8778f410cfc3a12f79e7ef49a73c8ae25fa4d217216f62f1a0dce41697bbc28854d2bd84ec1ad3bfe18c25520fe14123d2e99db886"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) close(0x3) 4.41754909s ago: executing program 2 (id=1245): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYBLOB="010329bd7000fcdbdf"], 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (fail_nth: 3) 3.676470274s ago: executing program 3 (id=1246): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a22301020307000000000100000000090400000057331900e477ba082413894fa360cb819c78669a968cd6b736d182fc41deb4dbe35241630a6911a87f3f900123f618828d6e844397083fc47cf2f73294b8611b20f71bd4210618a7383b53c2b0b2b0088df38ecada74b1b5f5f93b0e8c005fcc0065dd86e50e38816b1a37f5de746562534a4a1ae07b3c85808b45c7c7086b79be902dc7b29c592e36fa86232cb2969e4fe5c94c89febfad9a743841cce23e619d68070b197309667e4d100bafbc81e8307739a7f183"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000004a0000680012800b0001006272696467650000580002800c001f0001000000000000000500160001000000060027000e000000050029000000000008000400010100000c00230000000000000000000c001e00a00000000000000008001b00fbffffff05002a00"], 0x90}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x650841, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e401088044"], 0x22c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000480)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d, 0xfd6f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) r8 = socket(0x2a, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000db168920402000d92ca9010203010902120001000000000904"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f00000000c0)={0x0, 0x5, 0x1, 0x0}) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x400000000000009}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.600429484s ago: executing program 1 (id=1247): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r2, 0x1}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x1000, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.493748393s ago: executing program 0 (id=1248): socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@newtaction={0x200, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x118, 0x1, [@m_tunnel_key={0x114, 0x1e, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x81, 0x6, "5b6fe743ef3371d9e0af503e2ea17c306c5062c7844c623a044cb17e4bd5eeb45b4c7aeb4a137f3678b08b7c8be75a4d338e92c85919028544f156f5a473d25ac09ca42a0564543ee6964f6b4dca81534de00bf6a2f72e7300a8921d57d3612254b71aa1d87ff1982c94dfd6feb1fd07c855058db45b670fe69e31aff5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, {0xd4, 0x1, [@m_simple={0xd0, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x40000000, 0x0, 0x9}}]}, {0x7d, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88b38005a4604a93ebbc213530b8e07f71d1175d1580cb57e68478f9edf7f8e766c01a7ba01dde9f5efc04e3eb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.483317829s ago: executing program 2 (id=1249): fsopen(&(0x7f0000000580)='overlay\x00', 0x0) (async) r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400001, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101401, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) (async) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRESOCT=r5, @ANYRES16=r1], 0x110) (async) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRESOCT=r5, @ANYRES16=r1], 0x110) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) (async) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x3) (async) ioctl$FBIOBLANK(r6, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r6, 0x40044620, 0x0) r7 = dup(0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0xa) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0xf6, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r9 = syz_open_pts(0xffffffffffffffff, 0x141601) fcntl$setstatus(r9, 0x4, 0x102800) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x19) close_range(r8, 0xffffffffffffffff, 0x0) (async) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e25, 0x9, @empty, 0x3}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e25, 0x9, @empty, 0x3}], 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000406e05fb00000000000001090224000100000008090400fc01030000000921020006fa21030009058103ff03000000"], 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000000000406e05fb00000000000001090224000100000008090400fc01030000000921020006fa21030009058103ff03000000"], 0x0) 3.345567728s ago: executing program 0 (id=1250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_io_uring_setup(0x23d, &(0x7f0000000680)={0x0, 0x425e5, 0x10100, 0x3, 0x202e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r6, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r5, &(0x7f0000000280)=""/79, 0x4f) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f0000000000)={0x0, {0x0, 0x0, @ofdm}}) ioctl$FE_GET_EVENT(r4, 0x80286f4e, &(0x7f0000000080)={0x0, {0x0, 0x0, @qam}}) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000080000000300fc00240001800a00010069623a6c6f00"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x310, r3, 0x581b7b7e6e15d192, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x55d}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e65}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95d5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "f2f4a47c588703f5f9b4641a89b8caffb0d9e9667199"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "db53c9be0bb13c255bea2c3ec102c3b9826c543209d6ecdb64109cd308"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "9fdde38b1b9289f1b5f7e06b4acca1ae32b8ad4110e9a4b92724fa4ee845d4a96f68ff8d"}}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x52347b20}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff39}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe9}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9ca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb430}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x443}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a4c63ee}]}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2.756810122s ago: executing program 4 (id=1253): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.661894457s ago: executing program 1 (id=1254): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x80001, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x8000000000000003, {}, 0xfd}, 0x18) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x1000, 0x2, 0x1f8}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r6, 0x0, 0x0, 0x0, 0x20000000, 0x1}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)="7f3d90059354b6", 0x7}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r11, 0x8cee000) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r12, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cce63b152f4f235135cd164df5cbec6929499dd14d101c2ebfea774d7fc9c6352470a4041e7eefa0af59e82c6cc79a432584707b31324753e034b9e62156ef937610325daa0c7a215ed52b9418c16d0ffd7be7f9e66e8b069e1c06085244d4444b42b6371837677a7caca2aeba263a67f228fb9be53428b7de8d165754f5fd2a4192a22ffd351f3336edbe0cf7dc299385e9593d5c7f0714378cf083f72e26a5bd1e8a8d08ee0bec243ceacf2582908a00cac0d83ce3062b1e0752126a1bd945ce2680f3c9519795d9876988f2a32943d1ab821b69b1cbcb2b9e0edb3a3368abaefd34103585f5a2ea10867a73354246e2d44a1c358c73b260d1f57f0cd5e4b0cc2e3de70e388c201cd23d0a59e44d031604895b81d25c9ca35c2837e83a0d89e7d8735029566a933ad82c49993843767ec4856d48c12df87ba099c9b7e77b211a277a8e8d3def4fe7e2b1c6e5fa7bdde283881faedbca089d0156cbcc70cd365547d1a917d73c145b6f3ab45ab5ed187a15b6b86e8d6d1f4a637f2aea028d46e4148e4c70803b367c0435fb5f3d450e3eb93e1c752ab28ce7baa89d309341ed1e3767b9bc082cbc8a024d16e5538a3612432a9864198d7a20e45c67460b3ea869cf667fc48614925104ce05bcc5260cd3e2fdb8ee9bbeb69db6aedb22b31cfb808e7147af7ac7e4c41918645ac9e0d3e9aa6ecdd957bef547e8d4fc1329e9494308b2739cf4d7926bfce3474de8795844a2d61ad43af119c0ae2b7e0dfd0077720f364cdd46d21722e87fecb5c2c0e0d93325d7d3e8f7dc8373ac493fd5119f3d0760951b0b2fa4ac7fa2e8f56af2cb20fc7cbe57c7166ca4c15aeae7ec8348c41d98b76fd12cffd5b34f4b97b9daf780f3191eba3306fcfed2bcba7e21ea12881f1ad4365d2e1c783290ecf18545b2ca5490bf7eb7d41c6b35ea56524fd1bb1e7116e828ef4b1062124ec15e9ea23f6905314d27480fcbd9900aa05aba98d679c97a43d0cb940927c292178e817330d0656b4cb4ed3df31f685b23fab9ef679f7512fbed0dcef4a35cc3a6b84c46a2e5dacccdc7b78ffe71b49c1093816f9df2743777bbe443e33132b7f97ea4b4ea1404e1ef56a220f699be0e4e63272e477ec4969f6c6cd0cba029361d223640d123f42b9ffda812feb630c3b91f1d6e6fdd0e435a5cc88ae2ed0aed207e811bf374872496218ebe8f76a1feafbdda1bbefa5ee48bf6e4e7323ee2cbb4ce35ef994c4e781a89cb6ed05cfeeb3885a443c1d0f344427524c640d42b1b56f2c19869d60d8c63956456aabd12fc47d46ca660d945e31dfd6e07bbfe1cfbd051ce2db33ea691c5c4f3f8e912b8de1b312bd5f7873aaf4924645c6a3b1445655548d212ec3081e8d13eebdf6da7ed7c191bc758455fb1dbccef24baf75564bb603fc72e21dd9187259f9ab6ae4cf9f439f93a65da4c9389d6f3731901beca82631eb781e01c0d9c91495f63c78e99fe05bc4c1eb97a84a5756b3572fa68c3cb148933012a7c7c853b2a226d814f0559d13f32c060943cda1ac58cd617cf951e83fff0581a4cdc1db11bbdd2cac106004968cb5ffc26fac08af9212a8c59e94c9736325f61d179b9c5e8fea7e06a61d8b1cfad62a9839a56615be390b9dceaa0fa46841df5f5cb172a6c014ab380745a2b0461d57137a2a86ec508022960faf2b2c638c75c56043be513daab7d5907e3bcd416f1d0d75e0096f1f3ce9c620375d40b2355eaa059697c2a615b3cf8cec387405a5a320605b846ff5b6311fd93df025ece92add51e3092a10b8ff0e1abb60b32fae6a037c6ba7771b0fdc8fd0d5792db39a36b0b99bbd1e5bf4caa0c5e253cfbf4314b5b60dd682653862659a5277f79ed1d8324c63893b35e55da568bbe8404f1d2763c776a930a1fc6c945f5bda517e1179a2c610392a9c4fe8bb3df289ff29de2cc52c49701f4feef0481bb84a5fd52df64dd165163aaefbae89ba84d73c57eb123f771e52596b49ed11687830ff1a1d056d42298fe73599ac07c950abe68b6622c394f27e0b54eee55a1a0f3dc47f8d55d95cdc4372d547ea3280fb7cccd85332541e1fb20cc45198e480ed518ac6e634049f2e7cb05c150cc889a891a18cdf3492fe2ce8d436b3586584ec0851faa3168be699b1c9caa18760e45674ca8bea7d891f31b9e995c0aacecb2fd8439e5398d31fc8aae6f5ac2b5a6183f8368d3c0de1a55be202e4ffa60ef71b46e0e0ee061cc43311c5305c02d14d6be4347d2327c35ff9328b76d55aa3f11ecfd4c3213b008c49d0a2dc0ce12c2392eb6df7cbc632db538f706c3c5bc5635434657747dffd9ee56e16058c67e9e80c141f11b0b5ae8838cbc981ce923ac66bcd6a6c7a92d9f7cad10480336edd67058c241b2016592af3c5e8b4a7069559b190aafc0d0af085601439e8819b05ba2ea5ba8a7f4fc585657bd5857e1d88d74a7eeff2ce6049efaa7e41e742583ef20c0a5c60e18e6da9f5342ae957a2cb62994cf9f35c3e914460d3b8e8e1fb6fbb37ac5e6f51b680a67d760259ed3797001f72e85701bfedcccd82e7945da63b3cf6ed19b2bb611eb31937ca13df724b81cec4ba6bdbe603783d1e9818a8cf22fb2f9f4c96940e667848a3177b617bec1f3d81d11da80079b65923434475e3756f51d1ef833d24a77c33b0eba2a89cb2019cc0af083e7c8fde8871db6536dd11b7c713f3a88c0d85fb7567d34e77e1f23c5ff3b2e0f9f302021163f1aeef73faf6bebc0c8783ee5a50a0fb72f0ecc7be3931570a4584c2ec79642e62289d524497e3a0ca7928d2273a057f6428d8c9b6ce047e8ad880bd212a9b902ac13407c80dae76d6db04fde7584203d98bd453c0b722fb2469665ed09739dc79c4856f7c2c1e7fd860161fc393b26c38a7de3c056ef8fc1bdbb53b136cf9e04b5a342fb8828cec4b3b8955cdfd8eda47492d4227289e81a40ff6bff03d3fc983df2097fbe413605189a06ed4305101555b611e541f037189ffad1ff5002a126db8f2d2504294081dbb9b211fbb6042c913ff34ae9537a560432c104470271aa687de030e3609c34ddb061011dbc08b66db1b45c43cfea804d1bea8c1c91d3a982f51593f5e209470d618cd430b44acead709936519b6937f3db2946a942153d78fe218eb4114af5ed60bc79e4ff8d48a9e8462b598cc4918124926711ca81b84e080b2a1b2d213904b9e2f3559f66521f9636ede23db18e3416ddef5a22956840ceab1bac6435716448fcf89d45d129120cb2ac92dbcb97be56b169523a7fc44ba32d3f62414b3868b1b8ab078d8cf65c967bcf702f16cdf099bd345787bc0b189a15c343322eae2958e6469f5715ab2eb81ec0a85311d53adb831a3350419ea4746c0d98bbb51d0eba63db662762c6c4af089d26fb57c5f1f7b78fded3e57d726ba3a61a57241681ba43ac35da7e13e860a1984cd0ab43f29b119885eea68941faa4e30f3cc4b3e98e015111a6c24a609ab4d686ceff1b218d68273ac3e87f150ca7ef2c6fba616bc626a009e551cf6801c942a8801c3a78d428ba626c1d449c17b962a7cbccff1a41fdf21e6847b6a0cd272ff01b685048a3ea03156bdf804016d6e558cdfd790772fc82f96adac5770d4a8eafc2d4d9cab076c38edf2cf4b3e830fb2acde872294b79250aaa30c152d83e991faa29f9c07483cb54c08f39099c12fca9579d847e3f7733b978c454c85ed6213673e475458e45f0b93d1eb1f484b0e181905097d79cd8bc565a14cb1c8835c3fc287d72d9616b99aa042c186a06aa91c5f4c00a7d86549767cb785a0f468d153003726516ecba477f3173bb05f2df60da83d5c4ddf889549e9504fb4052dfe5d3465563aeba8e5253b3cc9eda8dc0b8ffc74fdbd4d49e64de3eef79be08569042a7c5bf942cca6da27b90ba4c4832ada245b4f9ebdad645776b238af65073fd31924c1a1a04cd1a83f212caabb5601d11fa6375b1d4781ab75f398cf1d94d2881c105f15530b9a5c50fa852c3999cfea0f9b7c13a862a5bc21c28d6dcf9148a88ef5e6997bbb28aef8b637fc95e0359c741e32db2a267d96aba13aed03f89f5395ae5d19a5c2fd2564ee10523737a83856be448bd4186e2368b6631bea63142bc4d270fee89062bf7d61e5f6e49c798054760e624910c732737fb89aee6d51ac1dcc2b0a43bbbac1e23d691f42509d1475fb29cbdfd32599e95dda27424b288b3ec59109f6113bca5df34a870ad5f78a18864641e1196f47ab679914de32be7b4568c40d28c637c37c4bc61e561af71e867bd477ad8d8ff48208e781aeee17f7e4e89a795fc725b341df564859a33823af64535a81c56dfc0463d7264608be7eb101584031afcb2dd9fde4e9898c979973c2370b87cd0c28b16de10548ddc457fbc34309663418dc7df60c4ed965bbc5655ee79aa95aed1f33742034cf18df47530912cd19da57d44493b54c5a625e2c237d4ec4496df293d301359126d0129465a45aef9340515c2627f1919efa25c0fa5bf515a67ae10d527977138ade3e7422e41215aa75d6133b7710426c1e27f725e6040f01c6e7524e3789fefcb4640442cd4f72a03edec97bd47d12624053419048431ac781e6a17b9ab5030a5705ca11efb3dc58aaa41f9a6cfe397f774f0dc74610ac72624ca48af1ecba87376df745bccd434351f5831bcdc946bfa4ebb025412679f1e5011f1391935b6648007c98f5af3f0366eaa928de4180024188bae3aecea59a27edaf0cd199c57ef290c205dfbb89c82e9733d1bd12b59863a7f8a34b51f0a6da8b8f8ea6a571460938d4ea26f097e78af31c40501eeb8ad0f9feed8a6430149b85cdd7ed62c2e12cfa6a3c7292a1dfd3ca438e583d7f3af6ca123fe1c80352490c831ea385b132d792b4b6e0e570d0df29d9b39a761cf3b07ab29255cf4c3c281c71c47654144b0b61cda5830fa9d1feec4c305e89b12694fccab28759239b1e52377fdee05785867c281411372bab2a315403519199af83e75a402051fcfd2fdd179f4307ec96d1236cd9e24054582d242ed1e4113f1b244be3e26f78ad1668fbeee0e5e51b81d8302a85c64b2c8b3dbf6f126e289e216dd22902df37905872be8610c1e31fb2b0bcce23b7bbe76bc1eb69fac2ffffe06601273dda4769075823293cc94eb1a3a06b8cd13db4b1c7dc9ddd6ed4eeff148e3cd8494d81826d4586f780177664e4495fbb0045da95dfdfb96fcbbcd6ec5f78b66e2c738e1a6edc0c7bb17f5d764cff4eb5d572fb2e376b258a891ae25f16ee9d0803ae7b9ecbbdfe6d5de3cf4535d2f7cdbbb522d91693fc511589b2be769927954ae4574917c492bf4d75ffb0914939526f1d76fc73fc6a785f71707f41bb4766741926eda68c2783dd8a651c67edf80a4e5235fc72c343189eaf9563faced85942ddf1521b3f8f72565bd30de38f289ea131e228dbe53267b35e08575bd529c062c8d102ae61ef2af9c76132f53727e418c6bb903b0c8258f30f0b629701ce741434542e59a866766bd78d77274e6d56d40b2d8abb0cdb4ee7060ffe569f6080ddf7a7b696d8fba17ef2305547250ad5cde88c94f957febfd5c1a788b67d044369ceeb64bdcd8ec631658245eee03acc3de7fd4649060fde28c424f5e9f4f7f2013773a208c2faa4212e8c38685fc3773f04466329beca3ebd6ccf4a162fc1e5481fe537649c61c44e784c93db71036417dd96271cd21811178af52aa76b5b69342710c935707f792be532a346e47ffe576999f7ccd065eb1e439768cce2908a600d9e62148f4", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) r13 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x67}, 0x0, 0x0) io_uring_enter(r13, 0x351a, 0x100, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.58900265s ago: executing program 2 (id=1255): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe11) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000100)=@generic={0x29, "be162dbd4fd35522c21fe20249880653f3cdbb397d37b81be79f9fe1f500f2fec8b79b261bab08db08d2a014a0baf47605e2baeca9c2e09d6ab7cf9fcdd63da76bfec68a9551b233c55d08633667d43b4bf5147459fc676cc5b24b618879ce6d3455c48a4d5fe88e7ebe5095edc2c15bb3a67233be59a1d46fef461a3f1c"}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)="13f838b56edb0c00f7c7f978bd3383ffb7481d413148e2d68ac705c76eecfdfddf0eaf6110c979124cea1e966c61ccf22760078e0bb1df76b581eb8f8dad9f1f58811468ed2835303dab81e1e972acbd51661143cd366a36953104b496d47750104084f433590cdc2d6ca46f735e7e2b273f338927f720676aad0e49c2b41263464533c545e770e9f10513ce27b057b1d80ada655700e4b2d012f2e815643d22069c4e329ae2602104d7f6e535cf693d7c72628f42066cce6a72ba6236c3629171233580e136134be582d04572c95af23a3a52b6d33ba47bb5a58ea6f8e537", 0xdf}, {&(0x7f0000000ac0)="6c84cc6e016649d326cbe7feb46df7c24b45df5b194403f84392042bcf51719d8510de9ebfed1b30c671523f62a06703d68282c14852271b95693729d27f968529175a2596f286c753d47aa92abf7bb3334412e16d4327d000118ea5c12058d54cc6e57409d247351b39c316d2efd327d4fb01d8e47fbd193e7b79b2c9e02ac8a5bfffad820ddd7c7d97fd7b2067d48804a366e4f6373691a427dd161afb710e5fca8837acead3c8a035ba26e5a81e086af958a71585b337e342a6b12ff215b4b077aff6c2337eb58714a23eff11a74f133d3b129f3bb1ec69913888997399d89516d777d98d400fe2ff0678322221e4ac4a44ab134a910d70050388f618420d8f7579f21da6c43dace199c5a0714443fd886c6b0de25c4ac624949e9ada89a2ca264db1fb2de4bdecba98e6e6bbfa347e237b956d5ebbf16d6edd5006ec36b9b50a47dfcaac898eefd0b42c3d47d892ec95dd0d70f77aff96c008cf6db40ddb9cc1c2d0310330ea925bc43517f4deb2762136d4ba241264c93b417df6e5e80cdc42d60dd8db46b691fcaefcb280284809d608e2830dd5e244eb83fa78007683ea146ce0f7432155281188aa09425b789d6b7b68ad626bbe582de259453e2a327057228ed752303419ccb5526e815827f87dad192d5765836a1ee91a8f10512b43469648eecca7555bddf0b7b4c1b2cd61bd0df8df443b4f58a5b419dc786754aaf232b5940550a5db98b55b39ce221d73e7755da5eeb9b726c145d7e7a70d9276986bcc8d11b9522ffbf4fddc164dec310d2db98066a09e1f227dfa7757de30b45f598fe153e18b37df373843402689708845eb5a80511734e8b5ecf3488c4517b803de74bacba1cb7dbfbc3d657758207b1ddc1534fb737d96879387899264c354bff5c1d654d9d61b7ba31e5ee8bf8e5e041e60fff7db20c825807b4805525f64fb9ed409d528b6be95aebaf4b4aac7fcf6da231e132266b7b74acb6118a83f82df853af59886f81c44b4481965fe2d722f060e946c6faf937f7e329949fde6f82a2f260ad4e31a67990982639855ceaa2b8c7f245e4c7d39f40bb226cf1297e9f4bae2b20cdb8413cb9ac2fa81d14e0299473a473d33e78149e44d4f83d39422de379124a440ccc90045e88ef621cfb1aa0a073efe23e468848d7176efe30209850647c076829e269bb01c983b8b7bf90a6dd9726052913b672e50854db6fee97a63921fbefdf9cead565d378c8acd832411c0d00491c55f1c5a97c707427f6e2c1809f9f2e82e157d6d4f82be10873fea2d547dc7c147b46c819054179dc9d63ecfcbe98de7abd4f562c854daf2e83c716c964e096be9be8e0363c7d0506c8acd28de5308a67e2bedcf3fa9148ec975569aa94d5a61c239993a9a30254141038007e2544bfe6b5d9031ff5be153d4efdaae3dfced19ce9e611109f8e6836a3b8a22cfa17a875e06e3fd4d0e9f6d7e1351a11c4e706509666c11d8ec2cf2297091719a6b7c57009dd4b866a6767c51413b0b8ff6a80e5eb5e48f5539b93a6766f998d7af945a01d51f394e234450a00f02644b820fcf275240772884ede57eaeae9f7229183cea4696a1fd73a2c09d744720514cd6e4bf3fa594fd6bc903223850b1237a23348db95cf871e5b33950ad27ac7faa98110bab10f5c42eb37370e1cecb803608ffa07fecafc1b6dd87250fc2994f1c01c2cf61c0e9ab549af2abec1ae52662efd4e8a97bcb68da20f0cb8966e25cd9c7853d05bf7458d10ed7e3896a1870fd26317d3ddcb79883efb3a04522e007d9306cc790de0c7904ae40b7cf8eafb71225a4d7644d1c06bda3ae7f6116ad41e3c3e13e1550ae5f65b7deef5d998c97b5d568814e1bb52a3eeb5a6458779f0607da2bea801b0751afa45d747c71621664d9c275f8bf66f3ee8f88e492f379bd35fc1193f5e0d25f1e36db3a94c9e516585e93e2f3ec0271aa563be818f6e9e6af5d00be342be4f0814636e27bacd844f58ca3aebf848e23f48c99b4cd4358f0219e089d1247ce6e60c8b643d5b46f6df52d3638a65b2c8e00ba2f6c7a4fa73ee088993a08ad3d350e6ddb71a07354b80d19fa917cb81e2037df6775cffddbb62bf4b53404031292701ca05ff7a270dc4fc1f59aba720ef717e29616ceb6bf9538bf6de5e9be6c0cb020b98adf14edca95c0dc40bdf2a76054f7967d283c24fec17d0f636567b0e4d60d0f394d89f401498a410c2be4905873f4815346f842daf21697a21b88b5e64f802c5ee56059f4520645897ab11a633302784c4e2aae5e047da861d709c85fda71f9c46eb5c21a38bc5a1777f22ee1fe8cb4ef8c36e63387bd68fa4f04c5ef9e9c7fab798a915562065d9d92ec918b67fd97781e873bcfec04eb58934fd9c7dd2ef3ffae661a07847b9fddbc4b96f1b3b168c54639fff17cc45489781d84b17be538dd1b19c1d1561c73e0d1aaabb0d8cf0b4fb8c1c5a18ff2d9393711b689e93a01a0c5812155d95f816f90fd74f746aa6d4e87a4211b7561cda1abaf373daa8a5277e49937f59e3760ecd2997f23ea3846c94c78640acb58903e01a69dfcfb46a282970d6287ed9666b8df30d08a04c7d9989f2fe6cec9cfc746cca03d61674ad80abe5e6840002394d57ed32138d603207281c5683324beced668862b1f1174b948dafee2c084a8550caef310860288f15ada1cf6a6dd19fb6f6826519498dc7b128819ce9b09f03fb615042e03daf901d7231990982f8ef1ddb89a3e412fc47113e9809da0a8af79e317f942c856661386f227244f04950f94be8faab5288eebfd8f2b50575010a648757b8f2e07b6ce50d30500712e56daa80bb59a2cf70fb287fc9106bb2d33a199bdc535aa1582efcee41d7143f3e2fd93b75f6cd5c0fced4202f6121648ac9973fcd83d37f7d9f7ccc78cd7177e3771699a0fcf8e91c5a9e73ca1317124c6e90df61fc7d5db62bc718072c48e7ba3ca6bbcf1c340a7a526d13a100c3590bf6a81b8db975443fd61a6c17df4a0006e087e94ebe0d159908dff876e90fdf400ff8cc80fe78016a8f1e284fffca33e930cba745ed7e69412c23ee4cf1d40311e252653f87fc488192fc10acbf3c0b2a1925b3ecbeb7e830657e6387c0de39f75186c8fd3fe7143a810c03e97dfa11e511151ede0591d39502a813cb5415c0c5ead8686ec70a941dc7e7834765ed715b80af54c3b6a2ecb866247da655a63788cf36d959d4001298f87d00e3860f3bf188b34e8978c12d909829e35fe25f5be92c0b9df4d501f8628c2337b02e78edb9d3512918189b91d30b712e6885d2e34f217421345bfa75e9c1562a80142c164fdff211eaca8b110dc0382f3a2c89eeefc135b6831e90aea14f4ad765c2b81965d601531f01841de95754540f87392d7605bda17130fca0aa059da78eb795c55843e0033660be2c7b82b89f0e786e939a44cebeb44e9dcad6daa626eca9de710f864f1c7905ae60f6124ee20720cf4e34676112f6004c181a379d8aca0af31a16e4b80f3baf20fe5fdf1ebbe2058634a735ebf45fd665ca52bab049e335c1e7507ce16acd7800885bcef0691021167c8546e20fa7b3e4427cc5e85606bfe89f16969ac08d3de70c59ba27151acd809a239fca32d2b5fe378ec9074c5594e298bcd277e49890279ad7226525fcb59379e81e5ab8d21b0916feb808b17e6fa8b840f9a23f8ad71b7b6112311f3afbd70f40596bde75457be3400abe79f64e5bc80eb90cabad406a906d857f6a38873732d30d05ded6f27101bd5623cd21710f2ca49c9f5eae7a2a08fb388967ca95d9d223f913420fa3ce645832aacfbb476018d031009ddaf859182d33ee5727aff2ea67b7a1dcd5ee59de37008e66c14130c62ecc50afd0f325e510fa300473c9ea431a1fa148fda3b09b8d6df76eabac496f7562ed21e1de3fb6e68698fd4bc748d3d9b2e220e2b9b0922b57ef9d285c3c4085ab0adebe5fac14b7fb297026d4e9dff09d6f97f06442219d65ce108304df75ab48ae98387489933a36ecd2907b55a883954ad6bb93243562cea5ac8bda36ef0a97732e6f84f7b17d2325bf072497217787d2fc139af9b463ee1314953a27c897f397f54746630c8b69ee1e6c55aa44f40a570170af38dd2c90cd3f88b164e10634262de77284540d3e848c52f4545e4e28bdc3aaa8e013ca5153198bf6bc19b2161b0e1c9ab4dc349051e4ec45264fea15e783ac6b96fa67681b4429efb968b0691ab0ee5a0c33359b648dedfa7eb6dbdc6dd1e0cd93cfeaaea1cebc099f42870a22d7a9bbd02c2e35fcf5e70a4fe3b44421a1708f9906819cad75972a38586a18df5b36811ab6b47a39f6cde79a60b7f6cdf0df0a67c65c4585e37b29ff00b4a8ac9b472162a1f0ac11a016094986ab873cfe6eae3eec4dfa80c0086252a62564f0084ecc2b80045327c5dda256bc35ec972ad243d7748765793c7eefc3bdc812486039fa97536e9af32dd225d45b5852367abb457df1c582a633a34efe67176bfeefa1a84a1fff91b6b9e52c3b5d0f50ed0838f089830c15e002fbfbaca547e05848aac6145125fb708e0552f5fc631df48043888df4d6f31a5823480d2508f6b184c4170c048fd6d243cb51129c65c637f1b35f5bc999695885fefd2713436b2b1c4c1ad69ef874066c5495ebb33b9a4c227b7810385ed905b83d47232014b4d1fc99c9a7c64a7fe3c5159a0490000bf5a539806f51b732d0fb47febdc93d08969ee404ef88b09c49f9bd656d092055e19a4ef7ccf01ff80acd5c6f78bef998b92edcae551562e6e7cc8751362c690795e2c20f6e56d7f3f0402219e2ec6730cb557a8e689f6fa0d5901168cfb45b27aa48c48c2c24c92cab8632b19b7f9406fa6eef34d8b828b26546aef8f771fc5232aa72c5ddacdea54e42942c1b35f4828f5c8d20b206a631c4e727931d242d2aec7bd3a47a784f391015c82d1b8dfffb133bc6b685095ec50176addd8cf13f5ff832340ce438954d066b05303228c08be42f6437b358f82df5ab7a534b653c013ed5b53c2e90f05b8d825310af9dd9469868bd304454c8b0bde20d53970d360c488e5830c40f3e65b40db4df02c5091accd3ff45c3a4fd1bb0cef5b6a58995aada876c77c4da37625b06034ca7e403433d9b561f23eb261cedf1c7ac433d031b3a39be75b4d6a2005c8ee6cfa990453852cc73dcb612c111eabe37bc7aaad32521aa5fe244c4d4f59450ba0079745cf7b2f17a372e1cd0dadcc19f7c484706d105691d2e2126a2b9726da901af1ce6fc6a8176ae55e1f0066b1be4fae841229bad519064a5396c1f7e43d6eb50e536758b16666af7d9033266f23b9c7873e02675ce7144b85a9c04f8a4c5ac34a46d2e4f99da8e1ce3ca5c06fb87309d4189ad842d2fedbabf6ed820e1a7270883559449e99bc98d449c60d982e5590d12bbcdd6ebe14b252b47e308e13a1a88a003e7910ca5644543e600a98f6ec76b688b410c70335b0f6d0e4591bfcc1cc9f8e4c0b716924316cd4e4dcebfabfeffd38e5f65a903765782b43bd52b38facc67f1d507d403563c0f5695d57228eb5fa9ac4add9c4ce33e7d45a21d22bce575b7a379c415af4f6b05512eef41c6171999da4e9201e937273e04eb982921083b31dfc00fd2076233940d9a7609beef3e08247cdf2c90d4f53dd5f0468d25d7d74f81ede117d008f414ea41bf8fbc969fac1ce0ce4f92929fb105bec899a3d71c1c7aea95550359fce10cf15ba7adcd2e31069fd8b26fb82aeb89089e9b27926691c408fa114dd1e460f133c", 0x1000}, {&(0x7f0000000380)="44b35ae32001d8e0641dc8dac76a1bff0e70d0dcf099d92764483e05969b6beb71bc7fffc19d519899cda90fc7baecf90f02bf47f7070b7e6b3f78af3f11c13078205fa23966c42c0d40718c", 0x4c}], 0x3, &(0x7f0000001f80)=[{0x1010, 0x115, 0x5, "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"}], 0x1010}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000940)=@newtaction={0x70, 0x12, 0xbf68af9d17701211, 0x0, 0x25dfdbff, {0x7}, [{0x4}, {0x58, 0x1, [@m_gact={0x54, 0x4, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x14ed, 0xe2c052ffe78101f9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x1, 0x7, 0x9, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000094}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000a80)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x7, 0xda, 0x0, 0xff, 0xc}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) r9 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r9, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) 2.587439606s ago: executing program 4 (id=1256): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r1], 0x3c}}, 0x8000) 2.4631601s ago: executing program 4 (id=1257): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a00", @ANYRES64=r1], 0x44}}, 0x0) write$proc_mixer(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a20"], 0xb8) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x0, 0x1}, {0x400000}, {}, {}, {}, {0x0, 0x9}, {}, {0x8}]}) unshare(0x60600) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) dup3(r2, r0, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x3, 0x90480) ioctl$DVB_DEMUX_DMX_QUERYBUF(r7, 0xc0186f3d, &(0x7f0000000080)={0x4, 0xfff, 0x7, 0x2, 0xc, 0x7}) 2.31554364s ago: executing program 0 (id=1258): r0 = socket(0x848000000015, 0x805, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000e80)={{0x80000000, 0x0, 0x2, [0x2]}}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000980)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009ef8b089862373fbbcb281062d3fc112ea6ddad96dc28f062d667821f72a40b9842bc6c9", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00e1fffffffffeffffff0000004c36047abadce49dee959faa84cf1e9da3d7ea8778f410cfc3a12f79e7ef49a73c8ae25fa4d217216f62f1a0dce41697bbc28854d2bd84ec1ad3bfe18c25520fe14123d2e99db886"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0], 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) close(0x3) 1.11286347s ago: executing program 4 (id=1259): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.096402441s ago: executing program 0 (id=1260): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x98) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="57abfb935bdcf8bb783a2e2419d1c97bb6c1f2060fa8c8696a", 0x19) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'vxcan1\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0xc91, 0x3, "3e1a0448e5be"}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r2], 0x80}}], 0x1, 0x4000004) r4 = socket(0x11, 0xa, 0x0) syz_emit_ethernet(0x47, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x39, 0x68, 0x0, 0xca, 0x1d, 0x0, @multicast2, @rand_addr=0x64010100}, "2ceb6f9c3106233625ffc45ef03f82cd9696d3fdaf512b90ba9519b088ceccc4526dc04447"}}}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r5, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x80003, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) 575.657235ms ago: executing program 3 (id=1261): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x98) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) write(r2, &(0x7f0000000040)="57abfb935bdcf8bb783a2e2419d1c97bb6c1f2060fa8c8696a", 0x19) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'vxcan1\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0xc91, 0x3, "3e1a0448e5be"}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r3], 0x80}}], 0x1, 0x4000004) r5 = socket(0x11, 0xa, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x4, 0x14, 0x68, 0x0, 0xca, 0x1d, 0x0, @multicast2, @rand_addr=0x64010100}}}}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a4000}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) read(r6, &(0x7f0000000640)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x80003, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) 405.815503ms ago: executing program 4 (id=1262): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x80000003, 0x93405ca6c14f7064) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x100000000) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmmsg$unix(r0, &(0x7f0000008c40)=[{{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003a40)="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", 0xfe}, {&(0x7f0000003b40)="48c83dfd53debdde7f5400"/23, 0x17}, {&(0x7f0000003b80)="e20d84106b1713ba532b7228c472232b1e399aa0c39eb5eebaa75fa1", 0x1c}, {&(0x7f0000003bc0)="4b6d3e3b48b292ec69fa20fde0931753c51b3f8ff2cccfd5170094ff210ee31d5d97125cb2e3082f449eec69d1b0e2d71780aa2296c774c7bddb89dad94b9a7a8cc428c054c9dedb96d26eaa5e366d27a0b9680600d0fda44e8302cdfbcd647226ab59a25e7e8e65c2a320f462d4fb65e468bc5d2aceb44d8ec1f6a0ef93c5828387bb2615ecb9a96a6b71f9f4ff370d", 0x90}, {&(0x7f0000003c80)="52b044d3aab6456c35f8758201", 0xd}], 0x5, &(0x7f0000004000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, r0, r1]}}], 0xa8, 0x40800}}, {{&(0x7f0000006200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000006400)=[{&(0x7f0000006280)="8e8abf0a946f373a2e2e9b244df50119c39846f70357b377d6426bd11cb377f2981e543a0769361c4bfcdc180c358f99d2b393f200406ac7b56985b7794dec68b6b8109ce61e114ead26d71797e45b2f11de1a502171225435cd1243b434c931654cf18d353f5a8104d4c4d1cf66c5bb22592793b0e0a63f49302b70119f158170d616cdac4ebee544fd3e8a9d0d79da4664dd2488b140c3b0636df2fd54ad464c0fe422f0914196d3c5324066c41528ce47c006a2fa", 0xb6}, {&(0x7f0000006380)="2db3d11d803e8a461d35d470926bbea542041987545a00d522985fdccf39850fde9cb32015037f5aed96a0d1811b2ce2b78e4eeb62283a7ca49947bac1c2eb778ab7171a103a9ab9138a57e06ac93942f5999f3c836ac205601ad644c8ad353e05", 0x61}], 0x2, &(0x7f0000006540)=[@cred={{0x1c}}], 0x20, 0x5}}, {{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000003e80)="0986aa832c3c7cbf23e7551f43c0c7ea2f37cc5bb882731b9f260251d745f8e26e19bf9f24edacf495c4bf2d886448613afb85a68c46a7ff463d4dc0c8060e8ebe42d5c00d19881b4134cb34799ce188860f4e5f85dc763158019614ef53120203a028a27573496b2e16db1a952cad051e4000e972dc1b409d3f2a0dc0430c7403939a9cd8e1fd609e3d0e2ce0f3946559ee1a71862c931084", 0x99}, {&(0x7f0000006600)="0a2291dc9a3a9c4510b1586ef5940844f2b56d2dd425843fe5f2147f6b32e8d7200dd70100c3f2a9552e58e64ef8806effa65d0933aab745a2110b195660bbed90277f6652a86003d341a4764040f5a1616350453c4878b1d37b61102f879dbb69f90c88b9c1019ad2875e84e0c8600a075fe8da8bc4425da011e652cf6a6926d16b916a4417480784be63f3b32958a18fc36d46f4c35623d6cbf54e91b28c362b09540df12d3620c5029b130377ef64f7d1b79c011a3c95ac7080ca2df524c134d1cd9de6b83751c932f54a2cebfc84c7eacd42e154f29b675e724edc38", 0xde}, {&(0x7f0000006700)="c98826e22d976b323ef0c7724af78b42fcd9047ce14ac4a7ca9dc25537ba0aa3cb0bcef52823", 0x26}, {&(0x7f0000006740)="da73ac8570e5522c4811017f150439bacc2ae3b4668f009b6deeff86d8689f03eea9950065e27a432ca607e1007175b75b0cb76c78bff845c392dda33d220348541033deb515ed664917c62e789a89e22040296055f820bc51e7e60ec993ddb533f05f1aeac5f5e59ea5cf7383c3854a11169cfbd89ba4c17273326b2f0b97e20680f20bedd3e8d7cbab4088dff53dc3c475bab9666efdd4e7f2265e9fce2d3482a6a9e149698f3cd07df036c5b61614c618773066411742c3a92bcbc84d3a957835cacd101605b1ad2d2ddda10f95", 0xcf}, {&(0x7f0000006840)="7cf663280eb2b07fb9eadb9c1f939bef0d0020d4ce6a894f11126564c7eac063e21270fadc1941d1e7eafb0a63cbb849b7ebfb79382c30542f2f23a93b26158172f2c3bda51a3256a0bfc2eac446d3544525e932c37a374f76869626c725df64daee02fbf769973fa90a822814eb2aa4", 0x70}, {&(0x7f0000003dc0)="54da8e72716f7a2ebdc0387f43e3515673884be25115d531a448aa8ee9260d6b4dae946b49758be61b4e0b4af18275439ae185f235f10b693fd26f85e9be3f5a9769522ca6cde79e69c11cd8f1dd30600f1d69d84201caa51ee9b0d21ca3fc5de0adf97efb683e1d54a08cb237e23904b6af5ac8d24d1a243a9e0f72498e44b22e469db3629bc4893ff1d000000000000000", 0x92}], 0x6, &(0x7f00000040c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x40, 0xc800}}, {{&(0x7f0000006a40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000006bc0)=[{&(0x7f0000006ac0)="2c3b4c5a978602bf038e3ab1f7debcb059075fd20e7e63fa16c46b396c341e17bbe880d9fc0c39b8f99e37d7ddedd806976a6f29c3054741a1e1997eeb7467ef1468469dc4b7318e3fd1d0fd8f072e60a586ff7543cba3a51715b8b9d7adb3cae0adf5c056ddc1075bdaf1b1a902a85dd65cdc07f542f330c71d610f37ff5689394089f4c70037afb655a867c9aa0fa6d2933a87d0dce96b6e8446e5014166a1a1c8e013413758b17a8de55234cb7233972cf274d3b1398a76352641af779caa6e3a", 0xc2}], 0x1}}], 0x4, 0xc085) recvmmsg(r0, &(0x7f0000003880)=[{{&(0x7f0000000280)=@l2, 0x80, &(0x7f0000000140)=[{&(0x7f0000000b80)=""/131, 0x83}], 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/223, 0xdf}, {&(0x7f0000000d40)=""/106, 0x6a}, {&(0x7f0000000dc0)=""/231, 0xe7}], 0x3, &(0x7f0000000f00)=""/97, 0xfffffffffffffcf8}, 0x20f1}, {{&(0x7f0000000f80)=@l2, 0x80, &(0x7f0000001000)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1, &(0x7f00000021c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001040)=@phonet, 0x80, &(0x7f00000031c0)=[{&(0x7f00000010c0)=""/148, 0x94}], 0x1, &(0x7f0000003200)=""/6, 0x6}, 0x7fffffff}, {{&(0x7f0000003240)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000003780)=[{&(0x7f00000032c0)=""/224, 0xe0}, {&(0x7f00000033c0)=""/122, 0x7a}, {&(0x7f0000003440)=""/124, 0x7c}, {&(0x7f00000034c0)=""/233, 0xe9}, {&(0x7f00000035c0)=""/160, 0xa0}, {&(0x7f0000003680)=""/166, 0xa6}, {&(0x7f0000003740)=""/5, 0x5}], 0x7, &(0x7f0000003800)=""/98, 0x62}, 0x1}], 0x5, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x0, 0x1, 0xb41, 0x100000000008, 0xa, 0x4000, 0x3}, 0x0) socket(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f00000001c0)=0x1) 117.096653ms ago: executing program 4 (id=1263): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010040904bc00029e8833000905020000542d5d2bb2eb34f861a203ded9e6c73b85ba49404265f3b9c2bddb4b0c4f018000"/85], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20030200ecff7e4b"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x2c, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000980), 0x6e8, 0x18800) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000b51000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000009c0)="0f20219866b9910b00000f32360f01db66b80500000066b9420000000f01c1ded9baf80c66b8d8ecd38f66efbafc0c66b826000000660f3825190f07baf80c66b89a7efa8f66efbafc0cb80000", 0x4d}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x20, 0x21, 0xe0, {0xe0, 0xf, "bd2a861483234b31385091cf9d0d98f2c8c7ce7f3e7013231b2b269020c6c37645285503214402eb281379896d1fe3d700fc6fceb7cb2dbeb78e70d4da08338aea4e93bea31d740924e8ec3c6575dced34749fd8d1dc1fb2455b1d6779950d8aaa75bd245656b2cb72e4905c46aea4cb618be980c2ef2a696a85b95e5bd609a66f6fd332a5eb220958e1ffce554a005e71a5ea61a20ce92dfa4ceb67d119e18eb65b1d65cb2d96d8d2508413425d25d1dc246afd1332eddefce9a9f76a010f1ccaec03d69d42f762ee3fe00d00176b8fc554a755c2a7504f37fb42a9869e"}}, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000940)={0x34, &(0x7f0000000600)={0x0, 0x14, 0xcc, "b304dfb7800ce19bd651b1a33b0d335b855aa913b6d18191ae5de8658f9329941daa4597e5a2435b9ef1159d745fa67b3d49f2890929c9a551b79374aa6196bfeb900b69aa2111d5c53cbae6fdd9bf1e7e2f33a2c06ef533e48653811529f3a5ea420da04d873fa5b6dba86f5701f45d4dcb3c84d1befb8dc85518101d1f0d2ad0aa4e688644ead033e3f1b9e9cb93b184e18edae0ef6ac0c701215153e6124f32946917ec54a441fb77b428b266f6849387686ef45ff9aa02d34ab411fcebee3cb4fe498db0c76f8f71536a"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000880)={0xc0, 0xa1, 0x4, 0x7ff}, &(0x7f00000008c0)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000900)={0xc0, 0xa2, 0x2f, "b9085a032def0b41c9ea7043116e3be33b4714214a8e0d48bfab2b4eaf425d07aa900ee57bdf9c31da046b74b2b4b7"}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r6, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) 0s ago: executing program 1 (id=1264): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x35, 0x40, 0x50, 0x10, 0x55f, 0xa800, 0xbfbf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x6c, 0x98, 0xc, [{{0x9, 0x4, 0xc7, 0x80, 0x0, 0xa4, 0xbc, 0x62, 0xf}}]}}]}}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Bad value for 'fd' [ 384.446398][ T5914] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 384.606646][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 384.635081][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.915'. [ 384.649779][ T5914] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 384.658713][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.672468][ T5914] usb 4-1: config 0 has no interface number 0 [ 384.684716][ T5914] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 384.706047][ T5914] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 384.737445][ T9257] x_tables: unsorted underflow at hook 3 [ 384.738217][ T5914] usb 4-1: config 0 interface 106 has no altsetting 0 [ 384.751797][ T5914] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 384.765577][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.811063][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 384.821691][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.846008][ T5914] usb 4-1: config 0 descriptor?? [ 384.854099][ T9] usb 1-1: Product: syz [ 384.863674][ T9] usb 1-1: Manufacturer: syz [ 384.883517][ T9] usb 1-1: SerialNumber: syz [ 384.907699][ T5914] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 384.952408][ T9] usb 1-1: config 0 descriptor?? [ 384.975989][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 385.191457][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.225388][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.309161][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.319000][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.333366][ T9273] netlink: 'syz.3.912': attribute type 1 has an invalid length. [ 385.359172][ T9273] team0: Device gtp0 is of different type [ 385.366500][ T5921] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 385.610797][ T5921] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 385.624452][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.740893][ T5921] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.797596][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.817076][ T5921] usb 2-1: Product: syz [ 385.822083][ T5921] usb 2-1: Manufacturer: syz [ 385.846289][ T5921] usb 2-1: SerialNumber: syz [ 385.998695][ T1139] usb 4-1: Failed to submit usb control message: -110 [ 386.006166][ T1139] usb 4-1: unable to send the bmi data to the device: -110 [ 386.017301][ T1139] usb 4-1: unable to get target info from device [ 386.027055][ T1139] usb 4-1: could not get target info (-110) [ 386.035186][ T1139] usb 4-1: could not probe fw (-110) [ 387.189789][ T9277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.264237][ T9277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.556044][ T5956] usbhid 3-1:0.0: can't add hid device: -71 [ 387.599127][ T5956] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 387.682963][ T5956] usb 3-1: USB disconnect, device number 25 [ 388.101994][ T9287] netlink: 68 bytes leftover after parsing attributes in process `syz.2.918'. [ 388.496162][ T24] usb 4-1: USB disconnect, device number 30 [ 388.704902][ T5921] usb 2-1: 0:2 : does not exist [ 388.774236][ T5914] usb 1-1: USB disconnect, device number 29 [ 388.965239][ T5921] usb 2-1: USB disconnect, device number 24 [ 389.031098][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.128129][ T9319] fuse: Unknown parameter '0x0000000000000006' [ 390.297544][ T9324] netlink: 'syz.2.928': attribute type 21 has an invalid length. [ 390.305436][ T9324] netlink: 128 bytes leftover after parsing attributes in process `syz.2.928'. [ 390.314691][ T9324] netlink: 'syz.2.928': attribute type 5 has an invalid length. [ 390.322472][ T9324] netlink: 3 bytes leftover after parsing attributes in process `syz.2.928'. [ 390.972088][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 391.156039][ T24] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 391.193439][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.236309][ T24] usb 5-1: config 0 has no interface number 0 [ 391.253154][ T24] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 391.294843][ T24] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 391.336975][ T24] usb 5-1: config 0 interface 106 has no altsetting 0 [ 391.399038][ T24] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 391.418416][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.443019][ T24] usb 5-1: config 0 descriptor?? [ 391.488011][ T24] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 391.795240][ T9335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.897039][ T9335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.405131][ T9340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.427276][ T9340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.557622][ T13] usb 5-1: Failed to submit usb control message: -110 [ 392.593470][ T13] usb 5-1: unable to send the bmi data to the device: -110 [ 392.646364][ T24] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 392.727983][ T13] usb 5-1: unable to get target info from device [ 392.736385][ T13] usb 5-1: could not get target info (-110) [ 392.750833][ T13] usb 5-1: could not probe fw (-110) [ 392.789628][ T9340] netlink: 'syz.4.930': attribute type 1 has an invalid length. [ 392.817091][ T9340] team0: Device gtp0 is of different type [ 392.944532][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 392.960692][ T24] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 392.982885][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.013780][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 393.032938][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.060626][ T24] usb 1-1: Product: syz [ 393.068670][ T24] usb 1-1: Manufacturer: syz [ 393.074855][ T24] usb 1-1: SerialNumber: syz [ 394.204067][ T9360] netlink: 68 bytes leftover after parsing attributes in process `syz.2.938'. [ 396.471433][ T9] usb 5-1: USB disconnect, device number 41 [ 396.657970][ T9369] syzkaller0: entered promiscuous mode [ 396.696826][ T9369] syzkaller0: entered allmulticast mode [ 396.807439][ T24] usb 1-1: 0:2 : does not exist [ 397.055767][ T24] usb 1-1: USB disconnect, device number 30 [ 397.213007][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.050265][ T9399] fuse: Unknown parameter 'fd0x0000000000000006' [ 399.215979][ T9401] netlink: 'syz.4.950': attribute type 21 has an invalid length. [ 399.223985][ T9401] netlink: 128 bytes leftover after parsing attributes in process `syz.4.950'. [ 399.233248][ T9401] netlink: 'syz.4.950': attribute type 5 has an invalid length. [ 399.241061][ T9401] netlink: 3 bytes leftover after parsing attributes in process `syz.4.950'. [ 399.811551][ T5914] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 400.016365][ T5914] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 400.055043][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.082943][ T5914] usb 3-1: config 0 has no interface number 0 [ 400.099695][ T5914] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 400.126316][ T5914] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 400.140026][ T9412] syzkaller0: entered promiscuous mode [ 400.160239][ T5914] usb 3-1: config 0 interface 106 has no altsetting 0 [ 400.160249][ T9412] syzkaller0: entered allmulticast mode [ 400.195643][ T5914] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 400.239403][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.296374][ T5921] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 400.310625][ T5914] usb 3-1: config 0 descriptor?? [ 400.343145][ T5914] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 400.471441][ T5921] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 400.488971][ T5921] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 400.509170][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 400.519758][ T5921] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 400.546905][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 400.586787][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 400.609415][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.637778][ T5921] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 400.654195][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 400.670323][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.691929][ T5921] usb 4-1: Product: syz [ 400.707677][ T5921] usb 4-1: Manufacturer: syz [ 400.772978][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.782389][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.794875][ T9422] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 400.815653][ T9422] team0: Device gtp0 is of different type [ 400.999491][ T9410] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 401.047216][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 401.131048][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 401.178472][ T5921] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 401.184475][ T5921] cdc_wdm 4-1:1.0: Unknown control protocol [ 401.275455][ T9410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.288256][ T9410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.307738][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 401.314827][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 401.323628][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 401.330314][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 401.337257][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 401.343926][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 401.352214][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 401.358893][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 401.366473][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 401.373179][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 401.380953][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 401.387656][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 401.396220][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 401.401558][ T1139] usb 3-1: Failed to submit usb control message: -110 [ 401.402981][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 401.404384][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 401.422979][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 401.432340][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 401.439064][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 401.446686][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 401.453715][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 401.478789][ T1139] usb 3-1: unable to send the bmi data to the device: -110 [ 401.496481][ T1139] usb 3-1: unable to get target info from device [ 401.645402][ T1139] usb 3-1: could not get target info (-110) [ 401.651768][ T1139] usb 3-1: could not probe fw (-110) [ 401.690465][ T9] usb 4-1: USB disconnect, device number 31 [ 401.690468][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 403.448296][ T9] usb 3-1: USB disconnect, device number 26 [ 405.390745][ T9466] FAULT_INJECTION: forcing a failure. [ 405.390745][ T9466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.408161][ T9464] syzkaller0: entered promiscuous mode [ 405.413717][ T9464] syzkaller0: entered allmulticast mode [ 405.425354][ T9466] CPU: 1 UID: 0 PID: 9466 Comm: syz.0.966 Not tainted syzkaller #0 PREEMPT(full) [ 405.425384][ T9466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.425398][ T9466] Call Trace: [ 405.425407][ T9466] [ 405.425416][ T9466] dump_stack_lvl+0xe8/0x150 [ 405.425454][ T9466] should_fail_ex+0x412/0x560 [ 405.425485][ T9466] _copy_from_iter+0x3b0/0x1670 [ 405.425514][ T9466] ? process_measurement+0x195e/0x1c80 [ 405.425556][ T9466] ? __pfx__copy_from_iter+0x10/0x10 [ 405.425589][ T9466] ? dev_get_by_index+0x22/0x2e0 [ 405.425612][ T9466] ? dev_get_by_index+0x22/0x2e0 [ 405.425640][ T9466] packet_sendmsg+0x30b2/0x50f0 [ 405.425676][ T9466] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 405.425705][ T9466] ? __lock_acquire+0x6b5/0x2cf0 [ 405.425762][ T9466] ? aa_sk_perm+0x6d5/0x900 [ 405.425785][ T9466] ? __pfx_packet_sendmsg+0x10/0x10 [ 405.425824][ T9466] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 405.425860][ T9466] ? aa_sock_msg_perm+0xf1/0x1b0 [ 405.425887][ T9466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.425912][ T9466] ? __pfx_packet_sendmsg+0x10/0x10 [ 405.425940][ T9466] ____sys_sendmsg+0xa68/0xad0 [ 405.425982][ T9466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.426023][ T9466] ? import_iovec+0x73/0xa0 [ 405.426057][ T9466] ___sys_sendmsg+0x2a5/0x360 [ 405.426095][ T9466] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.426167][ T9466] ? __fget_files+0x2a/0x420 [ 405.426201][ T9466] ? __fget_files+0x3a0/0x420 [ 405.426240][ T9466] __x64_sys_sendmsg+0x1bd/0x2a0 [ 405.426274][ T9466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.426315][ T9466] ? __pfx_ksys_write+0x10/0x10 [ 405.426350][ T9466] do_syscall_64+0x14d/0xf80 [ 405.426383][ T9466] ? trace_irq_disable+0x3b/0x150 [ 405.426412][ T9466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.426435][ T9466] ? clear_bhb_loop+0x40/0x90 [ 405.426462][ T9466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.426483][ T9466] RIP: 0033:0x7f7ba5b9c629 [ 405.426504][ T9466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.426523][ T9466] RSP: 002b:00007f7ba6a14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.426547][ T9466] RAX: ffffffffffffffda RBX: 00007f7ba5e15fa0 RCX: 00007f7ba5b9c629 [ 405.426564][ T9466] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 405.426578][ T9466] RBP: 00007f7ba6a14090 R08: 0000000000000000 R09: 0000000000000000 [ 405.426592][ T9466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.426605][ T9466] R13: 00007f7ba5e16038 R14: 00007f7ba5e15fa0 R15: 00007f7ba5f3fa48 [ 405.426639][ T9466] [ 405.936800][ T9468] fuse: Unknown parameter 'fd0x0000000000000006' [ 406.126893][ T9474] netlink: 'syz.2.967': attribute type 21 has an invalid length. [ 406.134710][ T9474] netlink: 128 bytes leftover after parsing attributes in process `syz.2.967'. [ 406.168057][ T9474] netlink: 'syz.2.967': attribute type 5 has an invalid length. [ 406.175777][ T9474] netlink: 3 bytes leftover after parsing attributes in process `syz.2.967'. [ 406.506310][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 406.668644][ T10] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 406.677654][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.689118][ T10] usb 4-1: config 0 has no interface number 0 [ 406.696342][ T10] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 406.707620][ T10] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 406.721563][ T10] usb 4-1: config 0 interface 106 has no altsetting 0 [ 406.729260][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 406.738856][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.776409][ T10] usb 4-1: config 0 descriptor?? [ 406.795746][ T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 407.125310][ T9484] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 407.141644][ T9484] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 407.159980][ T9484] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.170390][ T9484] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 407.190259][ T9484] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.206712][ T9484] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 407.253242][ T9484] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.268550][ T9484] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 407.285106][ T9484] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 407.294154][ T9484] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 407.305747][ T9492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.345152][ T9492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.419469][ T9499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.428850][ T9499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.440888][ T9499] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 407.464002][ T9499] team0: Device gtp0 is of different type [ 407.707317][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 407.836711][ T1139] usb 4-1: Failed to submit usb control message: -110 [ 407.861225][ T1139] usb 4-1: unable to send the bmi data to the device: -110 [ 407.879440][ T1139] usb 4-1: unable to get target info from device [ 407.888807][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 407.901731][ T1139] usb 4-1: could not get target info (-110) [ 407.919309][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.932554][ T1139] usb 4-1: could not probe fw (-110) [ 407.946019][ T10] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 407.994161][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.041005][ T10] usb 2-1: Product: syz [ 408.092404][ T10] usb 2-1: Manufacturer: syz [ 408.133827][ T10] usb 2-1: SerialNumber: syz [ 408.196774][ T10] usb 2-1: config 0 descriptor?? [ 408.436426][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 409.196334][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 409.196345][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 409.276714][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 409.356462][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 409.644634][ T10] usb 4-1: USB disconnect, device number 32 [ 409.738486][ T9] usb 2-1: USB disconnect, device number 25 [ 409.841748][ T9516] FAULT_INJECTION: forcing a failure. [ 409.841748][ T9516] name failslab, interval 1, probability 0, space 0, times 0 [ 409.883898][ T9516] CPU: 0 UID: 0 PID: 9516 Comm: syz.3.979 Not tainted syzkaller #0 PREEMPT(full) [ 409.883930][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 409.883944][ T9516] Call Trace: [ 409.883953][ T9516] [ 409.883962][ T9516] dump_stack_lvl+0xe8/0x150 [ 409.883998][ T9516] should_fail_ex+0x412/0x560 [ 409.884027][ T9516] should_failslab+0xa8/0x100 [ 409.884055][ T9516] __kmalloc_noprof+0xe8/0x760 [ 409.884074][ T9516] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 409.884098][ T9516] ? video_usercopy+0x1b1/0x14b0 [ 409.884127][ T9516] video_usercopy+0x1b1/0x14b0 [ 409.884154][ T9516] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 409.884190][ T9516] ? __pfx___video_do_ioctl+0x10/0x10 [ 409.884217][ T9516] ? __pfx_video_usercopy+0x10/0x10 [ 409.884252][ T9516] ? __fget_files+0x2a/0x420 [ 409.884285][ T9516] ? __fget_files+0x2a/0x420 [ 409.884315][ T9516] ? __fget_files+0x3a0/0x420 [ 409.884348][ T9516] v4l2_ioctl+0x18d/0x1e0 [ 409.884373][ T9516] ? __pfx_v4l2_ioctl+0x10/0x10 [ 409.884395][ T9516] __se_sys_ioctl+0xfc/0x170 [ 409.884422][ T9516] do_syscall_64+0x14d/0xf80 [ 409.884452][ T9516] ? trace_irq_disable+0x3b/0x150 [ 409.884482][ T9516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.884505][ T9516] ? clear_bhb_loop+0x40/0x90 [ 409.884531][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.884564][ T9516] RIP: 0033:0x7f666499c629 [ 409.884583][ T9516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.884601][ T9516] RSP: 002b:00007f66657a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.884624][ T9516] RAX: ffffffffffffffda RBX: 00007f6664c15fa0 RCX: 00007f666499c629 [ 409.884638][ T9516] RDX: 0000200000000240 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 409.884659][ T9516] RBP: 00007f66657a6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.884669][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.884678][ T9516] R13: 00007f6664c16038 R14: 00007f6664c15fa0 R15: 00007f6664d3fa48 [ 409.884702][ T9516] [ 410.476633][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 410.527348][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.982'. [ 410.776357][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 411.131513][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 411.158979][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.290711][ T5921] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 411.304736][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 411.304746][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 411.339977][ T10] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 411.354691][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.378939][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 411.415420][ T10] usb 2-1: Product: syz [ 411.426185][ T10] usb 2-1: Manufacturer: syz [ 411.435964][ T10] usb 2-1: SerialNumber: syz [ 411.446711][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 411.466300][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 411.511573][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.533092][ T5921] usb 5-1: config 4 interface 0 has no altsetting 0 [ 411.552032][ T5921] usb 5-1: string descriptor 0 read error: -22 [ 411.562757][ T5921] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 411.636157][ T10] usb 2-1: config 0 descriptor?? [ 411.646901][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.683435][ T5921] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 411.702797][ T5921] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 411.723520][ T5921] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 411.730805][ T5921] usb 5-1: media controller created [ 411.808997][ T10] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 411.819589][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 412.878129][ T49] usb 2-1: Failed to submit usb control message: -110 [ 412.890748][ T49] usb 2-1: unable to send the bmi data to the device: -110 [ 412.916338][ T49] usb 2-1: unable to get target info from device [ 412.942450][ T49] usb 2-1: could not get target info (-110) [ 412.982265][ T5921] zl10353_read_register: readreg error (reg=127, ret==0) [ 412.995077][ T49] usb 2-1: could not probe fw (-110) [ 413.135306][ T5921] usb 5-1: USB disconnect, device number 42 [ 413.263709][ T9542] fuse: Unknown parameter 'fd0x0000000000000006' [ 413.452079][ T9544] netlink: 'syz.2.985': attribute type 21 has an invalid length. [ 413.460306][ T9544] netlink: 128 bytes leftover after parsing attributes in process `syz.2.985'. [ 413.469522][ T9544] netlink: 'syz.2.985': attribute type 5 has an invalid length. [ 413.477294][ T9544] netlink: 3 bytes leftover after parsing attributes in process `syz.2.985'. [ 413.610486][ T9548] FAULT_INJECTION: forcing a failure. [ 413.610486][ T9548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.683221][ T9548] CPU: 1 UID: 0 PID: 9548 Comm: syz.0.986 Not tainted syzkaller #0 PREEMPT(full) [ 413.683253][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 413.683268][ T9548] Call Trace: [ 413.683277][ T9548] [ 413.683287][ T9548] dump_stack_lvl+0xe8/0x150 [ 413.683324][ T9548] should_fail_ex+0x412/0x560 [ 413.683355][ T9548] _copy_to_user+0x31/0xb0 [ 413.683388][ T9548] simple_read_from_buffer+0xe1/0x170 [ 413.683422][ T9548] proc_fail_nth_read+0x1bb/0x230 [ 413.683465][ T9548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.683497][ T9548] ? rw_verify_area+0x2a6/0x4d0 [ 413.683523][ T9548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 413.683554][ T9548] vfs_read+0x20c/0xa70 [ 413.683573][ T9548] ? fdget_pos+0x246/0x320 [ 413.683608][ T9548] ? __pfx___mutex_lock+0x10/0x10 [ 413.683629][ T9548] ? __pfx_vfs_read+0x10/0x10 [ 413.683652][ T9548] ? __fget_files+0x2a/0x420 [ 413.683686][ T9548] ? __fget_files+0x3a0/0x420 [ 413.683713][ T9548] ? __fget_files+0x2a/0x420 [ 413.683752][ T9548] ksys_read+0x150/0x270 [ 413.683776][ T9548] ? __pfx_ksys_read+0x10/0x10 [ 413.683809][ T9548] do_syscall_64+0x14d/0xf80 [ 413.683840][ T9548] ? trace_irq_disable+0x3b/0x150 [ 413.683870][ T9548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.683892][ T9548] ? clear_bhb_loop+0x40/0x90 [ 413.683919][ T9548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.683940][ T9548] RIP: 0033:0x7f7ba5b5cece [ 413.683961][ T9548] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 413.683979][ T9548] RSP: 002b:00007f7ba69f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 413.684002][ T9548] RAX: ffffffffffffffda RBX: 00007f7ba69f36c0 RCX: 00007f7ba5b5cece [ 413.684017][ T9548] RDX: 000000000000000f RSI: 00007f7ba69f30a0 RDI: 0000000000000004 [ 413.684030][ T9548] RBP: 00007f7ba69f3090 R08: 0000000000000000 R09: 0000000000000000 [ 413.684042][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.684055][ T9548] R13: 00007f7ba5e16128 R14: 00007f7ba5e16090 R15: 00007f7ba5f3fa48 [ 413.684088][ T9548] [ 413.971359][ T5921] usb 2-1: USB disconnect, device number 26 [ 414.218690][ T9552] FAULT_INJECTION: forcing a failure. [ 414.218690][ T9552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.249806][ T9552] CPU: 1 UID: 0 PID: 9552 Comm: syz.1.988 Not tainted syzkaller #0 PREEMPT(full) [ 414.249838][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 414.249853][ T9552] Call Trace: [ 414.249861][ T9552] [ 414.249871][ T9552] dump_stack_lvl+0xe8/0x150 [ 414.249907][ T9552] should_fail_ex+0x412/0x560 [ 414.249938][ T9552] _copy_from_user+0x2d/0xb0 [ 414.249970][ T9552] vhost_vsock_dev_ioctl+0x13a/0xed0 [ 414.250008][ T9552] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 414.250031][ T9552] ? __fget_files+0x2a/0x420 [ 414.250054][ T9552] ? __fget_files+0x3a0/0x420 [ 414.250075][ T9552] ? __fget_files+0x2a/0x420 [ 414.250099][ T9552] ? bpf_lsm_file_ioctl+0x9/0x20 [ 414.250119][ T9552] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 414.250142][ T9552] __se_sys_ioctl+0xfc/0x170 [ 414.250161][ T9552] do_syscall_64+0x14d/0xf80 [ 414.250185][ T9552] ? trace_irq_disable+0x3b/0x150 [ 414.250213][ T9552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.250229][ T9552] ? clear_bhb_loop+0x40/0x90 [ 414.250248][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.250264][ T9552] RIP: 0033:0x7f2e2f79c629 [ 414.250279][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.250293][ T9552] RSP: 002b:00007f2e2d9cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.250310][ T9552] RAX: ffffffffffffffda RBX: 00007f2e2fa16090 RCX: 00007f2e2f79c629 [ 414.250321][ T9552] RDX: 0000200000000000 RSI: 000000004004af61 RDI: 0000000000000003 [ 414.250332][ T9552] RBP: 00007f2e2d9cd090 R08: 0000000000000000 R09: 0000000000000000 [ 414.250341][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.250350][ T9552] R13: 00007f2e2fa16128 R14: 00007f2e2fa16090 R15: 00007f2e2fb3fa48 [ 414.250374][ T9552] [ 414.906363][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 414.953617][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 414.975122][ T9571] input: syz0 as /devices/virtual/input/input36 [ 415.178894][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 415.181054][ T9] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 415.181077][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.181099][ T9] usb 5-1: config 0 has no interface number 0 [ 415.181120][ T9] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 415.181192][ T9] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 415.181213][ T9] usb 5-1: config 0 interface 106 has no altsetting 0 [ 415.181237][ T9] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 415.181255][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.181349][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.183438][ T10] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 415.183462][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.183477][ T10] usb 4-1: Product: syz [ 415.183489][ T10] usb 4-1: Manufacturer: syz [ 415.183501][ T10] usb 4-1: SerialNumber: syz [ 415.221021][ T9] usb 5-1: config 0 descriptor?? [ 415.267471][ T10] usb 4-1: config 0 descriptor?? [ 415.291124][ T9] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 415.568772][ T9586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.572709][ T9586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.627811][ T9585] netlink: 'syz.1.995': attribute type 8 has an invalid length. [ 415.644890][ T9587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.646518][ T9587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.655936][ T9587] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 416.235026][ T9587] team0: Device gtp0 is of different type [ 416.323646][ T36] usb 5-1: Failed to submit usb control message: -110 [ 416.323696][ T36] usb 5-1: unable to send the bmi data to the device: -110 [ 416.323711][ T36] usb 5-1: unable to get target info from device [ 416.323724][ T36] usb 5-1: could not get target info (-110) [ 416.323739][ T36] usb 5-1: could not probe fw (-110) [ 417.971889][ T5956] usb 4-1: USB disconnect, device number 33 [ 418.254903][ T9602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1000'. [ 418.469008][ T9606] netlink: 'syz.3.1001': attribute type 2 has an invalid length. [ 418.572309][ T5956] usb 5-1: USB disconnect, device number 43 [ 418.746498][ T5921] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 418.916270][ T5921] usb 1-1: Using ep0 maxpacket: 8 [ 418.926795][ T5921] usb 1-1: config 0 has an invalid interface number: 130 but max is 0 [ 419.018635][ T5921] usb 1-1: config 0 has no interface number 0 [ 419.024949][ T5921] usb 1-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 419.036042][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.088138][ T5921] usb 1-1: config 0 descriptor?? [ 419.115577][ T9621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 419.152513][ T5921] ftdi_sio 1-1:0.130: FTDI USB Serial Device converter detected [ 419.191067][ T5921] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 419.345213][ T5921] usb 1-1: USB disconnect, device number 31 [ 419.417090][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 419.492627][ T5921] ftdi_sio 1-1:0.130: device disconnected [ 419.506780][ T9630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1008'. [ 419.776646][ T9630] vivid-007: disconnect [ 419.819466][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 419.842422][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.897116][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.922629][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.980504][ T5914] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 420.022321][ T9624] vivid-007: reconnect [ 420.046170][ T10] usb 3-1: Product: syz [ 420.056338][ T10] usb 3-1: Manufacturer: syz [ 420.065345][ T10] usb 3-1: SerialNumber: syz [ 420.166842][ T1208] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 420.196330][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 420.237098][ T5914] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 420.306850][ T5914] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 420.378738][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.390070][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.420733][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.436387][ T1208] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 420.445589][ T5914] usb 4-1: Product: syz [ 420.456295][ T5914] usb 4-1: Manufacturer: syz [ 420.461065][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.469215][ T5914] usb 4-1: SerialNumber: syz [ 420.494070][ T5914] usb 4-1: config 0 descriptor?? [ 420.513835][ T1208] usb 1-1: config 0 descriptor?? [ 420.865681][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1012'. [ 422.655598][ T5921] usb 4-1: USB disconnect, device number 34 [ 422.941672][ T10] usb 3-1: 0:2 : does not exist [ 423.092813][ T9656] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.111372][ T10] usb 3-1: USB disconnect, device number 27 [ 423.213862][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.335974][ T1208] usbhid 1-1:0.0: can't add hid device: -71 [ 423.345450][ T1208] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 423.363371][ T1208] usb 1-1: USB disconnect, device number 32 [ 423.918068][ T5921] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 424.086871][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 424.094878][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 424.112422][ T5921] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 424.124081][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.148627][ T5921] usb 1-1: Product: syz [ 424.158387][ T5921] usb 1-1: Manufacturer: syz [ 424.186356][ T5921] usb 1-1: SerialNumber: syz [ 424.207528][ T5921] usb 1-1: config 0 descriptor?? [ 424.338532][ T5921] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 424.386451][ T5921] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 425.218733][ T9683] vivid-007: disconnect [ 425.868691][ T9679] vivid-007: reconnect [ 426.087105][ T5921] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 426.173478][ T5921] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 426.205344][ T5921] em28xx 1-1:0.0: board has no eeprom [ 426.296345][ T5921] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 426.304455][ T5921] em28xx 1-1:0.0: dvb set to bulk mode. [ 426.313044][ T24] em28xx 1-1:0.0: Binding DVB extension [ 426.506328][ T5956] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 426.523075][ T24] em28xx 1-1:0.0: Registering input extension [ 426.671541][ T1208] usb 1-1: USB disconnect, device number 33 [ 426.682736][ T1208] em28xx 1-1:0.0: Disconnecting em28xx [ 426.696299][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 426.716998][ T1208] em28xx 1-1:0.0: Closing input extension [ 426.743138][ T5956] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 426.772699][ T5956] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 426.802073][ T1208] em28xx 1-1:0.0: Freeing device [ 426.807664][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.815719][ T5956] usb 2-1: Product: syz [ 426.850303][ T5956] usb 2-1: Manufacturer: syz [ 426.854987][ T5956] usb 2-1: SerialNumber: syz [ 426.893842][ T5956] usb 2-1: config 0 descriptor?? [ 427.247957][ T9718] loop0: detected capacity change from 0 to 7 [ 427.259019][ T9718] Dev loop0: unable to read RDB block 7 [ 427.264684][ T9718] loop0: unable to read partition table [ 427.282862][ T9718] loop0: partition table beyond EOD, truncated [ 427.336134][ T9718] loop_reread_partitions: partition scan of loop0 (þ被xü—ŸÑà– ) failed (rc=-5) [ 427.386639][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 427.554306][ T9699] sit0: entered promiscuous mode [ 427.570550][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 427.615998][ T9699] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 427.642941][ T24] usb 3-1: config 1 has no interface number 1 [ 427.654613][ T9699] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1026'. [ 427.699138][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.767994][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.291989][ T24] usb 3-1: Product: syz [ 428.302675][ T24] usb 3-1: Manufacturer: syz [ 428.325038][ T24] usb 3-1: SerialNumber: syz [ 429.553434][ T5921] usb 2-1: USB disconnect, device number 27 [ 429.889100][ T9740] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 430.217055][ T9750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1035'. [ 430.415016][ T9757] FAULT_INJECTION: forcing a failure. [ 430.415016][ T9757] name failslab, interval 1, probability 0, space 0, times 0 [ 430.494357][ T9757] CPU: 0 UID: 0 PID: 9757 Comm: syz.0.1037 Not tainted syzkaller #0 PREEMPT(full) [ 430.494392][ T9757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 430.494402][ T9757] Call Trace: [ 430.494410][ T9757] [ 430.494441][ T9757] dump_stack_lvl+0xe8/0x150 [ 430.494479][ T9757] should_fail_ex+0x412/0x560 [ 430.494508][ T9757] ? __d_alloc+0x37/0x6f0 [ 430.494542][ T9757] should_failslab+0xa8/0x100 [ 430.494570][ T9757] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 430.494617][ T9757] __d_alloc+0x37/0x6f0 [ 430.494671][ T9757] d_alloc+0x4b/0x190 [ 430.494700][ T9757] ? lookup_one_qstr_excl+0xc8/0x360 [ 430.494734][ T9757] lookup_one_qstr_excl+0xdc/0x360 [ 430.494759][ T9757] filename_create+0x20e/0x370 [ 430.494798][ T9757] ? __pfx_filename_create+0x10/0x10 [ 430.494833][ T9757] filename_mkdirat+0xd2/0x510 [ 430.494863][ T9757] ? __pfx_filename_mkdirat+0x10/0x10 [ 430.494890][ T9757] ? do_getname+0x151/0x250 [ 430.494919][ T9757] __se_sys_mkdirat+0x35/0x150 [ 430.494958][ T9757] do_syscall_64+0x14d/0xf80 [ 430.494990][ T9757] ? trace_irq_disable+0x3b/0x150 [ 430.495019][ T9757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.495041][ T9757] ? clear_bhb_loop+0x40/0x90 [ 430.495067][ T9757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.495089][ T9757] RIP: 0033:0x7f7ba5b9b507 [ 430.495110][ T9757] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.495128][ T9757] RSP: 002b:00007f7ba6a13e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 430.495150][ T9757] RAX: ffffffffffffffda RBX: 00007f7ba6a13ee0 RCX: 00007f7ba5b9b507 [ 430.495175][ T9757] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 430.495185][ T9757] RBP: 0000200000002040 R08: 0000000000000000 R09: 0000000000000000 [ 430.495195][ T9757] R10: 0000200000002040 R11: 0000000000000246 R12: 0000200000000000 [ 430.495205][ T9757] R13: 00007f7ba6a13ea0 R14: 0000000000000000 R15: 0000200000000280 [ 430.495246][ T9757] [ 430.598077][ T5921] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 430.774287][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 430.996412][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 431.013896][ T5921] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 431.024800][ T5921] usb 2-1: config 0 has no interface number 0 [ 431.161393][ T5921] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 431.207597][ T5921] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 431.237282][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.256602][ T5921] usb 2-1: Product: syz [ 431.267286][ T5921] usb 2-1: Manufacturer: syz [ 431.281486][ T5921] usb 2-1: SerialNumber: syz [ 431.333493][ T5921] usb 2-1: config 0 descriptor?? [ 431.358972][ T9740] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 431.710761][ T9772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.724790][ T9772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.736657][ T29] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 431.747548][ T9772] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 431.797634][ T9779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1040'. [ 431.810443][ T9779] vivid-007: disconnect [ 432.006369][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 432.019597][ T29] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 432.043325][ T29] usb 4-1: config 0 has no interface number 0 [ 432.070089][ T29] usb 4-1: config 0 interface 12 has no altsetting 0 [ 432.105439][ T29] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 432.131410][ T24] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 432.145289][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.184694][ T29] usb 4-1: Product: syz [ 432.202700][ T29] usb 4-1: Manufacturer: syz [ 432.220483][ T29] usb 4-1: SerialNumber: syz [ 432.259673][ T29] usb 4-1: config 0 descriptor?? [ 432.367658][ T24] usb 3-1: USB disconnect, device number 28 [ 432.490396][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.603209][ T9773] vivid-007: reconnect [ 432.668441][ T9787] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 433.076465][ T29] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 433.085105][ T29] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 433.227704][ T29] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 433.266426][ T29] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 433.414787][ T5921] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 433.427499][ T29] usb 4-1: USB disconnect, device number 35 [ 433.491075][ T5921] asix 2-1:0.188: probe with driver asix failed with error -71 [ 433.546751][ T5921] usb 2-1: USB disconnect, device number 28 [ 435.322277][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1047'. [ 435.811272][ T9824] FAULT_INJECTION: forcing a failure. [ 435.811272][ T9824] name failslab, interval 1, probability 0, space 0, times 0 [ 435.865810][ T9824] CPU: 0 UID: 0 PID: 9824 Comm: syz.0.1048 Not tainted syzkaller #0 PREEMPT(full) [ 435.865840][ T9824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.865853][ T9824] Call Trace: [ 435.865862][ T9824] [ 435.865871][ T9824] dump_stack_lvl+0xe8/0x150 [ 435.865906][ T9824] should_fail_ex+0x412/0x560 [ 435.865937][ T9824] should_failslab+0xa8/0x100 [ 435.865969][ T9824] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 435.866007][ T9824] ? __alloc_skb+0x1d0/0x7d0 [ 435.866033][ T9824] ? __local_bh_enable_ip+0xd0/0x130 [ 435.866065][ T9824] __alloc_skb+0x1d0/0x7d0 [ 435.866097][ T9824] netlink_dump+0x1ef/0xe80 [ 435.866134][ T9824] ? __pfx_netlink_dump+0x10/0x10 [ 435.866175][ T9824] ? kmem_cache_free+0x187/0x630 [ 435.866195][ T9824] ? netlink_recvmsg+0x5d6/0xa50 [ 435.866224][ T9824] netlink_recvmsg+0x690/0xa50 [ 435.866248][ T9824] ? __lock_acquire+0x6b5/0x2cf0 [ 435.866282][ T9824] ? __pfx_netlink_recvmsg+0x10/0x10 [ 435.866313][ T9824] ? aa_sock_msg_perm+0xf1/0x1b0 [ 435.866339][ T9824] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 435.866361][ T9824] ? security_socket_recvmsg+0x7e/0x2c0 [ 435.866390][ T9824] ? __pfx_netlink_recvmsg+0x10/0x10 [ 435.866415][ T9824] sock_recvmsg+0x22c/0x270 [ 435.866444][ T9824] ____sys_recvmsg+0x1e6/0x4a0 [ 435.866483][ T9824] ? __pfx_____sys_recvmsg+0x10/0x10 [ 435.866530][ T9824] ? import_iovec+0x73/0xa0 [ 435.866563][ T9824] ___sys_recvmsg+0x215/0x590 [ 435.866601][ T9824] ? __pfx____sys_recvmsg+0x10/0x10 [ 435.866658][ T9824] ? __fget_files+0x3a0/0x420 [ 435.866699][ T9824] do_recvmmsg+0x334/0x800 [ 435.866740][ T9824] ? __pfx_do_recvmmsg+0x10/0x10 [ 435.866792][ T9824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 435.866844][ T9824] __x64_sys_recvmmsg+0x198/0x250 [ 435.866879][ T9824] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 435.866925][ T9824] do_syscall_64+0x14d/0xf80 [ 435.866955][ T9824] ? trace_irq_disable+0x3b/0x150 [ 435.866985][ T9824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.867007][ T9824] ? clear_bhb_loop+0x40/0x90 [ 435.867034][ T9824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.867055][ T9824] RIP: 0033:0x7f7ba5b9c629 [ 435.867074][ T9824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.867092][ T9824] RSP: 002b:00007f7ba6a14028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 435.867114][ T9824] RAX: ffffffffffffffda RBX: 00007f7ba5e15fa0 RCX: 00007f7ba5b9c629 [ 435.867130][ T9824] RDX: 0000000000000005 RSI: 0000200000005c40 RDI: 0000000000000003 [ 435.867143][ T9824] RBP: 00007f7ba6a14090 R08: 0000000000000000 R09: 0000000000000000 [ 435.867156][ T9824] R10: 0000000000002120 R11: 0000000000000246 R12: 0000000000000001 [ 435.867168][ T9824] R13: 00007f7ba5e16038 R14: 00007f7ba5e15fa0 R15: 00007f7ba5f3fa48 [ 435.867201][ T9824] [ 436.743494][ T9836] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1050'. [ 437.237946][ T9856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.351768][ T9856] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 437.511260][ T30] audit: type=1326 audit(1771763472.316:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519439c629 code=0x7ffc0000 [ 437.536349][ T1208] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 437.550371][ T30] audit: type=1326 audit(1771763472.336:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519439c629 code=0x7ffc0000 [ 437.612666][ T30] audit: type=1326 audit(1771763472.336:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519439c629 code=0x7ffc0000 [ 437.693125][ T30] audit: type=1326 audit(1771763472.336:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519439c629 code=0x7ffc0000 [ 437.832462][ T1208] usb 1-1: unable to get BOS descriptor or descriptor too short [ 437.851466][ T30] audit: type=1326 audit(1771763472.336:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f519435cece code=0x7ffc0000 [ 437.876911][ T1208] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 437.913390][ T9871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1058'. [ 437.913407][ T1208] usb 1-1: can't read configurations, error -71 [ 438.057017][ T30] audit: type=1326 audit(1771763472.336:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519439c629 code=0x7ffc0000 [ 438.131720][ T30] audit: type=1326 audit(1771763472.346:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519439c629 code=0x7ffc0000 [ 438.185304][ T30] audit: type=1326 audit(1771763472.346:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519439c629 code=0x7ffc0000 [ 438.292632][ T30] audit: type=1326 audit(1771763472.346:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f519439c392 code=0x7ffc0000 [ 438.349218][ T30] audit: type=1326 audit(1771763472.346:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f519439c427 code=0x7ffc0000 [ 438.706652][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 438.864176][ T10] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 438.876115][ T10] usb 4-1: config 0 has no interface number 0 [ 438.882870][ T10] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.923545][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 438.962377][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.983589][ T10] usb 4-1: Product: syz [ 438.996798][ T10] usb 4-1: Manufacturer: syz [ 439.023964][ T10] usb 4-1: SerialNumber: syz [ 439.047357][ T10] usb 4-1: config 0 descriptor?? [ 439.098417][ T10] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 439.186602][ T1208] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 439.296630][ T5921] usb 4-1: USB disconnect, device number 36 [ 439.304910][ T9889] yurex 4-1:0.50: yurex_write - failed to send bulk msg, error -19 [ 439.337222][ T1208] usb 1-1: Using ep0 maxpacket: 16 [ 439.346540][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.348728][ T5921] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 439.382479][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.407726][ T1208] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 439.422313][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.447426][ T1208] usb 1-1: config 0 descriptor?? [ 439.583368][ T9923] FAULT_INJECTION: forcing a failure. [ 439.583368][ T9923] name failslab, interval 1, probability 0, space 0, times 0 [ 439.601322][ T9923] CPU: 1 UID: 0 PID: 9923 Comm: syz.1.1070 Not tainted syzkaller #0 PREEMPT(full) [ 439.601352][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.601366][ T9923] Call Trace: [ 439.601375][ T9923] [ 439.601383][ T9923] dump_stack_lvl+0xe8/0x150 [ 439.601418][ T9923] should_fail_ex+0x412/0x560 [ 439.601450][ T9923] should_failslab+0xa8/0x100 [ 439.601479][ T9923] __kmalloc_cache_noprof+0x88/0x660 [ 439.601504][ T9923] ? slhc_init+0x76/0x700 [ 439.601538][ T9923] slhc_init+0x76/0x700 [ 439.601568][ T9923] ? __might_fault+0xaf/0x130 [ 439.601603][ T9923] ppp_ioctl+0x1430/0x1b10 [ 439.601638][ T9923] ? __pfx_ppp_ioctl+0x10/0x10 [ 439.601669][ T9923] ? __fget_files+0x2a/0x420 [ 439.601696][ T9923] ? __fget_files+0x3a0/0x420 [ 439.601724][ T9923] ? __fget_files+0x2a/0x420 [ 439.601758][ T9923] ? bpf_lsm_file_ioctl+0x9/0x20 [ 439.601784][ T9923] ? __pfx_ppp_ioctl+0x10/0x10 [ 439.601810][ T9923] __se_sys_ioctl+0xfc/0x170 [ 439.601836][ T9923] do_syscall_64+0x14d/0xf80 [ 439.601867][ T9923] ? trace_irq_disable+0x3b/0x150 [ 439.601898][ T9923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.601920][ T9923] ? clear_bhb_loop+0x40/0x90 [ 439.601945][ T9923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.601966][ T9923] RIP: 0033:0x7f2e2f79c629 [ 439.601986][ T9923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.602003][ T9923] RSP: 002b:00007f2e2d9ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 439.602026][ T9923] RAX: ffffffffffffffda RBX: 00007f2e2fa15fa0 RCX: 00007f2e2f79c629 [ 439.602042][ T9923] RDX: 0000200000000000 RSI: 0000000040047451 RDI: 0000000000000003 [ 439.602056][ T9923] RBP: 00007f2e2d9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 439.602068][ T9923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.602080][ T9923] R13: 00007f2e2fa16038 R14: 00007f2e2fa15fa0 R15: 00007f2e2fb3fa48 [ 439.602113][ T9923] [ 439.805070][ T10] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 440.001028][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 440.010960][ T10] usb 5-1: New USB device found, idVendor=1430, idProduct=07bb, bcdDevice= 0.00 [ 440.023733][ T1208] hid (null): invalid report_size 28520 [ 440.069987][ T1208] kye 0003:0458:5016.001B: control desc unexpectedly large [ 440.080528][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.111584][ T1208] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.001B/input/input38 [ 440.147368][ T10] usb 5-1: config 0 descriptor?? [ 440.194800][ T9935] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1073'. [ 440.244197][ T1208] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.001B/input/input39 [ 440.282419][ T9935] bond2: (slave dummy0): Releasing active interface [ 440.326780][ T5921] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 440.409026][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.416073][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.456369][ T1208] kye 0003:0458:5016.001B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 440.544337][ T5921] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 440.552740][ T5921] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 440.574492][ T5921] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 440.582967][ T10] sony 0003:1430:07BB.001C: unknown main item tag 0x0 [ 440.613561][ T10] sony 0003:1430:07BB.001C: unknown main item tag 0x0 [ 440.627705][ T10] sony 0003:1430:07BB.001C: unknown main item tag 0x0 [ 440.628435][ T5921] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 440.779913][ T29] usb 1-1: USB disconnect, device number 36 [ 440.824343][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 440.846164][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1068'. [ 440.865789][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 440.871056][ T10] sony 0003:1430:07BB.001C: hidraw1: USB HID v0.06 Device [HID 1430:07bb] on usb-dummy_hcd.4-1/input0 [ 441.043824][ T9919] bond0: ARP target 128.0.0.0 is already present [ 441.050910][ T10] sony 0003:1430:07BB.001C: failed to claim input [ 441.054088][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 441.068180][ T9919] bond0: option arp_ip_target: invalid value (128) [ 441.101427][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 441.190886][ T5921] usb 3-1: string descriptor 0 read error: -22 [ 441.217178][ T5921] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 441.274302][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.305118][ T5921] usb 3-1: config 0 descriptor?? [ 441.787635][ T5921] hub 3-1:0.0: bad descriptor, ignoring hub [ 441.793629][ T5921] hub 3-1:0.0: probe with driver hub failed with error -5 [ 442.164592][ T10] usb 3-1: USB disconnect, device number 29 [ 442.715832][ T9969] netlink: 'syz.2.1077': attribute type 10 has an invalid length. [ 442.743607][ T9969] bond0: (slave wlan1): Opening slave failed [ 442.783295][ T9969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1077'. [ 442.837587][ T9973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 443.398183][ T5921] usb 5-1: USB disconnect, device number 45 [ 444.101912][ T9982] syzkaller0: entered promiscuous mode [ 444.107767][ T9982] syzkaller0: entered allmulticast mode [ 444.604238][ T9991] netlink: 'syz.2.1080': attribute type 21 has an invalid length. [ 444.656081][ T9991] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1080'. [ 444.710574][T10000] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1081'. [ 444.754438][ T9991] netlink: 'syz.2.1080': attribute type 5 has an invalid length. [ 444.779077][ T9991] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1080'. [ 444.906319][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 445.081134][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 445.122096][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.139809][ T10] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 445.154517][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.170226][ T10] usb 1-1: Product: syz [ 445.179400][ T10] usb 1-1: Manufacturer: syz [ 445.189689][ T10] usb 1-1: SerialNumber: syz [ 445.215818][ T10] usb 1-1: config 0 descriptor?? [ 445.243232][T10009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1084'. [ 445.537984][T10017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.058691][T10023] xt_bpf: check failed: parse error [ 446.508789][ T5921] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 446.826307][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 446.833428][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.850866][ T5921] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 446.882157][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.041750][ T5921] usb 5-1: config 0 descriptor?? [ 447.253441][T10025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.267297][T10025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.466368][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 447.496687][ T5830] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 447.539460][ T5921] aquacomputer_d5next 0003:0C70:F003.001D: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0 [ 447.675939][ T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 447.746051][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.758510][T10025] trusted_key: encrypted_key: insufficient parameters specified [ 447.797665][ T5921] usb 1-1: USB disconnect, device number 37 [ 447.846360][ T1208] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 447.881757][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.926095][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.937427][ T29] usb 5-1: USB disconnect, device number 46 [ 447.978289][ T10] usb 2-1: Product: syz [ 447.982543][ T10] usb 2-1: Manufacturer: syz [ 448.028442][ T10] usb 2-1: SerialNumber: syz [ 448.062688][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.114461][ T1208] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.134690][ T1208] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 448.172876][ T1208] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 448.187672][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.237512][ T1208] usb 4-1: config 0 descriptor?? [ 448.285606][T10048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1097'. [ 448.381716][T10049] netlink: 'syz.0.1096': attribute type 21 has an invalid length. [ 448.790693][T10053] loop2: detected capacity change from 0 to 7 [ 448.812375][T10049] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1096'. [ 448.841262][T10053] loop2: [ 448.846290][T10053] loop2: partition table partially beyond EOD, truncated [ 448.861668][T10049] netlink: 'syz.0.1096': attribute type 5 has an invalid length. [ 448.936295][T10049] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1096'. [ 448.975194][ T1208] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 449.452975][T10060] vivid-007: disconnect [ 449.709373][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1102'. [ 449.804616][ T1208] usb 4-1: USB disconnect, device number 37 [ 449.951988][T10055] vivid-007: reconnect [ 450.645543][T10082] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 451.083604][ T10] usb 2-1: 0:2 : does not exist [ 451.253755][T10090] FAULT_INJECTION: forcing a failure. [ 451.253755][T10090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.276630][T10090] CPU: 0 UID: 0 PID: 10090 Comm: syz.1.1106 Not tainted syzkaller #0 PREEMPT(full) [ 451.276653][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.276663][T10090] Call Trace: [ 451.276669][T10090] [ 451.276676][T10090] dump_stack_lvl+0xe8/0x150 [ 451.276701][T10090] should_fail_ex+0x412/0x560 [ 451.276723][T10090] _copy_from_user+0x2d/0xb0 [ 451.276746][T10090] ____sys_sendmsg+0x334/0xad0 [ 451.276775][T10090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.276803][T10090] ? import_iovec+0x73/0xa0 [ 451.276827][T10090] ___sys_sendmsg+0x2a5/0x360 [ 451.276853][T10090] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.276899][T10090] ? __fget_files+0x2a/0x420 [ 451.276920][T10090] ? __fget_files+0x3a0/0x420 [ 451.276948][T10090] __x64_sys_sendmsg+0x1bd/0x2a0 [ 451.276972][T10090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.277031][T10090] ? __pfx_ksys_write+0x10/0x10 [ 451.277063][T10090] do_syscall_64+0x14d/0xf80 [ 451.277096][T10090] ? trace_irq_disable+0x3b/0x150 [ 451.277138][T10090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.277154][T10090] ? clear_bhb_loop+0x40/0x90 [ 451.277174][T10090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.277189][T10090] RIP: 0033:0x7f2e2f79c629 [ 451.277204][T10090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.277217][T10090] RSP: 002b:00007f2e2d9ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.277234][T10090] RAX: ffffffffffffffda RBX: 00007f2e2fa15fa0 RCX: 00007f2e2f79c629 [ 451.277245][T10090] RDX: 922bac8576b92dde RSI: 0000200000000080 RDI: 0000000000000004 [ 451.277256][T10090] RBP: 00007f2e2d9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 451.277266][T10090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.277275][T10090] R13: 00007f2e2fa16038 R14: 00007f2e2fa15fa0 R15: 00007f2e2fb3fa48 [ 451.277298][T10090] [ 451.716671][ T10] usb 2-1: USB disconnect, device number 29 [ 451.784092][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.842516][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1108'. [ 452.187332][T10101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.403178][T10101] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 452.854195][ T5956] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 453.155787][T10116] vivid-007: disconnect [ 453.235241][ T5956] usb 3-1: unable to get BOS descriptor or descriptor too short [ 453.250861][ T5956] usb 3-1: not running at top speed; connect to a high speed hub [ 453.287800][ T5956] usb 3-1: config 1 has an invalid interface number: 94 but max is 0 [ 453.298586][ T5956] usb 3-1: config 1 has no interface number 0 [ 453.310169][ T5956] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=51.70 [ 453.323910][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.342533][ T5956] usb 3-1: Product: syz [ 453.352664][ T5956] usb 3-1: Manufacturer: syz [ 453.375892][ T5956] usb 3-1: SerialNumber: syz [ 454.777598][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 454.858723][T10124] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 454.958528][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.119982][T10130] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1117'. [ 455.182826][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.197800][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 455.210004][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.226926][ T10] usb 1-1: config 0 descriptor?? [ 455.282912][ T5956] usb 3-1: Invalid firmware size=18. [ 455.289252][T10107] vivid-007: reconnect [ 455.356853][ T5956] usb 3-1: USB disconnect, device number 30 [ 455.596922][T10141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'. [ 455.762684][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1115'. [ 457.334943][T10153] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.910923][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 458.924242][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 459.002693][ T10] usb 1-1: USB disconnect, device number 38 [ 459.156338][ T5956] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 459.280005][T10171] FAULT_INJECTION: forcing a failure. [ 459.280005][T10171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.348451][ T5956] usb 4-1: config 0 interface 0 altsetting 66 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.359214][ T5956] usb 4-1: config 0 interface 0 has no altsetting 0 [ 459.743609][T10171] CPU: 0 UID: 0 PID: 10171 Comm: syz.2.1127 Not tainted syzkaller #0 PREEMPT(full) [ 459.743643][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.743665][T10171] Call Trace: [ 459.743676][T10171] [ 459.743685][T10171] dump_stack_lvl+0xe8/0x150 [ 459.743725][T10171] should_fail_ex+0x412/0x560 [ 459.743758][T10171] _copy_to_user+0x31/0xb0 [ 459.743795][T10171] simple_read_from_buffer+0xe1/0x170 [ 459.743832][T10171] proc_fail_nth_read+0x1bb/0x230 [ 459.743868][T10171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.743903][T10171] ? rw_verify_area+0x2a6/0x4d0 [ 459.743925][T10171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.743957][T10171] vfs_read+0x20c/0xa70 [ 459.743978][T10171] ? fdget_pos+0x246/0x320 [ 459.744016][T10171] ? __pfx___mutex_lock+0x10/0x10 [ 459.744040][T10171] ? __pfx_vfs_read+0x10/0x10 [ 459.744064][T10171] ? __fget_files+0x2a/0x420 [ 459.744100][T10171] ? __fget_files+0x3a0/0x420 [ 459.744131][T10171] ? __fget_files+0x2a/0x420 [ 459.744172][T10171] ksys_read+0x150/0x270 [ 459.744197][T10171] ? __pfx_ksys_read+0x10/0x10 [ 459.744233][T10171] do_syscall_64+0x14d/0xf80 [ 459.744267][T10171] ? trace_irq_disable+0x3b/0x150 [ 459.744299][T10171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.744322][T10171] ? clear_bhb_loop+0x40/0x90 [ 459.744351][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.744374][T10171] RIP: 0033:0x7f519435cece [ 459.744395][T10171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 459.744415][T10171] RSP: 002b:00007f5195310fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.744439][T10171] RAX: ffffffffffffffda RBX: 00007f51953116c0 RCX: 00007f519435cece [ 459.744456][T10171] RDX: 000000000000000f RSI: 00007f51953110a0 RDI: 0000000000000008 [ 459.744470][T10171] RBP: 00007f5195311090 R08: 0000000000000000 R09: 0000000000000000 [ 459.744496][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.744508][T10171] R13: 00007f5194616038 R14: 00007f5194615fa0 R15: 00007f519473fa48 [ 459.744541][T10171] [ 459.753022][ T5956] usb 4-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 460.113888][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.151002][ T5956] usb 4-1: config 0 descriptor?? [ 460.443064][T10176] netlink: 'syz.2.1128': attribute type 21 has an invalid length. [ 460.475910][T10176] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1128'. [ 460.513206][T10176] netlink: 'syz.2.1128': attribute type 5 has an invalid length. [ 460.532772][T10176] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1128'. [ 460.641119][ T5956] cypress 0003:04B4:0001.001F: hidraw0: USB HID v0.01 Device [HID 04b4:0001] on usb-dummy_hcd.3-1/input0 [ 460.743447][T10192] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1132'. [ 460.755666][T10192] vivid-007: disconnect [ 460.815054][ T10] usb 4-1: USB disconnect, device number 38 [ 461.004649][T10190] fido_id[10190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 461.613361][T10185] vivid-007: reconnect [ 462.276335][ T5956] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 462.451491][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.506984][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.576385][ T5956] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 462.626607][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.652565][ T5956] usb 4-1: config 0 descriptor?? [ 463.012776][T10207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1135'. [ 463.089884][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 463.396395][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 463.523698][T10216] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1139'. [ 463.669915][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.733943][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.002422][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 464.020856][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.053552][ T10] usb 2-1: config 0 descriptor?? [ 465.421035][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1138'. [ 467.336743][ T5956] usbhid 4-1:0.0: can't add hid device: -71 [ 467.342929][ T5956] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 467.447642][ T5956] usb 4-1: USB disconnect, device number 39 [ 467.577741][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 467.585517][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 467.633321][ T10] usb 2-1: USB disconnect, device number 30 [ 467.960186][T10244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.256008][T10245] netlink: 'syz.0.1143': attribute type 21 has an invalid length. [ 468.271186][T10245] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1143'. [ 468.308166][T10244] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 468.372252][T10245] netlink: 'syz.0.1143': attribute type 5 has an invalid length. [ 468.447904][T10245] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1143'. [ 468.944858][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'. [ 468.967726][T10261] vivid-007: disconnect [ 469.380695][T10253] vivid-007: reconnect [ 469.822845][ T5956] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 470.030820][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 470.060969][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.134904][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.164253][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 470.216490][ T5956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 470.424084][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.450529][ T5956] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.465782][ T5956] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.486155][ T5956] usb 4-1: Manufacturer: syz [ 470.511136][ T5956] usb 4-1: config 0 descriptor?? [ 471.006357][ T5956] rc_core: IR keymap rc-hauppauge not found [ 471.012334][ T5956] Registered IR keymap rc-empty [ 471.035777][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.076427][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.118840][ T5956] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 471.148086][ T5956] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input41 [ 471.196877][ T29] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 471.205313][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.236314][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.266375][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.294633][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.324388][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.346943][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.390305][T10278] input: syz0 as /devices/virtual/input/input42 [ 471.418486][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.428740][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1153'. [ 471.476451][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.499973][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 471.526337][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.534063][ T29] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 471.544973][ T29] usb 3-1: can't read configurations, error -71 [ 471.557714][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.594843][ T5956] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 471.646412][ T5956] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 471.669724][ T5956] usb 4-1: USB disconnect, device number 40 [ 471.794121][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 471.807426][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 472.036495][ T5956] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 472.231841][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 472.254615][ T5921] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 472.271681][ T5956] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 472.283388][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.292979][ T5956] usb 4-1: Product: syz [ 472.297618][ T5956] usb 4-1: Manufacturer: syz [ 472.302408][ T5956] usb 4-1: SerialNumber: syz [ 472.318349][ T5956] usb 4-1: config 0 descriptor?? [ 472.331210][ T5956] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 472.345786][ T5956] dvb-usb: bulk message failed: -22 (2/0) [ 472.402737][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 472.436519][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 472.442795][ T5956] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 472.452828][ T5956] usb 4-1: media controller created [ 472.459456][ T5921] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 472.471146][ T5921] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 472.482323][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.503860][ T5921] usb 1-1: Product: syz [ 472.519613][ T5921] usb 1-1: Manufacturer: syz [ 472.531872][T10283] dvb-usb: bulk message failed: -22 (3/0) [ 472.539449][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 472.563447][ T5921] usb 1-1: SerialNumber: syz [ 472.595139][ T5921] usb 1-1: config 0 descriptor?? [ 472.637002][ T5956] usb 4-1: selecting invalid altsetting 7 [ 472.664783][ T5956] cxusb: set interface failed [ 472.676962][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 472.815567][ T5956] DVB: Unable to find symbol lgdt330x_attach() [ 472.825059][ T5956] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 472.935614][ T5921] usb 1-1: USB disconnect, device number 39 [ 472.973061][T10303] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 472.997887][ T5956] rc_core: IR keymap rc-dvico-portable not found [ 473.010708][ T5956] Registered IR keymap rc-empty [ 473.064171][ T5956] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 473.081295][ T5956] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input43 [ 473.297527][ T5956] dvb-usb: schedule remote query interval to 100 msecs. [ 473.304575][ T5956] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 473.357854][ T5956] usb 4-1: USB disconnect, device number 41 [ 473.421787][T10309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.752743][ T5956] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 473.853536][T10312] FAULT_INJECTION: forcing a failure. [ 473.853536][T10312] name failslab, interval 1, probability 0, space 0, times 0 [ 473.866385][T10312] CPU: 1 UID: 0 PID: 10312 Comm: syz.0.1164 Not tainted syzkaller #0 PREEMPT(full) [ 473.866406][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.866416][T10312] Call Trace: [ 473.866424][T10312] [ 473.866432][T10312] dump_stack_lvl+0xe8/0x150 [ 473.866460][T10312] should_fail_ex+0x412/0x560 [ 473.866486][T10312] should_failslab+0xa8/0x100 [ 473.866510][T10312] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 473.866539][T10312] ? __alloc_skb+0x186/0x7d0 [ 473.866558][T10312] ? __alloc_skb+0x1d0/0x7d0 [ 473.866576][T10312] ? __local_bh_enable_ip+0xd0/0x130 [ 473.866599][T10312] __alloc_skb+0x1d0/0x7d0 [ 473.866619][T10312] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 473.866640][T10312] netlink_sendmsg+0x5d4/0xb40 [ 473.866665][T10312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.866686][T10312] ? aa_sock_msg_perm+0xf1/0x1b0 [ 473.866714][T10312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.866730][T10312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.866748][T10312] ____sys_sendmsg+0xa68/0xad0 [ 473.866777][T10312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.866805][T10312] ? import_iovec+0x73/0xa0 [ 473.866829][T10312] ___sys_sendmsg+0x2a5/0x360 [ 473.866855][T10312] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.866901][T10312] ? __fget_files+0x2a/0x420 [ 473.866922][T10312] ? __fget_files+0x3a0/0x420 [ 473.866950][T10312] __x64_sys_sendmsg+0x1bd/0x2a0 [ 473.866974][T10312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.867003][T10312] ? __pfx_ksys_write+0x10/0x10 [ 473.867026][T10312] do_syscall_64+0x14d/0xf80 [ 473.867050][T10312] ? trace_irq_disable+0x3b/0x150 [ 473.867072][T10312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.867088][T10312] ? clear_bhb_loop+0x40/0x90 [ 473.867106][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.867121][T10312] RIP: 0033:0x7f7ba5b9c629 [ 473.867138][T10312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.867150][T10312] RSP: 002b:00007f7ba6a14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.867168][T10312] RAX: ffffffffffffffda RBX: 00007f7ba5e15fa0 RCX: 00007f7ba5b9c629 [ 473.867180][T10312] RDX: 00000000040040c0 RSI: 0000200000000000 RDI: 0000000000000003 [ 473.867190][T10312] RBP: 00007f7ba6a14090 R08: 0000000000000000 R09: 0000000000000000 [ 473.867199][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.867208][T10312] R13: 00007f7ba5e16038 R14: 00007f7ba5e15fa0 R15: 00007f7ba5f3fa48 [ 473.867231][T10312] [ 474.728331][ T1208] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 474.996286][ T1208] usb 2-1: Using ep0 maxpacket: 16 [ 475.006428][ T1208] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 475.042911][ T1208] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 475.082989][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.096923][ T1208] usb 2-1: Product: syz [ 475.101201][ T1208] usb 2-1: Manufacturer: syz [ 475.126510][ T1208] usb 2-1: SerialNumber: syz [ 475.155163][ T1208] usb 2-1: config 0 descriptor?? [ 475.468348][ T5956] usb 2-1: USB disconnect, device number 31 [ 475.691143][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.705698][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.766646][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 475.896269][ T5956] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 476.086395][ T5956] usb 5-1: Using ep0 maxpacket: 32 [ 476.102522][ T5956] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 476.124130][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.148841][ T5956] usb 5-1: Product: syz [ 476.162804][ T5956] usb 5-1: Manufacturer: syz [ 476.172863][ T5956] usb 5-1: SerialNumber: syz [ 476.195680][ T5956] usb 5-1: config 0 descriptor?? [ 476.249675][ T5956] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 476.269339][ T5956] dvb-usb: bulk message failed: -22 (2/0) [ 476.285133][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 476.299986][ T5956] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 476.311881][ T5956] usb 5-1: media controller created [ 476.390887][T10341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.451301][T10329] FAULT_INJECTION: forcing a failure. [ 476.451301][T10329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.466305][ T1208] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 476.481304][T10329] CPU: 1 UID: 0 PID: 10329 Comm: syz.4.1169 Not tainted syzkaller #0 PREEMPT(full) [ 476.481341][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 476.481355][T10329] Call Trace: [ 476.481363][T10329] [ 476.481372][T10329] dump_stack_lvl+0xe8/0x150 [ 476.481405][T10329] should_fail_ex+0x412/0x560 [ 476.481436][T10329] _copy_from_user+0x2d/0xb0 [ 476.481491][T10329] i2cdev_ioctl+0x303/0x880 [ 476.481519][T10329] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 476.481547][T10329] ? __fget_files+0x3a0/0x420 [ 476.481578][T10329] ? __fget_files+0x2a/0x420 [ 476.481603][T10329] ? bpf_lsm_file_ioctl+0x9/0x20 [ 476.481640][T10329] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 476.481667][T10329] __se_sys_ioctl+0xfc/0x170 [ 476.481692][T10329] do_syscall_64+0x14d/0xf80 [ 476.481724][T10329] ? trace_irq_disable+0x3b/0x150 [ 476.481753][T10329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.481775][T10329] ? clear_bhb_loop+0x40/0x90 [ 476.481801][T10329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.481823][T10329] RIP: 0033:0x7fc4c7f9c629 [ 476.481843][T10329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.481862][T10329] RSP: 002b:00007fc4c8f22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.481888][T10329] RAX: ffffffffffffffda RBX: 00007fc4c8215fa0 RCX: 00007fc4c7f9c629 [ 476.481904][T10329] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 476.481917][T10329] RBP: 00007fc4c8f22090 R08: 0000000000000000 R09: 0000000000000000 [ 476.481930][T10329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.481942][T10329] R13: 00007fc4c8216038 R14: 00007fc4c8215fa0 R15: 00007fc4c833fa48 [ 476.481976][T10329] [ 476.746385][ T1208] usb 4-1: Using ep0 maxpacket: 16 [ 476.850304][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 476.884881][ T1208] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 476.901716][ T1208] usb 4-1: config 5 has no interface number 0 [ 476.918656][ T1208] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 476.951634][ T5956] usb 5-1: selecting invalid altsetting 7 [ 476.959585][ T1208] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 476.960712][ T5956] cxusb: set interface failed [ 477.006069][ T5956] dvb-usb: bulk message failed: -22 (1/0) [ 477.016016][ T1208] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 477.105071][ T1208] usb 4-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 477.266393][ T1208] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 477.277157][ T1208] usb 4-1: config 5 interface 168 has no altsetting 0 [ 477.418784][ T1208] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 477.431828][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.454957][ T1208] usb 4-1: Product: syz [ 477.460422][ T1208] usb 4-1: Manufacturer: syz [ 477.465081][ T1208] usb 4-1: SerialNumber: syz [ 477.543542][T10337] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 477.813224][T10349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1174'. [ 477.978190][ T5956] DVB: Unable to find symbol lgdt330x_attach() [ 478.001591][ T5956] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 478.057440][T10349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1174'. [ 478.229012][ T5956] rc_core: IR keymap rc-dvico-portable not found [ 478.235705][ T5956] Registered IR keymap rc-empty [ 478.245475][ T5956] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 478.261015][ T5956] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input44 [ 478.331979][ T1208] usb 4-1: NFC: Unable to get FW version [ 478.625914][ T5956] dvb-usb: schedule remote query interval to 100 msecs. [ 479.010217][ T5956] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 479.529460][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 479.835269][ T1208] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -90 [ 479.950741][ T1208] usb 4-1: USB disconnect, device number 42 [ 479.967625][ T5956] usb 5-1: USB disconnect, device number 47 [ 479.979066][ T5921] dvb-usb: bulk message failed: -22 (1/0) [ 480.062880][T10355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.195820][ T5956] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 480.825318][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 480.875858][ T10] usb 3-1: device descriptor read/64, error -71 [ 480.941382][T10380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 481.147349][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 481.316293][ T5956] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 481.405279][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.419696][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.506388][T10388] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 481.530457][T10388] vivid-007: disconnect [ 481.552374][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 481.567517][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.588719][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.615022][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.615080][ T10] usb 3-1: config 0 descriptor?? [ 481.646122][ T5956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 481.688327][ T5956] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 481.710772][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.746394][ T5956] usb 5-1: config 0 descriptor?? [ 482.167857][T10390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1178'. [ 482.220272][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 482.284282][T10384] vivid-007: reconnect [ 482.318225][T10393] fuse: Bad value for 'fd' [ 482.935767][ T5956] usbhid 5-1:0.0: can't add hid device: -71 [ 482.944516][ T5956] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 483.011316][ T5956] usb 5-1: USB disconnect, device number 48 [ 483.996892][ T1208] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 484.236088][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 484.254670][ T1208] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 484.309126][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.381377][ T1208] usb 5-1: Product: syz [ 484.385620][ T1208] usb 5-1: Manufacturer: syz [ 484.441094][ T1208] usb 5-1: SerialNumber: syz [ 484.467608][ T1208] usb 5-1: config 0 descriptor?? [ 484.500364][ T1208] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 484.509373][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 484.515364][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 484.538173][ T1208] dvb-usb: bulk message failed: -22 (2/0) [ 484.578860][ T10] usb 3-1: USB disconnect, device number 34 [ 484.590716][ T1208] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 484.617731][ T1208] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 484.658753][ T1208] usb 5-1: media controller created [ 484.741636][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 484.802927][ T1208] usb 5-1: selecting invalid altsetting 7 [ 484.838000][T10402] dvb-usb: bulk message failed: -22 (3/0) [ 484.851646][ T1208] cxusb: set interface failed [ 484.857366][ T1208] dvb-usb: bulk message failed: -22 (1/0) [ 484.900982][T10417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1187'. [ 484.921185][T10417] vivid-007: disconnect [ 485.046320][ T1208] DVB: Unable to find symbol lgdt330x_attach() [ 485.084898][ T1208] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 485.271275][ T1208] rc_core: IR keymap rc-dvico-portable not found [ 485.292528][ T1208] Registered IR keymap rc-empty [ 485.345444][ T1208] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 485.389307][ T1208] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input45 [ 485.425225][ T1208] dvb-usb: schedule remote query interval to 100 msecs. [ 485.472570][T10423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1189'. [ 485.577945][T10407] vivid-007: reconnect [ 485.690474][ T1208] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 485.796320][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 485.870431][ T1208] usb 5-1: USB disconnect, device number 49 [ 485.886477][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 486.059065][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.167088][T10428] netlink: 'syz.4.1191': attribute type 21 has an invalid length. [ 486.175164][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 486.193505][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 486.203688][T10428] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1191'. [ 486.218869][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 486.247463][T10428] netlink: 'syz.4.1191': attribute type 5 has an invalid length. [ 486.255270][T10428] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1191'. [ 486.265489][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 486.297626][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.654250][ T10] usb 2-1: config 0 descriptor?? [ 486.863116][ T1208] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 487.194561][ T10] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 487.222635][ T10] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 487.264463][ T10] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 487.272800][ T10] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 487.294941][ T10] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 487.303232][T10444] netlink: 'syz.2.1195': attribute type 21 has an invalid length. [ 487.311146][T10444] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1195'. [ 487.330644][ T10] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 487.346843][T10444] netlink: 'syz.2.1195': attribute type 5 has an invalid length. [ 487.355006][ T10] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 487.376292][ T10] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 487.383812][T10444] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1195'. [ 487.406370][ T10] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 487.413859][ T10] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 487.480743][ T10] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 487.540362][ T10] usb 2-1: USB disconnect, device number 32 [ 487.675995][T10447] fido_id[10447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 487.703923][T10453] FAULT_INJECTION: forcing a failure. [ 487.703923][T10453] name failslab, interval 1, probability 0, space 0, times 0 [ 487.724895][T10453] CPU: 1 UID: 0 PID: 10453 Comm: syz.0.1199 Not tainted syzkaller #0 PREEMPT(full) [ 487.724930][T10453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.724940][T10453] Call Trace: [ 487.724947][T10453] [ 487.724953][T10453] dump_stack_lvl+0xe8/0x150 [ 487.724981][T10453] should_fail_ex+0x412/0x560 [ 487.725004][T10453] should_failslab+0xa8/0x100 [ 487.725024][T10453] __kmalloc_cache_noprof+0x88/0x660 [ 487.725041][T10453] ? is_bpf_text_address+0x26/0x2b0 [ 487.725057][T10453] ? snd_pcm_oss_change_params_locked+0x1da/0x3e00 [ 487.725077][T10453] ? __kmalloc_cache_noprof+0x15b/0x660 [ 487.725096][T10453] snd_pcm_oss_change_params_locked+0x1da/0x3e00 [ 487.725116][T10453] ? __pfx___mutex_trylock_common+0x10/0x10 [ 487.725144][T10453] ? rcu_is_watching+0x15/0xb0 [ 487.725166][T10453] ? trace_contention_end+0x3d/0x150 [ 487.725191][T10453] ? __mutex_lock+0x319/0x1300 [ 487.725212][T10453] ? kstrtoull+0x12f/0x1d0 [ 487.725230][T10453] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 487.725253][T10453] ? __pfx___mutex_lock+0x10/0x10 [ 487.725280][T10453] snd_pcm_oss_write+0x27c/0xbd0 [ 487.725307][T10453] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 487.725326][T10453] vfs_write+0x29a/0xb90 [ 487.725348][T10453] ? __pfx_vfs_write+0x10/0x10 [ 487.725365][T10453] ? __fget_files+0x2a/0x420 [ 487.725390][T10453] ? __fget_files+0x2a/0x420 [ 487.725411][T10453] ? __fget_files+0x3a0/0x420 [ 487.725433][T10453] ? __fget_files+0x2a/0x420 [ 487.725463][T10453] ksys_write+0x150/0x270 [ 487.725480][T10453] ? __pfx_ksys_write+0x10/0x10 [ 487.725504][T10453] do_syscall_64+0x14d/0xf80 [ 487.725528][T10453] ? trace_irq_disable+0x3b/0x150 [ 487.725550][T10453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.725566][T10453] ? clear_bhb_loop+0x40/0x90 [ 487.725586][T10453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.725602][T10453] RIP: 0033:0x7f7ba5b9c629 [ 487.725617][T10453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.725631][T10453] RSP: 002b:00007f7ba6a14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.725648][T10453] RAX: ffffffffffffffda RBX: 00007f7ba5e15fa0 RCX: 00007f7ba5b9c629 [ 487.725660][T10453] RDX: 000000000000fdbc RSI: 0000200000000500 RDI: 0000000000000003 [ 487.725670][T10453] RBP: 00007f7ba6a14090 R08: 0000000000000000 R09: 0000000000000000 [ 487.725680][T10453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.725695][T10453] R13: 00007f7ba5e16038 R14: 00007f7ba5e15fa0 R15: 00007f7ba5f3fa48 [ 487.725720][T10453] [ 488.046285][ T1208] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 488.237406][ T1208] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 488.253503][ T1208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.316453][ T1208] usb 4-1: config 0 has no interface number 0 [ 488.333184][ T1208] usb 4-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 488.360632][T10463] FAULT_INJECTION: forcing a failure. [ 488.360632][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 488.374689][ T1208] usb 4-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 488.410904][T10463] CPU: 1 UID: 0 PID: 10463 Comm: syz.4.1201 Not tainted syzkaller #0 PREEMPT(full) [ 488.410933][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.410945][T10463] Call Trace: [ 488.410954][T10463] [ 488.410962][T10463] dump_stack_lvl+0xe8/0x150 [ 488.410997][T10463] should_fail_ex+0x412/0x560 [ 488.411026][T10463] should_failslab+0xa8/0x100 [ 488.411054][T10463] __kmalloc_noprof+0xe8/0x760 [ 488.411076][T10463] ? tomoyo_encode+0x28b/0x550 [ 488.411108][T10463] tomoyo_encode+0x28b/0x550 [ 488.411140][T10463] tomoyo_realpath_from_path+0x58d/0x5d0 [ 488.411177][T10463] ? tomoyo_path_number_perm+0x219/0x630 [ 488.411199][T10463] tomoyo_path_number_perm+0x246/0x630 [ 488.411223][T10463] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 488.411247][T10463] ? __lock_acquire+0x6b5/0x2cf0 [ 488.411286][T10463] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 488.411341][T10463] ? __fget_files+0x2a/0x420 [ 488.411373][T10463] ? __fget_files+0x2a/0x420 [ 488.411401][T10463] ? __fget_files+0x3a0/0x420 [ 488.411429][T10463] ? __fget_files+0x2a/0x420 [ 488.411464][T10463] security_file_ioctl+0xc3/0x2a0 [ 488.411499][T10463] __se_sys_ioctl+0x47/0x170 [ 488.411525][T10463] do_syscall_64+0x14d/0xf80 [ 488.411556][T10463] ? trace_irq_disable+0x3b/0x150 [ 488.411586][T10463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.411608][T10463] ? clear_bhb_loop+0x40/0x90 [ 488.411634][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.411655][T10463] RIP: 0033:0x7fc4c7f9c629 [ 488.411684][T10463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.411701][T10463] RSP: 002b:00007fc4c8f01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.411723][T10463] RAX: ffffffffffffffda RBX: 00007fc4c8216090 RCX: 00007fc4c7f9c629 [ 488.411739][T10463] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 488.411751][T10463] RBP: 00007fc4c8f01090 R08: 0000000000000000 R09: 0000000000000000 [ 488.411764][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.411775][T10463] R13: 00007fc4c8216128 R14: 00007fc4c8216090 R15: 00007fc4c833fa48 [ 488.411808][T10463] [ 488.411829][T10463] ERROR: Out of memory at tomoyo_realpath_from_path. [ 488.413842][ T1208] usb 4-1: config 0 interface 106 has no altsetting 0 [ 488.612146][T10465] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1204'. [ 488.726445][ T1208] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 488.735681][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.751566][ T1208] usb 4-1: config 0 descriptor?? [ 488.821068][ T1208] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 489.201125][T10491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.212325][T10491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.350920][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.361370][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.383112][T10497] netlink: 'syz.3.1198': attribute type 1 has an invalid length. [ 489.865300][T10073] usb 4-1: Failed to submit usb control message: -110 [ 489.872524][T10073] usb 4-1: unable to send the bmi data to the device: -110 [ 489.885883][T10073] usb 4-1: unable to get target info from device [ 489.910769][T10073] usb 4-1: could not get target info (-110) [ 489.949884][T10497] team0: Device gtp0 is of different type [ 490.033306][T10073] usb 4-1: could not probe fw (-110) [ 490.268303][T10508] FAULT_INJECTION: forcing a failure. [ 490.268303][T10508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.286407][T10508] CPU: 0 UID: 0 PID: 10508 Comm: syz.4.1212 Not tainted syzkaller #0 PREEMPT(full) [ 490.286430][T10508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.286440][T10508] Call Trace: [ 490.286448][T10508] [ 490.286455][T10508] dump_stack_lvl+0xe8/0x150 [ 490.286483][T10508] should_fail_ex+0x412/0x560 [ 490.286505][T10508] _copy_from_iter+0x1d3/0x1670 [ 490.286528][T10508] ? rcu_is_watching+0x15/0xb0 [ 490.286554][T10508] ? __pfx__copy_from_iter+0x10/0x10 [ 490.286579][T10508] ? netlink_sendmsg+0x650/0xb40 [ 490.286621][T10508] ? skb_put+0x11b/0x210 [ 490.286653][T10508] netlink_sendmsg+0x6c0/0xb40 [ 490.286689][T10508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.286710][T10508] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.286729][T10508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.286748][T10508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.286765][T10508] ____sys_sendmsg+0xa68/0xad0 [ 490.286794][T10508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.286822][T10508] ? import_iovec+0x73/0xa0 [ 490.286846][T10508] ___sys_sendmsg+0x2a5/0x360 [ 490.286872][T10508] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.286919][T10508] ? __fget_files+0x2a/0x420 [ 490.286940][T10508] ? __fget_files+0x3a0/0x420 [ 490.286968][T10508] __x64_sys_sendmsg+0x1bd/0x2a0 [ 490.286992][T10508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.287021][T10508] ? __pfx_ksys_write+0x10/0x10 [ 490.287044][T10508] do_syscall_64+0x14d/0xf80 [ 490.287068][T10508] ? trace_irq_disable+0x3b/0x150 [ 490.287090][T10508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.287105][T10508] ? clear_bhb_loop+0x40/0x90 [ 490.287124][T10508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.287139][T10508] RIP: 0033:0x7fc4c7f9c629 [ 490.287154][T10508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.287167][T10508] RSP: 002b:00007fc4c8f22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.287184][T10508] RAX: ffffffffffffffda RBX: 00007fc4c8215fa0 RCX: 00007fc4c7f9c629 [ 490.287196][T10508] RDX: 0000000000000000 RSI: 0000200000001900 RDI: 0000000000000003 [ 490.287205][T10508] RBP: 00007fc4c8f22090 R08: 0000000000000000 R09: 0000000000000000 [ 490.287222][T10508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.287231][T10508] R13: 00007fc4c8216038 R14: 00007fc4c8215fa0 R15: 00007fc4c833fa48 [ 490.287254][T10508] [ 491.592732][ T5921] usb 4-1: USB disconnect, device number 43 [ 491.727094][ T1208] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 491.918330][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.938662][ T1208] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.961487][ T1208] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 491.991146][ T1208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.022596][ T1208] usb 5-1: config 0 descriptor?? [ 492.476365][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 492.658590][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1217'. [ 492.708736][ T9] usb 4-1: config 0 has no interfaces? [ 492.714363][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 492.732602][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.781519][ T9] usb 4-1: config 0 descriptor?? [ 492.871047][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 493.301712][T10532] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1220'. [ 493.860757][ T9] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 494.053191][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.073828][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 494.104122][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 494.136492][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 494.161414][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 494.206114][ T9] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 494.257825][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 494.287839][ T9] usb 1-1: Product: syz [ 494.307409][ T9] usb 1-1: Manufacturer: syz [ 494.357185][ T9] usb 1-1: SerialNumber: syz [ 494.892501][ T9] usb 1-1: config 0 descriptor?? [ 495.142533][ T9] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 495.188892][ T9] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 495.340700][ T9] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 495.365703][ T9] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 495.433202][ T9] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 495.557116][ T9] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 495.660208][ T1208] usbhid 5-1:0.0: can't add hid device: -71 [ 495.680877][ T1208] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 495.716330][ T1208] usb 5-1: USB disconnect, device number 50 [ 495.769815][ T5921] usb 4-1: USB disconnect, device number 44 [ 496.246532][ T9] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 496.255385][ T9] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 496.296289][ T1208] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 496.408175][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1232'. [ 496.427662][T10579] vivid-007: disconnect [ 496.606352][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 496.941279][ T1208] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 496.952819][ T1208] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 496.970053][ T1208] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 496.991339][ T1208] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 497.014754][ T1208] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 497.064480][ T1208] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 497.074846][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.245535][T10572] vivid-007: reconnect [ 497.263416][ T1208] usb 5-1: Product: syz [ 497.391818][ T1208] usb 5-1: Manufacturer: syz [ 497.406321][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 497.435342][ T1208] usb 5-1: SerialNumber: syz [ 497.478252][ T1208] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 497.489647][T10583] FAULT_INJECTION: forcing a failure. [ 497.489647][T10583] name failslab, interval 1, probability 0, space 0, times 0 [ 497.566349][T10583] CPU: 1 UID: 0 PID: 10583 Comm: syz.3.1233 Not tainted syzkaller #0 PREEMPT(full) [ 497.566378][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.566390][T10583] Call Trace: [ 497.566399][T10583] [ 497.566408][T10583] dump_stack_lvl+0xe8/0x150 [ 497.566443][T10583] should_fail_ex+0x412/0x560 [ 497.566471][T10583] should_failslab+0xa8/0x100 [ 497.566498][T10583] __kmalloc_noprof+0xe8/0x760 [ 497.566521][T10583] ? tomoyo_encode+0x28b/0x550 [ 497.566553][T10583] tomoyo_encode+0x28b/0x550 [ 497.566576][ T1208] imon 5-1:155.0: unable to initialize intf0, err -90 [ 497.566584][T10583] tomoyo_realpath_from_path+0x58d/0x5d0 [ 497.566622][T10583] ? tomoyo_path_number_perm+0x219/0x630 [ 497.566732][T10583] tomoyo_path_number_perm+0x246/0x630 [ 497.566878][T10583] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 497.566947][T10583] ? __lock_acquire+0x6b5/0x2cf0 [ 497.567047][T10583] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 497.567197][T10583] ? __fget_files+0x2a/0x420 [ 497.567282][T10583] ? __fget_files+0x2a/0x420 [ 497.567351][T10583] ? __fget_files+0x3a0/0x420 [ 497.567427][T10583] ? __fget_files+0x2a/0x420 [ 497.567516][T10583] security_file_ioctl+0xc3/0x2a0 [ 497.567641][T10583] __se_sys_ioctl+0x47/0x170 [ 497.567709][T10583] do_syscall_64+0x14d/0xf80 [ 497.567793][T10583] ? trace_irq_disable+0x3b/0x150 [ 497.567870][T10583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.567939][T10583] ? clear_bhb_loop+0x40/0x90 [ 497.568006][T10583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.568068][T10583] RIP: 0033:0x7f666499c629 [ 497.568132][T10583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.568192][T10583] RSP: 002b:00007f66657a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.568272][T10583] RAX: ffffffffffffffda RBX: 00007f6664c15fa0 RCX: 00007f666499c629 [ 497.568308][T10583] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 497.568350][T10583] RBP: 00007f66657a6090 R08: 0000000000000000 R09: 0000000000000000 [ 497.568383][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.568416][T10583] R13: 00007f6664c16038 R14: 00007f6664c15fa0 R15: 00007f6664d3fa48 [ 497.568510][T10583] [ 497.569088][T10583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.576009][ T1208] imon:imon_probe: failed to initialize context! [ 497.576029][ T1208] imon 5-1:155.0: unable to register, err -19 [ 497.815785][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 498.116876][ T9] usb 2-1: config 0 has no interfaces? [ 498.177579][ T9] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 498.198364][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.237231][ T5921] usb 1-1: USB disconnect, device number 40 [ 498.247063][ T9] usb 2-1: Product: syz [ 498.251306][ T9] usb 2-1: Manufacturer: syz [ 498.255935][ T9] usb 2-1: SerialNumber: syz [ 498.358505][ T9] usb 2-1: config 0 descriptor?? [ 498.399158][T10592] FAULT_INJECTION: forcing a failure. [ 498.399158][T10592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.426466][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.0.1236 Not tainted syzkaller #0 PREEMPT(full) [ 498.426497][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.426510][T10592] Call Trace: [ 498.426518][T10592] [ 498.426527][T10592] dump_stack_lvl+0xe8/0x150 [ 498.426562][T10592] should_fail_ex+0x412/0x560 [ 498.426603][T10592] _copy_to_user+0x31/0xb0 [ 498.426636][T10592] simple_read_from_buffer+0xe1/0x170 [ 498.426671][T10592] proc_fail_nth_read+0x1bb/0x230 [ 498.426703][T10592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.426734][T10592] ? rw_verify_area+0x2a6/0x4d0 [ 498.426755][T10592] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.426784][T10592] vfs_read+0x20c/0xa70 [ 498.426803][T10592] ? fdget_pos+0x246/0x320 [ 498.426838][T10592] ? __pfx___mutex_lock+0x10/0x10 [ 498.426859][T10592] ? __pfx_vfs_read+0x10/0x10 [ 498.426882][T10592] ? __fget_files+0x2a/0x420 [ 498.426916][T10592] ? __fget_files+0x3a0/0x420 [ 498.426945][T10592] ? __fget_files+0x2a/0x420 [ 498.426985][T10592] ksys_read+0x150/0x270 [ 498.427008][T10592] ? __pfx_ksys_read+0x10/0x10 [ 498.427042][T10592] do_syscall_64+0x14d/0xf80 [ 498.427074][T10592] ? trace_irq_disable+0x3b/0x150 [ 498.427104][T10592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.427127][T10592] ? clear_bhb_loop+0x40/0x90 [ 498.427153][T10592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.427175][T10592] RIP: 0033:0x7f7ba5b5cece [ 498.427196][T10592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 498.427215][T10592] RSP: 002b:00007f7ba6a13fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 498.427238][T10592] RAX: ffffffffffffffda RBX: 00007f7ba6a146c0 RCX: 00007f7ba5b5cece [ 498.427254][T10592] RDX: 000000000000000f RSI: 00007f7ba6a140a0 RDI: 0000000000000005 [ 498.427267][T10592] RBP: 00007f7ba6a14090 R08: 0000000000000000 R09: 0000000000000000 [ 498.427279][T10592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.427290][T10592] R13: 00007f7ba5e16038 R14: 00007f7ba5e15fa0 R15: 00007f7ba5f3fa48 [ 498.427324][T10592] [ 498.647909][T10597] FAULT_INJECTION: forcing a failure. [ 498.647909][T10597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.666321][T10597] CPU: 1 UID: 0 PID: 10597 Comm: syz.4.1228 Not tainted syzkaller #0 PREEMPT(full) [ 498.666352][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.666364][T10597] Call Trace: [ 498.666372][T10597] [ 498.666380][T10597] dump_stack_lvl+0xe8/0x150 [ 498.666416][T10597] should_fail_ex+0x412/0x560 [ 498.666446][T10597] _copy_to_user+0x31/0xb0 [ 498.666478][T10597] simple_read_from_buffer+0xe1/0x170 [ 498.666510][T10597] proc_fail_nth_read+0x1bb/0x230 [ 498.666539][T10597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.666567][T10597] ? rw_verify_area+0x2a6/0x4d0 [ 498.666586][T10597] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.666615][T10597] vfs_read+0x20c/0xa70 [ 498.666633][T10597] ? fdget_pos+0x246/0x320 [ 498.666661][T10597] ? ksys_write+0x1e6/0x270 [ 498.666685][T10597] ? __pfx___mutex_lock+0x10/0x10 [ 498.666704][T10597] ? __pfx_vfs_read+0x10/0x10 [ 498.666726][T10597] ? __fget_files+0x2a/0x420 [ 498.666759][T10597] ? __fget_files+0x3a0/0x420 [ 498.666786][T10597] ? __fget_files+0x2a/0x420 [ 498.666834][T10597] ksys_read+0x150/0x270 [ 498.666858][T10597] ? __pfx_ksys_read+0x10/0x10 [ 498.666891][T10597] do_syscall_64+0x14d/0xf80 [ 498.666921][T10597] ? trace_irq_disable+0x3b/0x150 [ 498.666951][T10597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.666974][T10597] ? clear_bhb_loop+0x40/0x90 [ 498.667000][T10597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.667020][T10597] RIP: 0033:0x7fc4c7f5cece [ 498.667040][T10597] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 498.667057][T10597] RSP: 002b:00007fc4c8edffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 498.667079][T10597] RAX: ffffffffffffffda RBX: 00007fc4c8ee06c0 RCX: 00007fc4c7f5cece [ 498.667094][T10597] RDX: 000000000000000f RSI: 00007fc4c8ee00a0 RDI: 0000000000000004 [ 498.667106][T10597] RBP: 00007fc4c8ee0090 R08: 0000000000000000 R09: 0000000000000000 [ 498.667119][T10597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.667131][T10597] R13: 00007fc4c8216218 R14: 00007fc4c8216180 R15: 00007fc4c833fa48 [ 498.667165][T10597] [ 499.051417][T10578] netlink: 'syz.1.1231': attribute type 10 has an invalid length. [ 499.066134][ T9] usb 5-1: USB disconnect, device number 51 [ 499.162443][T10578] bond0: (slave wlan1): Opening slave failed [ 499.259586][T10601] binder: BINDER_SET_CONTEXT_MGR already set [ 499.266089][T10601] binder: 10588:10601 ioctl 4018620d 200000000040 returned -16 [ 499.356353][ T1208] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 499.508675][ T1208] usb 1-1: config 5 has an invalid interface number: 123 but max is 0 [ 499.517405][ T1208] usb 1-1: config 5 has no interface number 0 [ 499.538353][ T1208] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 499.553871][ T1208] usb 1-1: config 5 interface 123 has no altsetting 0 [ 499.607971][ T1208] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 499.641410][ T1208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.662629][ T1208] usb 1-1: Product: syz [ 499.672661][ T1208] usb 1-1: Manufacturer: syz [ 499.684374][ T1208] usb 1-1: SerialNumber: syz [ 499.973630][T10600] xt_ecn: cannot match TCP bits for non-tcp packets [ 500.054081][ T1208] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device. [ 500.110129][ T1208] usb 1-1: USB disconnect, device number 41 [ 500.846804][T10616] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1243'. [ 500.859219][ T5921] usb 2-1: USB disconnect, device number 33 [ 500.869329][T10576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.853760][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.860289][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.887142][T10628] sctp: [Deprecated]: syz.1.1247 (pid 10628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.887142][T10628] Use struct sctp_sack_info instead [ 502.056486][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 502.226334][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 502.247794][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 502.256552][ T9] usb 4-1: can't read configurations, error -61 [ 502.367526][T10642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1250'. [ 502.377105][T10642] lo: MTU too low for tipc bearer [ 502.382693][T10642] tipc: Enabling of bearer rejected, failed to enable media [ 502.416865][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 502.435574][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1251'. [ 502.586760][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 502.598769][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 502.618579][ T9] usb 4-1: can't read configurations, error -61 [ 502.638528][ T9] usb usb4-port1: attempt power cycle [ 502.921976][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1256'. [ 503.006918][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 503.040210][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 503.048267][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 503.066388][ T9] usb 4-1: can't read configurations, error -61 [ 503.176888][ T5921] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 503.185844][T10663] bridge_slave_0: left allmulticast mode [ 503.206421][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 503.225313][T10663] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.251438][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 503.281901][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 504.035815][ T9] usb 4-1: can't read configurations, error -61 [ 504.045990][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 504.057183][ T9] usb usb4-port1: unable to enumerate USB device [ 504.068194][ T5921] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 504.077052][ T5921] usb 3-1: config 179 has no interface number 0 [ 504.083669][T10663] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 504.096752][ T5921] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 504.136294][ T5921] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 504.177761][ T5921] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.206297][ T5921] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 504.243587][ T5921] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 504.259990][T10667] ALSA: mixer_oss: invalid OSS volume '' [ 504.274704][ T5921] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 504.294852][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.385569][T10658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 505.726412][ T1208] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 505.780965][ T5921] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 505.891383][ T9] usb 3-1: USB disconnect, device number 35 [ 505.891529][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 505.905739][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 505.914804][ C1] ================================================================== [ 505.922916][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x28b/0x2f0 [ 505.930785][ C1] Read of size 4 at addr ffff88802b03005c by task udevd/5191 [ 505.938286][ C1] [ 505.939274][ T1208] usb 5-1: Using ep0 maxpacket: 32 [ 505.940649][ C1] CPU: 1 UID: 0 PID: 5191 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 505.940679][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.940729][ C1] Call Trace: [ 505.940763][ C1] [ 505.940801][ C1] dump_stack_lvl+0xe8/0x150 [ 505.940894][ C1] print_report+0xba/0x230 [ 505.940974][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 505.941037][ C1] kasan_report+0x117/0x150 [ 505.941109][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 505.941177][ C1] do_raw_spin_lock+0x28b/0x2f0 [ 505.941234][ C1] ? lock_acquire+0xf0/0x2e0 [ 505.941304][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 505.941383][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 505.941465][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 505.941544][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 505.941615][ C1] dummy_timer+0xbbd/0x45d0 [ 505.941685][ C1] ? read_tsc+0x9/0x20 [ 505.941764][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 505.941867][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 505.941936][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 505.942015][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 505.942089][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 505.942147][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 505.942230][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 505.942346][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 505.942416][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 505.942496][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 505.942589][ C1] handle_softirqs+0x22a/0x870 [ 505.942676][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 505.942742][ C1] __irq_exit_rcu+0x5f/0x150 [ 505.942811][ C1] irq_exit_rcu+0x9/0x30 [ 505.942879][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 505.942962][ C1] [ 505.942984][ C1] [ 505.943019][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 505.943086][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x36/0x90 [ 505.943179][ C1] Code: 78 11 56 11 65 8b 0d 99 11 56 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 54 16 00 00 00 74 52 8b 8a 30 16 00 00 <83> f9 03 75 47 48 8b 8a 38 16 00 00 44 8b 8a 34 16 00 00 49 c1 e1 [ 505.943227][ C1] RSP: 0018:ffffc900033a7a20 EFLAGS: 00000246 [ 505.943279][ C1] RAX: ffffffff8461e068 RBX: dffffc0000000000 RCX: 0000000000000000 [ 505.943324][ C1] RDX: ffff88807cb5bc80 RSI: 0000000000000000 RDI: 0000000000000002 [ 505.943368][ C1] RBP: ffff888025310710 R08: ffff88802531073f R09: 1ffff11004a620e7 [ 505.943406][ C1] R10: dffffc0000000000 R11: ffffed1004a620e8 R12: ffff888025310730 [ 505.943450][ C1] R13: 000000000000006a R14: 0000000000000069 R15: 0000000000000001 [ 505.943504][ C1] ? tomoyo_check_acl+0x2f8/0x400 [ 505.943637][ C1] tomoyo_check_acl+0x2f8/0x400 [ 505.943733][ C1] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 505.943791][ C1] tomoyo_path_permission+0x1b4/0x380 [ 505.943859][ C1] tomoyo_path_perm+0x3f3/0x560 [ 505.943916][ C1] ? tomoyo_path_perm+0x251/0x560 [ 505.943973][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 505.944022][ C1] ? __x64_sys_openat+0x138/0x170 [ 505.944167][ C1] security_inode_getattr+0x12b/0x310 [ 505.944242][ C1] __x64_sys_newfstat+0x13b/0x270 [ 505.944323][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 505.944418][ C1] ? lockdep_softirqs_on+0x11d/0x180 [ 505.944509][ C1] do_syscall_64+0x14d/0xf80 [ 505.944590][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.944649][ C1] ? clear_bhb_loop+0x40/0x90 [ 505.944709][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.944773][ C1] RIP: 0033:0x7fdff5b11ad7 [ 505.944821][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 505.944867][ C1] RSP: 002b:00007ffecbfdf3e8 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 505.944933][ C1] RAX: ffffffffffffffda RBX: 000055adc3b3d280 RCX: 00007fdff5b11ad7 [ 505.944987][ C1] RDX: 00007fdff5befea0 RSI: 00007ffecbfdf3f0 RDI: 000000000000000c [ 505.945039][ C1] RBP: 00007fdff5befff0 R08: 0000000000000001 R09: 0000000000000000 [ 505.945074][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 505.945109][ C1] R13: 0000000000003fff R14: 0000000000000000 R15: 000055adc3b3d280 [ 505.945167][ C1] [ 505.945190][ C1] [ 506.358551][ C1] Allocated by task 5921: [ 506.362914][ C1] kasan_save_track+0x3e/0x80 [ 506.367639][ C1] __kasan_kmalloc+0x93/0xb0 [ 506.372268][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 506.377671][ C1] xpad_probe+0x428/0x1fc0 [ 506.382226][ C1] usb_probe_interface+0x668/0xc90 [ 506.387380][ C1] really_probe+0x267/0xaf0 [ 506.391923][ C1] __driver_probe_device+0x18c/0x320 [ 506.397251][ C1] driver_probe_device+0x4f/0x240 [ 506.402312][ C1] __device_attach_driver+0x2d4/0x4c0 [ 506.407721][ C1] bus_for_each_drv+0x258/0x2f0 [ 506.412709][ C1] __device_attach+0x2c5/0x450 [ 506.417602][ C1] device_initial_probe+0xa1/0xd0 [ 506.422680][ C1] bus_probe_device+0x12a/0x220 [ 506.427578][ C1] device_add+0x7b6/0xb70 [ 506.431953][ C1] usb_set_configuration+0x1a87/0x2110 [ 506.437457][ C1] usb_generic_driver_probe+0x8d/0x150 [ 506.442977][ C1] usb_probe_device+0x1c4/0x3b0 [ 506.447877][ C1] really_probe+0x267/0xaf0 [ 506.452422][ C1] __driver_probe_device+0x18c/0x320 [ 506.457747][ C1] driver_probe_device+0x4f/0x240 [ 506.462829][ C1] __device_attach_driver+0x2d4/0x4c0 [ 506.468247][ C1] bus_for_each_drv+0x258/0x2f0 [ 506.473175][ C1] __device_attach+0x2c5/0x450 [ 506.477991][ C1] device_initial_probe+0xa1/0xd0 [ 506.483076][ C1] bus_probe_device+0x12a/0x220 [ 506.488000][ C1] device_add+0x7b6/0xb70 [ 506.492387][ C1] usb_new_device+0xa08/0x16f0 [ 506.497285][ C1] hub_event+0x2a1c/0x4f30 [ 506.501763][ C1] process_scheduled_works+0xb02/0x1830 [ 506.507358][ C1] worker_thread+0xa50/0xfc0 [ 506.511992][ C1] kthread+0x388/0x470 [ 506.516092][ C1] ret_from_fork+0x51e/0xb90 [ 506.520729][ C1] ret_from_fork_asm+0x1a/0x30 [ 506.525542][ C1] [ 506.527901][ C1] Freed by task 9: [ 506.531653][ C1] kasan_save_track+0x3e/0x80 [ 506.536420][ C1] kasan_save_free_info+0x46/0x50 [ 506.541485][ C1] __kasan_slab_free+0x5c/0x80 [ 506.546316][ C1] kfree+0x1c1/0x630 [ 506.550255][ C1] xpad_disconnect+0x350/0x480 [ 506.555065][ C1] usb_unbind_interface+0x26e/0x910 [ 506.560315][ C1] device_release_driver_internal+0x4d9/0x860 [ 506.566419][ C1] bus_remove_device+0x34d/0x440 [ 506.571397][ C1] device_del+0x527/0x8f0 [ 506.575778][ C1] usb_disable_device+0x3d4/0x8d0 [ 506.580854][ C1] usb_disconnect+0x32f/0x990 [ 506.585567][ C1] hub_event+0x1cc9/0x4f30 [ 506.590028][ C1] process_scheduled_works+0xb02/0x1830 [ 506.595614][ C1] worker_thread+0xa50/0xfc0 [ 506.600250][ C1] kthread+0x388/0x470 [ 506.604348][ C1] ret_from_fork+0x51e/0xb90 [ 506.608983][ C1] ret_from_fork_asm+0x1a/0x30 [ 506.613796][ C1] [ 506.616155][ C1] The buggy address belongs to the object at ffff88802b030000 [ 506.616155][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 506.630246][ C1] The buggy address is located 92 bytes inside of [ 506.630246][ C1] freed 1024-byte region [ffff88802b030000, ffff88802b030400) [ 506.644096][ C1] [ 506.646464][ C1] The buggy address belongs to the physical page: [ 506.652921][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b033800 pfn:0x2b030 [ 506.663034][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 506.671579][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 506.680125][ C1] page_type: f5(slab) [ 506.684138][ C1] raw: 00fff00000000240 ffff88813fea8dc0 ffffea0001638610 ffffea000150be10 [ 506.692730][ C1] raw: ffff88802b033800 000000000010000d 00000000f5000000 0000000000000000 [ 506.701361][ C1] head: 00fff00000000240 ffff88813fea8dc0 ffffea0001638610 ffffea000150be10 [ 506.710053][ C1] head: ffff88802b033800 000000000010000d 00000000f5000000 0000000000000000 [ 506.718756][ C1] head: 00fff00000000003 ffffea0000ac0c01 00000000ffffffff 00000000ffffffff [ 506.727458][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 506.736240][ C1] page dumped because: kasan: bad access detected [ 506.739419][ T1208] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 506.742687][ C1] page_owner tracks the page as allocated [ 506.742700][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5562, tgid 5562 (S50crond), ts 58167906215, free_ts 58122542732 [ 506.776869][ C1] post_alloc_hook+0x231/0x280 [ 506.781667][ C1] get_page_from_freelist+0x24dc/0x2580 [ 506.787229][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 506.793054][ C1] allocate_slab+0x77/0x660 [ 506.797589][ C1] refill_objects+0x331/0x3c0 [ 506.802354][ C1] __pcs_replace_empty_main+0x2b9/0x620 [ 506.807937][ C1] __kmalloc_noprof+0x474/0x760 [ 506.812819][ C1] tomoyo_init_log+0x1aae/0x1fb0 [ 506.817868][ C1] tomoyo_supervisor+0x353/0x1570 [ 506.822900][ C1] tomoyo_find_next_domain+0x486/0x1aa0 [ 506.828464][ C1] tomoyo_bprm_check_security+0x11b/0x180 [ 506.834194][ C1] security_bprm_check+0x85/0x240 [ 506.839231][ C1] bprm_execve+0x896/0x1460 [ 506.843735][ C1] do_execveat_common+0x50d/0x690 [ 506.848763][ C1] __x64_sys_execve+0x97/0xc0 [ 506.853441][ C1] do_syscall_64+0x14d/0xf80 [ 506.858041][ C1] page last free pid 5559 tgid 5559 stack trace: [ 506.864365][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 506.869479][ C1] __slab_free+0x263/0x2b0 [ 506.873897][ C1] qlist_free_all+0x97/0x100 [ 506.878495][ C1] kasan_quarantine_reduce+0x148/0x160 [ 506.884066][ C1] __kasan_slab_alloc+0x22/0x80 [ 506.888942][ C1] kmem_cache_alloc_noprof+0x2bc/0x650 [ 506.894417][ C1] do_getname+0x2e/0x250 [ 506.898667][ C1] __se_sys_rename+0x2b/0x2c0 [ 506.903357][ C1] do_syscall_64+0x14d/0xf80 [ 506.907968][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.913872][ C1] [ 506.916215][ C1] Memory state around the buggy address: [ 506.921872][ C1] ffff88802b02ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 506.929960][ C1] ffff88802b02ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 506.938115][ C1] >ffff88802b030000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 506.946207][ C1] ^ [ 506.953160][ C1] ffff88802b030080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 506.961228][ C1] ffff88802b030100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 506.969291][ C1] ================================================================== [ 506.977458][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 506.984662][ C1] CPU: 1 UID: 0 PID: 5191 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 506.993520][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.003596][ C1] Call Trace: [ 507.006887][ C1] [ 507.009745][ C1] vpanic+0x56c/0xa60 [ 507.013749][ C1] ? __pfx_vpanic+0x10/0x10 [ 507.018279][ C1] panic+0xc5/0xd0 [ 507.022028][ C1] ? __pfx_panic+0x10/0x10 [ 507.026474][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.031524][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.036585][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.041614][ C1] check_panic_on_warn+0x89/0xb0 [ 507.046569][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.051597][ C1] end_report+0x73/0x180 [ 507.055843][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.060891][ C1] kasan_report+0x128/0x150 [ 507.065505][ C1] ? do_raw_spin_lock+0x28b/0x2f0 [ 507.070537][ C1] do_raw_spin_lock+0x28b/0x2f0 [ 507.075417][ C1] ? lock_acquire+0xf0/0x2e0 [ 507.080025][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 507.085407][ C1] _raw_spin_lock_irqsave+0x4c/0x60 [ 507.090621][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 507.095855][ C1] __usb_hcd_giveback_urb+0x3b0/0x540 [ 507.101343][ C1] dummy_timer+0xbbd/0x45d0 [ 507.105859][ C1] ? read_tsc+0x9/0x20 [ 507.109959][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 507.114938][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 507.120322][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 507.125293][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 507.131113][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 507.136062][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 507.141004][ C1] __hrtimer_run_queues+0x53a/0xcc0 [ 507.146233][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 507.151976][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 507.158139][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 507.163272][ C1] handle_softirqs+0x22a/0x870 [ 507.168047][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 507.172835][ C1] __irq_exit_rcu+0x5f/0x150 [ 507.177451][ C1] irq_exit_rcu+0x9/0x30 [ 507.181704][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 507.187368][ C1] [ 507.190539][ C1] [ 507.193489][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 507.199516][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x36/0x90 [ 507.206406][ C1] Code: 78 11 56 11 65 8b 0d 99 11 56 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 54 16 00 00 00 74 52 8b 8a 30 16 00 00 <83> f9 03 75 47 48 8b 8a 38 16 00 00 44 8b 8a 34 16 00 00 49 c1 e1 [ 507.226019][ C1] RSP: 0018:ffffc900033a7a20 EFLAGS: 00000246 [ 507.232092][ C1] RAX: ffffffff8461e068 RBX: dffffc0000000000 RCX: 0000000000000000 [ 507.240067][ C1] RDX: ffff88807cb5bc80 RSI: 0000000000000000 RDI: 0000000000000002 [ 507.248135][ C1] RBP: ffff888025310710 R08: ffff88802531073f R09: 1ffff11004a620e7 [ 507.256141][ C1] R10: dffffc0000000000 R11: ffffed1004a620e8 R12: ffff888025310730 [ 507.264183][ C1] R13: 000000000000006a R14: 0000000000000069 R15: 0000000000000001 [ 507.272166][ C1] ? tomoyo_check_acl+0x2f8/0x400 [ 507.277211][ C1] tomoyo_check_acl+0x2f8/0x400 [ 507.282077][ C1] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 507.287895][ C1] tomoyo_path_permission+0x1b4/0x380 [ 507.293293][ C1] tomoyo_path_perm+0x3f3/0x560 [ 507.298150][ C1] ? tomoyo_path_perm+0x251/0x560 [ 507.303207][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 507.308670][ C1] ? __x64_sys_openat+0x138/0x170 [ 507.313823][ C1] security_inode_getattr+0x12b/0x310 [ 507.319216][ C1] __x64_sys_newfstat+0x13b/0x270 [ 507.324258][ C1] ? __pfx___x64_sys_newfstat+0x10/0x10 [ 507.329847][ C1] ? lockdep_softirqs_on+0x11d/0x180 [ 507.335179][ C1] do_syscall_64+0x14d/0xf80 [ 507.339785][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.345864][ C1] ? clear_bhb_loop+0x40/0x90 [ 507.350576][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.356486][ C1] RIP: 0033:0x7fdff5b11ad7 [ 507.361006][ C1] Code: 73 01 c3 48 8b 0d 21 f3 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 05 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 [ 507.380628][ C1] RSP: 002b:00007ffecbfdf3e8 EFLAGS: 00000297 ORIG_RAX: 0000000000000005 [ 507.389063][ C1] RAX: ffffffffffffffda RBX: 000055adc3b3d280 RCX: 00007fdff5b11ad7 [ 507.397047][ C1] RDX: 00007fdff5befea0 RSI: 00007ffecbfdf3f0 RDI: 000000000000000c [ 507.405023][ C1] RBP: 00007fdff5befff0 R08: 0000000000000001 R09: 0000000000000000 [ 507.413023][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 000000000000000a [ 507.421087][ C1] R13: 0000000000003fff R14: 0000000000000000 R15: 000055adc3b3d280 [ 507.429073][ C1] [ 507.432764][ C1] Kernel Offset: disabled [ 507.437114][ C1] Rebooting in 86400 seconds..