last executing test programs: 6m43.497541814s ago: executing program 3 (id=1353): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000027c0)={0x2c, &(0x7f0000002600)=ANY=[@ANYBLOB="201814"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x31d141, 0xf0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000100"], 0x0, 0x0}) 6m40.837964522s ago: executing program 3 (id=1359): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendto$inet(r3, &(0x7f0000000000)="0000ed", 0x3, 0x24008800, 0x0, 0x0) accept4$tipc(r3, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 6m40.517121582s ago: executing program 3 (id=1361): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000140), 0x1001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000000)="f917f03a59001d", 0x7}], 0x2) r4 = syz_pidfd_open(r1, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc040ff0b, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) ppoll(&(0x7f0000000180)=[{r5, 0x8313}], 0x20000000000001aa, 0x0, 0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffffaa, &(0x7f0000000100)='Q') 6m38.109324348s ago: executing program 3 (id=1370): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000700)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/rcu_normal', 0x40000, 0x152) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x3, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x5, 0x4, 0x5, 0x1], 0x0, 0x2}, {0x1, [0x2, 0x7, 0x4, 0x1, 0x1, 0x6], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000001000000040800000800000000000000f8ae6c51b7a2c8c9843d368ec6a86900747018e3703e51e80ffcdb0bda042d8e7c4c300d875e80af631497feba670618afceace7acbd01ae71b471e4a05700eb5a844a076fd21a3dabde6605f391df4f95be3b783d622142071a802226f16fdd158aaacdad1130f59754e08f9d5eb99d0c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001009010a000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b000000000000008001b0000000000300016802c00018028000100fdffffff00"/64], 0x58}, 0x1, 0x0, 0x0, 0x20048054}, 0x840) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @private=0xa010102, @private=0xa010101}, 0xc) 6m37.847935389s ago: executing program 3 (id=1372): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 6m37.508789245s ago: executing program 3 (id=1376): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112640000000000bf201000800000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) mremap(&(0x7f00000b5000/0x3000)=nil, 0x3000, 0x3000, 0x7f2f6a0d92b43734, &(0x7f00006e6000/0x3000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socket$can_raw(0x1d, 0x3, 0x1) r6 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x300a, 0x4, 0xc, 0x0, 0x5, 0x4}}) socket$l2tp(0x2, 0x2, 0x73) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6m37.118088221s ago: executing program 32 (id=1376): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112640000000000bf201000800000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) mremap(&(0x7f00000b5000/0x3000)=nil, 0x3000, 0x3000, 0x7f2f6a0d92b43734, &(0x7f00006e6000/0x3000)=nil) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socket$can_raw(0x1d, 0x3, 0x1) r6 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x300a, 0x4, 0xc, 0x0, 0x5, 0x4}}) socket$l2tp(0x2, 0x2, 0x73) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m0.325267013s ago: executing program 1 (id=2981): r0 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x10000062, 0x8001, 0x0, 0x9, 0x400, 0xfffffe0000000001, 0xfa11, 0x81}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) r4 = inotify_init() io_uring_setup(0x2e29, &(0x7f0000000400)={0x0, 0xbb70, 0x800, 0xb, 0x10a}) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x26, 0x81}, {0x6, 0x46, 0x3, 0x820a}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r5) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r7, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r7, &(0x7f0000000000), 0x10) r8 = syz_io_uring_complete(0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="27020050", @ANYRES16=r9, @ANYBLOB="000229bd3000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) setsockopt(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000080), 0x1d0) dup3(r6, r7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="22b3fb3c010101020000"], 0x14}}, 0x4000040) r10 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r10, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 59.134140793s ago: executing program 1 (id=2987): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 59.065843499s ago: executing program 1 (id=2988): openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x22020600) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, &(0x7f0000000080)) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e"], 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e"], 0x0) socket(0x2, 0x80805, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) (async) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000440)={r7, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x2, 0x200}, 0x8) 55.736509396s ago: executing program 1 (id=3010): r0 = syz_open_dev$dri(&(0x7f0000001100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x234) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000034002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000100", @ANYRES32, @ANYBLOB='\b@\b\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="82ff0800", @ANYRES32, @ANYBLOB="08001b"], 0x5c}}, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x2, 0x1, 0x40000333, 0x0, r3}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) vmsplice(r0, &(0x7f0000000800)=[{&(0x7f0000000000)="47e956da5cb9fed4f13b48efae1fb2dfd3c5b371e31b10d742d27a366511314fdcb4bd7f593377da7ca87a270f49d61ce30163d292bd80be4753e56f71caf1", 0x3f}, {&(0x7f0000000040)="9f8f1e6884c05511e34da6fb3bbf0fc0a07a6e62032292abe8661e1be2e52642ca8a41a0211bb675e1bb30d68379ac23698bf9f8acb14fc6b657a7f54f558d75a61115b725621f9197195713309c19bfa6399d7ab32c425c447c9903906386c2e01f5b301c3343d436d2a320a7a7837a058360d47683a5d006f98803fec0bf823b0235f6871d3aa578df018e17b98610d3603906760cd0ef59ae4db62bbd742b752ecf64ccaf1d171e2397c73659b224745c86566a7c2db7ada9", 0xba}, {&(0x7f0000000140)="512f6d4a8e58d65b5d6d68f3f705361e192443341d7a6f90", 0x18}, {&(0x7f0000000280)="6368089f9300f03e6926c299a648b8f29e63bb83e848d14663313cfa4be941ff3e0c92cdf43cfe01d56679cf433246237cbae16f30a5bfb23bfa1f8e6565999f2149c165d3b856eb085be7303d54058d5d4d9b9e58448d3bd307a9ac3134015ff419", 0x62}, {&(0x7f0000000300)="bab1e334ad4ea0459d5a67cc2bc7883458bcb2cf5bcf0d02c5afb4bfc1d3dec98a38bea36335c5b361827ba2d01cd6e61499a9f53d88931a05f2a729dc972fb745edc61026f30c8091210446d61ec8aaaee91a1e6691786ffcb9", 0x5a}, {&(0x7f00000003c0)="863056b5ee0f13e3866deb06cdca23202943a32be5e28302f4885fd5fdb0b085c0d92ed2b8469c8f43b9ef94aec88856f21231adf25b5c5a45e4125d736d07c31d04ff332437129c2f08b40db285cc7376f5ce63d31532c491d470db14c8d46e9cd0d5ad2a9959bef0803c8efc68b80b73e87c3341c8b998f49e4ce713e256bb3e9eaf778f158d98b41d6256a1e28fcf687444a77d095ceb76f7087f2680c4c25fccee34f94bbb2c3b2187addd7b870363b4853dbb15b5c66acf5e8df13fd63df5b809fc125c42edc354ce58d7920165bd0f9ed84ad93812c639e8460d6ae1c1ebffbc0c57643436dda9aed17ad46359", 0xf0}, {&(0x7f00000004c0)="636957510a1f9fbdcf57d75bedcb6d1d3724902b341db7da8f8e50b12d03b6cd6f749449b15d39992e631146bd23baa629eec601de3310bca3a9348253a56881b14dbdcafd64ba3d9464b4c21059f1d3f1302d5d9151cc014d02eb4c085235be8644f8974ca3a61584fd0b341929a1b3428f494302285d848ef332ec6c35d32987d19ff6e0145afd6a46aa116da98c39aba08b57116f50fbb94f06d95cf15cb8d3bbc332070744ce", 0xa8}, {&(0x7f00000001c0)="4a976efc74", 0x5}, {&(0x7f0000000700)="301f841d40c172c5e380454715bf7b5d7df826860bc9ac1c8719d057f1833e917b2e95ae01a5b06efab8ad265dc9ae4e57617b29b967f8f8dcc3ca91c7f5c352342043038dedd46ab87c5f444449482a6bdde30edeaf306fee41c10cd65a469d04a0ab643c17372303227500c6dae9f3ebfb41207d89434d12850ccd40052d18f87e77119b1ba906e1639309cf40d2e30389714e15af4bd3101a835cad6e785de4bd09e54b5e99ab8be0d803a0bc0b4e94ef09c1c9bbe4d9dcd339a8eaac9558db1db98eace24f202c5e5dcdcd9924124c378b8832813ea3b7ad4664a5e2ce6d2e3a9a04efac32", 0xe7}], 0x9, 0x1) io_uring_enter(r5, 0x847ba, 0x79c, 0xe, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) 54.7657741s ago: executing program 1 (id=3017): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 54.235603819s ago: executing program 1 (id=3022): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x100000000004, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1cdf00ac44165bdda4719e000000efc710db000020000000", @ANYRES32=0x0, @ANYBLOB="e0000002ffffffff000000001400000000000000100100000d00000044047da000000000"], 0x38}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x4, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x10004d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x2, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x2, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x100e, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xc, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x3, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x1000, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3c, 0x7, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x101, 0x6, 0xac8, 0xbf, 0x2, 0x4, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x3, 0x0, 0x30b1d693, 0xa1e, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) dup2(r1, r2) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000001000000000904000000a01224000000000000004d50fafef1234e27c09a37992bcd576c035779d0d478d4a999e7846af2fe876b7341771b972269e2738ec432ca17b412a9e4683ff703b41df3186e441ae57402d27399061952efa615f7bfbd86062cddcf30498ae39aacff8800"/139], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) 53.419070697s ago: executing program 33 (id=3022): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x100000000004, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1cdf00ac44165bdda4719e000000efc710db000020000000", @ANYRES32=0x0, @ANYBLOB="e0000002ffffffff000000001400000000000000100100000d00000044047da000000000"], 0x38}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x4, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x10004d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x2, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x2, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x100e, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xc, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x3, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x1000, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3c, 0x7, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x101, 0x6, 0xac8, 0xbf, 0x2, 0x4, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x3, 0x0, 0x30b1d693, 0xa1e, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) dup2(r1, r2) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000001000000000904000000a01224000000000000004d50fafef1234e27c09a37992bcd576c035779d0d478d4a999e7846af2fe876b7341771b972269e2738ec432ca17b412a9e4683ff703b41df3186e441ae57402d27399061952efa615f7bfbd86062cddcf30498ae39aacff8800"/139], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x6) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) 9.333381503s ago: executing program 5 (id=3202): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) openat$kvm(0xffffff9c, 0x0, 0x90080, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x3a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7ffdffff, 0x2, 0x0, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x4, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc0000, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x0, 0x0, 0x3], [0x1, 0x1, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0xd, 0x3, 0x0, 0x20f90d26, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1d, 0x400, 0x0, 0xed0, 0x4000002], [0x0, 0x1ff, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0x4080, 0x10000, 0x400, 0x0, 0x8, 0x0, 0x6, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0xa76, 0x0, 0x0, 0x9, 0x0, 0x0, 0x20000, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0xfffffffe]}, 0x45c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a2000000202000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x410, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) 8.737580636s ago: executing program 0 (id=3206): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) (async) r1 = epoll_create(0xb3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40002009}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x3) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) r4 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x4) (async) r7 = fcntl$getown(r2, 0x9) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1080, &(0x7f0000001580)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r8, @ANYBLOB="2c72fd726f6f746d6f66653d303030303030303030303030cd6a3030303034303030302c757365705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000080)={0x50, 0x0, r9, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r8, &(0x7f0000008400)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="e002000000000000f9ffffffffffffff0500000000000000020000000000000003000000000000000200000000000000050000000800000006000000000000005b950000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f59000000030000002dedc32eff030000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="010000000400000000000000020000000000000037050000000000002b000000010400003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0800000000000000010000000000000000000000000000000900000000000000070000000000000006ec00000500000004000000000000002308000000000000060000000000000006000000000000000000010000000000030000000000000007000000020000000b0000000000000005", @ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="03000000000000180000000003000000000000007daa0000000000002a000000060000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b08000000000000000000000000000000ff0700000000000000000000000000008000000000000000f7ffffff0100000003000000000000000400000000000000018000000000000094bd0000000000000200000000000000760d0000000000000400000000010000030000000040000000000000", @ANYRES32=r10, @ANYBLOB="0000000010000000000000000400000000000000ff01000000000000050000002f0f", @ANYRES32=r10, @ANYRESOCT=r10, @ANYBLOB="060000000000000000010000000002000000ffffffffffff75020000000b"], 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0, 0x0}, &(0x7f0000001400)=0xc) (async) r15 = fcntl$getown(r6, 0x9) sendmmsg$unix(r5, &(0x7f00000083c0)=[{{&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000000240)="ab3ace9cf06b627fa4bf1b8cf36c0a3201800000000000003409b25ff03acda0e9cde7470e12fe51793a90f6171998085548414f31d62ba7cfb32f000000", 0x3e}, {&(0x7f0000001340)="4f0b0ce4667dee9b246d8e324d9451dd656e3840814444e4ed42aeff54f9fc36aed44791e95d6f", 0x27}], 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r10, @ANYRES32=r14, @ANYRESHEX=r15, @ANYRES32=r15, @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRESDEC=r9, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x4080}}], 0x1, 0x8010) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="257d9636777a9790a437d32b44fdd4dfea334c4cff703d78da43cb9a1a77759d881a", 0x22) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) close(r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) (async) get_mempolicy(0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="40000000100009060000000000000000000000002644ffcb47ace3226f081446748a16b6013ea1ada54882a2b0187d6257addd93884c858facc5b267352bb87fcebc9f85b9cf69e6687784c5f3fde5810567ff89b7019490d0e07530e0886273ae6c3b12b824cf04ad801cb1c75765468c1a8add92e7253bf9d6e83487fbe078", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000002000128009000100697069700000000010000280040013000500090000000000"], 0x40}}, 0x0) (async) r16 = syz_usb_connect(0x3, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="120100034ca0b5203360084113cc0102030109025f000107a1407509048002060103ec010905170220009100060725018008ff0009058703ff03d101070201090010000000000000072501", @ANYRES8], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async) r17 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_disconnect(r16) (async) fsconfig$FSCONFIG_SET_STRING(r17, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.::\x00', 0x0) 8.664731799s ago: executing program 0 (id=3208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x7b, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r5, 0x0, &(0x7f0000000000)="bda8", 0x2, 0x100, 0x1}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0206000002"], 0x10}}, 0x890) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b000000000072050200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) writev(r8, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r10, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2041) syz_fuse_handle_req(r10, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, r12, 0x2000, '\x00', 0xa, 0xffffffffffff8003, 0xb4e7, 0x3, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x7}, 0x8000, 0x4, 0x0, 0x9}}}}) socket$rxrpc(0x21, 0x2, 0x2) write$FUSE_INIT(r10, &(0x7f0000001200)={0x50, 0x0, r11, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x3, 0x1}}, 0x50) ioctl$KVM_RUN(r9, 0xae80, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) 8.453405667s ago: executing program 5 (id=3210): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b7070000000002006a0000000000000007000000000000009500000000000000561cf53109c66825d874b16b2cba"], 0x0, 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 8.3460564s ago: executing program 5 (id=3211): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) ioctl$TCXONC(r2, 0x540a, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x19) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=r1, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r0], 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000)={0x73, 0x0, '\x00', [@ra={0x5, 0x2, 0x7e7e}]}, 0x10) 8.275157739s ago: executing program 0 (id=3212): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="434a596143cc", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') read$FUSE(r4, &(0x7f00000051c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d40)={0x6c, 0x0, 0x8, 0x0, 0x0, {0xa}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0xffffffffffffff5d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc419}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x30048044}, 0x4006000) set_mempolicy(0x4005, &(0x7f0000000180)=0x1004, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)={0x1c, r9, 0x5, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x1, 0xfe2, &(0x7f0000001840)=""/4066, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff23, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x10, 0x6}, 0x94) 8.015067447s ago: executing program 5 (id=3214): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x10, 0x5, "fb5b1ff53e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.19605642s ago: executing program 0 (id=3216): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) getpid() syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000480)=ANY=[], 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="2000040000000800010010b80efed39f348ff271aa9bb8ade86a8fe05d755e7aefb7e1dbf61195cb4692dbe7a2a1b408feb55d3defdb76946c6fef255b18dff6775698d2d3d8697e282fb3522c2108f8b4246089bfc13f39c96602db2890a205d3f37f2bb4791da4960f5a8054841d116f057844f8f4c318a1b7f8fbddca442582d5e4ff2d3ffb924dbb7fa88944ddb52352cd3590dc72dd3ee45707c36d86957cbf97f5"], &(0x7f0000000780)={0x40, 0x7, 0x2, 0x8001}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000800)={0x40, 0xb, 0x2, "8956"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x20}, &(0x7f0000000880)={0x40, 0x13, 0x6, @random="5410a4831f9e"}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000900)={0x40, 0x19, 0x2, '\n\\'}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0xf}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x1f}}) 6.808545678s ago: executing program 6 (id=3220): epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mremap(&(0x7f00000b5000/0x3000)=nil, 0x3000, 0x3000, 0x7f2f6a0d92b43734, &(0x7f00006e6000/0x3000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27f", 0x88}], 0x1}, 0x4000010) r7 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x300a, 0x4, 0xc, 0x0, 0x5, 0x4}}) socket$l2tp(0x2, 0x2, 0x73) close_range(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.589839518s ago: executing program 6 (id=3231): socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.897900922s ago: executing program 5 (id=3234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x3010, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r3, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') setsockopt$inet_tcp_buf(r7, 0x6, 0x1a, &(0x7f0000000880), 0x0) pread64(r7, &(0x7f0000000380)=""/140, 0x8c, 0x200000000000000) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x600}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x3e, 0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r9, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x1, @loopback, 0x3}, r9}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000001280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffc01, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}, {0xa, 0x4e24, 0x1, @loopback, 0x2}, r9, 0xbba9a92}}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0x54000, 0x3, 0x7, 0x1, 0x0, [{0x9, 0x4, 0xe, '\x00', 0x3}, {0x1a, 0xf, 0x31, '\x00', 0xbc}, {0x40, 0x2, 0x8, '\x00', 0x9}, {0x4, 0x5, 0x1f, '\x00', 0x9}, {0x0, 0x4, 0x3, '\x00', 0x3}, {0x0, 0x0, 0x9, '\x00', 0xf}, {0x8d, 0x7, 0xfe, '\x00', 0x7}, {0x10, 0x2}, {0x9, 0x3, 0x40, '\x00', 0x40}, {0x9, 0x6, 0x7f, '\x00', 0x7}, {0x3, 0x4, 0x0, '\x00', 0xba}, {0x7, 0xe, 0x5, '\x00', 0x80}, {0x8, 0x2, 0x43, '\x00', 0x3}, {0x0, 0x9, 0x8, '\x00', 0x3}, {0x7, 0x55, 0x1, '\x00', 0x8}, {0x7, 0xfe, 0xd, '\x00', 0x6}, {0x0, 0x4, 0x6, '\x00', 0x9}, {0x8, 0xff, 0x4, '\x00', 0x4}, {0xff, 0x6, 0x2, '\x00', 0x5}, {0x8, 0x9, 0x9, '\x00', 0x45}, {0x2, 0x9, 0x8, '\x00', 0x9f}, {0x4, 0x8, 0xff, '\x00', 0x2}, {0xc5, 0xc, 0x7, '\x00', 0x3}, {0x0, 0x6, 0x3, '\x00', 0x5}]}}) syz_usb_connect$cdc_ecm(0x1, 0x62, 0x0, 0x0) 4.036933077s ago: executing program 0 (id=3235): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x13, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x10000000, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x24000, 0xe661, 0x7, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x3, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x10007, 0x5, 0x2f, 0xb98, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0x8, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x205, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3c, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x7, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0x100fff]}, 0x45c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)={0x0, 0x3}, 0x8) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) pidfd_send_signal(0xffffffffffffffff, 0x3f, 0x0, 0x0) request_key(&(0x7f0000000240)='.dead\x00', 0x0, 0x0, 0x0) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000400a54000000060a0b160000000000000000090001006d6574610000000014000280080001400000001508000240000000150900010073797a30590f30897bf4b8f2d3bdffc8e96c000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r8, 0x3b8a, &(0x7f0000000380)={0x28, 0x402, 0x0, 0x0, 0x0}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x918) 3.84870878s ago: executing program 4 (id=3236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, 0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r4, 0x0, &(0x7f0000000000)="bda8", 0x2, 0x100, 0x1}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0206000002"], 0x10}}, 0x890) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b000000000072050200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r9, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2041) syz_fuse_handle_req(r9, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, r11, 0x2000, '\x00', 0xa, 0xffffffffffff8003, 0xb4e7, 0x3, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x7}, 0x8000, 0x4, 0x0, 0x9}}}}) socket$rxrpc(0x21, 0x2, 0x2) write$FUSE_INIT(r9, &(0x7f0000001200)={0x50, 0x0, r10, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x3, 0x1}}, 0x50) ioctl$KVM_RUN(r8, 0xae80, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.7045415s ago: executing program 6 (id=3238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000006017000000440006803c00040067636d286165732900000000000000000000000000000000000000000000000014009400e3de3d7b4cd07ec3ee777de774fc7987cca41989040005"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.278084161s ago: executing program 6 (id=3240): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f900", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000040)="e1a728df83af25db56bb0f4fdf0899e8252f89967559f7eb27ffbb3b556f2ad1cc94547c539ba551816b03e35146388c80e8e9bfad8199fe3fe85da1c99d9f08a852a21adeafc2ee6efccfc2eece9c1ea673ea95a940beab40588712a3ba1519b9232d9e52f612add2a8d68185e614198add73c67a0281740a7b56227325e106b28b96325d4632b4", &(0x7f0000000100)=""/78, &(0x7f0000000180)="a1bbcffff867ec7316b8714da70fb858e4e9d25b59cad5965986a40141705d7d87e1b73a2beaa57ed684a97cf3614fb0bac6e0a7445bbbb69436a4cf129472577bf297cdcf869abf6a19274e91c7565ad9b31a697db59c7ace85e65e472a7adea4320df4a30974ebde29a99435dfa394eadf", &(0x7f0000000300)="598d9eeed470f35a1fd8a32759c37ad8d5a1c886d7760390bfb921c02e164644241ff1b6a3fd5f771fd06d83840d80d71462bfa2f4549c7ca9b88c34e2748936dab9f3f724f46bcabe1901ab934b9d3af650611073abb63afff3b7c3590f5fcda17cc66f4599df189b16d0559d94f21f6675aaf20be1158d7038e3fc92b090d6e2db9f45611a54b2b2"}, 0x38) 3.047119606s ago: executing program 6 (id=3241): r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f0000000180)) (fail_nth: 2) 2.917804288s ago: executing program 4 (id=3242): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_LOCAL={0x14, 0x2, @empty}]}, 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) fchownat(r0, &(0x7f0000000080)='./file0\x00', r4, r6, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}}) socket$can_j1939(0x1d, 0x2, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.782903364s ago: executing program 2 (id=3243): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, 0x0, 0x880) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xb, 0xc}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x40400d0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$dsp(r6, &(0x7f00000000c0)=""/152, 0x98) 2.332427921s ago: executing program 6 (id=3244): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x10, 0x5, "fb5b1ff53e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.069764995s ago: executing program 0 (id=3245): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x10, 0x80003, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x4000000000000c5, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000280)=0x7, 0x4) setsockopt$sock_timeval(r5, 0x1, 0x57, &(0x7f0000000040)={0x77359400}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) unshare(0x2040400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) socket$alg(0x26, 0x5, 0x0) 1.464876069s ago: executing program 5 (id=3246): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x4e, 0x9e, 0x9, 0x40, 0x499, 0x101a, 0x4426, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x80, 0x80, 0x0, [{{0x9, 0x4, 0x3d, 0x5, 0x1, 0x7f, 0x52, 0xb4, 0x8, [], [{{0x9, 0x5, 0x5, 0x10, 0x20, 0x4, 0x2, 0xf9}}]}}]}}]}}, &(0x7f0000000b00)={0x1, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x5, 0xd9, 0x4e, 0x8, 0x4}, 0x0, 0x0, 0x31}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.214931118s ago: executing program 4 (id=3247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 982.540456ms ago: executing program 4 (id=3248): socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 961.791439ms ago: executing program 2 (id=3249): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_team\x00', 0x600}) 821.344481ms ago: executing program 2 (id=3250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0xf5ff}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x21}]}], {0x14}}, 0x64}}, 0x0) 769.475523ms ago: executing program 2 (id=3251): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000f900000700", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000040)="e1a728df83af25db56bb0f4fdf0899e8252f89967559f7eb27ffbb3b556f2ad1cc94547c539ba551816b03e35146388c80e8e9bfad8199fe3fe85da1c99d9f08a852a21adeafc2ee6efccfc2eece9c1ea673ea95a940beab40588712a3ba1519b9232d9e52f612add2a8d68185e614198add73c67a0281740a7b56227325e106b28b96325d4632b4", &(0x7f0000000100)=""/78, &(0x7f0000000180)="a1bbcffff867ec7316b8714da70fb858e4e9d25b59cad5965986a40141705d7d87e1b73a2beaa57ed684a97cf3614fb0bac6e0a7445bbbb69436a4cf129472577bf297cdcf869abf6a19274e91c7565ad9b31a697db59c7ace85e65e472a7adea4320df4a30974ebde29a99435dfa394eadf", &(0x7f0000000300)="598d9eeed470f35a1fd8a32759c37ad8d5a1c886d7760390bfb921c02e164644241ff1b6a3fd5f771fd06d83840d80d71462bfa2f4549c7ca9b88c34e2748936dab9f3f724f46bcabe1901ab934b9d3af650611073abb63afff3b7c3590f5fcda17cc66f4599df189b16d0559d94f21f6675aaf20be1158d7038e3fc92b090d6e2db9f45611a54b2b2"}, 0x38) 722.451271ms ago: executing program 2 (id=3252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, 0x0, &(0x7f0000000280)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r2, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r4, 0x0, &(0x7f0000000000)="bda8", 0x2, 0x100, 0x1}) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0206000002"], 0x10}}, 0x890) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b000000000072050200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x3, 0x0, 'queue1\x00', 0x8001}) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r9, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2041) syz_fuse_handle_req(r9, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, r11, 0x2000, '\x00', 0xa, 0xffffffffffff8003, 0xb4e7, 0x3, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x7}, 0x8000, 0x4, 0x0, 0x9}}}}) socket$rxrpc(0x21, 0x2, 0x2) write$FUSE_INIT(r9, &(0x7f0000001200)={0x50, 0x0, r10, {0x7, 0x29, 0x0, 0x22400181, 0x785, 0x3, 0x1}}, 0x50) ioctl$KVM_RUN(r8, 0xae80, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 304.214199ms ago: executing program 2 (id=3253): unshare(0xa020480) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000520006000500010000000800", @ANYRES32=r1], 0x2c}}, 0x20000000) 81.781785ms ago: executing program 4 (id=3254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}, @TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0xd, 0x3, 0x81, 0x101, 0xfffffff9, 0xc40, 0x7fffffff, 0xfffffffd, 0x13, 0xb, 0x6, 0x6, 0xca11, 0xfffc}}, @TCA_GRED_LIMIT={0x2, 0x5, 0xe6}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) fcntl$setsig(r2, 0xa, 0x39) 0s ago: executing program 4 (id=3255): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x70000, 0x0) pipe(0x0) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000300)=0x18) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$vim2m(0x0, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f063096244fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea5349", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50) r6 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000040)=0x85) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) memfd_create(&(0x7f0000000000)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb1w&\xdfP\xba\xdf\xf9F\xc1\xd4x\xaa\x92~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7R\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b$\x0e\x00\x00\x00\x00\x00\x00\x94&\xac\x88\x95\xff\xda\x14d\xcbx\bx\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x00\x17\x00\x00sH\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,-\n\xe6gB#\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f \xbb\xfa\xd3\x88\xad=5J\x13>u\x8c\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\xdf\xcf\b\x9f\xb6\xf2\x84\xbag\xe5.\xe4\x1f\xb3\xf4\xc6\xad\x06\x1btb\"\x87\x0f\xd7\xf9\x10~\xdc7\xe7\xdc\x11\xd8?\x040\xc5%%\x1c\x8d\xe0\xb99\x10\x11\x84\xbb\xa9\x9em\x1d\xfd\xd4\xcf\x8cH\xa6\x980\xadg\x9b\x8b$\x0e\x04\xd8\xaa\x17\xac\xf4\xda\xd0z\x87H\x03Du\x91\x839\xec\xd7\xde\xf2P\xf6dj-b\x84\x18\xe9\fy`\xca\x86Za7\xe4P\x95B\xeefTdk\x83\xcc\xa4\xa5\b\x1e\x998\x042\xb2\xdd\x8a\xea\xefQ\xf3-Z\a\xd3\xbb\xd5\x80\xb7\v\xa9\xae*\xca\xd90\xc8\xf4_\xe9N7*K:\xe1\xa4\xf7G\a\xd4Q\f7\xdeK,&\xf8\xe7\xffj\xd1\xae\xa1\x04\xf9\xd5\xc5\\\xcc:\xb1\xa70\x84\xf72 \xd1\xcb}Ky\xa5\x9bx&\xad\xf0U\x1aK\x8bN\xcd\xf50\xa3\xc7\xee\x7f\x1a#\xc9\xb3^\xdd/\x13\xb6\xe9%\xed\x04\xf4o}\x17U\x16C\xb2\xea7C\xb6fH$\xd6\xeb\x03\xd2\xa9\xa0\x9a\x93\xed-S\xe5p\xa28*\x98C\xa9\xf5\xf1*\xaa3\xb9\x88\xb3E\x03\x06\xf7\xa7', 0xa) setpriority(0x0, 0x0, 0x8) kernel console output (not intermixed with test programs): r 6-1: USB disconnect, device number 72 [ 871.273118][ T10] r8152-cfgselector 3-1: config 0 descriptor?? [ 871.541670][ T10] r8152-cfgselector 3-1: Unknown version 0x0000 [ 871.555313][ T10] r8152-cfgselector 3-1: bad CDC descriptors [ 871.577834][ T10] r8152-cfgselector 3-1: USB disconnect, device number 96 [ 872.135335][ T5878] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 872.214934][ T798] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 872.287967][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.303593][ T5878] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 872.322387][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.342596][ T5878] usb 2-1: config 0 descriptor?? [ 872.358663][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 872.366384][ T798] usb 6-1: Using ep0 maxpacket: 32 [ 872.378923][ T798] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 872.393701][ T798] usb 6-1: config 0 has no interface number 0 [ 872.405307][ T798] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 872.422809][ T798] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 872.447126][ T798] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 872.458205][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.472076][ T798] usb 6-1: Product: syz [ 872.479216][ T798] usb 6-1: Manufacturer: syz [ 872.489663][ T798] usb 6-1: SerialNumber: syz [ 872.506576][ T798] usb 6-1: config 0 descriptor?? [ 872.518540][ T798] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 872.527454][T12038] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 872.664965][T12038] usb 3-1: device descriptor read/64, error -71 [ 872.724343][ T798] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 872.738131][ T798] quatech2 6-1:0.51: probe with driver quatech2 failed with error -90 [ 872.763224][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 872.781072][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 872.806890][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 872.821344][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 872.843999][ T5878] pwc: recv_control_msg error -71 req 04 val 1300 [ 872.858669][ T5878] pwc: recv_control_msg error -71 req 04 val 1400 [ 872.870907][ T798] usb 5-1: USB disconnect, device number 98 [ 872.898946][ T5878] pwc: recv_control_msg error -71 req 02 val 2000 [ 872.908438][T12038] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 872.923470][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 872.944993][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 872.959076][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 872.982016][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 873.038705][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 873.057649][T12038] usb 3-1: device descriptor read/64, error -71 [ 873.132271][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 873.140206][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 873.147430][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 873.154282][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 873.167531][ T5878] pwc: Registered as video103. [ 873.243965][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65 [ 873.254142][T12038] usb usb3-port1: attempt power cycle [ 873.276860][ T5878] usb 2-1: USB disconnect, device number 126 [ 873.614981][T12038] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 873.635434][T12038] usb 3-1: device descriptor read/8, error -71 [ 873.701793][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2876'. [ 873.710900][T21066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'. [ 873.721402][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2876'. [ 873.732801][T21066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2876'. [ 873.746428][T21066] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 873.895154][T12038] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 873.925341][T12038] usb 3-1: device descriptor read/8, error -71 [ 874.046261][T12038] usb usb3-port1: unable to enumerate USB device [ 874.545242][T11670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 874.871858][T12038] usb 6-1: USB disconnect, device number 73 [ 875.185192][T11678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 875.415083][T12038] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 875.723489][T12038] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.734140][T12038] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 875.744772][T12038] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 875.753945][T12038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 875.774644][T12038] usb 6-1: SerialNumber: syz [ 875.840693][T21088] FAULT_INJECTION: forcing a failure. [ 875.840693][T21088] name failslab, interval 1, probability 0, space 0, times 0 [ 875.853886][T21088] CPU: 0 UID: 0 PID: 21088 Comm: syz.1.2884 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.853914][T21088] Tainted: [L]=SOFTLOCKUP [ 875.853922][T21088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 875.853931][T21088] Call Trace: [ 875.853938][T21088] [ 875.853943][T21088] dump_stack_lvl+0xe8/0x150 [ 875.853961][T21088] should_fail_ex+0x412/0x560 [ 875.853976][T21088] should_failslab+0xa8/0x100 [ 875.853990][T21088] __kmalloc_cache_noprof+0x83/0x6e0 [ 875.854005][T21088] ? __pfx_stack_trace_save+0x10/0x10 [ 875.854026][T21088] ? rtnl_newlink+0x136/0x1be0 [ 875.854050][T21088] rtnl_newlink+0x136/0x1be0 [ 875.854070][T21088] ? kasan_save_track+0x4f/0x80 [ 875.854084][T21088] ? kasan_save_track+0x3e/0x80 [ 875.854094][T21088] ? kasan_save_free_info+0x46/0x50 [ 875.854106][T21088] ? __kasan_slab_free+0x5c/0x80 [ 875.854115][T21088] ? kmem_cache_free+0x195/0x610 [ 875.854125][T21088] ? __dev_queue_xmit+0x168f/0x3850 [ 875.854138][T21088] ? __netlink_deliver_tap+0x5ad/0x850 [ 875.854151][T21088] ? netlink_deliver_tap+0x19c/0x1b0 [ 875.854166][T21088] ? netlink_unicast+0x7e3/0x9b0 [ 875.854188][T21088] ? netlink_sendmsg+0x813/0xb40 [ 875.854206][T21088] ? __pfx_rtnl_newlink+0x10/0x10 [ 875.854223][T21088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.854255][T21088] ? kasan_quarantine_put+0xbb/0x1f0 [ 875.854269][T21088] ? lockdep_hardirqs_on+0x7a/0x110 [ 875.854282][T21088] ? kmem_cache_free+0x195/0x610 [ 875.854291][T21088] ? nlmon_xmit+0xb0/0x100 [ 875.854316][T21088] ? __lock_acquire+0x6b5/0x2cf0 [ 875.854347][T21088] ? __local_bh_enable_ip+0xd0/0x130 [ 875.854364][T21088] ? lockdep_hardirqs_on+0x7a/0x110 [ 875.854379][T21088] ? __dev_queue_xmit+0x274/0x3850 [ 875.854394][T21088] ? __local_bh_enable_ip+0xd0/0x130 [ 875.854401][T21088] ? __dev_queue_xmit+0x274/0x3850 [ 875.854418][T21088] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 875.854435][T21088] ? __pfx_rtnl_newlink+0x10/0x10 [ 875.854449][T21088] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 875.854472][T21088] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 875.854491][T21088] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 875.854508][T21088] ? ref_tracker_free+0x693/0x840 [ 875.854527][T21088] ? __copy_skb_header+0xa3/0x4a0 [ 875.854542][T21088] ? __pfx_ref_tracker_free+0x10/0x10 [ 875.854554][T21088] ? __skb_clone+0x63/0x7a0 [ 875.854576][T21088] netlink_rcv_skb+0x232/0x4b0 [ 875.854587][T21088] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 875.854606][T21088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 875.854635][T21088] ? netlink_deliver_tap+0x2e/0x1b0 [ 875.854660][T21088] netlink_unicast+0x80f/0x9b0 [ 875.854685][T21088] ? __pfx_netlink_unicast+0x10/0x10 [ 875.854700][T21088] ? __alloc_skb+0x193/0x390 [ 875.854711][T21088] ? netlink_sendmsg+0x650/0xb40 [ 875.854720][T21088] ? skb_put+0x11b/0x210 [ 875.854733][T21088] netlink_sendmsg+0x813/0xb40 [ 875.854756][T21088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.854778][T21088] ? aa_sock_msg_perm+0xf1/0x1b0 [ 875.854800][T21088] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 875.854820][T21088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 875.854839][T21088] ____sys_sendmsg+0xa68/0xad0 [ 875.854858][T21088] ? __might_fault+0xaf/0x130 [ 875.854884][T21088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 875.854911][T21088] ? import_iovec+0x73/0xa0 [ 875.854936][T21088] ___sys_sendmsg+0x2a5/0x360 [ 875.854955][T21088] ? __lock_acquire+0x6b5/0x2cf0 [ 875.854981][T21088] ? __pfx____sys_sendmsg+0x10/0x10 [ 875.855029][T21088] ? __fget_files+0x2a/0x420 [ 875.855048][T21088] ? __fget_files+0x3a0/0x420 [ 875.855075][T21088] __x64_sys_sendmsg+0x1bd/0x2a0 [ 875.855099][T21088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 875.855128][T21088] ? __pfx_ksys_write+0x10/0x10 [ 875.855162][T21088] do_syscall_64+0xe2/0xf80 [ 875.855180][T21088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.855196][T21088] ? trace_irq_disable+0x37/0x100 [ 875.855212][T21088] ? clear_bhb_loop+0x60/0xb0 [ 875.855230][T21088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.855247][T21088] RIP: 0033:0x7f5ecc79aeb9 [ 875.855263][T21088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.855278][T21088] RSP: 002b:00007f5ecd61f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.855298][T21088] RAX: ffffffffffffffda RBX: 00007f5ecca15fa0 RCX: 00007f5ecc79aeb9 [ 875.855311][T21088] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 875.855323][T21088] RBP: 00007f5ecd61f090 R08: 0000000000000000 R09: 0000000000000000 [ 875.855334][T21088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.855344][T21088] R13: 00007f5ecca16038 R14: 00007f5ecca15fa0 R15: 00007f5eccb3fa48 [ 875.855371][T21088] [ 876.306649][ T5878] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 876.340988][T12038] usb 6-1: 0:2 : does not exist [ 876.351105][T12038] usb 6-1: unit 255 not found! [ 876.443850][T12038] usb 6-1: USB disconnect, device number 74 [ 876.486346][ T5878] usb 3-1: Invalid ep0 maxpacket: 64 [ 876.603867][T21099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2888'. [ 876.635171][ T5878] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 876.655031][ T5893] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 876.794975][ T5893] usb 2-1: device descriptor read/64, error -71 [ 876.805052][ T5878] usb 3-1: Invalid ep0 maxpacket: 64 [ 876.810937][ T5878] usb usb3-port1: attempt power cycle [ 876.971733][T21105] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2891'. [ 877.017101][T21105] Scaler: ================= START STATUS ================= [ 877.024593][T21105] Scaler: ================== END STATUS ================== [ 877.035133][ T5893] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 877.154959][ T5878] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 877.175462][ T5893] usb 2-1: device descriptor read/64, error -71 [ 877.185649][ T5878] usb 3-1: Invalid ep0 maxpacket: 64 [ 877.285483][ T5893] usb usb2-port1: attempt power cycle [ 877.348698][ T5878] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 877.356366][ T10] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 877.389610][ T5878] usb 3-1: Invalid ep0 maxpacket: 64 [ 877.398472][ T5878] usb usb3-port1: unable to enumerate USB device [ 877.535229][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 877.573387][T21119] SET target dimension over the limit! [ 877.602712][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 877.602743][ T10] usb 6-1: config 0 has no interface number 0 [ 877.640155][ T10] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 877.655477][ T5893] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 877.667807][ T10] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 877.708813][ T5893] usb 2-1: device descriptor read/8, error -71 [ 877.737361][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 877.746481][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.754636][ T10] usb 6-1: Product: syz [ 877.758856][ T10] usb 6-1: Manufacturer: syz [ 877.763452][ T10] usb 6-1: SerialNumber: syz [ 877.770966][ T10] usb 6-1: config 0 descriptor?? [ 877.799064][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 877.865058][ T5878] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 877.917000][T21125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2898'. [ 877.965695][ T5893] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 877.987679][ T5893] usb 2-1: device descriptor read/8, error -71 [ 878.002849][ T10] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 878.010040][ T10] quatech2 6-1:0.51: probe with driver quatech2 failed with error -90 [ 878.030509][ T5878] usb 5-1: Using ep0 maxpacket: 32 [ 878.037566][ T5878] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 878.048472][ T5878] usb 5-1: config 0 has no interface number 0 [ 878.065135][ T5878] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 878.081344][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.097045][ T5893] usb usb2-port1: unable to enumerate USB device [ 878.103497][ T5878] usb 5-1: Product: syz [ 878.110787][ T5878] usb 5-1: Manufacturer: syz [ 878.120719][ T5878] usb 5-1: SerialNumber: syz [ 878.139015][ T5878] usb 5-1: config 0 descriptor?? [ 878.154575][ T5878] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 878.184703][T21130] xt_hashlimit: size too large, truncated to 1048576 [ 878.371991][ T5878] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 878.390829][ T5878] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 878.745029][ T24] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 878.894964][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 878.902421][ T24] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 878.910301][ T10] usb 5-1: USB disconnect, device number 99 [ 878.910757][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 878.935205][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 878.944778][ T24] usb 3-1: config 0 has no interface number 0 [ 878.957980][ T24] usb 3-1: config 0 interface 28 altsetting 8 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 878.977209][ T24] usb 3-1: config 0 interface 28 has no altsetting 0 [ 878.978494][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 878.994283][ T24] usb 3-1: Dual-Role OTG device on HNP port [ 879.001892][ T24] usb 3-1: New USB device found, idVendor=12d1, idProduct=937e, bcdDevice=af.67 [ 879.005022][ T10] quatech2 5-1:0.51: device disconnected [ 879.018366][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.027084][ T24] usb 3-1: Product: syz [ 879.031411][ T24] usb 3-1: Manufacturer: syz [ 879.036569][ T24] usb 3-1: SerialNumber: syz [ 879.043636][ T24] usb 3-1: config 0 descriptor?? [ 879.050573][ T24] hub 3-1:0.28: bad descriptor, ignoring hub [ 879.057023][ T24] hub 3-1:0.28: probe with driver hub failed with error -5 [ 879.067126][ T24] option 3-1:0.28: GSM modem (1-port) converter detected [ 879.375284][ T24] usb 3-1: USB disconnect, device number 105 [ 879.382817][ T24] option 3-1:0.28: device disconnected [ 879.459123][T21144] FAULT_INJECTION: forcing a failure. [ 879.459123][T21144] name failslab, interval 1, probability 0, space 0, times 0 [ 879.472134][T21144] CPU: 1 UID: 0 PID: 21144 Comm: syz.1.2905 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.472163][T21144] Tainted: [L]=SOFTLOCKUP [ 879.472170][T21144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 879.472181][T21144] Call Trace: [ 879.472189][T21144] [ 879.472197][T21144] dump_stack_lvl+0xe8/0x150 [ 879.472222][T21144] should_fail_ex+0x412/0x560 [ 879.472248][T21144] should_failslab+0xa8/0x100 [ 879.472269][T21144] __kmalloc_noprof+0xde/0x7e0 [ 879.472286][T21144] ? bpf_ctx_init+0xbd/0x1c0 [ 879.472314][T21144] ? get_pid_task+0x20/0x1f0 [ 879.472336][T21144] bpf_ctx_init+0xbd/0x1c0 [ 879.472356][T21144] bpf_prog_test_run_skb+0x2bd/0x1d50 [ 879.472380][T21144] ? __fget_files+0x2a/0x420 [ 879.472401][T21144] ? __fget_files+0x2a/0x420 [ 879.472419][T21144] ? __fget_files+0x3a0/0x420 [ 879.472436][T21144] ? __fget_files+0x2a/0x420 [ 879.472458][T21144] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 879.472476][T21144] bpf_prog_test_run+0x2c7/0x340 [ 879.472499][T21144] __sys_bpf+0x5cb/0x920 [ 879.472519][T21144] ? __pfx___sys_bpf+0x10/0x10 [ 879.472549][T21144] ? ksys_write+0x242/0x270 [ 879.472573][T21144] ? __pfx_ksys_write+0x10/0x10 [ 879.472602][T21144] __x64_sys_bpf+0x7c/0x90 [ 879.472626][T21144] do_syscall_64+0xe2/0xf80 [ 879.472644][T21144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.472660][T21144] ? trace_irq_disable+0x37/0x100 [ 879.472677][T21144] ? clear_bhb_loop+0x60/0xb0 [ 879.472697][T21144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.472714][T21144] RIP: 0033:0x7f5ecc79aeb9 [ 879.472731][T21144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.472747][T21144] RSP: 002b:00007f5ecd61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 879.472767][T21144] RAX: ffffffffffffffda RBX: 00007f5ecca15fa0 RCX: 00007f5ecc79aeb9 [ 879.472780][T21144] RDX: 0000000000000048 RSI: 0000200000002c00 RDI: 000000000000000a [ 879.472792][T21144] RBP: 00007f5ecd61f090 R08: 0000000000000000 R09: 0000000000000000 [ 879.472804][T21144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.472815][T21144] R13: 00007f5ecca16038 R14: 00007f5ecca15fa0 R15: 00007f5eccb3fa48 [ 879.472843][T21144] [ 879.703413][T11668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 880.015717][ T10] usb 6-1: USB disconnect, device number 75 [ 880.177275][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2913'. [ 880.615712][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 880.810649][T21174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2916'. [ 880.819983][T21174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2916'. [ 880.925655][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 880.925673][ T30] audit: type=1800 audit(1769516122.814:3825): pid=21175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2916" name="bus" dev="tmpfs" ino=3224 res=0 errno=0 [ 880.967695][T11668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 881.159079][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 881.168378][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.212446][ T24] usb 3-1: Product: syz [ 881.310553][ T24] usb 3-1: Manufacturer: syz [ 881.328046][ T24] usb 3-1: SerialNumber: syz [ 881.654384][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 881.793035][ T798] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 882.623423][T21188] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2918'. [ 882.633449][T21188] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2918'. [ 882.718105][T21190] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 882.865346][ T798] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 883.178598][ T798] ath9k_htc: Failed to initialize the device [ 883.194581][ T9] usb 3-1: USB disconnect, device number 106 [ 883.240285][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 884.092315][T21207] FAULT_INJECTION: forcing a failure. [ 884.092315][T21207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.134441][T21207] CPU: 1 UID: 0 PID: 21207 Comm: syz.1.2923 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.134469][T21207] Tainted: [L]=SOFTLOCKUP [ 884.134475][T21207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 884.134484][T21207] Call Trace: [ 884.134491][T21207] [ 884.134501][T21207] dump_stack_lvl+0xe8/0x150 [ 884.134528][T21207] should_fail_ex+0x412/0x560 [ 884.134550][T21207] _copy_from_user+0x2d/0xb0 [ 884.134573][T21207] ___sys_recvmsg+0x175/0x590 [ 884.134597][T21207] ? __pfx____sys_recvmsg+0x10/0x10 [ 884.134620][T21207] ? __fget_files+0x2a/0x420 [ 884.134664][T21207] do_recvmmsg+0x334/0x800 [ 884.134691][T21207] ? __pfx_do_recvmmsg+0x10/0x10 [ 884.134719][T21207] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 884.134752][T21207] __x64_sys_recvmmsg+0x198/0x250 [ 884.134775][T21207] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 884.134805][T21207] do_syscall_64+0xe2/0xf80 [ 884.134825][T21207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.134840][T21207] ? trace_irq_disable+0x37/0x100 [ 884.134855][T21207] ? clear_bhb_loop+0x60/0xb0 [ 884.134884][T21207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.134900][T21207] RIP: 0033:0x7f5ecc79aeb9 [ 884.134917][T21207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.134931][T21207] RSP: 002b:00007f5ecd61f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 884.134949][T21207] RAX: ffffffffffffffda RBX: 00007f5ecca15fa0 RCX: 00007f5ecc79aeb9 [ 884.134961][T21207] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 884.134972][T21207] RBP: 00007f5ecd61f090 R08: 0000000000000000 R09: 0000000000000000 [ 884.134983][T21207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.134993][T21207] R13: 00007f5ecca16038 R14: 00007f5ecca15fa0 R15: 00007f5eccb3fa48 [ 884.135020][T21207] [ 884.591123][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2926'. [ 884.600141][T21218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 884.627989][T21217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2927'. [ 884.637236][T21217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2927'. [ 884.646631][ T24] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 884.677216][T21219] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 884.713384][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2926'. [ 884.961578][T21218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 885.127225][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.137611][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 885.148584][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.167344][ T24] usb 5-1: config 0 descriptor?? [ 885.187359][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 885.429692][T11685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 885.641571][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 885.667863][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 885.685302][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 885.858133][T21224] bond1: (slave netdevsim0): Enslaving as a backup interface with a down link [ 885.965545][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 886.125029][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 886.132382][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.143269][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 886.154334][ T5878] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 886.170268][ T5878] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 886.180219][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.189650][ T5878] usb 2-1: Product: syz [ 886.194130][ T5878] usb 2-1: Manufacturer: syz [ 886.199215][ T5878] usb 2-1: SerialNumber: syz [ 886.226616][ T5878] cdc_ncm 2-1:1.0: skipping garbage [ 886.231890][ T5878] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 886.239925][ T5878] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 886.247481][ T5878] cdc_ncm 2-1:1.0: bind() failure [ 886.411490][T21236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2933'. [ 886.437938][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 886.451706][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 886.472951][ T5893] usb 2-1: USB disconnect, device number 5 [ 886.475450][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 886.502981][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 886.523257][T21238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 886.527391][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 886.551091][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 886.559097][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 886.566445][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 886.573407][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 886.584136][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 886.584703][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 886.585589][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 886.593510][ T24] pwc: Registered as video103. [ 886.605333][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input66 [ 886.627811][ T24] usb 5-1: USB disconnect, device number 100 [ 886.636723][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 886.705532][T11678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 886.883842][ T9] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.896108][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 886.904416][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 886.914990][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.935762][ T9] usb 3-1: config 0 descriptor?? [ 887.115182][ T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 887.296136][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 887.299979][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 887.300011][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.300032][ T24] usb 5-1: Product: syz [ 887.300047][ T24] usb 5-1: Manufacturer: syz [ 887.300062][ T24] usb 5-1: SerialNumber: syz [ 887.315639][ T24] usb 5-1: config 0 descriptor?? [ 887.590960][ T24] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 887.601937][ T24] eb 2a 3b 80 9b e4 7a f0 [ 887.613558][ T24] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 887.934430][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 887.940562][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 887.952770][ T9] usb 3-1: USB disconnect, device number 107 [ 889.213637][T21284] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2945'. [ 889.835128][ T24] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 889.962364][ T5878] usb 5-1: USB disconnect, device number 101 [ 889.995323][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 890.005217][ T24] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 890.013518][ T24] usb 6-1: config 0 has no interface number 0 [ 890.021991][ T24] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 890.044235][ T24] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 890.092670][ T24] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 890.104378][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.114275][ T24] usb 6-1: Product: syz [ 890.142551][ T24] usb 6-1: Manufacturer: syz [ 890.156230][ T24] usb 6-1: SerialNumber: syz [ 890.202842][ T24] usb 6-1: config 0 descriptor?? [ 890.239830][ T24] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 890.326507][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'. [ 890.335923][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2952'. [ 890.346776][T21306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'. [ 890.358991][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2952'. [ 890.373732][T21306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 890.460438][ T24] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 890.541651][ T24] quatech2 6-1:0.51: probe with driver quatech2 failed with error -90 [ 890.554509][T11680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 890.677080][ T5878] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 891.081277][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.096418][ T5878] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 891.123410][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.162920][ T5878] usb 5-1: config 0 descriptor?? [ 891.198747][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 891.258908][T21314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2956'. [ 891.270331][T21314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 891.277966][T21314] IPv6: NLM_F_CREATE should be set when creating new route [ 891.285225][T21314] IPv6: NLM_F_CREATE should be set when creating new route [ 891.292431][T21314] IPv6: NLM_F_CREATE should be set when creating new route [ 891.604787][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 891.627855][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 891.640824][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 891.662874][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 891.674261][ T5878] pwc: recv_control_msg error -32 req 04 val 1300 [ 891.687073][ T5878] pwc: recv_control_msg error -32 req 04 val 1400 [ 891.705357][ T5878] pwc: recv_control_msg error -71 req 02 val 2000 [ 891.751116][ T5878] pwc: recv_control_msg error -71 req 02 val 2100 [ 891.790436][ T5878] pwc: recv_control_msg error -71 req 04 val 1500 [ 891.807161][ T5878] pwc: recv_control_msg error -71 req 02 val 2500 [ 891.829563][ T5878] pwc: recv_control_msg error -71 req 02 val 2400 [ 891.854288][ T5878] pwc: recv_control_msg error -71 req 02 val 2600 [ 891.886608][ T5878] pwc: recv_control_msg error -71 req 02 val 2900 [ 891.909406][ T5878] pwc: recv_control_msg error -71 req 02 val 2800 [ 891.953283][ T5878] pwc: recv_control_msg error -71 req 04 val 1100 [ 891.971154][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 892.083002][ T5878] pwc: Registered as video103. [ 892.111646][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input67 [ 892.209595][ T5878] usb 5-1: USB disconnect, device number 102 [ 892.266268][T21326] program syz.1.2959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 892.469834][T11668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 892.587970][T21345] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2961'. [ 893.467884][ T5878] usb 6-1: USB disconnect, device number 76 [ 894.116779][T21364] program syz.5.2967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 894.520979][T21376] netlink: 'syz.4.2969': attribute type 1 has an invalid length. [ 894.528855][T21376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2969'. [ 894.538036][T21376] netlink: 'syz.4.2969': attribute type 1 has an invalid length. [ 894.614269][T21377] xt_CT: You must specify a L4 protocol and not use inversions on it [ 895.714954][T11744] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 895.844047][T21388] FAULT_INJECTION: forcing a failure. [ 895.844047][T21388] name failslab, interval 1, probability 0, space 0, times 0 [ 895.861814][T21388] CPU: 1 UID: 0 PID: 21388 Comm: syz.5.2974 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.861844][T21388] Tainted: [L]=SOFTLOCKUP [ 895.861851][T21388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 895.861862][T21388] Call Trace: [ 895.861869][T21388] [ 895.861877][T21388] dump_stack_lvl+0xe8/0x150 [ 895.861904][T21388] should_fail_ex+0x412/0x560 [ 895.861930][T21388] should_failslab+0xa8/0x100 [ 895.861949][T21388] __kmalloc_cache_noprof+0x83/0x6e0 [ 895.861963][T21388] ? __pfx___nla_validate_parse+0x10/0x10 [ 895.861982][T21388] ? hash_ip_create+0x6d9/0x1460 [ 895.862004][T21388] hash_ip_create+0x6d9/0x1460 [ 895.862026][T21388] ? ip_set_create+0x4eb/0x1a40 [ 895.862051][T21388] ? __pfx_hash_ip_create+0x10/0x10 [ 895.862070][T21388] ? __nla_parse+0x40/0x60 [ 895.862090][T21388] ? __pfx_hash_ip_create+0x10/0x10 [ 895.862108][T21388] ip_set_create+0xae6/0x1a40 [ 895.862129][T21388] ? ip_set_create+0x4eb/0x1a40 [ 895.862160][T21388] ? __pfx_ip_set_create+0x10/0x10 [ 895.862208][T21388] nfnetlink_rcv_msg+0xc00/0x12c0 [ 895.862238][T21388] ? unwind_get_return_address+0x4d/0x90 [ 895.862255][T21388] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 895.862290][T21388] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 895.862350][T21388] netlink_rcv_skb+0x232/0x4b0 [ 895.862370][T21388] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 895.862392][T21388] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 895.862421][T21388] ? bpf_lsm_capable+0x9/0x20 [ 895.862440][T21388] ? security_capable+0x7e/0x2c0 [ 895.862464][T21388] nfnetlink_rcv+0x2c0/0x27b0 [ 895.862493][T21388] ? __local_bh_enable_ip+0xd0/0x130 [ 895.862509][T21388] ? lockdep_hardirqs_on+0x7a/0x110 [ 895.862526][T21388] ? __dev_queue_xmit+0x274/0x3850 [ 895.862547][T21388] ? __local_bh_enable_ip+0xd0/0x130 [ 895.862561][T21388] ? __dev_queue_xmit+0x274/0x3850 [ 895.862580][T21388] ? __dev_queue_xmit+0x1e6c/0x3850 [ 895.862599][T21388] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 895.862628][T21388] ? __dev_queue_xmit+0x274/0x3850 [ 895.862650][T21388] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 895.862676][T21388] ? __pfx___dev_queue_xmit+0x10/0x10 [ 895.862703][T21388] ? ref_tracker_free+0x693/0x840 [ 895.862722][T21388] ? __copy_skb_header+0xa3/0x4a0 [ 895.862745][T21388] ? __pfx_ref_tracker_free+0x10/0x10 [ 895.862764][T21388] ? __skb_clone+0x63/0x7a0 [ 895.862790][T21388] ? __skb_clone+0x483/0x7a0 [ 895.862817][T21388] ? skb_clone+0x246/0x3a0 [ 895.862838][T21388] ? __netlink_deliver_tap+0x807/0x850 [ 895.862855][T21388] ? netlink_deliver_tap+0x2e/0x1b0 [ 895.862877][T21388] ? netlink_deliver_tap+0x2e/0x1b0 [ 895.862900][T21388] netlink_unicast+0x80f/0x9b0 [ 895.862931][T21388] ? __pfx_netlink_unicast+0x10/0x10 [ 895.862953][T21388] ? __alloc_skb+0x193/0x390 [ 895.862971][T21388] ? netlink_sendmsg+0x650/0xb40 [ 895.862984][T21388] ? skb_put+0x11b/0x210 [ 895.863006][T21388] netlink_sendmsg+0x813/0xb40 [ 895.863031][T21388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 895.863052][T21388] ? aa_sock_msg_perm+0xf1/0x1b0 [ 895.863074][T21388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 895.863093][T21388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 895.863110][T21388] ____sys_sendmsg+0xa68/0xad0 [ 895.863131][T21388] ? __might_fault+0xaf/0x130 [ 895.863160][T21388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 895.863190][T21388] ? import_iovec+0x73/0xa0 [ 895.863223][T21388] ___sys_sendmsg+0x2a5/0x360 [ 895.863248][T21388] ? __lock_acquire+0x6b5/0x2cf0 [ 895.863274][T21388] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.863328][T21388] ? __fget_files+0x2a/0x420 [ 895.863346][T21388] ? __fget_files+0x3a0/0x420 [ 895.863374][T21388] __x64_sys_sendmsg+0x1bd/0x2a0 [ 895.863398][T21388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 895.863428][T21388] ? __pfx_ksys_write+0x10/0x10 [ 895.863461][T21388] do_syscall_64+0xe2/0xf80 [ 895.863479][T21388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.863496][T21388] ? trace_irq_disable+0x37/0x100 [ 895.863512][T21388] ? clear_bhb_loop+0x60/0xb0 [ 895.863533][T21388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.863549][T21388] RIP: 0033:0x7fabc3b9aeb9 [ 895.863567][T21388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.863581][T21388] RSP: 002b:00007fabc4af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.863602][T21388] RAX: ffffffffffffffda RBX: 00007fabc3e15fa0 RCX: 00007fabc3b9aeb9 [ 895.863614][T21388] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 895.863626][T21388] RBP: 00007fabc4af1090 R08: 0000000000000000 R09: 0000000000000000 [ 895.863637][T21388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.863648][T21388] R13: 00007fabc3e16038 R14: 00007fabc3e15fa0 R15: 00007fabc3f3fa48 [ 895.863677][T21388] [ 895.884940][T11744] usb 2-1: Using ep0 maxpacket: 32 [ 896.013541][ T5878] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 896.030131][T21391] trusted_key: encrypted_key: insufficient parameters specified [ 896.238149][ T5878] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.238182][ T5878] usb 3-1: config 0 interface 0 has no altsetting 0 [ 896.238223][ T5878] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 896.238246][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.249360][ T5878] usb 3-1: config 0 descriptor?? [ 896.253425][T11744] usb 2-1: config 0 interface 0 has no altsetting 0 [ 896.304594][ T24] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 896.317799][T11668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 896.434917][T11744] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 896.446083][T11744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.476016][T11744] usb 2-1: config 0 descriptor?? [ 896.527720][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 896.540674][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 896.553025][ T24] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 896.563951][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.577610][ T24] usb 5-1: config 0 descriptor?? [ 896.589036][T21392] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 897.065759][ T24] holtek_mouse 0003:04D9:A070.0030: unbalanced collection at end of report description [ 897.097880][ T24] holtek_mouse 0003:04D9:A070.0030: hid parse failed: -22 [ 897.120790][ T24] holtek_mouse 0003:04D9:A070.0030: probe with driver holtek_mouse failed with error -22 [ 897.175012][ T798] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 897.314364][ T9] usb 5-1: USB disconnect, device number 103 [ 897.345251][ T798] usb 6-1: Using ep0 maxpacket: 8 [ 897.371582][ T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.395238][ T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.414954][ T798] usb 6-1: New USB device found, idVendor=056a, idProduct=7d84, bcdDevice= 0.0a [ 897.424059][ T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.456036][ T798] usb 6-1: config 0 descriptor?? [ 897.522743][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 897.532658][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 897.553421][ T5878] usb 3-1: USB disconnect, device number 108 [ 897.585937][T11680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 897.705369][T11744] usbhid 2-1:0.0: can't add hid device: -71 [ 897.711427][T11744] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 897.743434][T11744] usb 2-1: USB disconnect, device number 6 [ 897.873203][ T798] wacom 0003:056A:7D84.0031: unknown main item tag 0x0 [ 898.196506][ T798] wacom 0003:056A:7D84.0031: unknown main item tag 0x0 [ 898.224420][ T798] wacom 0003:056A:7D84.0031: Unknown device_type for 'HID 056a:7d84'. Ignoring. [ 898.255720][ T798] usb 6-1: USB disconnect, device number 77 [ 899.117142][T21425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2988'. [ 899.165069][T21425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.173670][T21425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.420534][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 899.556276][ T9] usb 2-1: device descriptor read/64, error -71 [ 899.804945][ T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 899.804945][ T798] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 899.945029][ T9] usb 2-1: device descriptor read/64, error -71 [ 899.967836][ T798] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.986868][ T798] usb 3-1: config 0 interface 0 has no altsetting 0 [ 900.001536][ T798] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 900.023457][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.043925][ T798] usb 3-1: config 0 descriptor?? [ 900.056456][ T9] usb usb2-port1: attempt power cycle [ 900.255388][T21444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.264413][T21444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.405164][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 900.445407][ T9] usb 2-1: device descriptor read/8, error -71 [ 900.546699][ T798] usbhid 3-1:0.0: can't add hid device: -71 [ 900.558243][ T798] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 900.589032][ T798] usb 3-1: USB disconnect, device number 109 [ 900.684967][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 900.715904][ T9] usb 2-1: device descriptor read/8, error -71 [ 900.825236][ T9] usb usb2-port1: unable to enumerate USB device [ 901.300668][T21471] FAULT_INJECTION: forcing a failure. [ 901.300668][T21471] name failslab, interval 1, probability 0, space 0, times 0 [ 901.314605][T21471] CPU: 0 UID: 0 PID: 21471 Comm: syz.4.3005 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.314634][T21471] Tainted: [L]=SOFTLOCKUP [ 901.314641][T21471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 901.314652][T21471] Call Trace: [ 901.314659][T21471] [ 901.314668][T21471] dump_stack_lvl+0xe8/0x150 [ 901.314695][T21471] should_fail_ex+0x412/0x560 [ 901.314721][T21471] should_failslab+0xa8/0x100 [ 901.314742][T21471] __kmalloc_noprof+0xde/0x7e0 [ 901.314760][T21471] ? tomoyo_encode+0x28b/0x550 [ 901.314786][T21471] tomoyo_encode+0x28b/0x550 [ 901.314812][T21471] tomoyo_realpath_from_path+0x58d/0x5d0 [ 901.314844][T21471] ? tomoyo_path_number_perm+0x219/0x630 [ 901.314861][T21471] tomoyo_path_number_perm+0x246/0x630 [ 901.314880][T21471] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 901.314900][T21471] ? sb_end_write+0xe9/0x1c0 [ 901.314919][T21471] ? vfs_write+0x9bc/0xb90 [ 901.314970][T21471] ? ksys_write+0x1fc/0x270 [ 901.314998][T21471] security_file_ioctl+0xc3/0x2a0 [ 901.315018][T21471] __se_sys_ioctl+0x47/0x170 [ 901.315043][T21471] do_syscall_64+0xe2/0xf80 [ 901.315061][T21471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.315078][T21471] ? trace_irq_disable+0x37/0x100 [ 901.315095][T21471] ? clear_bhb_loop+0x60/0xb0 [ 901.315115][T21471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.315132][T21471] RIP: 0033:0x7f321ff9aeb9 [ 901.315149][T21471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.315163][T21471] RSP: 002b:00007f3220eca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 901.315183][T21471] RAX: ffffffffffffffda RBX: 00007f3220215fa0 RCX: 00007f321ff9aeb9 [ 901.315196][T21471] RDX: 0000000000000000 RSI: 0000000000005201 RDI: 0000000000000003 [ 901.315207][T21471] RBP: 00007f3220eca090 R08: 0000000000000000 R09: 0000000000000000 [ 901.315219][T21471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.315229][T21471] R13: 00007f3220216038 R14: 00007f3220215fa0 R15: 00007f322033fa48 [ 901.315259][T21471] [ 901.528987][T21471] ERROR: Out of memory at tomoyo_realpath_from_path. [ 901.590340][T11668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 901.614465][T21477] FAULT_INJECTION: forcing a failure. [ 901.614465][T21477] name failslab, interval 1, probability 0, space 0, times 0 [ 901.636169][T21477] CPU: 1 UID: 0 PID: 21477 Comm: syz.4.3006 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.636199][T21477] Tainted: [L]=SOFTLOCKUP [ 901.636205][T21477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 901.636216][T21477] Call Trace: [ 901.636224][T21477] [ 901.636232][T21477] dump_stack_lvl+0xe8/0x150 [ 901.636259][T21477] should_fail_ex+0x412/0x560 [ 901.636284][T21477] should_failslab+0xa8/0x100 [ 901.636305][T21477] __kmalloc_node_track_caller_noprof+0xe1/0x7f0 [ 901.636323][T21477] ? __kasan_kmalloc+0x93/0xb0 [ 901.636340][T21477] ? __request_module+0x2ec/0x610 [ 901.636356][T21477] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 901.636376][T21477] kstrdup+0x42/0x100 [ 901.636396][T21477] __request_module+0x2ec/0x610 [ 901.636418][T21477] ? __pfx___request_module+0x10/0x10 [ 901.636438][T21477] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 901.636465][T21477] ? nft_pernet+0x23/0x240 [ 901.636492][T21477] nf_tables_abort+0x8e73/0x9090 [ 901.636538][T21477] ? nf_tables_newobj+0xfc4/0x1ca0 [ 901.636559][T21477] ? __pfx_nf_tables_abort+0x10/0x10 [ 901.636589][T21477] ? __pfx_nf_tables_newobj+0x10/0x10 [ 901.636617][T21477] ? __nla_parse+0x40/0x60 [ 901.636641][T21477] nfnetlink_rcv+0x1c7b/0x27b0 [ 901.636693][T21477] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 901.636728][T21477] ? ref_tracker_free+0x693/0x840 [ 901.636773][T21477] ? __netlink_deliver_tap+0x807/0x850 [ 901.636790][T21477] ? netlink_deliver_tap+0x2e/0x1b0 [ 901.636820][T21477] netlink_unicast+0x80f/0x9b0 [ 901.636848][T21477] ? __pfx_netlink_unicast+0x10/0x10 [ 901.636869][T21477] ? __alloc_skb+0x193/0x390 [ 901.636889][T21477] ? netlink_sendmsg+0x650/0xb40 [ 901.636905][T21477] ? skb_put+0x11b/0x210 [ 901.636928][T21477] netlink_sendmsg+0x813/0xb40 [ 901.636954][T21477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.636975][T21477] ? aa_sock_msg_perm+0xf1/0x1b0 [ 901.636997][T21477] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 901.637016][T21477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.637033][T21477] ____sys_sendmsg+0xa68/0xad0 [ 901.637054][T21477] ? __might_fault+0xaf/0x130 [ 901.637082][T21477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.637109][T21477] ? import_iovec+0x73/0xa0 [ 901.637134][T21477] ___sys_sendmsg+0x2a5/0x360 [ 901.637152][T21477] ? __lock_acquire+0x6b5/0x2cf0 [ 901.637175][T21477] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.637224][T21477] ? __fget_files+0x2a/0x420 [ 901.637241][T21477] ? __fget_files+0x3a0/0x420 [ 901.637266][T21477] __x64_sys_sendmsg+0x1bd/0x2a0 [ 901.637285][T21477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 901.637308][T21477] ? __pfx_ksys_write+0x10/0x10 [ 901.637339][T21477] do_syscall_64+0xe2/0xf80 [ 901.637355][T21477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.637369][T21477] ? trace_irq_disable+0x37/0x100 [ 901.637382][T21477] ? clear_bhb_loop+0x60/0xb0 [ 901.637397][T21477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.637410][T21477] RIP: 0033:0x7f321ff9aeb9 [ 901.637424][T21477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.637435][T21477] RSP: 002b:00007f3220eca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.637450][T21477] RAX: ffffffffffffffda RBX: 00007f3220215fa0 RCX: 00007f321ff9aeb9 [ 901.637460][T21477] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 901.637474][T21477] RBP: 00007f3220eca090 R08: 0000000000000000 R09: 0000000000000000 [ 901.637483][T21477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.637491][T21477] R13: 00007f3220216038 R14: 00007f3220215fa0 R15: 00007f322033fa48 [ 901.637513][T21477] [ 902.403104][T21485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3010'. [ 902.416188][T21485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 902.473920][T21488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3011'. [ 902.488183][T21488] FAULT_INJECTION: forcing a failure. [ 902.488183][T21488] name failslab, interval 1, probability 0, space 0, times 0 [ 902.503791][T21488] CPU: 0 UID: 0 PID: 21488 Comm: syz.5.3011 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.503820][T21488] Tainted: [L]=SOFTLOCKUP [ 902.503827][T21488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 902.503838][T21488] Call Trace: [ 902.503845][T21488] [ 902.503853][T21488] dump_stack_lvl+0xe8/0x150 [ 902.503880][T21488] should_fail_ex+0x412/0x560 [ 902.503905][T21488] should_failslab+0xa8/0x100 [ 902.503927][T21488] kmem_cache_alloc_lru_noprof+0x8c/0x6c0 [ 902.503951][T21488] ? simple_start_creating+0xcc/0x110 [ 902.503970][T21488] ? alloc_inode+0x6a/0x1b0 [ 902.503991][T21488] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 902.504011][T21488] alloc_inode+0x6a/0x1b0 [ 902.504030][T21488] new_inode+0x22/0x170 [ 902.504053][T21488] __debugfs_create_file+0xb8/0x400 [ 902.504078][T21488] debugfs_create_file_full+0x3f/0x60 [ 902.504099][T21488] ref_tracker_dir_debugfs+0x197/0x360 [ 902.504118][T21488] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 902.504158][T21488] ? trace_kmalloc+0x1f/0xb0 [ 902.504169][T21488] ? __kvmalloc_node_noprof+0x5ba/0x8d0 [ 902.504188][T21488] ? __raw_spin_lock_init+0x45/0x100 [ 902.504210][T21488] alloc_netdev_mqs+0x272/0x11b0 [ 902.504231][T21488] ? __pfx_vlan_setup+0x10/0x10 [ 902.504255][T21488] rtnl_create_link+0x31f/0xd70 [ 902.504285][T21488] rtnl_newlink_create+0x277/0xb70 [ 902.504306][T21488] ? __pfx___nla_validate_parse+0x10/0x10 [ 902.504337][T21488] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 902.504362][T21488] ? __pfx___mutex_lock+0x10/0x10 [ 902.504391][T21488] ? ns_capable+0x89/0xe0 [ 902.504417][T21488] rtnl_newlink+0x1666/0x1be0 [ 902.504451][T21488] ? __pfx_rtnl_newlink+0x10/0x10 [ 902.504476][T21488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.504529][T21488] ? kasan_quarantine_put+0xbb/0x1f0 [ 902.504553][T21488] ? lockdep_hardirqs_on+0x7a/0x110 [ 902.504575][T21488] ? kmem_cache_free+0x195/0x610 [ 902.504592][T21488] ? nlmon_xmit+0xb0/0x100 [ 902.504620][T21488] ? __lock_acquire+0x6b5/0x2cf0 [ 902.504651][T21488] ? __local_bh_enable_ip+0xd0/0x130 [ 902.504667][T21488] ? lockdep_hardirqs_on+0x7a/0x110 [ 902.504683][T21488] ? __dev_queue_xmit+0x274/0x3850 [ 902.504702][T21488] ? __local_bh_enable_ip+0xd0/0x130 [ 902.504716][T21488] ? __dev_queue_xmit+0x274/0x3850 [ 902.504744][T21488] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 902.504777][T21488] ? __pfx_rtnl_newlink+0x10/0x10 [ 902.504796][T21488] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 902.504822][T21488] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 902.504838][T21488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 902.504853][T21488] ? ref_tracker_free+0x693/0x840 [ 902.504869][T21488] ? __copy_skb_header+0xa3/0x4a0 [ 902.504892][T21488] ? __pfx_ref_tracker_free+0x10/0x10 [ 902.504910][T21488] ? __skb_clone+0x63/0x7a0 [ 902.504936][T21488] netlink_rcv_skb+0x232/0x4b0 [ 902.504955][T21488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 902.504974][T21488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 902.505003][T21488] ? netlink_deliver_tap+0x2e/0x1b0 [ 902.505029][T21488] netlink_unicast+0x80f/0x9b0 [ 902.505062][T21488] ? __pfx_netlink_unicast+0x10/0x10 [ 902.505084][T21488] ? __alloc_skb+0x193/0x390 [ 902.505103][T21488] ? netlink_sendmsg+0x650/0xb40 [ 902.505120][T21488] ? skb_put+0x11b/0x210 [ 902.505143][T21488] netlink_sendmsg+0x813/0xb40 [ 902.505170][T21488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.505192][T21488] ? aa_sock_msg_perm+0xf1/0x1b0 [ 902.505215][T21488] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 902.505235][T21488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.505252][T21488] ____sys_sendmsg+0xa68/0xad0 [ 902.505272][T21488] ? __might_fault+0xaf/0x130 [ 902.505300][T21488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.505327][T21488] ? import_iovec+0x73/0xa0 [ 902.505352][T21488] ___sys_sendmsg+0x2a5/0x360 [ 902.505371][T21488] ? __lock_acquire+0x6b5/0x2cf0 [ 902.505396][T21488] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.505449][T21488] ? __fget_files+0x2a/0x420 [ 902.505472][T21488] ? __fget_files+0x3a0/0x420 [ 902.505499][T21488] __x64_sys_sendmsg+0x1bd/0x2a0 [ 902.505521][T21488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 902.505550][T21488] ? __pfx_ksys_write+0x10/0x10 [ 902.505584][T21488] do_syscall_64+0xe2/0xf80 [ 902.505601][T21488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.505617][T21488] ? trace_irq_disable+0x37/0x100 [ 902.505634][T21488] ? clear_bhb_loop+0x60/0xb0 [ 902.505656][T21488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.505673][T21488] RIP: 0033:0x7fabc3b9aeb9 [ 902.505691][T21488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.505707][T21488] RSP: 002b:00007fabc4af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.505725][T21488] RAX: ffffffffffffffda RBX: 00007fabc3e15fa0 RCX: 00007fabc3b9aeb9 [ 902.505739][T21488] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 902.505750][T21488] RBP: 00007fabc4af1090 R08: 0000000000000000 R09: 0000000000000000 [ 902.505761][T21488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.505771][T21488] R13: 00007fabc3e16038 R14: 00007fabc3e15fa0 R15: 00007fabc3f3fa48 [ 902.505801][T21488] [ 903.074892][T21488] debugfs: out of free dentries, can not create file 'netdev@ffff888034c16618' [ 903.268664][T21496] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3014'. [ 903.349799][T11680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 903.394956][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 903.517869][T21505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3016'. [ 903.563488][ T9] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.588885][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 903.600276][T21505] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3016'. [ 903.607011][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 903.794648][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.827606][ T9] usb 3-1: config 0 descriptor?? [ 903.951495][T21517] 8021q: VLANs not supported on sit0 [ 904.050240][T21482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.055781][T11678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.085601][T21482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.209651][T11678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.323676][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 904.342821][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 904.359289][T11678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.380323][ T9] usb 3-1: USB disconnect, device number 110 [ 904.717731][T11678] bond0: (slave ): Releasing backup interface [ 904.749647][T11678] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.767430][T21524] FAULT_INJECTION: forcing a failure. [ 904.767430][T21524] name failslab, interval 1, probability 0, space 0, times 0 [ 904.794337][T21524] CPU: 0 UID: 0 PID: 21524 Comm: syz.5.3024 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.794366][T21524] Tainted: [L]=SOFTLOCKUP [ 904.794371][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 904.794380][T21524] Call Trace: [ 904.794387][T21524] [ 904.794397][T21524] dump_stack_lvl+0xe8/0x150 [ 904.794423][T21524] should_fail_ex+0x412/0x560 [ 904.794449][T21524] should_failslab+0xa8/0x100 [ 904.794471][T21524] __kmalloc_cache_noprof+0x83/0x6e0 [ 904.794488][T21524] ? __pfx___nla_validate_parse+0x10/0x10 [ 904.794510][T21524] ? hash_ip_create+0x6d9/0x1460 [ 904.794535][T21524] hash_ip_create+0x6d9/0x1460 [ 904.794562][T21524] ? ip_set_create+0x4eb/0x1a40 [ 904.794597][T21524] ? __pfx_hash_ip_create+0x10/0x10 [ 904.794619][T21524] ? __nla_parse+0x40/0x60 [ 904.794640][T21524] ? __pfx_hash_ip_create+0x10/0x10 [ 904.794661][T21524] ip_set_create+0xae6/0x1a40 [ 904.794684][T21524] ? ip_set_create+0x4eb/0x1a40 [ 904.794716][T21524] ? __pfx_ip_set_create+0x10/0x10 [ 904.794772][T21524] nfnetlink_rcv_msg+0xc00/0x12c0 [ 904.794795][T21524] ? unwind_get_return_address+0x4d/0x90 [ 904.794818][T21524] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 904.794851][T21524] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 904.794919][T21524] netlink_rcv_skb+0x232/0x4b0 [ 904.794937][T21524] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 904.794959][T21524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 904.794984][T21524] ? bpf_lsm_capable+0x9/0x20 [ 904.795002][T21524] ? security_capable+0x7e/0x2c0 [ 904.795028][T21524] nfnetlink_rcv+0x2c0/0x27b0 [ 904.795061][T21524] ? __local_bh_enable_ip+0xd0/0x130 [ 904.795078][T21524] ? lockdep_hardirqs_on+0x7a/0x110 [ 904.795096][T21524] ? __dev_queue_xmit+0x274/0x3850 [ 904.795117][T21524] ? __local_bh_enable_ip+0xd0/0x130 [ 904.795132][T21524] ? __dev_queue_xmit+0x274/0x3850 [ 904.795153][T21524] ? __dev_queue_xmit+0x1e6c/0x3850 [ 904.795173][T21524] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 904.795205][T21524] ? __dev_queue_xmit+0x274/0x3850 [ 904.795228][T21524] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 904.795255][T21524] ? __pfx___dev_queue_xmit+0x10/0x10 [ 904.795283][T21524] ? ref_tracker_free+0x693/0x840 [ 904.795302][T21524] ? __copy_skb_header+0xa3/0x4a0 [ 904.795324][T21524] ? __pfx_ref_tracker_free+0x10/0x10 [ 904.795343][T21524] ? __skb_clone+0x63/0x7a0 [ 904.795368][T21524] ? __skb_clone+0x483/0x7a0 [ 904.795395][T21524] ? skb_clone+0x246/0x3a0 [ 904.795419][T21524] ? __netlink_deliver_tap+0x807/0x850 [ 904.795436][T21524] ? netlink_deliver_tap+0x2e/0x1b0 [ 904.795460][T21524] ? netlink_deliver_tap+0x2e/0x1b0 [ 904.795485][T21524] netlink_unicast+0x80f/0x9b0 [ 904.795518][T21524] ? __pfx_netlink_unicast+0x10/0x10 [ 904.795539][T21524] ? __alloc_skb+0x193/0x390 [ 904.795558][T21524] ? netlink_sendmsg+0x650/0xb40 [ 904.795580][T21524] ? skb_put+0x11b/0x210 [ 904.795603][T21524] netlink_sendmsg+0x813/0xb40 [ 904.795630][T21524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.795652][T21524] ? aa_sock_msg_perm+0xf1/0x1b0 [ 904.795673][T21524] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 904.795693][T21524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.795711][T21524] ____sys_sendmsg+0xa68/0xad0 [ 904.795732][T21524] ? __might_fault+0xaf/0x130 [ 904.795761][T21524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 904.795790][T21524] ? import_iovec+0x73/0xa0 [ 904.795817][T21524] ___sys_sendmsg+0x2a5/0x360 [ 904.795837][T21524] ? __lock_acquire+0x6b5/0x2cf0 [ 904.795864][T21524] ? __pfx____sys_sendmsg+0x10/0x10 [ 904.795919][T21524] ? __fget_files+0x2a/0x420 [ 904.795937][T21524] ? __fget_files+0x3a0/0x420 [ 904.795965][T21524] __x64_sys_sendmsg+0x1bd/0x2a0 [ 904.795989][T21524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 904.796019][T21524] ? __pfx_ksys_write+0x10/0x10 [ 904.796053][T21524] do_syscall_64+0xe2/0xf80 [ 904.796070][T21524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.796086][T21524] ? trace_irq_disable+0x37/0x100 [ 904.796101][T21524] ? clear_bhb_loop+0x60/0xb0 [ 904.796119][T21524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.796135][T21524] RIP: 0033:0x7fabc3b9aeb9 [ 904.796152][T21524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.796167][T21524] RSP: 002b:00007fabc4af1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.796187][T21524] RAX: ffffffffffffffda RBX: 00007fabc3e15fa0 RCX: 00007fabc3b9aeb9 [ 904.796199][T21524] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 904.796211][T21524] RBP: 00007fabc4af1090 R08: 0000000000000000 R09: 0000000000000000 [ 904.796223][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.796234][T21524] R13: 00007fabc3e16038 R14: 00007fabc3e15fa0 R15: 00007fabc3f3fa48 [ 904.796264][T21524] [ 905.660118][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 905.672626][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 905.716494][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 905.733239][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 905.746210][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 906.311607][T11678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.324270][T11678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.336536][T11678] bond0 (unregistering): Released all slaves [ 906.346467][T11678] bond1 (unregistering): Released all slaves [ 906.369046][T11678] bond2 (unregistering): Released all slaves [ 906.382963][T21536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3026'. [ 906.552428][T11678] tipc: Left network mode [ 906.675778][T21537] chnl_net:caif_netlink_parms(): no params data found [ 907.048199][T21537] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.074109][T21537] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.081309][ T5878] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 907.106807][T21537] bridge_slave_0: entered allmulticast mode [ 907.131235][T21537] bridge_slave_0: entered promiscuous mode [ 907.172527][T21537] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.185539][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 907.210925][T21537] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.227032][T21537] bridge_slave_1: entered allmulticast mode [ 907.235570][T21537] bridge_slave_1: entered promiscuous mode [ 907.278228][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 907.298466][ T5878] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 907.321759][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.330707][T21537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.342412][ T5878] usb 6-1: Product: syz [ 907.372481][ T5878] usb 6-1: Manufacturer: syz [ 907.389445][ T5878] usb 6-1: SerialNumber: syz [ 907.400125][T21537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.411735][ T5878] usb 6-1: config 0 descriptor?? [ 907.422649][ T5878] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 907.548779][T21537] team0: Port device team_slave_0 added [ 907.559940][T21537] team0: Port device team_slave_1 added [ 907.646222][T21537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.667230][T21537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.720142][T21537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.775634][T21537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.791486][T21537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.818417][T21537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.824326][T21552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3030'. [ 907.839767][T17460] Bluetooth: hci4: command tx timeout [ 907.847123][ T5893] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 907.879827][T21552] 8021q: VLANs not supported on ip6_vti0 [ 907.906641][ T5878] gspca_m5602: Failed to find a sensor [ 907.912814][ T5878] ALi m5602 6-1:0.0: ALi m5602 webcam failed [ 907.932963][ T5878] usb 6-1: USB disconnect, device number 78 [ 907.986806][T21537] hsr_slave_0: entered promiscuous mode [ 907.993952][T21537] hsr_slave_1: entered promiscuous mode [ 908.001222][T21537] debugfs: 'hsr0' already exists in 'hsr' [ 908.008874][T21537] Cannot create hsr debugfs directory [ 908.020486][ T5893] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.034910][ T5893] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 908.050165][ T5893] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 908.070052][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.090622][ T5893] usb 3-1: config 0 descriptor?? [ 908.468542][T11668] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 908.545326][ T5878] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 908.573743][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3035'. [ 908.670828][T21599] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3036'. [ 908.758650][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.935588][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.953172][ T5878] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 908.963729][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 908.972884][ T5878] usb 5-1: SerialNumber: syz [ 909.002257][T21599] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3036'. [ 909.057246][T21537] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 909.116302][T21537] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 909.181694][T21537] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 909.234634][ T5878] usb 5-1: 0:2 : does not exist [ 909.240138][ T5878] usb 5-1: unit 18 not found! [ 909.257683][T21537] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 909.309476][ T5878] usb 5-1: USB disconnect, device number 104 [ 909.907556][T17460] Bluetooth: hci4: command tx timeout [ 910.061434][T21537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.123311][T21537] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.204970][ T5878] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 910.230435][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.237688][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.304013][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.311216][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.409963][ T5878] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 910.429362][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.505619][T21638] netlink: 177296 bytes leftover after parsing attributes in process `syz.0.3040'. [ 910.538461][ T5878] usb 5-1: Product: syz [ 910.542675][ T5878] usb 5-1: Manufacturer: syz [ 910.561170][ T5878] usb 5-1: SerialNumber: syz [ 910.585347][T12038] usb 3-1: USB disconnect, device number 111 [ 910.797566][T21623] netlink: 652 bytes leftover after parsing attributes in process `syz.4.3039'. [ 910.816007][T21623] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3039'. [ 910.862342][T21537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.935187][T12038] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 911.012822][T21537] veth0_vlan: entered promiscuous mode [ 911.085362][ T5878] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 911.112684][ T5878] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 911.124495][T21537] veth1_vlan: entered promiscuous mode [ 911.127502][T12038] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 911.141005][T12038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.191655][ T5878] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 911.205123][T12038] usb 3-1: Product: syz [ 911.209316][T12038] usb 3-1: Manufacturer: syz [ 911.213915][T12038] usb 3-1: SerialNumber: syz [ 911.229005][ T5878] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 911.251026][T12038] usb 3-1: config 0 descriptor?? [ 911.329478][ T5878] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 911.361274][ T5878] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 911.394409][T21537] veth0_macvtap: entered promiscuous mode [ 911.400816][ T5878] usb 5-1: USB disconnect, device number 105 [ 911.532987][T21537] veth1_macvtap: entered promiscuous mode [ 911.631594][T12038] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 911.722821][T21537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.745060][T21537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.821259][T11680] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.893331][T11680] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.970770][T11680] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.985785][T17460] Bluetooth: hci4: command tx timeout [ 912.009217][T11680] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.307012][T11680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 912.430841][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.441007][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.711474][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3041'. [ 912.744528][T11670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.770584][T11670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.924999][ T24] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 913.110827][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 913.129601][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.160231][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.173059][ T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 913.194945][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.222909][ T24] usb 6-1: config 0 descriptor?? [ 913.302180][T21713] program syz.0.3048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 913.498347][T12038] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 913.517010][T12038] usb 3-1: USB disconnect, device number 112 [ 913.679453][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 913.693777][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 913.944541][ T24] usb 6-1: USB disconnect, device number 79 [ 914.068314][T17460] Bluetooth: hci4: command tx timeout [ 914.266218][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 914.490018][T22638] program syz.4.3050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.503018][T11678] hsr_slave_0: left promiscuous mode [ 915.575107][T11678] hsr_slave_1: left promiscuous mode [ 915.597588][T11678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.635592][T11678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 915.663637][T11678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.701429][T11678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.782799][T11678] veth0_macvtap: left promiscuous mode [ 915.826652][T11678] veth1_vlan: left promiscuous mode [ 915.832026][T11678] veth0_vlan: left promiscuous mode [ 915.915596][T22719] netlink: 'syz.4.3056': attribute type 11 has an invalid length. [ 916.593811][T22732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3060'. [ 917.438527][T11678] team0 (unregistering): Port device team_slave_1 removed [ 917.639082][T11678] team0 (unregistering): Port device team_slave_0 removed [ 918.065945][T11680] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 918.938415][T22732] FAULT_INJECTION: forcing a failure. [ 918.938415][T22732] name failslab, interval 1, probability 0, space 0, times 0 [ 918.965339][T22732] CPU: 0 UID: 0 PID: 22732 Comm: syz.6.3060 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.965359][T22732] Tainted: [L]=SOFTLOCKUP [ 918.965363][T22732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 918.965369][T22732] Call Trace: [ 918.965375][T22732] [ 918.965380][T22732] dump_stack_lvl+0xe8/0x150 [ 918.965399][T22732] should_fail_ex+0x412/0x560 [ 918.965414][T22732] should_failslab+0xa8/0x100 [ 918.965427][T22732] __kvmalloc_node_noprof+0x166/0x8d0 [ 918.965440][T22732] ? alloc_netdev_mqs+0xc89/0x11b0 [ 918.965454][T22732] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 918.965471][T22732] alloc_netdev_mqs+0xc89/0x11b0 [ 918.965497][T22732] rtnl_create_link+0x31f/0xd70 [ 918.965524][T22732] rtnl_newlink_create+0x277/0xb70 [ 918.965549][T22732] ? __mutex_lock+0x5ac/0x1300 [ 918.965568][T22732] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 918.965583][T22732] ? __pfx___mutex_lock+0x10/0x10 [ 918.965598][T22732] ? ns_capable+0x89/0xe0 [ 918.965615][T22732] rtnl_newlink+0x1666/0x1be0 [ 918.965634][T22732] ? __pfx_rtnl_newlink+0x10/0x10 [ 918.965644][T22732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.965672][T22732] ? kasan_quarantine_put+0xbb/0x1f0 [ 918.965687][T22732] ? lockdep_hardirqs_on+0x7a/0x110 [ 918.965700][T22732] ? kmem_cache_free+0x195/0x610 [ 918.965709][T22732] ? nlmon_xmit+0xb0/0x100 [ 918.965724][T22732] ? __lock_acquire+0x6b5/0x2cf0 [ 918.965744][T22732] ? __local_bh_enable_ip+0xd0/0x130 [ 918.965753][T22732] ? lockdep_hardirqs_on+0x7a/0x110 [ 918.965763][T22732] ? __dev_queue_xmit+0x274/0x3850 [ 918.965776][T22732] ? __local_bh_enable_ip+0xd0/0x130 [ 918.965784][T22732] ? __dev_queue_xmit+0x274/0x3850 [ 918.965801][T22732] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 918.965820][T22732] ? __pfx_rtnl_newlink+0x10/0x10 [ 918.965830][T22732] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 918.965843][T22732] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 918.965854][T22732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 918.965864][T22732] ? ref_tracker_free+0x693/0x840 [ 918.965875][T22732] ? __copy_skb_header+0xa3/0x4a0 [ 918.965890][T22732] ? __pfx_ref_tracker_free+0x10/0x10 [ 918.965901][T22732] ? __skb_clone+0x63/0x7a0 [ 918.965918][T22732] netlink_rcv_skb+0x232/0x4b0 [ 918.965930][T22732] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 918.965942][T22732] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 918.965957][T22732] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.965971][T22732] netlink_unicast+0x80f/0x9b0 [ 918.965990][T22732] ? __pfx_netlink_unicast+0x10/0x10 [ 918.966004][T22732] ? __alloc_skb+0x193/0x390 [ 918.966015][T22732] ? netlink_sendmsg+0x650/0xb40 [ 918.966025][T22732] ? skb_put+0x11b/0x210 [ 918.966038][T22732] netlink_sendmsg+0x813/0xb40 [ 918.966053][T22732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.966065][T22732] ? aa_sock_msg_perm+0xf1/0x1b0 [ 918.966079][T22732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 918.966091][T22732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.966100][T22732] ____sys_sendmsg+0xa68/0xad0 [ 918.966113][T22732] ? __might_fault+0xaf/0x130 [ 918.966131][T22732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 918.966148][T22732] ? import_iovec+0x73/0xa0 [ 918.966165][T22732] ___sys_sendmsg+0x2a5/0x360 [ 918.966177][T22732] ? __lock_acquire+0x6b5/0x2cf0 [ 918.966193][T22732] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.966223][T22732] ? __fget_files+0x2a/0x420 [ 918.966240][T22732] ? __fget_files+0x3a0/0x420 [ 918.966261][T22732] __x64_sys_sendmsg+0x1bd/0x2a0 [ 918.966284][T22732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.966314][T22732] ? __pfx_ksys_write+0x10/0x10 [ 918.966341][T22732] do_syscall_64+0xe2/0xf80 [ 918.966352][T22732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.966361][T22732] ? trace_irq_disable+0x37/0x100 [ 918.966371][T22732] ? clear_bhb_loop+0x60/0xb0 [ 918.966383][T22732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.966393][T22732] RIP: 0033:0x7f1b0599aeb9 [ 918.966403][T22732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.966412][T22732] RSP: 002b:00007f1b03bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.966424][T22732] RAX: ffffffffffffffda RBX: 00007f1b05c15fa0 RCX: 00007f1b0599aeb9 [ 918.966431][T22732] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 918.966437][T22732] RBP: 00007f1b03bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 918.966444][T22732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.966449][T22732] R13: 00007f1b05c16038 R14: 00007f1b05c15fa0 R15: 00007f1b05d3fa48 [ 918.966465][T22732] [ 919.786526][T22772] raw_sendmsg: syz.5.3074 forgot to set AF_INET. Fix it! [ 919.815739][T12038] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 919.845235][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 919.986777][T12038] usb 7-1: device descriptor read/64, error -71 [ 919.993612][T11682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 920.024901][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 920.031668][ T24] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 920.040181][ T24] usb 5-1: config 0 has no interface number 0 [ 920.047244][ T24] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 920.187676][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 920.197112][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.206686][ T24] usb 5-1: Product: syz [ 920.210884][ T24] usb 5-1: Manufacturer: syz [ 920.215655][ T24] usb 5-1: SerialNumber: syz [ 920.222240][ T24] usb 5-1: config 0 descriptor?? [ 920.231067][T22763] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 920.244914][T12038] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 920.374971][T12038] usb 7-1: device descriptor read/64, error -71 [ 920.482806][T22763] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 920.493978][T12038] usb usb7-port1: attempt power cycle [ 920.930454][ T24] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 920.941685][ T24] asix 5-1:0.188: probe with driver asix failed with error -61 [ 921.015822][ T10] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 921.074954][T12038] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 921.098336][T22802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3083'. [ 921.108114][T12038] usb 7-1: device descriptor read/8, error -71 [ 921.179012][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 921.189149][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.202795][ T10] usb 6-1: config 0 descriptor?? [ 921.223315][ T10] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 921.243651][T22804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3084'. [ 921.345013][T12038] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 921.365969][T12038] usb 7-1: device descriptor read/8, error -71 [ 921.423225][ T10] gspca_sunplus: reg_w_riv err -71 [ 921.434324][ T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 921.450714][ T10] usb 6-1: USB disconnect, device number 80 [ 921.476587][T12038] usb usb7-port1: unable to enumerate USB device [ 922.004946][ T10] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 922.123560][T22825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3091'. [ 922.173651][ T5893] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 922.191394][ T5893] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 922.199419][ T5893] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 922.207314][ T5893] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 922.215110][ T5893] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 922.528136][T22836] set match dimension is over the limit! [ 922.561802][ T5893] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 922.571850][ T5893] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 922.644907][ T5893] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 922.652414][ T5893] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 922.672026][T22841] futex_wake_op: syz.2.3091 tries to shift op by 144; fix this program [ 922.702506][ T5893] hid-generic 0006:0004:0009.0032: unknown main item tag 0x0 [ 922.741122][T22843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3095'. [ 922.753072][ T5893] hid-generic 0006:0004:0009.0032: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 922.849067][ T5893] usb 5-1: USB disconnect, device number 106 [ 923.089915][T22846] fido_id[22846]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 923.187535][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 923.296186][T22859] program syz.0.3098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.447671][T22861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3100'. [ 923.456758][T22861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3100'. [ 924.035697][T23948] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 924.255175][T22861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3100'. [ 924.554763][T24296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3103'. [ 924.746934][T22861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3100'. [ 925.544967][ T10] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 925.706084][ T10] usb 6-1: device descriptor read/64, error -71 [ 925.746187][T11678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 925.829658][T24457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3108'. [ 926.000926][ T10] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 926.145370][ T10] usb 6-1: device descriptor read/64, error -71 [ 926.245165][ T798] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 926.257117][ T10] usb usb6-port1: attempt power cycle [ 926.293735][T24476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3112'. [ 926.419608][ T798] usb 7-1: config 8 has an invalid interface number: 177 but max is 0 [ 926.439694][ T798] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 926.475155][ T798] usb 7-1: config 8 has no interface number 0 [ 926.501930][ T798] usb 7-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 926.558057][ T798] usb 7-1: config 8 interface 177 has no altsetting 0 [ 926.580483][ T798] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 926.606243][ T798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.615614][ T10] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 926.668500][ T10] usb 6-1: device descriptor read/8, error -71 [ 926.692111][ T798] ir_toy 7-1:8.177: required endpoints not found [ 926.990600][ T10] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 927.015584][ T10] usb 6-1: device descriptor read/8, error -71 [ 927.056400][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 927.127260][ T10] usb usb6-port1: unable to enumerate USB device [ 927.226487][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.237767][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 927.247893][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 927.269154][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 927.288676][ T9] usb 5-1: SerialNumber: syz [ 927.513157][ T9] usb 5-1: 0:2 : does not exist [ 927.519550][ T9] usb 5-1: unit 5 not found! [ 927.551356][ T9] usb 5-1: USB disconnect, device number 107 [ 927.604156][T11767] udevd[11767]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.305738][T11678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 928.414953][ T798] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 928.598124][ T798] usb 5-1: Using ep0 maxpacket: 32 [ 928.610043][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.630990][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.658760][ T798] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 928.678330][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.700144][ T798] usb 5-1: config 0 descriptor?? [ 928.766704][T24521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3120'. [ 928.778014][T24521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3120'. [ 928.796705][T24521] vlan2: entered promiscuous mode [ 928.801810][T24521] erspan0: entered promiscuous mode [ 928.947024][ T10] usb 7-1: USB disconnect, device number 6 [ 929.008815][T24526] libceph: resolve '40' (ret=-3): failed [ 929.155231][ T798] savu 0003:1E7D:2D5A.0033: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 929.478159][T24539] program syz.5.3125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.613901][T24545] syzkaller0: entered promiscuous mode [ 929.620034][T24545] syzkaller0: entered allmulticast mode [ 929.842588][T24551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3129'. [ 929.851605][T24551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3129'. [ 929.862109][T24551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3129'. [ 929.871088][T24551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3129'. [ 929.884025][T24551] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 929.912708][ T10] usb 5-1: USB disconnect, device number 108 [ 930.193790][T24553] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3131'. [ 930.233349][T24553] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3131'. [ 930.283413][T24553] vlan2: entered promiscuous mode [ 930.295013][T24553] erspan0: entered promiscuous mode [ 930.636394][T24563] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3133'. [ 930.785405][T11678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 930.956106][T24569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3134'. [ 931.109225][T24575] program syz.5.3137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 931.517157][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.523491][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.766447][ T798] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 931.964945][ T798] usb 6-1: Using ep0 maxpacket: 32 [ 931.971614][ T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.984926][ T798] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 931.995018][ T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.065575][ T798] usb 6-1: config 0 descriptor?? [ 932.269533][T24586] binder: BINDER_SET_CONTEXT_MGR already set [ 932.275724][T24586] binder: 24585:24586 ioctl 4018620d 200000000040 returned -16 [ 932.553419][ T798] magicmouse 0003:05AC:0265.0034: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0 [ 932.750838][ T9] usb 6-1: USB disconnect, device number 85 [ 932.904978][ T798] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 933.059129][ T798] usb 3-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 933.081220][ T798] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.094181][ T798] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.104617][ T798] usb 3-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 933.119250][ T798] usb 3-1: config 0 interface 0 has no altsetting 0 [ 933.128007][ T798] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 933.137188][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.150650][ T798] usb 3-1: config 0 descriptor?? [ 933.460545][T24615] program syz.6.3148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 933.545291][T24618] dns_resolver: Unsupported server list version (0) [ 933.854993][T12038] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 934.024908][T12038] usb 7-1: Using ep0 maxpacket: 16 [ 934.038692][T12038] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 934.052965][T12038] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 934.066449][T11682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 934.081686][T12038] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 934.102196][T12038] usb 7-1: config 8 has no interface number 0 [ 934.112684][T12038] usb 7-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 934.127423][T12038] usb 7-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 934.142170][T12038] usb 7-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.166180][T12038] usb 7-1: config 8 interface 223 has no altsetting 0 [ 934.190259][T12038] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 934.206194][T12038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.214451][T12038] usb 7-1: Product: syz [ 934.220567][T12038] usb 7-1: Manufacturer: syz [ 934.226301][T12038] usb 7-1: SerialNumber: syz [ 934.255048][T24618] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 935.728174][ T798] usbhid 3-1:0.0: can't add hid device: -71 [ 935.734474][ T798] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 935.788101][ T798] usb 3-1: USB disconnect, device number 114 [ 935.883712][T24635] __nla_validate_parse: 3 callbacks suppressed [ 935.883726][T24635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3153'. [ 935.901369][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3153'. [ 935.911114][T11682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 935.939422][T24635] vlan2: entered promiscuous mode [ 937.035043][T12038] usb 7-1: USB disconnect, device number 7 [ 937.084909][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 937.266684][T24654] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3158'. [ 937.306924][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 937.355314][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 937.393622][ T9] usb 3-1: config 0 has no interface number 0 [ 937.411857][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 937.441832][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.494690][ T9] usb 3-1: Product: syz [ 937.515191][ T9] usb 3-1: Manufacturer: syz [ 937.542977][ T9] usb 3-1: SerialNumber: syz [ 937.598583][ T9] usb 3-1: config 0 descriptor?? [ 937.636565][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 937.833056][ T10] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 938.088332][ T10] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 938.108415][ T10] usb 5-1: config 7 has no interface number 0 [ 938.151928][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 938.162259][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.184980][ T10] usb 5-1: Product: syz [ 938.198982][ T10] usb 5-1: Manufacturer: syz [ 938.216314][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 938.229740][ T10] usb 5-1: SerialNumber: syz [ 938.447519][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 938.558264][T24669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.586140][T24669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.273635][ T10] as10x_usb: device has been detected [ 939.294669][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 939.298236][T24679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3166'. [ 939.369986][T24679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3166'. [ 939.380158][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 939.391917][T24679] vlan2: entered promiscuous mode [ 939.397652][T24679] erspan0: entered promiscuous mode [ 939.500471][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3165'. [ 939.509911][T24684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3165'. [ 939.557252][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3165'. [ 939.568050][T24684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3165'. [ 939.653540][T24685] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 939.787618][ T10] as10x_usb: error during firmware upload part1 [ 939.795341][ T10] Registered device Elgato EyeTV DTT Deluxe [ 939.797520][ T10] usb 5-1: USB disconnect, device number 109 [ 939.827071][T11682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 939.870497][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 939.871037][T12038] usb 3-1: USB disconnect, device number 115 [ 939.894783][T12038] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 939.928331][T12038] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 939.961298][T12038] quatech2 3-1:0.51: device disconnected [ 940.017153][ T10] Unregistered device Elgato EyeTV DTT Deluxe [ 940.026817][ T10] as10x_usb: device has been disconnected [ 940.260465][T24698] program syz.2.3169 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.295956][ T30] audit: type=1326 audit(1769516183.234:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24717 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321ff9aeb9 code=0x7ffc0000 [ 941.357822][ T30] audit: type=1326 audit(1769516183.234:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24717 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321ff9aeb9 code=0x7ffc0000 [ 941.462126][ T30] audit: type=1326 audit(1769516183.254:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24717 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f321ff9aeb9 code=0x7ffc0000 [ 941.563713][ T30] audit: type=1326 audit(1769516183.254:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24717 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321ff9aeb9 code=0x7ffc0000 [ 941.662747][ T30] audit: type=1326 audit(1769516183.254:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24717 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321ff9aeb9 code=0x7ffc0000 [ 941.748403][T11685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 941.772279][ T30] audit: type=1326 audit(1769516183.254:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24717 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f321ff9aeb9 code=0x7ffc0000 [ 941.840681][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 941.874937][ T30] audit: type=1326 audit(1769516183.264:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24717 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321ff9aeb9 code=0x7ffc0000 [ 941.892815][T24730] binder: BINDER_SET_CONTEXT_MGR already set [ 941.940729][T24730] binder: 24728:24730 ioctl 4018620d 200000000040 returned -16 [ 941.949642][T24732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3178'. [ 941.992213][ T30] audit: type=1326 audit(1769516183.264:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24717 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321ff9aeb9 code=0x7ffc0000 [ 941.998667][T24730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3177'. [ 942.024318][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 942.055231][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 942.059340][ T30] audit: type=1326 audit(1769516183.274:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24717 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f321ff9aeb9 code=0x7ffc0000 [ 942.064553][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.117642][T24733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3177'. [ 942.164889][ T30] audit: type=1326 audit(1769516183.274:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24717 comm="syz.4.3173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321ff9aeb9 code=0x7ffc0000 [ 942.209833][ T10] usb 7-1: Product: syz [ 942.220697][ T10] usb 7-1: Manufacturer: syz [ 942.234910][ T10] usb 7-1: SerialNumber: syz [ 942.260681][ T10] usb 7-1: config 0 descriptor?? [ 942.500120][ T10] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 942.614957][T12038] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 942.767801][T12038] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 942.777269][T12038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.790885][T12038] usb 5-1: config 0 descriptor?? [ 942.807067][T12038] cp210x 5-1:0.0: cp210x converter detected [ 943.210663][T12038] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 943.320105][T24759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'. [ 943.329377][T24759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'. [ 943.340184][T24759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3186'. [ 943.349828][T24759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'. [ 943.362833][T24759] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 943.443431][T12038] usb 5-1: cp210x converter now attached to ttyUSB0 [ 943.605710][ T5893] usb 5-1: USB disconnect, device number 110 [ 943.706673][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 943.729774][ T5893] cp210x 5-1:0.0: device disconnected [ 943.998064][ T10] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 944.019187][ T10] usb 7-1: USB disconnect, device number 8 [ 944.492308][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'. [ 944.519314][T24766] netlink: 'syz.2.3189': attribute type 5 has an invalid length. [ 944.534566][T24766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3189'. [ 944.654288][T24768] binder: BINDER_SET_CONTEXT_MGR already set [ 944.660632][T24768] binder: 24767:24768 ioctl 4018620d 200000000040 returned -16 [ 944.685903][T24768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3190'. [ 944.734905][ T10] usb 6-1: new low-speed USB device number 86 using dummy_hcd [ 944.784371][T24778] FAULT_INJECTION: forcing a failure. [ 944.784371][T24778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.821951][T24779] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 944.908727][T24778] CPU: 0 UID: 0 PID: 24778 Comm: syz.2.3194 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.908757][T24778] Tainted: [L]=SOFTLOCKUP [ 944.908764][T24778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 944.908775][T24778] Call Trace: [ 944.908783][T24778] [ 944.908792][T24778] dump_stack_lvl+0xe8/0x150 [ 944.908819][T24778] should_fail_ex+0x412/0x560 [ 944.908845][T24778] _copy_from_user+0x2d/0xb0 [ 944.908869][T24778] ___sys_recvmsg+0x175/0x590 [ 944.908897][T24778] ? __pfx____sys_recvmsg+0x10/0x10 [ 944.908923][T24778] ? __fget_files+0x2a/0x420 [ 944.908969][T24778] do_recvmmsg+0x334/0x800 [ 944.908998][T24778] ? __pfx_do_recvmmsg+0x10/0x10 [ 944.909030][T24778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 944.909065][T24778] __x64_sys_recvmmsg+0x198/0x250 [ 944.909089][T24778] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 944.909121][T24778] do_syscall_64+0xe2/0xf80 [ 944.909139][T24778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.909155][T24778] ? trace_irq_disable+0x37/0x100 [ 944.909172][T24778] ? clear_bhb_loop+0x60/0xb0 [ 944.909192][T24778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.909209][T24778] RIP: 0033:0x7fdf5e99aeb9 [ 944.909226][T24778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.909240][T24778] RSP: 002b:00007fdf5f7ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 944.909259][T24778] RAX: ffffffffffffffda RBX: 00007fdf5ec15fa0 RCX: 00007fdf5e99aeb9 [ 944.909272][T24778] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 944.909284][T24778] RBP: 00007fdf5f7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 944.909295][T24778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.909306][T24778] R13: 00007fdf5ec16038 R14: 00007fdf5ec15fa0 R15: 00007fdf5ed3fa48 [ 944.909335][T24778] [ 945.111242][T11670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 945.132928][ T10] usb 6-1: too many configurations: 224, using maximum allowed: 8 [ 945.150480][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 945.158119][ T10] usb 6-1: can't read configurations, error -61 [ 945.284911][ T10] usb 6-1: new low-speed USB device number 87 using dummy_hcd [ 945.356133][T12038] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 945.435601][ T10] usb 6-1: too many configurations: 224, using maximum allowed: 8 [ 945.446202][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 945.455061][ T10] usb 6-1: can't read configurations, error -61 [ 945.495490][ T10] usb usb6-port1: attempt power cycle [ 945.568113][T12038] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 945.581410][T12038] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 945.609574][T12038] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 945.623046][T12038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 945.631196][ T5878] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 945.647060][T12038] usb 5-1: SerialNumber: syz [ 945.806966][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 945.826199][ T5878] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 945.843417][ T5878] usb 3-1: config 0 has no interface number 0 [ 945.874933][ T10] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 945.939789][T24791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 946.028922][ T5878] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 946.055842][T12038] usb 5-1: 0:2 : does not exist [ 946.069374][T12038] usb 5-1: unit 5 not found! [ 946.076937][ T10] usb 6-1: too many configurations: 224, using maximum allowed: 8 [ 946.096404][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 946.294881][ T5878] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 946.316814][ T10] usb 6-1: can't read configurations, error -61 [ 946.355275][T12038] usb 5-1: USB disconnect, device number 111 [ 946.421680][ T5878] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 946.425604][T11767] udevd[11767]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 946.484979][ T10] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 946.541235][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.560919][ T10] usb 6-1: too many configurations: 224, using maximum allowed: 8 [ 946.564987][ T5878] usb 3-1: Product: syz [ 946.580122][ T10] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 946.594299][ T10] usb 6-1: can't read configurations, error -61 [ 946.610915][ T5878] usb 3-1: Manufacturer: syz [ 946.625836][ T5878] usb 3-1: SerialNumber: syz [ 946.643564][ T10] usb usb6-port1: unable to enumerate USB device [ 946.695498][ T5878] usb 3-1: config 0 descriptor?? [ 946.740725][ T5878] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 946.893076][T24798] dns_resolver: Unsupported server list version (0) [ 946.963207][ T5878] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 946.970381][ T5878] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 947.272509][ T5893] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 947.518272][ T5893] usb 7-1: Using ep0 maxpacket: 16 [ 947.529482][ T5893] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 947.538125][ T5893] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 947.554085][ T5893] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 947.568362][ T5893] usb 7-1: config 8 has no interface number 0 [ 947.574672][ T5893] usb 7-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 947.598699][ T5893] usb 7-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 947.614317][ T5893] usb 7-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.633151][ T5893] usb 7-1: config 8 interface 223 has no altsetting 0 [ 947.650592][ T5893] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 947.660247][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.672705][ T5893] usb 7-1: Product: syz [ 947.677185][ T5893] usb 7-1: Manufacturer: syz [ 947.681918][ T5893] usb 7-1: SerialNumber: syz [ 947.690387][T24798] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 948.797602][T12038] usb 3-1: USB disconnect, device number 116 [ 948.952912][T24814] __nla_validate_parse: 5 callbacks suppressed [ 948.952930][T24814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3203'. [ 948.970615][T24814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3203'. [ 949.088454][T24814] vlan2: entered promiscuous mode [ 949.835951][ T9] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 949.966569][T24839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3211'. [ 950.005704][ T9] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 950.031108][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.045022][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.071968][ T5893] usb 7-1: USB disconnect, device number 9 [ 950.120642][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 950.144156][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.176759][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.232355][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 950.254464][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.279896][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.306637][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 950.325516][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.359344][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.382217][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 950.400882][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.414616][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.455055][T12038] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 950.462356][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 950.474371][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.484707][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.503239][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 950.512400][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.522457][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.533802][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 950.544750][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 950.559558][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 950.571117][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 950.580212][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 950.587644][T24851] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3215'. [ 950.591551][ T9] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 950.607135][ T9] usb 3-1: Product: syz [ 950.611396][ T9] usb 3-1: Manufacturer: syz [ 950.618613][ T9] usb 3-1: SerialNumber: syz [ 950.629213][ T9] usb 3-1: config 0 descriptor?? [ 950.633894][T24851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3215'. [ 950.664605][ T9] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 950.670914][T24851] vlan2: entered promiscuous mode [ 950.677003][T12038] usb 6-1: Using ep0 maxpacket: 16 [ 950.692442][T12038] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.741325][T12038] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 950.795502][T12038] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 950.814885][T12038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.824053][T12038] usb 6-1: Product: syz [ 950.851411][T12038] usb 6-1: Manufacturer: syz [ 950.868153][T12038] usb 6-1: SerialNumber: syz [ 950.892509][T12038] r8152-cfgselector 6-1: Unknown version 0x0000 [ 950.898830][T12038] r8152-cfgselector 6-1: config 0 descriptor?? [ 950.934232][ T10] usb 3-1: USB disconnect, device number 117 [ 950.974964][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 951.170310][T24857] Cannot find add_set index 0 as target [ 951.178679][T24857] x_tables: duplicate underflow at hook 1 [ 951.346900][T11685] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 952.224936][T12038] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 952.548945][T12038] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 952.560865][T12038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.571660][T12038] usb 5-1: Product: syz [ 952.578067][T24893] FAULT_INJECTION: forcing a failure. [ 952.578067][T24893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.591430][T12038] usb 5-1: Manufacturer: syz [ 952.596116][T12038] usb 5-1: SerialNumber: syz [ 952.602139][T24893] CPU: 1 UID: 0 PID: 24893 Comm: syz.2.3230 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.602165][T24893] Tainted: [L]=SOFTLOCKUP [ 952.602172][T24893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 952.602182][T24893] Call Trace: [ 952.602189][T24893] [ 952.602196][T24893] dump_stack_lvl+0xe8/0x150 [ 952.602222][T24893] should_fail_ex+0x412/0x560 [ 952.602245][T24893] _copy_to_user+0x31/0xb0 [ 952.602270][T24893] simple_read_from_buffer+0xe1/0x170 [ 952.602284][T24893] proc_fail_nth_read+0x1bb/0x230 [ 952.602301][T24893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 952.602317][T24893] ? rw_verify_area+0x2a6/0x4d0 [ 952.602330][T24893] ? tun_chr_write_iter+0x18a/0x200 [ 952.602344][T24893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 952.602366][T24893] vfs_read+0x20c/0xa70 [ 952.602386][T24893] ? fdget_pos+0x246/0x320 [ 952.602407][T24893] ? __pfx___mutex_lock+0x10/0x10 [ 952.602425][T24893] ? __pfx_vfs_read+0x10/0x10 [ 952.602447][T24893] ? __fget_files+0x2a/0x420 [ 952.602469][T24893] ? __fget_files+0x3a0/0x420 [ 952.602479][T24893] ? __fget_files+0x2a/0x420 [ 952.602493][T24893] ksys_read+0x150/0x270 [ 952.602508][T24893] ? __pfx_ksys_read+0x10/0x10 [ 952.602527][T24893] do_syscall_64+0xe2/0xf80 [ 952.602538][T24893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.602547][T24893] ? trace_irq_disable+0x37/0x100 [ 952.602557][T24893] ? clear_bhb_loop+0x60/0xb0 [ 952.602571][T24893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.602581][T24893] RIP: 0033:0x7fdf5e95b78e [ 952.602591][T24893] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 952.602600][T24893] RSP: 002b:00007fdf5f7abfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 952.602612][T24893] RAX: ffffffffffffffda RBX: 00007fdf5f7ac6c0 RCX: 00007fdf5e95b78e [ 952.602619][T24893] RDX: 000000000000000f RSI: 00007fdf5f7ac0a0 RDI: 0000000000000005 [ 952.602626][T24893] RBP: 00007fdf5f7ac090 R08: 0000000000000000 R09: 0000000000000000 [ 952.602632][T24893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.602638][T24893] R13: 00007fdf5ec16038 R14: 00007fdf5ec15fa0 R15: 00007fdf5ed3fa48 [ 952.602653][T24893] [ 952.826480][T12038] usb 5-1: config 0 descriptor?? [ 952.834255][T12038] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 952.843086][T12038] usb 5-1: Detected FT4232HP [ 953.049944][T12038] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 953.079917][T12038] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 953.094439][T24901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3233'. [ 953.212524][ T9] r8152-cfgselector 6-1: USB disconnect, device number 90 [ 953.319492][T12038] usb 5-1: USB disconnect, device number 112 [ 953.375187][T12038] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 953.399818][T12038] ftdi_sio 5-1:0.0: device disconnected [ 954.873511][T24908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.905865][T24908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.301929][T24946] FAULT_INJECTION: forcing a failure. [ 955.301929][T24946] name failslab, interval 1, probability 0, space 0, times 0 [ 955.365539][T24946] CPU: 0 UID: 0 PID: 24946 Comm: syz.6.3241 Tainted: G L syzkaller #0 PREEMPT(full) [ 955.365569][T24946] Tainted: [L]=SOFTLOCKUP [ 955.365576][T24946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 955.365587][T24946] Call Trace: [ 955.365595][T24946] [ 955.365604][T24946] dump_stack_lvl+0xe8/0x150 [ 955.365630][T24946] should_fail_ex+0x412/0x560 [ 955.365656][T24946] should_failslab+0xa8/0x100 [ 955.365677][T24946] __kmalloc_noprof+0xde/0x7e0 [ 955.365694][T24946] ? tomoyo_encode+0x28b/0x550 [ 955.365721][T24946] tomoyo_encode+0x28b/0x550 [ 955.365747][T24946] tomoyo_realpath_from_path+0x58d/0x5d0 [ 955.365778][T24946] ? tomoyo_path_number_perm+0x219/0x630 [ 955.365797][T24946] tomoyo_path_number_perm+0x246/0x630 [ 955.365819][T24946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 955.365837][T24946] ? __lock_acquire+0x6b5/0x2cf0 [ 955.365874][T24946] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 955.365914][T24946] ? __fget_files+0x2a/0x420 [ 955.365936][T24946] ? __fget_files+0x2a/0x420 [ 955.365953][T24946] ? __fget_files+0x3a0/0x420 [ 955.365970][T24946] ? __fget_files+0x2a/0x420 [ 955.365992][T24946] security_file_ioctl+0xc3/0x2a0 [ 955.366012][T24946] __se_sys_ioctl+0x47/0x170 [ 955.366038][T24946] do_syscall_64+0xe2/0xf80 [ 955.366056][T24946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.366073][T24946] ? trace_irq_disable+0x37/0x100 [ 955.366089][T24946] ? clear_bhb_loop+0x60/0xb0 [ 955.366110][T24946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.366127][T24946] RIP: 0033:0x7f1b0599aeb9 [ 955.366144][T24946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.366159][T24946] RSP: 002b:00007f1b03bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 955.366179][T24946] RAX: ffffffffffffffda RBX: 00007f1b05c15fa0 RCX: 00007f1b0599aeb9 [ 955.366192][T24946] RDX: 0000200000000180 RSI: 0000000040045731 RDI: 0000000000000003 [ 955.366204][T24946] RBP: 00007f1b03bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 955.366216][T24946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.366227][T24946] R13: 00007f1b05c16038 R14: 00007f1b05c15fa0 R15: 00007f1b05d3fa48 [ 955.366257][T24946] [ 955.366286][T24946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 955.803513][T24957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3243'. [ 955.812878][T24957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3243'. [ 955.943291][T24959] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 955.997018][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.021255][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.080137][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.085520][T24957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3243'. [ 956.098192][T24957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3243'. [ 956.224386][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.254972][ T49] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 956.444884][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 956.451688][ T49] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.465580][ T1343] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 956.476864][ T49] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 956.497868][ T49] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 956.515177][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.557065][ T49] usb 7-1: Product: syz [ 956.561555][ T49] usb 7-1: Manufacturer: syz [ 956.566176][ T49] usb 7-1: SerialNumber: syz [ 956.574970][ T49] r8152-cfgselector 7-1: Unknown version 0x0000 [ 956.581242][ T49] r8152-cfgselector 7-1: config 0 descriptor?? [ 956.965030][ T49] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 957.146529][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 957.153942][ T49] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 957.162380][ T49] usb 6-1: config 0 has no interface number 0 [ 957.168691][ T49] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 957.183708][ T49] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 957.200468][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.208683][ T49] usb 6-1: Product: syz [ 957.212968][ T49] usb 6-1: Manufacturer: syz [ 957.217808][ T49] usb 6-1: SerialNumber: syz [ 957.237469][ T49] usb 6-1: config 0 descriptor?? [ 957.252174][ T49] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 957.262300][ T49] em28xx 6-1:0.132: Video interface 132 found: [ 957.361569][T24975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3251'. [ 957.448797][T24963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.464754][T24963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.677192][ T49] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 958.050720][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3254'. [ 958.093832][ T49] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 958.108409][ T49] em28xx 6-1:0.132: board has no eeprom [ 958.200117][ T49] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 958.234525][ T49] em28xx 6-1:0.132: analog set to bulk mode. [ 958.247855][ T798] em28xx 6-1:0.132: Registering V4L2 extension [ 958.320243][T24918] usb 6-1: USB disconnect, device number 91 [ 958.332429][T24918] em28xx 6-1:0.132: Disconnecting em28xx [ 958.349324][T24991] program syz.4.3255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 958.426928][ T798] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 958.437164][ T798] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 958.447917][ T798] em28xx 6-1:0.132: No AC97 audio processor [ 958.481618][ T798] usb 6-1: Decoder not found [ 958.519277][ T798] em28xx 6-1:0.132: failed to create media graph [ 958.537903][ T798] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 958.554210][T24996] ================================================================== [ 958.562291][T24996] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 958.569651][T24996] Read of size 8 at addr ffff888033dc8740 by task v4l_id/24996 [ 958.577176][T24996] [ 958.579495][T24996] CPU: 0 UID: 0 PID: 24996 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 958.579512][T24996] Tainted: [L]=SOFTLOCKUP [ 958.579516][T24996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 958.579522][T24996] Call Trace: [ 958.579528][T24996] [ 958.579533][T24996] dump_stack_lvl+0xe8/0x150 [ 958.579550][T24996] print_report+0xba/0x230 [ 958.579561][T24996] ? v4l2_fh_open+0xac/0x420 [ 958.579573][T24996] kasan_report+0x117/0x150 [ 958.579585][T24996] ? v4l2_fh_open+0xac/0x420 [ 958.579597][T24996] v4l2_fh_open+0xac/0x420 [ 958.579608][T24996] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 958.579621][T24996] em28xx_v4l2_open+0x157/0x9a0 [ 958.579636][T24996] ? do_raw_spin_lock+0x12b/0x2f0 [ 958.579649][T24996] v4l2_open+0x1bf/0x3a0 [ 958.579662][T24996] chrdev_open+0x4cd/0x5e0 [ 958.579672][T24996] ? __pfx_chrdev_open+0x10/0x10 [ 958.579681][T24996] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 958.579695][T24996] ? __pfx_chrdev_open+0x10/0x10 [ 958.579704][T24996] do_dentry_open+0x7ce/0x1420 [ 958.579718][T24996] vfs_open+0x3b/0x340 [ 958.579728][T24996] ? path_openat+0x346e/0x3e20 [ 958.579742][T24996] path_openat+0x3486/0x3e20 [ 958.579760][T24996] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 958.579775][T24996] ? getname_flags+0xb7/0x540 [ 958.579785][T24996] ? __pfx_path_openat+0x10/0x10 [ 958.579798][T24996] ? __lock_acquire+0x6b5/0x2cf0 [ 958.579814][T24996] do_filp_open+0x22d/0x490 [ 958.579827][T24996] ? __pfx_do_filp_open+0x10/0x10 [ 958.579845][T24996] ? _raw_spin_unlock+0x28/0x50 [ 958.579859][T24996] ? alloc_fd+0x64b/0x6c0 [ 958.579871][T24996] do_sys_openat2+0x12f/0x220 [ 958.579882][T24996] ? __pfx_do_sys_openat2+0x10/0x10 [ 958.579894][T24996] ? exc_page_fault+0x6a/0xc0 [ 958.579904][T24996] ? do_user_addr_fault+0xc7c/0x1360 [ 958.579920][T24996] __x64_sys_openat+0x138/0x170 [ 958.579932][T24996] do_syscall_64+0xe2/0xf80 [ 958.579942][T24996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.579951][T24996] ? trace_irq_disable+0x37/0x100 [ 958.579961][T24996] ? clear_bhb_loop+0x60/0xb0 [ 958.579972][T24996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.579982][T24996] RIP: 0033:0x7feb9a0a7407 [ 958.579993][T24996] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 958.580001][T24996] RSP: 002b:00007ffe57accf40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 958.580013][T24996] RAX: ffffffffffffffda RBX: 00007feb9a763880 RCX: 00007feb9a0a7407 [ 958.580021][T24996] RDX: 0000000000000000 RSI: 00007ffe57acef1b RDI: ffffffffffffff9c [ 958.580028][T24996] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 958.580034][T24996] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 958.580040][T24996] R13: 00007ffe57acd190 R14: 00007feb9a8ca000 R15: 0000562ea26504d8 [ 958.580051][T24996] [ 958.580055][T24996] [ 958.863511][T24996] Allocated by task 798: [ 958.867736][T24996] kasan_save_track+0x3e/0x80 [ 958.872399][T24996] __kasan_kmalloc+0x93/0xb0 [ 958.876971][T24996] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 958.882330][T24996] em28xx_v4l2_init+0x10b/0x2e70 [ 958.887266][T24996] em28xx_init_extension+0x120/0x1c0 [ 958.892541][T24996] process_scheduled_works+0xaec/0x17a0 [ 958.898074][T24996] worker_thread+0xda6/0x1360 [ 958.902737][T24996] kthread+0x726/0x8b0 [ 958.906789][T24996] ret_from_fork+0x51b/0xa40 [ 958.911364][T24996] ret_from_fork_asm+0x1a/0x30 [ 958.916115][T24996] [ 958.918423][T24996] Freed by task 798: [ 958.922292][T24996] kasan_save_track+0x3e/0x80 [ 958.926955][T24996] kasan_save_free_info+0x46/0x50 [ 958.931977][T24996] __kasan_slab_free+0x5c/0x80 [ 958.936756][T24996] kfree+0x1be/0x650 [ 958.940670][T24996] em28xx_v4l2_init+0x1683/0x2e70 [ 958.945711][T24996] em28xx_init_extension+0x120/0x1c0 [ 958.951012][T24996] process_scheduled_works+0xaec/0x17a0 [ 958.956583][T24996] worker_thread+0xda6/0x1360 [ 958.961273][T24996] kthread+0x726/0x8b0 [ 958.965327][T24996] ret_from_fork+0x51b/0xa40 [ 958.969900][T24996] ret_from_fork_asm+0x1a/0x30 [ 958.974640][T24996] [ 958.976939][T24996] The buggy address belongs to the object at ffff888033dc8000 [ 958.976939][T24996] which belongs to the cache kmalloc-8k of size 8192 [ 958.990965][T24996] The buggy address is located 1856 bytes inside of [ 958.990965][T24996] freed 8192-byte region [ffff888033dc8000, ffff888033dca000) [ 959.004921][T24996] [ 959.007240][T24996] The buggy address belongs to the physical page: [ 959.013635][T24996] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33dc8 [ 959.022375][T24996] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 959.030853][T24996] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 959.038723][T24996] page_type: f5(slab) [ 959.042689][T24996] raw: 00fff00000000040 ffff88813fe27280 ffffea0001621000 dead000000000003 [ 959.051248][T24996] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 959.059807][T24996] head: 00fff00000000040 ffff88813fe27280 ffffea0001621000 dead000000000003 [ 959.068449][T24996] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 959.077093][T24996] head: 00fff00000000003 ffffea0000cf7201 00000000ffffffff 00000000ffffffff [ 959.085738][T24996] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 959.094393][T24996] page dumped because: kasan: bad access detected [ 959.100788][T24996] page_owner tracks the page as allocated [ 959.106481][T24996] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5478, tgid 5478 (rcS), ts 41346668031, free_ts 41253362960 [ 959.126256][T24996] post_alloc_hook+0x228/0x280 [ 959.131006][T24996] get_page_from_freelist+0x24dc/0x2580 [ 959.136533][T24996] __alloc_frozen_pages_noprof+0x18d/0x380 [ 959.142322][T24996] alloc_pages_mpol+0x232/0x4a0 [ 959.147147][T24996] allocate_slab+0x86/0x3a0 [ 959.151627][T24996] ___slab_alloc+0xd82/0x1760 [ 959.156283][T24996] __slab_alloc+0x65/0x100 [ 959.160684][T24996] __kmalloc_cache_noprof+0x40d/0x6e0 [ 959.166029][T24996] tomoyo_init_log+0x112e/0x1fb0 [ 959.170943][T24996] tomoyo_supervisor+0x353/0x1570 [ 959.175946][T24996] tomoyo_env_perm+0x151/0x1f0 [ 959.180696][T24996] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 959.186317][T24996] tomoyo_bprm_check_security+0x11b/0x180 [ 959.192031][T24996] security_bprm_check+0x85/0x240 [ 959.197042][T24996] bprm_execve+0x896/0x1410 [ 959.201524][T24996] do_execveat_common+0x50f/0x690 [ 959.206523][T24996] page last free pid 5476 tgid 5476 stack trace: [ 959.212836][T24996] __free_frozen_pages+0xbf8/0xd70 [ 959.217938][T24996] __slab_free+0x2ce/0x320 [ 959.222344][T24996] qlist_free_all+0x97/0x100 [ 959.226924][T24996] kasan_quarantine_reduce+0x148/0x160 [ 959.232363][T24996] __kasan_slab_alloc+0x22/0x80 [ 959.237186][T24996] __kmalloc_noprof+0x3c2/0x7e0 [ 959.242010][T24996] tomoyo_realpath_from_path+0xe3/0x5d0 [ 959.247532][T24996] tomoyo_path_perm+0x283/0x560 [ 959.252354][T24996] security_inode_getattr+0x12b/0x310 [ 959.257703][T24996] __x64_sys_newfstat+0x13b/0x270 [ 959.262704][T24996] do_syscall_64+0xe2/0xf80 [ 959.267189][T24996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.273076][T24996] [ 959.275383][T24996] Memory state around the buggy address: [ 959.280990][T24996] ffff888033dc8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 959.289024][T24996] ffff888033dc8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 959.297066][T24996] >ffff888033dc8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 959.305098][T24996] ^ [ 959.311226][T24996] ffff888033dc8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 959.319262][T24996] ffff888033dc8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 959.327297][T24996] ================================================================== [ 959.339133][ T798] em28xx 6-1:0.132: Remote control support is not available for this card. [ 959.359172][T24918] em28xx 6-1:0.132: Closing input extension [ 959.481662][T24925] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 959.505342][T24996] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 959.512582][T24996] CPU: 0 UID: 0 PID: 24996 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 959.523159][T24996] Tainted: [L]=SOFTLOCKUP [ 959.527466][T24996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 959.537510][T24996] Call Trace: [ 959.540779][T24996] [ 959.543698][T24996] vpanic+0x1e0/0x670 [ 959.547669][T24996] panic+0xc5/0xd0 [ 959.551384][T24996] ? __pfx_panic+0x10/0x10 [ 959.555789][T24996] ? preempt_schedule_common+0x82/0xd0 [ 959.561249][T24996] ? v4l2_fh_open+0xac/0x420 [ 959.565831][T24996] check_panic_on_warn+0x89/0xb0 [ 959.570774][T24996] ? v4l2_fh_open+0xac/0x420 [ 959.575357][T24996] end_report+0x6f/0x140 [ 959.579592][T24996] kasan_report+0x128/0x150 [ 959.584081][T24996] ? v4l2_fh_open+0xac/0x420 [ 959.588659][T24996] v4l2_fh_open+0xac/0x420 [ 959.593063][T24996] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 959.599035][T24996] em28xx_v4l2_open+0x157/0x9a0 [ 959.603879][T24996] ? do_raw_spin_lock+0x12b/0x2f0 [ 959.608890][T24996] v4l2_open+0x1bf/0x3a0 [ 959.613131][T24996] chrdev_open+0x4cd/0x5e0 [ 959.617529][T24996] ? __pfx_chrdev_open+0x10/0x10 [ 959.622451][T24996] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 959.628763][T24996] ? __pfx_chrdev_open+0x10/0x10 [ 959.633685][T24996] do_dentry_open+0x7ce/0x1420 [ 959.638453][T24996] vfs_open+0x3b/0x340 [ 959.642514][T24996] ? path_openat+0x346e/0x3e20 [ 959.647267][T24996] path_openat+0x3486/0x3e20 [ 959.651858][T24996] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 959.657480][T24996] ? getname_flags+0xb7/0x540 [ 959.662141][T24996] ? __pfx_path_openat+0x10/0x10 [ 959.667064][T24996] ? __lock_acquire+0x6b5/0x2cf0 [ 959.671992][T24996] do_filp_open+0x22d/0x490 [ 959.676494][T24996] ? __pfx_do_filp_open+0x10/0x10 [ 959.681514][T24996] ? _raw_spin_unlock+0x28/0x50 [ 959.686351][T24996] ? alloc_fd+0x64b/0x6c0 [ 959.690668][T24996] do_sys_openat2+0x12f/0x220 [ 959.695332][T24996] ? __pfx_do_sys_openat2+0x10/0x10 [ 959.700525][T24996] ? exc_page_fault+0x6a/0xc0 [ 959.705188][T24996] ? do_user_addr_fault+0xc7c/0x1360 [ 959.710467][T24996] __x64_sys_openat+0x138/0x170 [ 959.715305][T24996] do_syscall_64+0xe2/0xf80 [ 959.719830][T24996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.725881][T24996] ? trace_irq_disable+0x37/0x100 [ 959.730895][T24996] ? clear_bhb_loop+0x60/0xb0 [ 959.735567][T24996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.741446][T24996] RIP: 0033:0x7feb9a0a7407 [ 959.745855][T24996] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 959.765461][T24996] RSP: 002b:00007ffe57accf40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 959.773870][T24996] RAX: ffffffffffffffda RBX: 00007feb9a763880 RCX: 00007feb9a0a7407 [ 959.781828][T24996] RDX: 0000000000000000 RSI: 00007ffe57acef1b RDI: ffffffffffffff9c [ 959.789787][T24996] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 959.797741][T24996] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 959.805699][T24996] R13: 00007ffe57acd190 R14: 00007feb9a8ca000 R15: 0000562ea26504d8 [ 959.813666][T24996] [ 959.817111][T24996] Kernel Offset: disabled [ 959.821421][T24996] Rebooting in 86400 seconds..