last executing test programs: 18m8.489347875s ago: executing program 0 (id=507): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ea7, 0x907, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) read$char_usb(r2, &(0x7f0000000180)=""/133, 0xfdef) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0), 0xc0682, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000380), 0x1210c0, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000400)) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000007000000000800090047000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f00000003c0)="ea00000100000000", 0x8) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000100), 0x0) fchmod(0xffffffffffffffff, 0x118) r6 = socket$inet6(0xa, 0x3, 0x75) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@private=0xa010101, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, r7}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}, {0x0, 0x3, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3ffffe}}, 0xe8) close(r6) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0005000000000000006b6e"], 0x0}, 0x0) 18m5.659863744s ago: executing program 0 (id=522): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @multicast1}}}, 0x118) (fail_nth: 4) 18m5.372300291s ago: executing program 0 (id=523): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x40, 0x4, 0x76, 0xfff00000}, {0x50, 0x7, 0x48, 0x7}, {0x6, 0x25, 0x7, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x0, 0xfffff000}, 0x9c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x70, 0x28, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x7ff9, 0x5}, {0xf, 0x7}, {0xffff, 0xc}}, [@tclass_kind_options=@c_htb={{0x8}, {0x8, 0x2, [@TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x2, 0x7, 0x3, 0xf262, 0x8}, {0x9, 0x0, 0x8, 0x389, 0xa, 0x1000}, 0x240, 0x7, 0x0, 0x800, 0x4}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 18m5.326386982s ago: executing program 0 (id=524): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) open_tree(r1, &(0x7f0000000080)='.\x00', 0x9001) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x80000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 18m5.188281541s ago: executing program 0 (id=525): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc2"], 0x14}}, 0x20008000) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$video(0x0, 0x0, 0x10b200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x3e, 0x0, 0x0, 0x7ffc0002}]}) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) preadv(r1, &(0x7f0000000f80)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1, 0xa, 0x1) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x8090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400019b4abd70010000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="000002000000000000000000000000000000000186"], 0x38}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 18m5.035189066s ago: executing program 0 (id=526): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) pread64(r0, &(0x7f0000000100)=""/70, 0x46, 0x8002) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x1}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0xa0, 0x6, 0x0, 0x1, 0x0, 0x2000, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00', &(0x7f00000002c0)=""/180, 0xb4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 18m4.857107522s ago: executing program 32 (id=526): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) pread64(r0, &(0x7f0000000100)=""/70, 0x46, 0x8002) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}, 0x1}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000140)={0xa0, 0x6, 0x0, 0x1, 0x0, 0x2000, 0x0}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x8, 0x5, 0x9, 0x64, 0x5, ' \x00'}, 0xfffffff7, 0x1, {}, 0x2}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00', &(0x7f00000002c0)=""/180, 0xb4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7m52.348351358s ago: executing program 3 (id=3153): syz_usb_connect(0x0, 0x57, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c80000000109024500010000000009040000020202ff00052406000105240000000d240f010000000000f2ff000006241a000000042402"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000005b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x25dffbfe, {0x2, 0x10, 0x80, 0x8, 0xfc, 0x4, 0xff, 0x0, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x20002010}, 0x24000000) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xf8, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xfa, 0x5, 0xb8}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xa, 0x9, 0x3, 0x40, 0x6}, 0x2a, &(0x7f0000000080)={0x5, 0xf, 0x2a, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x2, 0x1, 0xd974}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x466, 0xf, 0x2, [0x3f0f, 0x0, 0xffc0cf]}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_connect$cdc_ecm(0x3, 0xad, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x1, 0x1, 0x4f, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0xf4, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x6e, 0x1, 0x4}, [@mdlm_detail={0x44, 0x24, 0x13, 0x2, "aaa93256888853f189273429bf38d21cf1d6d4a8109988ba42b8e8571ba4d9880886b71315c0020d23b4d71821836a0f0a6e76f9f357df790146b188e17b9028"}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x6, 0xf}, @country_functional={0x6}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x24}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x2, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x6, 0x0, 0x19}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x4, 0xe, 0x90, 0x40, 0xc9}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x6, [{0x32, &(0x7f0000000340)=@string={0x32, 0x3, "444f3cd6874b3d80002ea4a458adf80a6dfa533eed50c17e3a9f70940012b65edcd5d2653df20d7e387fe4c9ae476f0e"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44e}}, {0x49, &(0x7f00000003c0)=@string={0x49, 0x3, "b445b77b04dffe1194462083e3e0338e0a5a929f33c95d3eac2f5a5fb6bb2452b28402de524c5c07bf56350162b894bf58cd6bed8a76ad5881885fe261258d33c27435af2f3511"}}, {0xe0, &(0x7f0000000440)=@string={0xe0, 0x3, "08f0c338c8892f2ead8b850f1648f8e3bb4c4913c990bb9d2be55ccfdc608852170ec1ab168d3d0570bff5e2349d909ab99be5aa6118b8de4fa551b3d119871fd3d2cda30505815e1a0a9ecd6065138302a2a5ba7fee0d68d5647b86a9c0a69340d380457e4766ce4bbdba927459d4f832a82f962b4c10619c1c2ab2a939e2a1ab225788348509b7e57ed7c188647e3cad9ce834651bba68bbf6a15c6981057e3756269f30a61d0caa367f4e8145c7eb347fa61318a25b97b06335afc65750040b82fa954cbf9a45602e89392ed4167bfd3eb812006fd05d65ccfcbf72dd"}}, {0xc1, &(0x7f0000000540)=@string={0xc1, 0x3, "fc325d4c3cf4d215d30a228f4c86a7e56effe18c63f9d8494592471fbcc4fb0fdfde6ba78c38b78902d7347a8c7740c2e0299e5dd83e46134051ce304fff6025d21b5048cfb2ebe86af29038a1749b79d1b6840436f9c79e6fe37a4e187b342b0e3f03b7d45db2ae71e83274729f55cd88ef4eb6d8c4b098d4190eef08d17771f0cfc9edc9228865bc936adafb25ed80965bf5d601bb10d200da71c94a1ebb498fa3e962db225d5c0242a8d82f43321c6d974905478aea9939d40f0cf5bea7"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x449}}]}) 7m49.879906429s ago: executing program 3 (id=3162): prctl$PR_SET_IO_FLUSHER(0x34, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000180)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x8, 0x0, 0x0, 0x40}]}) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)={0x1, 0x4, [0x74b, 0x9a, 0xe4b, 0xf3f]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)={0x7, 0x0, [{0x890, 0x0, 0x2}, {0x9ab, 0x0, 0x1}, {0x957, 0x0, 0x3}, {0x313, 0x0, 0x5}, {0xa16, 0x0, 0xe4f5}, {0xb16, 0x0, 0xfffffffffffffffb}, {0x4fd, 0x0, 0xfffffffffffffffb}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x14, 0x1e, 0x109, 0x100}, 0x14}, 0x1, 0x2b1e}, 0x0) dup(r1) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5aa40bf85e080083"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x6f94, 0x0, 0xa45a2b2e, 0x7fff}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x14fe}, 0x1ff, 0x5, 0x7, 0x0, 0x8000000000000002, 0x2, 0x8abd, 0x5}) 7m46.17720834s ago: executing program 3 (id=3172): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) unshare(0x66020000) recvmmsg(r1, &(0x7f0000000380)=[{{&(0x7f0000000200)=@alg, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f00000005c0)=""/168, 0xa8}, {&(0x7f0000000700)=""/140, 0x8c}, {&(0x7f00000007c0)=""/245, 0xf5}, {&(0x7f00000008c0)=""/187, 0xbb}, {&(0x7f0000000980)=""/171, 0xab}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000500)=""/2, 0x2}], 0x8, &(0x7f0000000a40)=""/171, 0xab}, 0xfffffffe}], 0x1, 0x40012002, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00000c6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000000440)={{0x0, 0x0, 0x466, {0x5000, 0x4}}, "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", "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"}) socket$nl_route(0x10, 0x3, 0x0) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYRES64=r9, @ANYRES64=0x0, @ANYRES64, @ANYRES32=r7, @ANYRESHEX, @ANYRESDEC, @ANYRES64=r9, @ANYRES32=r3, @ANYRES16=r0], 0x34}}, 0x0) sendmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x20000004) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) syz_clone3(&(0x7f0000000540)={0x20000400, 0x0, &(0x7f0000000280), 0x0, {0x2d}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) munlockall() madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r10, 0x1, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7m42.849114164s ago: executing program 3 (id=3186): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010009000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r3 = memfd_create(&(0x7f0000000000)='y\xe7\xb7\xe2\xdbu\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\xba\xf2\xd8Q\x00\x00\x00\x00\x00\x00', 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000880)=@gcm_128={{0x304}, "d24270e5b2c0e547", "cca1a06b0a0c8dae05abbfcb93774b14", "bfc897f7", "bd9e7ac29781445e"}, 0x28) fcntl$addseals(r3, 0x409, 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r5, 0x400, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r7 = dup(r2) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0xa, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r2}, 0x20) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0xffffffffffffffff, 0x59a, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xe, 0x0, r9, 0x10, '\x00', 0x0, r7, 0x5, 0x1, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2b, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7025}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x1a, &(0x7f00000001c0)=""/26, 0x41100, 0x26, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0x7, 0x100}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000700)=[0xffffffffffffffff, r8, r9, r10, r11], &(0x7f0000000740)=[{0x4, 0x2, 0xf, 0x1}, {0x2, 0x2, 0xb, 0xc}, {0x4, 0x5, 0xd, 0xb}, {0x0, 0x3, 0xf, 0x9}, {0x3, 0x4, 0x7, 0x7}, {0x1, 0x4, 0xb, 0x6}]}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r13 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x1, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r13, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 7m42.762882069s ago: executing program 3 (id=3187): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x49, 0x7, 0x6, 0x2, 0x7fff, 0xffffffffffffffff}) ptrace(0x4208, r0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcfcde9"], 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x10, 0xf2, [{{0x9, 0x4, 0x0, 0xfb, 0x2, 0x7, 0x1, 0x1, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x9, 0x0, 0xb8}}}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x5, 0x3, 0x7, 0x10, 0x8}, 0x3e, &(0x7f0000000100)={0x5, 0xf, 0x3e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "245c915ced135549727598179705cd19"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x4, 0xfff}, @generic={0x1b, 0x10, 0xa, "abc053b98583a8e732cdd5e32090795d6059b3646ae869d6"}]}, 0x1, [{0xb9, &(0x7f0000000200)=@string={0xb9, 0x3, "05f771e45e39436b920fbf61e512be36c8b94ddcaf4392604d91f5373835ebdcbbc1ecea035274e0d0587387202abce891c8e8e9e985e451e9ac0e0b6768a9d70b62d279a54205152a2ebe412d27c1f442079a64250e435d6bbab3235fe124bb9e76261c71cac5c1c97b03f959f63c37766f14c82c37a14e3f2a3e9a7bfda614fe89eccf4d9adb235622666f2f7e5675a6a96c7a1c6e6632363559ed7e3400076afadc4a5ed3c07e90dd9aa047f00ed60bf401f3d2def5"}}]}) 7m40.424692211s ago: executing program 3 (id=3194): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x4) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r3 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0x6f34, 0x400, 0x200001, 0x3a1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80c, 0x6) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xa7, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1708004500009900000000fd019078ac1e0001ac1414aa03009078032400004f00000000000000030a0000ac1414bbac141436865c00000000000ce256b28c04000000fb520009789607675ca6380006e706d30b0605cfa11c0510c600000000000000000000000000000a65807fe97612fe86001273bc2300ad9d19a30000000000000000060ac8f46976e79e56c7860c0000000201067f36c52550"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000000)="69a2540a4290", 0x6}], 0x1) r10 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x6) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000100)={r11, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x79c, 0xe, 0x0, 0x0) dup3(r2, r1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 7m25.354654274s ago: executing program 33 (id=3194): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x4) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0xc8601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r3 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0x6f34, 0x400, 0x200001, 0x3a1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80c, 0x6) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r9, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0xa7, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa1708004500009900000000fd019078ac1e0001ac1414aa03009078032400004f00000000000000030a0000ac1414bbac141436865c00000000000ce256b28c04000000fb520009789607675ca6380006e706d30b0605cfa11c0510c600000000000000000000000000000a65807fe97612fe86001273bc2300ad9d19a30000000000000000060ac8f46976e79e56c7860c0000000201067f36c52550"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000000)="69a2540a4290", 0x6}], 0x1) r10 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x6) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000100)={r11, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x79c, 0xe, 0x0, 0x0) dup3(r2, r1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 8.947987502s ago: executing program 1 (id=5173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x80, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89901) r4 = open_tree(r3, &(0x7f0000000040)='./file0\x00', 0x80001) ftruncate(0xffffffffffffffff, 0x2) statx(r4, &(0x7f0000000500)='./file0\x00', 0x2000, 0x4, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @raw_data=[0x7, 0xab, 0x5, 0x0, 0x1f, 0x4, 0x85b, 0x9d0f, 0x0, 0xe119, 0x200, 0x1, 0x0, 0x7f, 0x4, 0x8, 0x1, 0xfffffff9, 0x6, 0xc1, 0x6dc967d8, 0x74, 0x5, 0x80, 0x4, 0x800, 0x1, 0x8, 0x0, 0x7f, 0xf, 0x95d94000]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x3ff, 0x2, 0xe}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x440, 0x403, 0xc}) chroot(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xfffd, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080018000000d0be830000000000030006000000000002002000ffffffff000000000000000002000100000004d50000080201000040030005003200000002000000000000000015d00800000000"], 0x60}, 0x1, 0x7}, 0x0) 6.767238524s ago: executing program 1 (id=5180): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x12, @val=@netkit}, 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$MRT_DEL_MFC(r5, 0x0, 0xcd, &(0x7f0000000280)={@empty, @local, 0xffffffffffffffff, "7d907761774dc1a0d26e24ff58ab0453387e6d25c091ec5062fff792895ff92f", 0x401, 0x10001, 0x7, 0xe}, 0x3c) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00050300000000000000000000010084000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r7, @ANYBLOB], 0x24}}, 0x2000c801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r4}, 0x10) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x4c000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r8) r9 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) 5.603137289s ago: executing program 5 (id=5184): r0 = socket$packet(0x11, 0x3, 0x300) shutdown(r0, 0x0) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r1, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a153c01002040256947c0102030157a8fd5bac8387dc8b5728334a5f09021200"], 0x0) (async, rerun: 64) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000580)="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", 0x5c2}, {&(0x7f0000000140)="629c49703aac4d3e55a0c3e546a8c5f3b279a7b30edff60b0acf70a51c088c7f30c05998db81f1", 0x27}], 0x2) write(r0, &(0x7f00000001c0)="25bacb49cae7547abc2e77996ad5310d6ab327ce04996628ff001c08b40a24d98de019e460157935d5583686c3c25a05437333b25e54e0e87111e59a87d4dc4bb99bd47aa0902cd4f7470549d15793b0b0a86db346c38f0e5976984314989d61aa38869eda3449a278ef60f11920989428a0e4a076915909c0c37bad8fc0c9495683f01e865939a82f4fdc740640ef38b9cbdfce7ed775bb1f7c2ffade0b72", 0x9f) (async) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) (async) r3 = add_key$user(&(0x7f00000006c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000008c0)="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", 0x1f9, 0xffffffffffffffff) (async) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000540)={r4, r3, r3}, &(0x7f0000000780)=""/86, 0x56, &(0x7f0000000400)={&(0x7f00000002c0)={'crc32c\x00'}}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) (rerun: 64) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) 5.594644298s ago: executing program 6 (id=5185): ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r2 = epoll_create(0x5) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) kcmp(r0, r1, 0x2, r2, r3) r4 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80800) clock_gettime(0x0, &(0x7f0000008380)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000008140)=[{{&(0x7f0000000140)=@qipcrtr, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/86, 0x56}, {&(0x7f0000000240)=""/227, 0xe3}], 0x2, &(0x7f0000000380)=""/121, 0x79}, 0x1f58}, {{&(0x7f0000000400)=@tipc=@id, 0x80, &(0x7f0000001480)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1, &(0x7f00000014c0)=""/175, 0xaf}, 0xffffffff}, {{&(0x7f0000001580)=@phonet, 0x80, &(0x7f0000001840)=[{&(0x7f0000001600)=""/95, 0x5f}, {&(0x7f0000001680)=""/183, 0xb7}, {&(0x7f0000001740)=""/202, 0xca}], 0x3, &(0x7f0000001880)=""/189, 0xbd}, 0x7}, {{&(0x7f0000001940)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f0000003d00)=[{&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/129, 0x81}, {&(0x7f0000002a80)=""/76, 0x4c}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/193, 0xc1}, {&(0x7f0000003c00)=""/200, 0xc8}], 0x6, &(0x7f0000003d80)=""/23, 0x17}, 0x6}, {{&(0x7f0000003dc0)=@nl, 0x80, &(0x7f0000004200)=[{&(0x7f0000003e40)=""/203, 0xcb}, {&(0x7f0000003f40)=""/151, 0x97}, {&(0x7f0000004000)=""/219, 0xdb}, {&(0x7f0000004100)=""/85, 0x55}, {&(0x7f0000004180)=""/114, 0x72}], 0x5}, 0xfb3}, {{&(0x7f0000004280)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004300), 0x0, &(0x7f0000004340)=""/8, 0x8}, 0x8000}, {{&(0x7f0000004380)=@nfc, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004400)=""/20, 0x14}, {&(0x7f0000004440)=""/13, 0xd}, {&(0x7f0000004480)=""/110, 0x6e}, {&(0x7f0000004500)=""/123, 0x7b}, {&(0x7f0000004580)=""/36, 0x24}], 0x5, &(0x7f0000004640)=""/4096, 0x1000}}, {{&(0x7f0000005640)=@can, 0x80, &(0x7f0000005a40)=[{&(0x7f00000056c0)=""/89, 0x59}, {&(0x7f0000005740)=""/141, 0x8d}, {&(0x7f0000005800)=""/139, 0x8b}, {&(0x7f00000058c0)=""/80, 0x50}, {&(0x7f0000005940)=""/230, 0xe6}], 0x5, &(0x7f0000005ac0)=""/144, 0x90}, 0xc150}, {{&(0x7f0000005b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000007080)=[{&(0x7f0000005c00)=""/192, 0xc0}, {&(0x7f0000005cc0)=""/22, 0x16}, {&(0x7f0000005d00)=""/141, 0x8d}, {&(0x7f0000005dc0)=""/96, 0x60}, {&(0x7f0000005e40)=""/152, 0x98}, {&(0x7f0000005f00)=""/4096, 0x1000}, {&(0x7f0000006f00)=""/61, 0x3d}, {&(0x7f0000006f40)=""/146, 0x92}, {&(0x7f0000007000)=""/70, 0x46}], 0x9, &(0x7f0000007140)=""/4096, 0x1000}, 0xffffffff}], 0x9, 0x80, &(0x7f00000083c0)={r5, r6+10000000}) clock_getres(0x5, &(0x7f0000008400)) openat$dir(0xffffffffffffff9c, &(0x7f0000008440)='./file0\x00', 0x20480, 0x81) r8 = syz_open_dev$sndpcmp(&(0x7f0000008480), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r8, 0x40044103, &(0x7f00000084c0)=0x7) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000008540)={'sit0\x00', &(0x7f0000008500)={@dev={0xfe, 0x80, '\x00', 0x52}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x5, 0x8}}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000085c0), r7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000008680)={&(0x7f0000008580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000008640)={&(0x7f0000008600)={0x30, r9, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x3ff, 0xffffffff, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r10 = socket$caif_stream(0x25, 0x1, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFSUUID(r10, 0x80111500, &(0x7f00000086c0)) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000008700)) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) r11 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000008780)={'wlan0\x00', &(0x7f0000008740)=@ethtool_wolinfo={0x6, 0x2363, 0x5, "e005996e21ab"}}) syz_genetlink_get_family_id$batadv(&(0x7f00000087c0), r7) r12 = msgget(0x1, 0x0) msgrcv(r12, &(0x7f0000008800)={0x0, ""/244}, 0xfc, 0x1, 0x1800) clock_gettime(0x0, &(0x7f0000008900)={0x0, 0x0}) setitimer(0x1, &(0x7f0000008940)={{0x77359400}, {r13, r14/1000+10000}}, &(0x7f0000008980)) openat$fuse(0xffffffffffffff9c, &(0x7f00000089c0), 0x2, 0x0) msgget(0x2, 0x400) 5.59214183s ago: executing program 4 (id=5186): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007980)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000980)="daa783cd66e6cbbbe761ae363ca91d0f8a1045df4f9a9cd7a8add41c38c00df6cea93ba7396c327f6ae2bcb858d08a21269be6091e8e362d6512bc51b29efdbb313d21d11c4b0a6bb9acd9d29146205ecd9ebff1ea64713b1d959b2bf125b17cece0048ad53d337e6c35da2be8", 0x6d}], 0x1}}], 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000140009052bbd7000fddbdf25020000cb", @ANYRES32=0x0, @ANYBLOB="080002007f00000004000000a80e000008000000"], 0x34}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) epoll_create1(0x80000) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) unshare(0x20000400) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0x800, 0x2, 0x4000c4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000004401050020010000000000000000000000000000000000022b0000000a000000fc010000000000000000000000000000000000000400000000000000000000fe5c00000000000000000000000000000000000001000000006c0000000a000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000320000000a0000002001000000000000000000000000000100000000000000000300000000000000000000000000000000000000000000000000000000000000320000000a00"], 0x1fc}}, 0x0) 5.371560991s ago: executing program 1 (id=5187): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2, 0x1851}}, './file0\x00'}) syz_usb_connect(0x3, 0x993, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x8e, 0x27, 0x2c, 0xff, 0x1266, 0x1006, 0xd96e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x981, 0x4, 0x40, 0x4, 0x80, 0x8, [{{0x9, 0x4, 0x5c, 0x1, 0x5, 0xff, 0xa1, 0xa1, 0x5, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x2, 0xf, 0x2}}, {{0x9, 0x5, 0xc, 0xc, 0x448, 0x4, 0x5, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x9, 0x5, 0x1}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x3, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4d9c}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x101}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x2, 0x2, 0x1, [@generic={0xb9, 0x10, "569549f2136f6be822ca99831d8e080589cae7b69d47be9e22c35640354c6a815533fa76d7c84dd0742bd40ed972be9bab3716ce536abdb6a39a74b0b3610285b4c285d6ea0b8f89521510c35adc2ca22b2ae7642dd703e3145c342ce4c49c4e5c3ed0823c3fa3f69ce9860e2054a23eb32b16d69fa23658bae94a95a84f047c15095c3c2f242e62e4f2b2cf3da0b3665e74dee6f2588e59532ddc4af12d6795cf6ca451621e2fb04a5c3503185fed6b7c9616008248df"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x7ff}]}}]}}, {{0x9, 0x4, 0xb8, 0x1, 0x8, 0x3a, 0xaa, 0x54, 0x9, [@uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7f, 0x3, 0x1, 0x6, "a6"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x401, 0xccb8, 0xe, "363b02"}, @as_header={0x7, 0x24, 0x1, 0x5, 0xd6}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0x27, 0x0, "a8", ':$5'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x3, 0x81, 0x2, "0ec128eb2124c3ef"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0xb8d, 0x7, "6770f2fcc7"}]}, @generic={0xaf, 0x3, "448e09422ac16f7e9a2ac01cc5e6dc832a201aa31fbc5249f5dc8464628f03506c77a2b8f172dd3a0608734f5b4c0e3af91b1dd565b0cda0ccf53a7956dd4e4267ae900fb066b20e42c26ae144f21d828cfb202be389ef81a865380af908a2e1634ef417f675cafd98d5273565a7a7c362a5710de2144e55bdaa3d6908429d9047f5d93954a2fa8364c5e0852e2975a44a908ca01a8f187f55bf974ceb44ba6c29c393b03ea78312183c5a2fdc"}], [{{0x9, 0x5, 0xef2404a842b1eb9e, 0x10, 0x400, 0x0, 0x4, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x6}, @generic={0xba, 0x3, "1266f97b0b750c54abb4982aca9a6a68d390d7bdb0aec4d1c593032ab5794190c2e958e163b63a9690e52da5ce66a4933c548466d67a72525e2d981acde2d8d60b1209eb88ac8f78f3fe966a7a14353309e070ebd762dceb6e9609ed433ac73d51b0791a24ca8f87c6d19077363540c51ea6d6c71dfcabd7df8216b4528bd55bbc55262f7b6242f299f1c93b417a8765b074ec5a87c63e45b6ef356056cf6ba27ccc4362e2e20aa8172be85b14d2904f9baefad840b7a5fc"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x9, 0xff, 0x9b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x7b, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0xa6, 0x14, 0x9, [@generic={0x5f, 0x4, "10fdbef61cf2db9a4efd30fda04c1705aa46d77c7095e00aa712b2e6eb3496f28789bbfb2a3b29ac00fc435724cea6c4690f62c4c9768ac7717cecb40f9fa1f2472732a6af66b1651480ad64804411bd8179e53e3625a7d4008d35124b"}, @generic={0xd0, 0xe, "05d14859865f6d7541f5479afeb443d5bf00215151d1450c5bcb836a8bef03ae57c35fab4178c52d62c0b0c3187a31638931a504c87af0ed67b526feb4dee8745760d5077bf015d18abc825bf63286b508837a12c8c57a272bd2dfdc5c506cdb212e3252b590cd40404a02de5b309493dafb98a40643f79be20e9c05a252b8739410b8fb7facc72bd1e98bee96741ca7c82543a31de13ab0c5301c4f6a5f0a640631adf0ceab3ec73e9745d6e48d96b4cda1a06b1391342755c559966d2f2f5dd44c1aa138f8df8cba9a3b86c4de"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x1, 0x2c, 0x9}}, {{0x9, 0x5, 0xe, 0x4, 0x10, 0x9, 0x10, 0x2, [@generic={0xbc, 0x22, "05027d1f38087622c7cdcaa35754db7250214314ea429a804ed653e91affdc5e361d01a56130ae2683322b533fe4be94466c3c4e1bf3634c023945759a63d9c1b40e06d126fc1a14a35abe9ec8a4bc222eb210e9b26314639747071135ce3d27f82ede632209b9384e09df184ade3597106a1fc80467099232c844252e7f5d2d04e11f7f4cbc864506a8cea538f14ec212034644281243452aa232270aad22e62b0c2448f7b46999b804099e3fa140254ed4e10e28191b72763f"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x20, 0x7, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xe, 0x51c0}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9d, 0x8}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0xff, 0x0, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x80}]}}]}}, {{0x9, 0x4, 0x98, 0x1, 0x3, 0xff, 0x6, 0x3a, 0x38, [], [{{0x9, 0x5, 0xe, 0x2, 0x10, 0x7, 0x5, 0x9, [@generic={0x55, 0x9, "e89a6f618e10028803c4d7bfa656458c160f0aa33a6e170a7e8f78778843145d5fd9d8c5f4a9e3bbe365cfd4341b21e778e7511fb5fd8113442c65ed416f5b4fda6c56d531f90a8b0ea685446924d52da010e0"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0xc0, 0x0, 0xc, [@generic={0x84, 0x21, "01ad6f415407d041ee3a05955cfb96e75e3ce4bf8eb162a43e011ff64727acfc72cc70741756f93a82bfdbedf8666e82be53350a9eecb599091675720f3b87cf97d776d47177352849b8c2c10b04da0f3b6450e1101ca195a8b63928d48e4c112d7fca9d6664eea35477be468204cc92dc97b3b2ebfd3a508b0dbb4e24520cdc5010"}, @generic={0xf4, 0xd, "56aa8dce615cded7a7c494ab0f978a75316bc126cc6993e1d5085575c8721e07d1b61f1bb35db59e8072f3c181e392fe43b3c3d32d43056b458541af7d4e5bb2e7c6c53873acc31b45517acf2729dc1b37a2d8304697d3077c271b71c9232442bec6bddd8021f99ced307d47d7c827bd823120de0d4aa2a04ac7171db54439281e4c53d59564294c454e2efe15d6690f3a25a46d2458430e26e1b28e7345029a9a4400bfd30a19991d5fba293cfb2902b9d3b2cc4bb5a753c056222a6e36510d803f9b2e0dd76a8c11dc6bba86e37343d937931423b5f2445602e48b7f31c2ed7fc65faf9568307f7ce23026658ef58e99ff"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x0, 0x4, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x9}]}}]}}, {{0x9, 0x4, 0xc7, 0x8, 0x2, 0x9e, 0x1f, 0xd0, 0x81, [@generic={0x69, 0x22, "4a89d84b139e691aadf74380bb65a985c434fbf329f172a3ccfa408dbe3d899f79a91f39153f88b7ec1ec0a59d08053e2a4c083d2b7b6d5e935ac9444d55f8aa3db14b90571f9cbdd1a03d1485aee17fbdc1313fff6fd5f937aa3190803b83a599a894299b54eb"}, @generic={0x7d, 0xc, "c267e35481c26e6fda262550ba759688cc3df31c3fcee75fc55619f9a05b2ec5b19a8acfe34e4724de5dd5429f327d0f85d9ce66e43cfb741e78d836332afc81f2d603e5b3462fbe33e1e4c7ed0bab0734a1f393392a61e74dd17c9266d280dee07729453b9a07591776ef5538899922636f08bd1acef6d170dede"}], [{{0x9, 0x5, 0x0, 0x1, 0x200, 0x4, 0xd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x126}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x3, 0x8, 0x0, [@generic={0xa1, 0xc, "0c113ab19a0184641042c9b34dc44203e0bc4dcb88e1fd6f6a032cff9eebea236450c430064004f3f679e2c7703e8effc54be693b299ece22d3a968f25ba6e706316970e1c478739d7ada6d165fb61a2ec9892814dfcaa29183596a75cca27fd64fa126483599d7da457823f8f19b7b573268b3158ce26e587c015c4a05200aebc75258ae906a42e5fb1882732a1cd4b6fa9d1586697b58b84456103af744b"}, @generic={0xb6, 0x6, "72ed1e34e6bbb7fa820740ff7873d9096d034114bf25d490dd90f0895013d1a039b610c187162bdde1e3268665a7bdd2fde5201890eb05b18806883621b481f11c6c4aebc3d8cceb6a5ea7ecb6ae7d06b75d604ceaabeb3a4058aec58129ab1cb12cffe486552004fbb8aa7b555f9144051f76eb4e7781c0362dd22ff19882218b2ea78dcb78480a2439a3d97c1d2400aa90fe7f20f1bd47cc2a41b845260c623130823241ccd605fec883b254e0bd849cbe858f"}]}}]}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x200, 0x4, 0x64, 0x5, 0x20, 0x70}, 0x5, &(0x7f0000000a80)={0x5, 0xf, 0x5}, 0x4, [{0xe9, &(0x7f0000000ac0)=@string={0xe9, 0x3, "b099b7cdafb63cda55bd0155e6dc7dda30b07315d0e1ed81489ceaa027bcbf9daec836fe325957a1f779af4849601967c907f2d8d6219063070b36eea1fe3f70197cea809ddc97120a877f437bfff3c2cc56fc59a6ff935aec9b60c04cbb7748ac37152d47f9bdd2b264ec06a4995755c53bb333fd22fe640ce572f768155195da811cd4f32b5badda92b72da55d67bac0b43269e3eb0f0a307949c2ef13b585d56ee66dd7667403e71d979a6634245ec5d2c8db2c7570864629db8dc96c7b7b111003344d56642195de8739ddebd12a0d5eef27f66eb667983ed65357272b28c3a15de9ec5bcb"}}, {0x36, &(0x7f0000000bc0)=@string={0x36, 0x3, "3284357232845f7548ff44604b1af0ac6f9c7004d25614b2f132683cd7f2315fdb35235f5d492c381bab6066f28a54a8b1b0047a"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x40e}}, {0xe1, &(0x7f0000000c40)=@string={0xe1, 0x3, "292f40737410d4546856007f3c28b88e74e89c61c8243e2d7cc1ddc6bfc2b8945e2043cb8be0c24d43e7349122964fe882f3f04b683a6d08656ef11505480bd0467c03b6f94fec378da020032ad5f379ac2c792934e6b5c50447cec3381a1da6f90e93f333790008817bb0fd5993fbab4818ab0eefc048ea541e65dc2b767a650c9bbbfe1fe47c5a9c1c556c2c6147698245516e64b774984a04d79121b3460e61e3ea707733bc8b5894de9a6a410ccad6b05eab0757df8de0bf798f41953fcca2cb9f325061677bd906105c762214cac951efcb029d743ca49c55617690ce"}}]}) socket(0x8, 0x3, 0x4b5235d8) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000dc0)={0x1, 0x0, 0x102, 0x7, {0x100, 0x400, 0x80000000, 0x200}}) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x18, 0x3f9, 0x20, 0x70bd2a, 0x25dfdbfb, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40880}, 0x4000000) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x40) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000f00), 0x20000, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000f40), 0x81, 0x0) write$P9_RSYMLINK(r4, &(0x7f0000000f80)={0x14, 0x11, 0x2, {0x8, 0x2, 0x8}}, 0x14) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000fc0)=0x0) r6 = syz_open_procfs(r5, &(0x7f0000001000)='net/mcfilter\x00') sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x40, 0x3, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x79}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x7}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x20008891) write$P9_RVERSION(r3, &(0x7f0000001140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000001340)={""/32, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001180)=[{}, {}, {}, {}, {}]}) pipe2$watch_queue(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r8 = getgid() lstat(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), 0x10000, &(0x7f0000001500)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}], [{@fsmagic={'fsmagic', 0x3d, 0x7ff}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r9}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000001680)=0x1, 0x4) ioctl$VHOST_VDPA_GET_VQS_COUNT(r4, 0x8004af80, &(0x7f00000016c0)) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000001700)={0x0, 0x0, 0x204, 0x3, {0x109, 0x80000001, 0x1ff, 0xffffffff}}) write$nci(r7, &(0x7f0000001740)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0xf8, {0x5, 0x14, 0x0, 0x4, 0x4, 0x9}}, 0xc) io_setup(0x9, &(0x7f0000001780)=0x0) r11 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x200000, 0x0) io_cancel(r10, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0xfc6a, r11, &(0x7f0000001800)="0188ac0ec2ce5d0a921d8e5fd75a820f98219d6eab77a3efb36140e85ff2248810c5896422da74a52196a4e4d147dc19a3d60c11e4c31b3094df57607861d21dbd5880", 0x43, 0x0, 0x0, 0x1, r2}, &(0x7f00000018c0)) close(0xffffffffffffffff) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000001a80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001940)={0xe0, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0xc9, 0x8, "a8154552064f4b0ca2fd15ec474a3152175890edb66adee92931358ec41c985ac498a2061be6c7c461d6776e48db7a732c75d06d6c76bcc77b815d897d5758f380da73f146150534811d534be0f4c7e2e51cd331679cba66ba9bd09e4756ef2c8533bccdf8878c787d14cecbde42be54909e63b78ae0e19c654d92d407e0d2792eaedc7ba565140db82d58e13e054ce438d066b10e28eefff74768a5b2c3dc51d8f58a69773d6d016d360c986671e2151811bfd74d49c9f717b83e73b2c9fdd4e166cc6dd1"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x801}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001ac0), 0x3) 5.371140391s ago: executing program 6 (id=5188): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0xfffffffffffffe30, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0x3}}]}]}]}, 0x48}}, 0x0) 5.327461654s ago: executing program 5 (id=5189): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r1, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x205b) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) lchown(&(0x7f0000000100)='./file0\x00', r3, r4) r5 = socket(0x10, 0x80002, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r7) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x3c, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9, @ANYBLOB="0a00c00100aaaaaaaaaabb000090f23d7510ffd075dc713cbe66f1053325590257b24535569e2f467174bbf3935431be223ad4d12fb3263f1eebf4a9f0ce0fa3fba52c9b09fd9a3850dc208092a2a41b32880b71aab9636b5f29ff793a0f45717e8cc5babc7ca5"], 0x48}}, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [{0xc0010020, 0x0, 0x2000400}, {0xa76, 0x0, 0x2}]}) sendmmsg$alg(r5, &(0x7f00000000c0), 0x0, 0x8000) 5.253211843s ago: executing program 6 (id=5190): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x80, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89901) r4 = open_tree(r3, &(0x7f0000000040)='./file0\x00', 0x80001) ftruncate(0xffffffffffffffff, 0x2) statx(r4, &(0x7f0000000500)='./file0\x00', 0x2000, 0x4, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @raw_data=[0x7, 0xab, 0x5, 0x0, 0x1f, 0x4, 0x85b, 0x9d0f, 0x0, 0xe119, 0x200, 0x1, 0x0, 0x7f, 0x4, 0x8, 0x1, 0xfffffff9, 0x6, 0xc1, 0x6dc967d8, 0x74, 0x5, 0x80, 0x4, 0x800, 0x1, 0x8, 0x0, 0x7f, 0xf, 0x95d94000]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x3ff, 0x2, 0xe}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x440, 0x403, 0xc}) chroot(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xfffd, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080018000000d0be830000000000030006000000000002000020ffffffff000000000000000002000100000004d50000080201000040030005003200000002000000000000000015d00800000000"], 0x60}, 0x1, 0x7}, 0x0) 4.008647041s ago: executing program 6 (id=5194): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 3.968077528s ago: executing program 6 (id=5195): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0xc000) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000043001f001307f4f9002304000a04d65f080008", 0x17) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) getpid() bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x4}, 0x20) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b0001000000000904"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x7) bind$netlink(r3, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x25b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) 2.765583575s ago: executing program 2 (id=5198): r0 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) (async) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="434a596143cc", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)={0x54, r6, 0x101, 0x4, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x2, 0x0, 0x0, {0xfffffffffffffff8, 0x6, 0x0, 0x31f, 0x0, 0x0, 0x0, 0x2}, 0x6, 0x5, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x24, r9, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) (async) set_mempolicy(0x4005, &(0x7f0000000180)=0x1004, 0x4) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x101000, 0x1) (async) poll(&(0x7f0000000140)=[{r4, 0x8}, {r2, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f"], 0x0) 2.358376763s ago: executing program 4 (id=5199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x5}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x4c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x2, r3, 0x1, &(0x7f0000000240)) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_USERDATA={0xf5, 0x7, 0x1, 0x0, "6718ae18d08998de4414ebd9e24bed6bc699464f377c98c102d50124d902866348a1a5eb44f6f22e2d7f5b2890ec3df2f515354cff345f720707fda912e7af3ca7dbc5294d083ca04ac3dd6e2fdf728572f0c41712fb91ebb88bb7e8d1c0be07bf3b96e62ead92fb057751993bf77c452894ad995f855caedced8d12cb5814a720255b23fa198c98641b6aa4ac9dc6d5bf95816341e74a09a393dc5bb082a21b5906fe6955306c84522bd38ecc8221cb9f9226e4dfd208f07340d2028a4a63eb8467ecb1da09ca712a45ebe87d192f9a3e3de347c4b9c8a4886d94988c6cf25544f1195640d908dd61973a8e233d5c63b8"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, "02"}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x174}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 2.23971413s ago: executing program 1 (id=5200): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x33, @multicast1, 0x4e24, 0x2, 'sh\x00', 0x11, 0xffffff80, 0xe}, {@multicast2, 0x4e24, 0x2, 0x9, 0x100d, 0x800}}, 0x44) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0xc0900) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f00000000c0)={{0x1, 0x0, 0x80, {0x9000, 0xdddd1000}}, "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", "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"}) (async) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f00000000c0)={{0x1, 0x0, 0x80, {0x9000, 0xdddd1000}}, "1a989ee0e6ebd44aa5b2db0d024c3dca7300a477496ebbbdb8a97077c3fd6dbfda8d7614a343076a0b20939a7bea365c957b7930cfb48e0b907f12fae3d4980872a9a642d346d0c4da0c98cbee40128a88bbf6848260b10590a44e53c81de2c5ccb0449b95ad20e434a810d5f7878ef628fae8acbcf65e5d5faeaf58b3e3eef65cfb09b2b80d93b8c326116b7d7b3186ea8d10c4f5740baef35c30d535972c05923a0e1180bdf6cb27b15fdd2b91b560713c5dfbfdb7dc7b11e6c3f57e0f581f094db95486ebfe6c87ed9ba7ab6418d7206e0522cd08e708de66fc09b5cdc5850513514beb3a99e9f404aed1fb59c4997a75a10a0879cdac0486e2b8494d1e4d8f4f110f4bb654630682e092df69119077738544d0f539dc28358b734e5b88b376cffe05910ad298a974446d3b96d92766598e737b0659b90a71dbd1b51334b2760398f5b9e26e81fb9e639b4a88214d820f49bdfc3c210d1a20d88778db1796e6402d835c1b427f5c339138afe3e1cd2d69879d86e4ea87b41e6af2889c26482a796bd1a2fc6609e0fcdd1f780090008cdcd5e6cce8dd5c78fdd845a006a8187af0687ad2e675ef8218c7939c7ad5c18fdccb1126ee99bda70ca42f1e01047a09f9189c2c7c23bf6eac2b68e0230abae1c01e5373ecf4724b4a141c32ad869da39f6ee62305eff3fccff9d5c0375177ca2ba6647b35fc8490739059a1945b4a41fb289920f31dc9c9393870c070b071853761bdf1af1f67139f9346a8ea54f4e6b95eff248364a7cae266600cc9e8bca30d3f5c1d1bcb37f1c81579499bce40d7d05d842de7a9984e8ad097f2970ed26078f38ac62788f8dd7fbc4c12b7f63be521f030a8d086c6bff62ddbd4b6a58b978ab877f217d8fb28ccaa55361da3bc5aa47e2be18d4ff5a747b9e5dcbff8bbc3a4a93a853107f689f2f7c0f4100802aa321fa92d9cadb86911c8c786b29030d37174eada84eb0593d16c8fb07f3fa172d47860bf46d3cd65b7e19cb7acf72d74f1a6d4928bd9836d1d05de4cce1a67b6eb73d66106a4b8995db692976434712ab464645b2eb3e2502da42f6ded3de4b2d83d262172012436ef51bcea57f5cc879ef72651fd6e2eb08d2fb7801990babe3e8be8a8ef1ca755ae463fabc1c27562ebdb2c070b8c420ec6eb1b2ed24fedcff5592a96b605bf3c9f9911d30e3448b579db66fefa93ae1f30431ae410e49e2171883e411b8a8e7bbe129bb523476daf6b65c025e2adaefc4b697c365c691c5a958f4982c4b082706d3ae6eb0f440915e917f9313a46596683196ff811716ebe5b9a631df4b20295ed8d4149165e8b12f4ef1be54eaac7d9429841a29e48777101f4d0061d044839250a1b72924c6d0afa71fe45a9cd87ecd0a96a38ddf522a6e0c249d0f894ba7f4a3d7ddfdccfa6438bd23fbe3f631db571a356993f7cae61932e374ad01d36fb17c041a942afcdc17eea6315ba2fa831da1f6fbdefd1ffc69f3b23a274bddddbdcf60fdb8ad4717add92fed49d6268f269cb79ec315e6515d0d2ff31f6ff8812089cac537f4a19187659d560933a9633ccf93ba62e597644de13fb591bc45de858a1048a94816ad5822e7aee60839d2e0f04bb860a182e270d6b89448a8a779062ac76461e190d2a9af1ac654dfca24b86e78481b94f1cd9736e45e1dbd294e4371a0c0607e3d1e7b1e6618aa6ed908251399ff93f5243ad022498ec6b156abe071e6cf84829df012978e7e8df192d15e37a4039154fa7118925528c949f75cea5b686293198b8c74f1a487ad7ef1ead760b328ee8df79d96334ffdb6cf7cc2e7e3929092a70501fd67d08bb36d6b10867a671c0e9e322a139dfaaaae888955f1377d61cb41c46f06c74cdae7cf72bfbe0ba42ddf5f28a5deeb3f3057956fbc5a9fc62dd21a389197a352d2de5d84fb6b6370a999063fcf1559d7a4762b770858488e3929bfbe1153b0564f9c74a75eb170f211d1a4f40a9616bd7690a08d84c744eaf7c487f7a1902397295d0cd983d7c7eda48950ce80383c588636a0c3842e498ba92b5020595b5da6c407489f2c52751ff1deba5054370ef287d1535684e94edeec340ad01af12c3497a991911b6278355c9626483759073faab9962899a4fc966507d1f65912882578cd2ee06f9e714af989aa0571462b2383d2cda840b3bb85448ec74f16dc97e194e8634d00fc7c0dcc752a1e15114a78426c07f0fd6138319040d56ee1c12382454776f7466097dafb411d7c226b3b544c643377776385d9a1ead9c36152f2d723268960b6d69ff96a25acf051c48b17ffe4b1cd46777f8e04c485d257bdcb8b235770ae94ba5f445d3649ac280505fa7d9b7a52551e126eaacf28cca1d3c603f75cc72fa4218ed3be1dbad944bec016b699558dfa0da28d15993ae245f5c59261b9e003f053b203ee9eb2c46e4a9b0338805d1714a672bdb949e557a8872eade8800b36377525073f9db6ed40f1a9c07d30410a973629dc973e26f8e1e673dd847a83cad1081d44b1fa09af9d8006e63325f67d23d14f31bb67b6c8708fbc33ddf2abc5cd544dbb1939b3021f391626a8463f0f2d72d33b824f032a20acafc90633fed94f35054bc2f53b567774265c5b9f3ed3d1a1c90a6e14dca9e1241fc2f1cb561e4ed816bec83fd2675994a2e09de2a35c58aa69209c012aaefdb9a506db6d5fc253b0ee8b9c9306aff5e5a87639abd0d6afcc37c10faefab8b2ff41e0e24d0e2a0050c2304e09f7ce9b8d12f65b9cbc738a33f7acb5c8464c70e80192f5042e50f95d7e4c162bd909f79fcd7a188d30f86c48e1fb2dae5cd4182e90daafbd27abc895a8949f6e3dfffdcf34a54e891d9ffd8c502ccbb785688d7498d32d7a09d4e26f23ce65e80cb7312e3efa14254e17e91a83c660122a530aeb36caed8bb522df98f1310065b80b0f8f823415215920af1c2339ef2419de034b6dbdc039e74a61a5a82fd1a8974a8337ec5a82ac5c987e4bdb7a43a4eb84690fa99f297a7fae6252fcb284081a4df00c57a395cf6396d20a6d6b4d9f7ef943f17637c8f13fb448c4b835a5b62f4fc04831e772d35e4d338be27edc61f1f8712977edbda0a32737479723122d2b2d13fe539e4525b4758d963a742b17cd59218e54362ce50d735a1a3d51c262c89800fc000177b6d164c868eb8310ac0e20b7c32af0d1892bc5a2cb8d4f21775a84d92e191e661a0f8cc9eaf45363b82adfd3b3c33bf215a8c1b17c600e3a7680da274d9b4f7c7307f3e284ec4957a0ca42ad06b090b3f4394e6bab1e626522d6889d95fe6f5b3aa2d9c94256ba7af5cd60922e3d6ac4105780a5d42362c7a6015adfbd1beaee11348e808b724f6df8a18920f71560d506672d909b808d644d4479147fe5ecb51ff7937fb194a81a4ad09addac4025a6318530fb2fb576a4f0a18e226a182e8e08006d372c003a74b8d04ffc7001482b61ac9d8248c7b57407b8796ca775c37cfc8484c90041f547eec71c4133b155599b44035da44502a40d8f26edc47ef228c041562dc34ac962fd01c651b602db6ec7892525a6f47816175bf416503954aca26fdb81da8c8cee2c201d742b0f0b5b74341fed8c2b325d5b86b65cf6ba1ec8be9932f5b92925d680c301c228e08053aac3f15160d1026530aac1e27a70c92de4ec95874d964c10b1f6feb73e609e1c82d67b7f61e6f618b8f5bb2fc6c38be3d1b0551cf5f0ef1a5d1e9edf68903964f7f626eda459e8276aafd2a76ff12996231e40482451f09f9ea05f544b4ac3687a32c73c70e2950dc255d02a5fe05546ff62345d1e59a49abedea4c99027e86875426202ef4bd1e31bf35387d8da93e4780a1ae95db31b5a5f9c218916469f4dfc9af6e7c5b2d60d523cb72898e75714cd22160dcb0f929212f6c318640c47e358849a2ad5f8e08f823cd20e939d75aecd14bcb10825c0da181fdd1d9e4df7054fc9a713190d9eaa1949440bc7c944211fe9c1a627f0464a1aa4a844b12cd703d621e34d331afb889f28d3fdc23a6847351f9c6a3ce3e1ae736162851d6b525259aa9f51149cc7c36b46d01cc04cd6b82c0f905663c54abe3398d97ee2f2c5919ca371d17d043b65ab3735ec6ab80cbc6cfbd8abc9edb188e1ad5cd96800b52dcf6189eb6696c71366174de542ba960e1b540c19832b6d9adb22e80e57baa4759e8008187081214aac19ae51d58b05f9acf3c2fd852ea9da8495245a9d39af9a4ba59aa669eb2758aed8b0917ef2fbbf45801aa87c6ddd10dded0a5368ce8d88aa0e1d35b331b48333a1293d20829a4fe3b5bbb63b007d996fd229421fdbb8e75b6aa70578bd99d892917c749361caf399d492a7550e558d71258a77cd1d22df65234775fb2aa453d931827cb3a345a7453c4fb6880c7de89a558a89f0ada93fc05a35335eb50a090a7777b2ce6217f4c2253c79ed917ae3e378bb0b1bdba84afc3bfd2c71a6129634f9e5c02901cb743acf992afa92eacc38acf96eccfb0bb7806e5d398ccc52e233a39fc75a312e9a1a64f8d781b2a7791a54de7c55e0d728d486c37df0893426908652aec1e3ae8625e39d0e196f9b7e594ae906f21ee00dffc3d177476d46148a674c845bc6cfd2b89bedcf086a7ab608fe3d0bdc426b75f21ccc8b9b117b9f66be075a43ce157ceaee6b3b9f67dc6361e87ac95518eb0f9255b89af21cf3899cc35a022ca3b030e1664404b88417f974c41a92bb22bfb78e80bc586a2b0ba7ba284e235f1431f0018b3102758dccc75a9c59e688fb96ae2bdf5715af688bf0257c641e27765c66548d0b3d591f8f1228d7851600c57757ce693845877c4b942d278482c46ffcc834bde2152cc7f02d3aed3e96fd000591961e1cdc35e62b79e50caacb99253230c71cc89a2d7e7ad643a638ad32ac937844b9c60d64497612cffa719ec92c98f32874ed37334b3777bf69f535a187854b2997b50a1254d536b59f2743befedb5d09c86fab64f8f627b1d740b49500e49f4432774455cf7de0dd46d38fc6724086da0e364fb708ac46c25ebc6f14e833a3fcf2f6ebbcb0b2887d004a50446b1287f365533db9abe7782ec12de73bcc4e0bd68c1cbdefdfecb6c225659985b6e1f547a93928c6374be994b48bb6f1ecacdbfe2eb0e4442a11006873d97a79134b8a63e78582261d01fbc25ece83f9d05da7d0fb8283faf2e821b3954c1877cbb9013c51109d43dcf9bcb9b7af419ff73f61eb7c23dd3fc11bc96ecd69f24a42b74acde5c494d8a3deb5df6f969b793254f29afc50174f2787754dcb69070f4aa155ad7133a3aeef3d598b7af59d7a6167953f25916edd45d17c71a53a2e376cfbb01ac2c2bfacfd110de3aefde43ecab65bbb5701fc77b7eb39db419eaaf5b3ab0ef43d0a0906fd489845abc329609d9b151dad7c26d8eb2f3cdd150d8e42c37e699789f1105b583f1bd366173c6f3469025bd4dcaaaaffb061ef7b5579be0b9ef697b44b25186a85f5b4ff3141dbf13ce4020434d43a41d6b2a7ac1ecf75075987ba695a505c209d72e8d34d2e936412ddd01c72879f19a6aebf2c50eb37aa113f0e24f03b1812ec5cf5de38074b37834791e8b97ac85f84b3e507eafe55d1e740ed1c8ea96afc887665b8a3e2fdd0e0e31a150b740d64a40422438dbe11c5a8a97fa639b936de49a04cc2e169cc86a27fcee5b6bb2ffa736a810ffdc9fd6739ac53113ace26cd730c69a04c272e4cfe91de27aef8a5c876f61a8e7a8719610b7d7883e13f6ae28e3ed013eed157893befb8ca4a7e527d000882c74a8", "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"}) r2 = syz_open_dev$dri(&(0x7f0000002140), 0x2, 0x400) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000002240)={&(0x7f0000002180)="1595589d92d30fc9b1663753e32502c705231fd91a077194512b52b6bbcc5cd610a14eb92f25dffc53eba4ee603f6d95636aa89b7e3c3d3577eeed2ab657a7035bfdef46a27ffae4f86905ea6e2dfb9e466955fe0eb566231e6285975043a96151e9f5129c3c6e1063df7f8ba4878264939c463f9eef82eb0288ff1fe8bc0273e362a7b198b12d44b0b337e5", 0x8c, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000022c0)={&(0x7f0000002280)=[r3, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) fchdir(r4) fsopen(&(0x7f0000002300)='fuse\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002340), r4) ioctl$KVM_RUN(r1, 0xae80, 0x0) execveat(r4, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), &(0x7f00000024c0)={[&(0x7f0000002400)='fuse\x00', &(0x7f0000002440)='[\x00', &(0x7f0000002480)='sh\x00']}, 0x400) (async) execveat(r4, &(0x7f0000002380)='./file0\x00', &(0x7f00000023c0), &(0x7f00000024c0)={[&(0x7f0000002400)='fuse\x00', &(0x7f0000002440)='[\x00', &(0x7f0000002480)='sh\x00']}, 0x400) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000002540)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0xfb2d, 0x5, 0x6d, 0x10001, 0xffffffffffffff04], 0x1, &(0x7f0000002500)=[{}], 0x0, [{}]}, 0x88) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000002540)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0xfb2d, 0x5, 0x6d, 0x10001, 0xffffffffffffff04], 0x1, &(0x7f0000002500)=[{}], 0x0, [{}]}, 0x88) getpgid(0x0) (async) r5 = getpgid(0x0) sched_setscheduler(r5, 0x1, &(0x7f0000002600)) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000002640)) (async) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000002640)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000002680)={r6}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000026c0), 0x100, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000026c0), 0x100, 0x0) sendmsg$nl_route(r4, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)=@bridge_dellink={0x28, 0x11, 0x4, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x4000, 0x51aa8}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4010) timer_create(0x4, &(0x7f0000002800)={0x0, 0x2a, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000002840)) (async) timer_create(0x4, &(0x7f0000002800)={0x0, 0x2a, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000002840)) timer_create(0x6, &(0x7f00000029c0)={0x0, 0x1, 0x4, @thr={&(0x7f0000002880)="453ff382f2ab11cdd42f38aa2e5c269e8c5bc2a1dcbec6e123a70f7a37c6d118207304bb0a1212f61ba2e48d77e0d274a855633d3223eb348ceff79d2ab9c698c3482428893921792521a39b903c7e962ed488238ec651c2662ab6de78d9a19e11cca85cfdf3914a43f1b8da345476ba1c0ef79ec23b05fc6ae61448c5bdc68be740e3904450f99cfb792cc52544332333241fa9f71e2dcca4286f5af5bd7e9ac40b3331d38dc36dcb", &(0x7f0000002940)="e36156f2775fe690937ccf7a4206fbf9c13cfee63b6e7d5f445deac032e018e22860f8d2dbcce9c9a16f5b7ea8d80973868d9da8d37e8cdf9650cdee62d8a84508d0dd134488d14324c8871318ddd99b59963a1896ac3aa0d8a39f19"}}, &(0x7f0000002a00)=0x0) timer_gettime(r7, &(0x7f0000002a40)) (async) timer_gettime(r7, &(0x7f0000002a40)) getresgid(&(0x7f0000002a80), &(0x7f0000002ac0), &(0x7f0000002b00)) syz_clone(0x40c8080, &(0x7f0000002b40)="82594dd6060ca3fb5ed75d8d41b36dc3409db59128c6a0aeab6a3994b5401cb57e599efc62e72cd4c4026fba133962b480c9b4cab17e3aec54edf817d277e36faf5cf1cbf0d1fa6fd11b2bef7d4fc5c99e26956418718007ecc94e2f0637e1af416025f582b3865920e34830cd59020b688fe3a98faec2dbe06a5011ef4f", 0x7e, &(0x7f0000002bc0), &(0x7f0000002c00), &(0x7f0000002c40)="e64af9857564a28f46a989c5b42c11c001684561f0dcbb2519194ac89a9c2ece77fb66b24eb344ba64c044bd5799bdc9ffd79a7e793df2f1b00fe0ce809011705e4e0d8364abfc5b50aaa5bb7bbc987352b7ba7759cbef208fb314113fb2c0daf37cb429f125e77f3cdb871afc855a7a1302f669ede8f2dc91a7aeefa41a") setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002d40)=@nat={'nat\x00', 0x1b, 0x5, 0x3c8, 0x288, 0x0, 0xffffffff, 0xa8, 0x288, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, &(0x7f0000002cc0), {[{{@ip={@broadcast, @loopback, 0xff000000, 0xffffff00, 'vlan1\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x14}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x5, @icmp_id=0x64}}}}, {{@ip={@loopback, @multicast2, 0xffffffff, 0xffffffff, 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x5f, 0x2, 0x10}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x40, 0x40}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010100, @icmp_id=0x64, @gre_key=0x6}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x2, 0x5, 0x1, 0x3, 0x1, 0x3], 0x3, 0x4}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x4, @broadcast, @rand_addr=0x64010102, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0xffffff00, 0xff000000, 'veth0_to_batadv\x00', 'pim6reg0\x00', {0xff}, {}, 0x1d, 0x2, 0x4}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @empty, @empty, @gre_key=0x800, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003180), 0x620002, 0x0) mq_notify(r8, &(0x7f0000003340)={0x0, 0x24, 0x1, @thr={&(0x7f00000031c0)="3ef4652abe0510c6586cbc88dcdc5b81d0985ffefe5b1da2b75d42dac6d4aecc9ebc4ced83a93d0313759760dfcc7a654a003d13e6231cdb2aa3e1eacc3a6268cb65b217fbfc475c2b3bfd2bd3f124adc060a8e6e324433a132a961ad242b8ebf75b464902c2c521c434f4cc74052173055ef63cca25e2e192c26c1f9852b3f6f54f832289570c3ea9812d7ca35ac7760893f1c66b2f1e6494998847d90bf4fa895e4d57c1906552c888c5e1f0a1557e3ecfa016c3f7979891cb00726d9869e96f0fab149ce51c0115bd832ed2a5aa882b0af43842ffa05f66edfb547777d21cd24e259932da6b8815d771e253", &(0x7f00000032c0)="2ec6c8a1c76c91fdf598385ef54a8d6d1a51fd2d67a7e131ed2905557177d870165302bfb66a07581798a14d0e46dde53ec0877f7e90f7c3ac4e7762449c61adf87338de6e64ba641cdb7944eee5dee7994259205e1d6af1e91fc0"}}) (async) mq_notify(r8, &(0x7f0000003340)={0x0, 0x24, 0x1, @thr={&(0x7f00000031c0)="3ef4652abe0510c6586cbc88dcdc5b81d0985ffefe5b1da2b75d42dac6d4aecc9ebc4ced83a93d0313759760dfcc7a654a003d13e6231cdb2aa3e1eacc3a6268cb65b217fbfc475c2b3bfd2bd3f124adc060a8e6e324433a132a961ad242b8ebf75b464902c2c521c434f4cc74052173055ef63cca25e2e192c26c1f9852b3f6f54f832289570c3ea9812d7ca35ac7760893f1c66b2f1e6494998847d90bf4fa895e4d57c1906552c888c5e1f0a1557e3ecfa016c3f7979891cb00726d9869e96f0fab149ce51c0115bd832ed2a5aa882b0af43842ffa05f66edfb547777d21cd24e259932da6b8815d771e253", &(0x7f00000032c0)="2ec6c8a1c76c91fdf598385ef54a8d6d1a51fd2d67a7e131ed2905557177d870165302bfb66a07581798a14d0e46dde53ec0877f7e90f7c3ac4e7762449c61adf87338de6e64ba641cdb7944eee5dee7994259205e1d6af1e91fc0"}}) gettid() connect$unix(0xffffffffffffffff, &(0x7f0000003380)=@file={0x1, './file0\x00'}, 0x6e) getsockname$packet(r4, &(0x7f0000003400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003440)=0x14) (async) getsockname$packet(r4, &(0x7f0000003400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003440)=0x14) 2.222550204s ago: executing program 4 (id=5201): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) ppoll(&(0x7f0000000180)=[{r1, 0xb060}], 0x2000008e, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r6 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, 0xffffffffffffffff, 0x2a}, 0x20) capget(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x8811) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r10, 0x0, 0x41}, 0x38) read$FUSE(r9, &(0x7f0000002d80)={0x2020}, 0x2025) 2.178607503s ago: executing program 2 (id=5202): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d0010000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1d0}}, 0x0) 1.888461486s ago: executing program 2 (id=5203): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) unshare(0x6a040000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x6}) connect$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffe85) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001900)={'\x00', 0x448d, 0x4, 0x2, 0x7, 0x64, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000440)="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", 0xfc}, {&(0x7f0000000340)="ce8a5a67cc0ebab2f2ea33c4333ff749138852048490c423f3e9569da3477c96c45c0e16bb8dd09e2ceacaba35315ba512367d8535d03cb9a25dc83c57fd52", 0x3f}, {&(0x7f0000000600)="fde0098fb179ee8f43372ef7c1308affa1c68d6270292c681e99d5860fe72955c188829a3bc49b1e769be01527379dcd77c599bd080d578d6320a30c3523db06ff344b5102961f6f9822f2eea068bd9be42fbab922b28126173de38505a223a030e6cff798780514bddda4187f288e8366388ec7e9d7d605b98a9e48b376bf2d7663832ee11b66ab8c444028b70574f81308ac422926b423d666b456970afed50e5147bce8", 0xa5}, {&(0x7f00000006c0)="4f1c38268d4caae8a447dc510766dae3d098db5c6830421dc94781eab21509690c9c2dcf624b7e6c6e3fad5219f1a76d0655e3398ad972bfb166929291f41f483162e6788c9d09b1d7e68c335b0099783757a3ea956857b667d50d233c484aa08cd62644f32737f65ee0349724ab5ce0b0323bfdbcbd0c5729cfe1a0f003a7e1de1251a218c2e79876dc373310853f23fd8ed2acf5d9dc838951e4043513b2915e264d8b73e9a52f6db633b7a76904fc69146c1aef986f4b26f172a574c1a3656fcd0c1a0d9c73372474778be7aeaa1f8fc285fea972310396893d95945ff92f48a6e294b856e8", 0xe7}, {&(0x7f00000007c0)="9b55495333291d996c41865db2d6a903441c447d44b35cedcae5f5a2623d59b573d6b3e70bd162a1fdefbe18ce600a9e9e499f68a9fad4b0375ade0399eb1b90a33f49ee0e0c19f4300e1645fc58fe6d91ffc871b8e5b47eac1c22fe4befc23520fcfa65be4cf3a057dc257fbd9929d905223293e2cb75a6f04d66cf60fa7ad79553f199a1a5e4fae50083c2b1925e2aeeee4a179690a4e3723247d0465e5cad5fa6c4e3edfe7f815acd39dc1ff5ae326a07d23d700add33c02d51080f5a08bf2220bed7707bceb524a089c18fa3107645e53195f94733970b2d4a79971012b353e2cfa12ac2ff44541b0237f134c0a70eb25082cd20ba70d7ac354740a9c9304746a2ecec5d50ebb317b7945ce8f8cbc59deb68c3cc4b0f870da943f8970664bd67cec6a45cf13f72d0881942932328ac0c4eb8fbc9ae06b97c184d9c359899668821766d628573f9ebd09e310f4e9fbe855baf9a9a51591de8138a3d0f60aaafba267d958e4c69d4442721d4594009f109a6394d0d692bc7e529d06762e0062a0c880d77b3635002597ea9ed2a41fcc24869fb03ad4211ca484b012f20d10b7c08e0f1859ce5871cfc0cb98ff7c5ee40f09be32c1e6065fae66b428ef6dc3a65c5086bb5a761801d5595a8be763016e25e690877fd52f5fa18c7c1b8ed83440e6a918d76a97a6e95c8eb57d1c0dff45443e6768309d450e76cdde9cf6811f7db1f3890a6caaf8c1ccd8512cac9faad347d59557d4a839e7726015cc4ca9f2b826d07f0652ce0b72977a5198f1f8878093228722b132afe59806cfc5067079ab493baf9d88a8b330563ee495033bfd52ffbe71aa5b5096708b141b862b183eaf407d98ed9b734bd9aa445c660e713a4c7f3386b31f17b174ec9e68a5e2d0eb3e0a4f0b20ab0af661b86fef73072017f4fca7431074c649babe05c179408bae53c0b3777081ca27320e08d48592d8d630b457a98d7391a92a43ffa57a9512ce6eb3a5659301fbfb8411f6629dbb7cfe15d9759ea372a4e52ce8324f6a3394ec56ad4f80aad5cf837f57dda7853161772325882271e1a8ceca1dc9831b52e6e3e9a1927d375028a2e1e2049fcdf7e9a7cffad5da99a84fd6fba6ed5956dd3891dcef254cad04b00a73e01e890ffd441e411b303003899c4ece574f13c2aa2d3db5bd8d353342b587e1a5cb85e30110f164d0516871992fb63e03bab2ef21963061bd1e7d377f6a1bc7fbf469da15a7c4888e0709c5b24c7bcca44e83d5d674cd00b95b9dcc72231eee7d6e2291d8156bac02f5deb7bb9b769e233d39a2cc80c68077140e1948dc05d867b7e8e26e3a8786b97bbd1125975c05b336bcb57b9d83c1d31c2102623a2eed6cc60cfb0e95b1def9174a366994a869e6aefcd8bbcbef9eee5a5d09e9b7b51ab4c2c1120e535100ed4cffcb8f06ec380417e0a982522947b134a07c304a2a9e8ae9628297b1caf2f35fc53f1d66784158963d7f3bcb9004108191251fc051ac45017940c9de96b7c38faccc82240fabf05c3a17d83184f4fa24179aab20759b4d1cbc3fd0a96271e414f565c087c3febf84588c64209ea368695bc52c81f1730664e75f8ecc798837427651efa9419e3801c0a684086ffb68fd0d5c83bdcf0336f5d775ce5df55023408e5eff1218b6f54d23391251c0b4e7a28357607edbcccd17c24ceeb9e3b63ee8be6979df4c80fc734e03faacd9c804426948947161064a0faccb26b5e9f2f559cf401a23bf1b7bd56bffdbe9d3cc2df447f5315ff660d9c62203f8d3b0ec46217ac1d023626310863c01adaca721b454cd8185b648ea40d89d83726882ddaf5ab2140de9646e8e3053f79556107ea858f2d72b08fa9a37bb33f8fc29e16989af2513d9f4ed39ee946bacd5a63543f7443a828c05a36789a7e17b895f54ba7d1ca6094379fa9364d0381f16c4931414615c559e7379a6035f4250661bf0898932f2f415037d98506fcbb49810a968ad83ef7b11fa2d21bcc111cdfa92597b3b990096e8c27c26525ac881a2fc03b2ed5883c1047703be728b20344a03c6910650242c8716acef878ff6f3e31f2ba0d4ac103dc395a74885565d53abcf3557cf0e081b95003e1544dde5733fe3b6a35e9326316339122c79ae6744054795d6b1fcbbf380b7fe29ae1378fe84cf5427f0444ac39dd5fbda2b0978aa4c3533509d6165f318e1cbfc20fd9e1920f62a65f9d05d244e3cc6c1349b2b628d57350995e29f6c6bd372d1493493ffb4dbc8cfc3d6b91edb8f0fa1fcafb669f036b71280f70fb999784da77f6a4163cdb2a705ef1d88d6436e08757cc752cfc0d1b78673e99069bc16b4c24c30de8e1c0620010b1a6802b466bfc299c9a095833ed86ce85a5071af21a61d7de6d8e9ff8f9743af4323bbb76e6dc9430e8a992b057df7c7e2ce5458c875b332db079464d8a73efa522540ae7899b3446eef85c05c9762f34b0e0fe70533ef4a560cd15c0bba9e54dc6a9bd96413751b2c43b3d13543d9e3dce215538be01769acd789a5d5fc8d8945541c626c74cb31605057a878759300beadb4a2ea66e84d691d6347160d37a306ba0a6479e8160bcdb8c4cf0af92fcfb91077580d4842a6908b075c6113630dddd7d0cc62444c976b389cc365b80ee14ea889323df2203828b16416a7587b674e78957fd2528e800cfdb3cc40904660a13196cfb7dc96b5d0cee825e1505fef66b0cb72a6a0fc8d7039cab7fd6fa9b0303e31f7a1909e670576864bc872dfb112ecec7752892fc55f525249543a1460455c6725b201c2997b2d915dbe29826914385cc7c27e7912852b7db055622071fd563a542c10ea230013779669b544f6e2c61ffa0426e0a05c140773a586e6276563536e459a65cfd3ade6bfe4e8313277adf69c673a529299e1218d7c7702edad61eb231f4bfc4b38643376d4194a4f20ec615a4a32ec4e9abcc9227c7dcc45ab224f1aa29f3ce3e140f8b875ae47b2e5ea83a06a29c1f10de4904ef237d55fb9d15888ba9be2501059cd5c279db8532c12466f3e181d39a0d2fd995a07f5dcdd3181873bde738c1e161eb9f6a68a16cdd58fc396890121e1335c4f6afaf6328ed31caef587ea31117feea670bd3370794f09c107538d4e2d6f66bcf2db03c6c0dc7654c4fa089a06c31004e06a2931e92b9fc53e377e99ec4aee7315449d6c098df4637c94cab9e1034773d0667d4ad9f01a9103febab3c395a6a66ec69d9f47546531901194d7794613870af926394b112ab1cc0edd745a7cc8fc2decb01400cbf6cf122a7d2d9a2e560a34ab716502fe0053bcd2806b2abe24800e470c954d20c3668e297d425b7c18d4ed0ad2a8a046fbb32e17aa5937a5122dfc5f9224a4fb4e0f9071936ed8979a663b8fb11ab3d633c50d75cd52b0680245c1ba9e66f0e0b520c626557657042a139681ab0c96d7a60b6f51da3134d2e529a316663337352d8d0be92fa1ace88fbd62cdf8c40a6f9f8ee3321f5579ae33546e8fae8228f28147b3378bb5ff81860e156e42424f564c58a7438a1587ca9f609536cada638feb57a1c4ed4f58d470dfc36524041cc500ab1479224ae3bbbb34e38a16bd791be7bc219255b03a59d16f293e77b08c23dbc7cabfd6f429db9f77c11f597b85b246dcb39e985891ebda7715b045d45c5d83c94d8b3cf25907eebb7c551d6ebb4d423c74a6f5907ea2548e45533def5b5d2ac79d7ed9d95652efce6bc332381bf3a5414d93e78df72e54f7063d8219c2ab97a539e3043d5ffa1506ed4e6d6e7c9f09530109b105b6e3dee65f1bf9cf43624aff63b274f0331036969162d7462ed5e248aaac35cb722d8b5ac7fad95c2dbae597b6cdda2d863d2781f5382db2a562e84a1ad5922fbf36fa6ae216e2da946f51cf5fd0612c88fd2ad0061b4b1f83d0dd88271acf982ba67496171f4d98afe34371d0a2f6ce82a513dbcac9a7b2d73973f6230eaa33bad2523bf2170a900c82dcff0fbee0832f9106d44a2d05488d027890b1c349edc749e07fd1ea4132972587850432288493806eefbbb32c4f6250c1005e08451e05907bbf11e9aff75ec5de462b2f6ac9362558c354e2f27533c09ebae93246532f79d9eab781fc8d5936b561501b0831fac01a72e3c64182d5b96aa9cfa710ae5bb60449a25ea3605c8cf2b6259164ebc3db73ed2d6ba146e016d8d928d0f4c07c5bf513a1641b879d2a99106044f56d60945b87aa6a1f8e576bba76194a3ca2b510a36301b642d188d937f5cfe8284297b18ccc15808de3cb498027f5b556b830a310c161a117d1f729ec4cd9f15c047b10c027ac8d4284dddd605f5af04493b7126276a9c38db21266b86738425413e1fe26c0cb909923829dca90269b64d014a5af2c328c7f449ec95b1fe43bd8d1a856ba75a6acb4b4c2727d2949f181815904503254efb7491462fbe579705338c9b0d56f493897190346820fe880df951307847201dc937e990f88597ac026702ebef19b0a010d723fa013790ff863aa2dd5373033299aade06982b834fca969b64a6170aecfbd6eadaeb9676d2b21e38e2869b9305b5afca41aee664802ba5b135c1a50e6d3ac278b326bd6a447c2fc8bb59b61b53c73d229ef10f4692d779cacda2780b16f14cf70823c390f70edef367697ebd81f5fc1460648e3da6aa589d87749a23438f746b7e97286f91fccde31f67b981285d9603fb365272d352dcad0de9457aec77623250ab0d33cca72135adc5918e7ae6b3d82e45d1a6097b7fddd4f85a5377d9bf3257c51723aa3d404782cecc194f435649815f44dcc30c004366ce02afbfc928e8288592ee423b40e0b2bfcc77643c8a3abd03581bec9040f3629ebceaf1715107101a04a1cc4adedba0f3ed3855b4394a7c72527ab287d072a8cc4f2e35f790cfeb179e0b07a0aaf0a31f9835a4eb71c248bf4e496d7f46808d6fbbeac22c09ecd32c5c7988e55e9d4fd46c1e2d361056e30a3cbe1ac89cdbca6387f2806cf599b9498d0ab79cbd342a113c9df54df714c734861da646cb1baaa63c54779664fe81edf71c4cf2b21e5cd9afb165fc0946140f9d2cbee7d2d628d8e2602221420dbfa398e6169d7e2eb8441960df1a90f0c5cf070bb551d09c4d7a87ea965923677131c42cfb75ff8a0ee00e7564f4f932d01c92b7396b84f154844994ee779033208655f3e10d4772698e389ee89bea4f53aef81614837960c31ecc8681f675b3166606c2d23a918a4d5461e5b1e6ba3e9cc218485e59656447484e5703a00061714f07f293cb9c61b8abf29e2aaa88d6ffa96f35103b2d46fdf9132bbf167ca52a68bdd75767d077f9d58fd8b3fa1699e458c4097cefe74a8c69850c2e05590a581b9a3b45546a7a2f3d67ba8c2b4afc31e4ccddd54e3821db411c2999cb38d1005eab58d0c57fada2463941092760a5ac68517748f1a4e7df02e71dec2774bc6dd17ae2a9eeb08e30def435275f44e0fecee92abe90684bd0314f30512b129914895fff1a94443806cb3708df936d83cbff6e6bd7541386ffa9045205d96077c9f88b23b3074ea4580d0572f1857b8c6a72f92845bdbb555bae0925154acd3bfa61e2c5bd35b8272555ac476d34cea4f9e70d103d51186583a8a8d9bf70181203b4e6c2859ea1e73313619e9b5aea81c1b52bcafe940e032fba5bb1675292b15c9298b171511bdf06c97077684a503aa98384aa68975a3315b6bf814a040126b3e9f990535bcb873e79a1dac0684fd67daa954dc215c712467f6b9db11cfa3613cff0d47e7f3edb417377c0150a", 0x1000}, {&(0x7f00000017c0)="4fa719d716450d1d5d30fc6d121333d109e2da5ca78ef3bc4b201553fc7e57c7a99094aa46ca7af1b7d074a11df9fe298cd9a1c77cc4925d0dcf457d4840d9ce9aa60645e5afefde4220ae9e4391ef70c31cbb5e8972705fae5a694e0e1f748766254a0b85de767c3a6d289433923a30035910c6c3ec739a750fe83fa63b920a016c98168ed206a1ac3f43a0909c3fd5", 0x90}], 0x6, &(0x7f0000001b80), 0x0, 0x40800}}, {{&(0x7f0000001bc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000001c40)="6588baf88640daeb594fc78eeef5077d6756db51f785efbb6ef0eb1c7c83a7f9ddc771be0c43ef126201de194a2d4b71a524658021dd510010436f47d8c6ca075f900b3e7d388ac2c6caa39424f45d5d47a971834ce11172286048f6b556ac309710eb83bd87cff43c6d26a7595d8501836312f3b3992b1bcb1dfcfb1a95496c4fa98e7b7b90881cc0268a03a454c692386d3715df3a29b486657855c05e40a49cdce7b7ea4d30b63a974df630a53c3851bfcab3a7d8ca8ad0a477dc4088922848bad04ae825", 0xc6}, {&(0x7f0000001d40)="fc815ea29b6beccf4d2e15ceba1e35a075326285bf21f137d389b81561a3883e8b84", 0x22}, {&(0x7f0000001d80)="ff65b5cdffb008545c6d7c71b3626e75f35386880f19dfbe44edd1c3fb8e9c7e3d4d6183bdf5d0da7ee3d11d7493b7838d3e74b0886bdbd47bf484ca177b1aae737fb3a3eb2438bed8811be08d6e68f361a552178f840c336baeffe0652f41ffb167f645ae2cb295f71f15f0b70168c62f5ea23738945b99d97dc057a3d3499927b281e7fb7a72bcccbda71874496226", 0x90}, {&(0x7f0000001e40)="e4a5a8b2966a6c3f890e49da6ed453d82112407e930bfcf1408ec475200c0754b05a3b6c5ace53e44f2d5c08630b8c32ac26d81586365945ecc45f5f9162d6f3b8ddd80d3cae38b5d0f1f08c4863e50bd93643996fb1612f6d23f150bdcda80024bc", 0x62}, {&(0x7f0000001ec0)="58f78fa3145b1cdd721211c378b41ef131c9dfb130145be240d01dca6d4cee47a83107229c34ad6a05dee1401a90ea2576127c2439013582c00d2cea894558239fbd3fd2355a7759fe57030966a3d96e29ec4be5662d9dcf6e29550e0b5b", 0x5e}, {&(0x7f0000001f40)="22d3857ad87cf9b980449711d210dfcedb6415759e0494c516efb03e356c8c80506edd7fa6f6704497b57e892f194a54486dab731f56f0930479f2a607be61cf2fbf8632bf76ad98c63f", 0x4a}, {&(0x7f0000001fc0)="8504977aafafd0e70fa47534e4e46090780856d2c695d4b3b9d27d54b1c534a71c7eccf6b42c45e3b3b594a29d1d2fe360e57b72c76c941dbce493e53a05ab917138587956b2cc0b86d5b5b28f9a54b2d3228c7188b970c746174f0516383a9b433b13df5c08f8d5b95d810feff97b62014ea76b602ca861ba981b918fe87e1424b8d178d67effddbd3f924e99b18b02b67b3a990efe83dc9ca06e8f5b5bff570077583f327135bb1a984b352a8dc27b047cf66877cf95c4be9d3523f655bf13b02b2bc69387", 0xc6}], 0x7}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002140)="f09155cd9f9f60a4121c41e12799ada60f0feb70516ee270362a84aeb9483dea6503943fd91285278ececa7046a86516dfc697e2eb0f4cf59bb2d852eaddcf4c71f9f1b2965b15de11e6c10b6c7a921013256f286cc37e963d7ae830208be95a8f40f6fc8d4e58ff8f7cda68158a9897a1a02da3228b3bb6f644dcfff6cadfae5d28dca4980264fca67a5b298dd4a2dad345df1e7db2167ee5e8521ea4b67073a7f6128ff72e89640139c5e9b3bb15d1", 0xb0}, {&(0x7f0000002200)="a8ed58258b08f31c6e0f496dc08b51d2f18748c76f8b2520259e27d0f5257267dd6a0631efd39969496fb4176411b6586ee8e247cd5299", 0x37}, {&(0x7f0000002240)="f9a341e06d3546d51aa8e4f0a7fe6e53ee64a1ad5a595d32e930bb9553534e2e8023e59a1507674ac4d861d994dd4f0d1123f2ff33aea8af24a43de89028dbb2c2aee1c3d32d808abe79b2c45e3df3c555b3c1e59c10b9b5708a247194", 0x5d}, {&(0x7f00000022c0)="81efa25d50c8cd17acd0b3e2a5acd7fb1db8c87d9fa6c0964942248dadbe80e69e151974da943f6939c178557f0fdfe20731a05602705c62a9befa2da4dca33fbf2fa53462bf575447d34c0b4aef8f0d71353252dc9cb1e51387ca38b765a6cf6aea179026c3084323736c17b7cd6887d1ebf9317763aa6f59ec4248ed8702a814f4fe32c3a94b473a14d3f560dad3b4387c82c847ffd9", 0x97}, {&(0x7f0000002380)="f936ebe96f5fa7eeb3a74cc937caf0db1d87af1a9c99567505432f15a1a602c30a9e88c38ffd3b6d79c5662cd133b1e80d79d4e6a1e7e00c269c1650a0754847b5fd7a036caa68117af2768ceddb215a5f5781dc5e063f842ae540ca96f85a533d70629361ea1b14c77210c8d74d3c587472e1e2ab61", 0x76}, {&(0x7f0000002400)="33b21e676c7750e2d02487d371a8c4c8d76810f72e79ba794e125c77c824887a1d09196e52ee60504720f05688471d1067ede55c6cae9e59ad05f6c7800f0ba09f251555b26925e532cd565c09a0824858c204087464a9c54421e88532b9c57958872250569c2303e9f21fe2f220698c9a5e1a8636aa0fe28725ed7ecc87c352260f68424eac36ba4d518a68a857134fc7a8667d8c7ca35ce188098e25cf1b95a9b9dbc0655455dc564c99ce57af2806ee7bd702f9cb8ecbfebbf7d2d86afcf8ca9857b41afb2173339afa84c9b7d5319904f3baa6a7381b4e67c37221c2cc", 0xdf}, {&(0x7f0000001980)="e474d022eeadf8e42c3957a98065971b86a0b1a13e44e56ed0e64f4ebc135711bca036c121cb6efbc07df8eec8c630102c85d1ccf53a19682945d92977ad7494e5949bc3fb8610c01cd2b6a30a77ed0e", 0x50}, {&(0x7f0000002580)="4c4e4b8aa4", 0x5}, {&(0x7f00000025c0)="25af8413b6ab3c0903ac78a69accf6d20fee195d8e496fb168f167f32c01831d088adfa4517ac268ffe8fe829a52b789377303a1ce2448d33953edc78b8a18147982f8d201ea23c1bf8f0bbb7c2ff4a53c8764c82c3dfc2df7b4e566bc8921f842053de097d9dd89652b64594c901346db13472fd9f810e7acbb6dc21fe4d9c06d9423b421a042a9597d5125465ce60ed6b886bda0e7cd692fbc74e49fef2fce17", 0xa1}], 0x9, &(0x7f0000002740)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2}}}], 0x80, 0x94}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000003c0)}, {&(0x7f0000002800)="896a861465e19273796cd687ceba8e8ed05a8dd0852b2bf7c7be96aaf7fdce909243bb5e6d461a078564a34deff07f908a99a70474", 0x35}, {&(0x7f0000002840)="933eb822ee6e8fe3f775556ab96f8f30faca0800cbbc2a16975683e3f1799dbbad45a833d1ff2379479f545150416284c50c2cb462387ea50daeb6e265101d62916d94f7733a3e1d906be4c692edb136d9d1ca9cbff69e9be1004d7a5ad6ed77db7f773e3e25c84fda15a030b773b2d738bb0c2f386393d6e401683454d88d91398e1c6f632032fa90171e4d622a56b21e2d6279dddad90ea9c8", 0x9a}, {&(0x7f0000002900)="d7503d54dc16d99c131ee53300013dafa62b39afc02769e6357298692eb0667a63dcd56a038b4a1a922f51e10a7bc37b5adcd07dd986e5dcf20343cf1d09efa1", 0x40}, {&(0x7f0000002940)="7dd886a8620efe83ecc8e62c5a4272", 0xf}, {&(0x7f0000002980)="8dd0dd35c6649af8240c2998cfb30ee9013b9522c9ca561fb02a4ad265855dc38041f5ee4ad1d057c330e8309fdee6", 0x2f}, {&(0x7f00000029c0)="cbe4e93561b8df122d8a3707ac6d87a1c702bfffda5b47c050a966c2ae7566efb88c67463888839064e7e744ef2dd78dfcee4f35e5e62e45ca80e833f2a47326719ee76a9c86e12223c14d0014fa4268971d5ad70490a20ec624acffcf453ebae5b9e88a9542dd4f98229447379d4ddc081f50daef8ca0b17d10af4dc839267487969e720f9617d6cd784e62c1a9e506b9b36b6f208ca32d01f6644264c455b7bf13", 0xa2}], 0x7, 0x0, 0x0, 0x20000000}}], 0x4, 0x0) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x0, 0xf, 0x940f, 0xfffffffe, 0x48000, 0x0, 0xfffffe0000000822, 0x2, 0xd}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000150a01020000000000000000000000010000000073797a30000000000800034000000002"], 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r6, @ANYBLOB="080002"], 0x40}}, 0x8080) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'ovf\x00', 0x28, 0x0, 0x1b}, 0x2c) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x4, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x40000009}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1, 0x1, 0x40000333}, &(0x7f0000000000), &(0x7f00000001c0)) 1.851986219s ago: executing program 1 (id=5204): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x80, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x89901) r4 = open_tree(r3, &(0x7f0000000040)='./file0\x00', 0x80001) ftruncate(0xffffffffffffffff, 0x2) statx(r4, &(0x7f0000000500)='./file0\x00', 0x2000, 0x4, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, '\x00', @raw_data=[0x7, 0xab, 0x5, 0x0, 0x1f, 0x4, 0x85b, 0x9d0f, 0x0, 0xe119, 0x200, 0x1, 0x0, 0x7f, 0x4, 0x8, 0x1, 0xfffffff9, 0x6, 0xc1, 0x6dc967d8, 0x74, 0x5, 0x80, 0x4, 0x800, 0x1, 0x8, 0x0, 0x7f, 0xf, 0x95d94000]}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x104) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x3ff, 0x2, 0xe}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x440, 0x403, 0xc}) chroot(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') close(r5) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xfffd, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="020300020c00000000000000000000000200080018000000d0be830000000000030006000000000002000020ffffffff000000000000000002000100000004d50000080201000040030005003200000002000000000000000015d00800000000"], 0x60}, 0x1, 0x7}, 0x0) 1.789850074s ago: executing program 5 (id=5205): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 1.60418055s ago: executing program 5 (id=5206): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) connect$pppl2tp(r0, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa, 0x0, 0x0, 0x1}}, 0x26) socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000100), 0x0, 0x4008040) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1105, 0xff}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010100, 0x15, 0x3, 'sh\x00', 0x28, 0x0, 0x70}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x6, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000180)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x1) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80, 0x0}, 0x0) r6 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000140)=0x12) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\n']) sched_setscheduler(0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 1.253594118s ago: executing program 2 (id=5207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000000000003000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000004401050020010000000000000000000000000000000000022b0000000a000000fc0100000000000000000000000000000000000004"], 0x1fc}}, 0x0) 1.209709564s ago: executing program 2 (id=5208): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0xfffffffffffffe30, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0x3}}]}]}]}, 0x48}}, 0x0) 1.018841188s ago: executing program 2 (id=5209): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000200)={0x3, 'caif0\x00', {0x5}, 0x6fa5}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/190, 0xbe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={r8, 0x5, 0x800, 0x2}, &(0x7f00000002c0)=0x10) 707.890712ms ago: executing program 6 (id=5210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) eventfd2(0x8bdf5, 0x80801) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8}) io_uring_enter(r1, 0x2ffb, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) socket$kcm(0x29, 0xa, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, &(0x7f0000001580)={0x0, [0x0, 0x100], [{0x2}, {0x5}, {}, {0x1000000, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0xfffffffe}]}) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd) r5 = syz_clone(0xf808d200, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0) capset(&(0x7f0000a31000)={0x20071026, r5}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x341880) 550.828453ms ago: executing program 5 (id=5211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) write$P9_RREADDIR(r2, &(0x7f0000000040)={0x87, 0x29, 0x1, {0xfffffff8, [{{0x0, 0x1, 0x3}, 0x0, 0x4, 0x7, './file0'}, {{0x20, 0x4, 0x8}, 0x994, 0xd, 0x7, './file0'}, {{0x80, 0x3, 0x7}, 0x1, 0x8, 0xffffffffffffff67, './file0'}, {{0x2, 0x1, 0x5}, 0x3, 0x4, 0x7, './file0'}]}}, 0x87) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0c01000016000100000000000000000000000000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x10c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) pipe2$9p(&(0x7f0000000000), 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) (async) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) (async) write$P9_RREADDIR(r2, &(0x7f0000000040)={0x87, 0x29, 0x1, {0xfffffff8, [{{0x0, 0x1, 0x3}, 0x0, 0x4, 0x7, './file0'}, {{0x20, 0x4, 0x8}, 0x994, 0xd, 0x7, './file0'}, {{0x80, 0x3, 0x7}, 0x1, 0x8, 0xffffffffffffff67, './file0'}, {{0x2, 0x1, 0x5}, 0x3, 0x4, 0x7, './file0'}]}}, 0x87) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0c01000016000100000000000000000000000000000000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x10c}}, 0x0) (async) 419.76293ms ago: executing program 1 (id=5212): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000012000100005e39b200000000000000ac14140000082a4009569eab0323a8f0aac3301c0000000000000000000000000000000031080000000000000000010000000400000000004f42c4203aab896d6f4fdaf8246e8a4b36eff4752bd79352a22895d8ae32f58b2a009642213d027e0d6f446c1e373e4f5d2f1fff4057d35bf6784c19549d6c4d2c9ee482fca3305b741825804ff2690f22dcddd42fee776e71914292941523b22b4f7f66560a097ba0429977dcdb1c61f4a577c2e662dbaf03ff4b9f55857aad5b61354e51a3"], 0x3c}}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400)={0x4000}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001080)=[{{&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000740)=""/135, 0x87}, {&(0x7f0000000800)=""/143, 0x8f}], 0x5, &(0x7f0000000940)=""/213, 0xd5}, 0x3}, {{&(0x7f0000000a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000140)=""/62, 0x3e}, {&(0x7f0000000ac0)=""/68, 0x44}, {&(0x7f0000000b40)=""/186, 0xba}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000c00)=""/90, 0x5a}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f0000000c80)=""/132, 0x84}], 0x7, &(0x7f0000000dc0)=""/240, 0xf0}, 0x2}, {{&(0x7f0000000ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f40)=""/76, 0x4c}], 0x1, &(0x7f0000001000)=""/79, 0x4f}, 0xce8a}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002) ioctl$CEC_S_MODE(r4, 0x40046109, 0x0) close(r4) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) openat$sysctl(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000240)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0xfffffffffffffffd, 0x0) fsmount(r5, 0x0, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000100)={r8, 0x0, r7, 0x0, 0x80000}) 372.503637ms ago: executing program 4 (id=5213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc01000019000100000000000000000004000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000440105"], 0x1fc}}, 0x0) 235.204597ms ago: executing program 4 (id=5214): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) (async, rerun: 64) r4 = eventfd2(0x9, 0x1) (rerun: 64) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000000)={0x1, r4}) r5 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000480)=r5) (async) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000001c0)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) (async) tkill(r2, 0x17) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100001000009500000000000000bf91000000000000b702000000000000850000007d000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) sendmsg$NFT_BATCH(r1, 0x0, 0x40880) (async) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) (async) r11 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@wr_drn={0x68, 0x20, {0x1, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x7f, 0x8, 0x2, 0x8}}, @nested_create_vm={0x12d, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x8, 0x2}}, @wrmsr={0x65, 0x20, {0x9eb, 0x2}}, @in_dx={0x69, 0x20, {0x149d, 0x6}}], 0xd0}) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="dee7c4e13ded108fe850873bc99aee0000000901c4e2119af9b805000000b9bed18e330f01c1c4e105e47300ea00000080a200c4c151e0fbb938080000b8f9ffffffbaffffffff0f30", 0x49}], 0x1, 0x20, &(0x7f0000000380), 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r6, 0x1a, &(0x7f0000000380)={0x5}, 0x1) (async, rerun: 64) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x40, 0x0, 0x0, {0x0, r9}}) (rerun: 64) 155.399803ms ago: executing program 5 (id=5215): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x8007}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="28030000400007012bbd7000fedbdf25047c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32=0xffffffffffffffff, @ANYRES64=r3, @ANYRES32=0xffffffffffffffff, @ANYRES16=r3, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0400b38004009e8014008e00fc0200000000000000000000000000000400048008005000080000000008003800", @ANYRES32, @ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = io_uring_setup(0x1138, &(0x7f00000001c0)={0x0, 0x4514, 0x8000, 0x0, 0x219}) io_uring_enter(r8, 0x2c46, 0x624, 0x50, &(0x7f0000000080)={[0x1]}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_getnexthop={0x1c, 0x6a, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008889}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100003044000"/20, @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x40}}, 0x8001) close(r2) 0s ago: executing program 4 (id=5216): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) readv(r0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x406, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0xc1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f021}) kernel console output (not intermixed with test programs): an available UDC or it's busy [ 1178.703638][T26699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.717017][T26672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.843253][T26706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.851982][T26699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.852514][T26706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.876996][T26699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.888601][T26706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.911854][T26699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.913711][T26706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.950932][T26699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.002279][T26708] sg_read: process 1150 (syz.6.4719) changed security contexts after opening file descriptor, this is not allowed. [ 1179.175960][ T5943] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1179.361655][ T5943] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 1179.371036][ T5943] usb 2-1: config 0 has no interface number 0 [ 1179.379896][ T5943] usb 2-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1179.394813][ T5943] usb 2-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1179.514794][ T5943] usb 2-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 1179.523972][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.577868][ T5943] usb 2-1: config 0 descriptor?? [ 1179.583984][T26702] raw-gadget.9 gadget.1: fail, usb_ep_enable returned -22 [ 1179.603950][ T5943] cxacru 2-1:0.109: cxacru_bind: interface has incorrect endpoints [ 1179.635413][ T5943] cxacru 2-1:0.109: usbatm_usb_probe: bind failed: -19! [ 1179.700053][T26715] netlink: 324 bytes leftover after parsing attributes in process `syz.2.4731'. [ 1179.792700][T26717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.805571][ T24] usb 2-1: USB disconnect, device number 103 [ 1179.815559][T26717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.860899][T26717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.884449][T26717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.181988][T26723] loop5: detected capacity change from 0 to 4095 [ 1180.624169][T26739] fuse: Unknown parameter 'ªhgposÆG‚00000000000000000000' [ 1180.724323][T19983] usb 7-1: USB disconnect, device number 76 [ 1180.745488][ T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1180.821975][T26743] batadv_slave_0: mtu greater than device maximum [ 1180.915746][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1180.924406][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1180.934267][ T24] usb 2-1: config 41 has an invalid descriptor of length 246, skipping remainder of the config [ 1180.946676][ T24] usb 2-1: config 41 has 0 interfaces, different from the descriptor's value: 4 [ 1180.961228][ T24] usb 2-1: New USB device found, idVendor=19d2, idProduct=0078, bcdDevice=61.be [ 1180.971868][ T24] usb 2-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1180.984322][ T24] usb 2-1: Product: syz [ 1180.991628][ T24] usb 2-1: Manufacturer: syz [ 1180.998662][ T24] usb 2-1: SerialNumber: syz [ 1181.261527][ T24] usb 2-1: USB disconnect, device number 104 [ 1181.306073][T19983] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1181.524918][T19983] usb 7-1: Using ep0 maxpacket: 32 [ 1181.544873][T19983] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1181.554306][T19983] usb 7-1: config 0 has no interface number 0 [ 1181.563478][T19983] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1181.576704][T19983] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1181.586930][T19983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.600592][T19983] usb 7-1: Product: syz [ 1181.616128][T19983] usb 7-1: Manufacturer: syz [ 1181.625396][T19983] usb 7-1: SerialNumber: syz [ 1181.643057][T19983] usb 7-1: config 0 descriptor?? [ 1181.737736][T19983] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1181.747843][T19983] em28xx 7-1:0.132: Video interface 132 found: [ 1182.202471][T26747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.301006][T26772] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1182.355362][T26747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.497257][T19983] em28xx 7-1:0.132: chip ID is em2710/2820 [ 1182.756032][T19983] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1182.952779][T19983] em28xx 7-1:0.132: board has no eeprom [ 1183.034756][T19983] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1183.042889][T19983] em28xx 7-1:0.132: analog set to bulk mode. [ 1183.049059][ T24] em28xx 7-1:0.132: Registering V4L2 extension [ 1183.059427][T19983] usb 7-1: USB disconnect, device number 77 [ 1183.070796][T19983] em28xx 7-1:0.132: Disconnecting em28xx [ 1183.339651][T26770] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4746'. [ 1183.487166][T26778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4747'. [ 1183.611984][ T24] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1183.643376][T26783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.667946][T26783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.674916][ T24] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1183.713846][ T24] em28xx 7-1:0.132: No AC97 audio processor [ 1183.737198][ T24] usb 7-1: Decoder not found [ 1183.757517][T26785] loop4: detected capacity change from 0 to 7 [ 1183.764386][T26785] Dev loop4: unable to read RDB block 7 [ 1183.774761][T26785] loop4: unable to read partition table [ 1183.775506][ T24] em28xx 7-1:0.132: failed to create media graph [ 1183.780893][T26785] loop4: partition table beyond EOD, [ 1183.797113][ T24] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1183.832203][T19154] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1183.852120][T19154] hid-generic 0000:0000:0000.003E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1183.883750][ T24] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1183.924079][T19983] em28xx 7-1:0.132: Closing input extension [ 1183.943473][T26785] truncated [ 1183.957038][T26785] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1184.017377][T19983] em28xx 7-1:0.132: Freeing device [ 1184.096999][T26787] fido_id[26787]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1184.624826][T19983] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1184.803779][T19983] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1184.824157][T19983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.849479][T19983] usb 7-1: Product: syz [ 1184.855132][T19983] usb 7-1: Manufacturer: syz [ 1184.859972][T19983] usb 7-1: SerialNumber: syz [ 1184.868068][T19983] usb 7-1: config 0 descriptor?? [ 1184.884095][T19983] ch341 7-1:0.0: ch341-uart converter detected [ 1185.296152][T26808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4755'. [ 1185.305849][T26808] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4755'. [ 1185.318336][T19983] usb 7-1: failed to receive control message: -121 [ 1185.331226][T19983] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1185.736772][T19983] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1185.914835][T19983] usb 2-1: device descriptor read/64, error -71 [ 1186.144773][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1186.156118][T19983] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1186.295623][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1186.304727][T19983] usb 2-1: device descriptor read/64, error -71 [ 1186.312987][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.331951][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.353483][T26824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.365035][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1186.378840][T26824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.390090][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.418255][T26821] netlink: 558 bytes leftover after parsing attributes in process `syz.5.4761'. [ 1186.429073][T19983] usb usb2-port1: attempt power cycle [ 1186.436121][ T24] usb 5-1: config 0 descriptor?? [ 1186.661266][T26816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1186.679759][T19154] usb 7-1: USB disconnect, device number 78 [ 1186.695611][T19154] ch341 7-1:0.0: device disconnected [ 1186.721412][T26816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1186.797475][T19983] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1186.856474][T19983] usb 2-1: device descriptor read/8, error -71 [ 1186.981905][ T24] kye 0003:0458:5011.003F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1187.026571][ T24] kye 0003:0458:5011.003F: unknown main item tag 0x3 [ 1187.058347][ T24] kye 0003:0458:5011.003F: hidraw1: USB HID v40.00 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 1187.105724][T19983] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1187.115278][ T24] kye 0003:0458:5011.003F: tablet-enabling feature report not found [ 1187.146138][ T24] kye 0003:0458:5011.003F: tablet enabling failed [ 1187.161598][T19983] usb 2-1: device descriptor read/8, error -71 [ 1187.223922][T26834] bridge5: entered promiscuous mode [ 1187.232263][T26838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1187.262625][T26838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1187.298587][T19983] usb usb2-port1: unable to enumerate USB device [ 1187.316354][T19983] usb 5-1: USB disconnect, device number 106 [ 1187.418255][T26836] fido_id[26836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1187.666823][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 1187.666841][ T30] audit: type=1326 audit(1768764033.799:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26844 comm="syz.6.4769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f8f749 code=0x0 [ 1188.159175][ T30] audit: type=1326 audit(1768764034.279:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.1.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4678f749 code=0x7ffc0000 [ 1188.209702][ T30] audit: type=1326 audit(1768764034.289:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.1.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8c4678f749 code=0x7ffc0000 [ 1188.232583][ T30] audit: type=1326 audit(1768764034.289:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.1.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4678f749 code=0x7ffc0000 [ 1188.384545][ T30] audit: type=1326 audit(1768764034.299:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.1.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8c4678f749 code=0x7ffc0000 [ 1188.408455][ T30] audit: type=1326 audit(1768764034.299:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.1.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4678f749 code=0x7ffc0000 [ 1188.433260][ T30] audit: type=1326 audit(1768764034.299:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.1.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8c4678f749 code=0x7ffc0000 [ 1188.554044][ T30] audit: type=1326 audit(1768764034.299:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.1.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4678f749 code=0x7ffc0000 [ 1188.669369][ T30] audit: type=1326 audit(1768764034.299:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.1.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f8c4678f749 code=0x7ffc0000 [ 1188.742640][ T30] audit: type=1326 audit(1768764034.299:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26853 comm="syz.1.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4678f749 code=0x7ffc0000 [ 1188.885460][ T5943] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1188.976626][T26876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.026925][T26876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.463305][T26888] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1189.798568][T26906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4784'. [ 1189.816357][T26906] bridge_slave_0: default FDB implementation only supports local addresses [ 1189.845728][T26910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1189.845817][T26906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4784'. [ 1189.877780][T26910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1189.927382][T26906] bridge_slave_0: default FDB implementation only supports local addresses [ 1190.029853][T26914] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4786'. [ 1190.305331][ T5943] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1190.481733][ T5943] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1190.495349][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.530811][ T5943] usb 7-1: Product: syz [ 1190.540769][ T5943] usb 7-1: Manufacturer: syz [ 1190.552090][ T5943] usb 7-1: SerialNumber: syz [ 1190.583737][ T5943] usb 7-1: config 0 descriptor?? [ 1190.814706][ T24] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1191.058716][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1191.096123][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1191.126383][ T24] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1191.236209][ T5943] usb 7-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1191.257227][ T5943] f81604 7-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 1191.278653][ T5943] f81604 7-1:0.0: probe with driver f81604 failed with error -121 [ 1191.349423][ T24] usb 2-1: config 1 interface 0 has no altsetting 1 [ 1191.388985][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1191.427081][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.465164][ T24] usb 2-1: Product: syz [ 1191.473130][ T24] usb 2-1: Manufacturer: syz [ 1191.480297][ T24] usb 2-1: SerialNumber: syz [ 1191.505597][ T24] smsusb:smsusb_probe: board id=8, interface number 0 [ 1191.666918][T26944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.676172][T26944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.692973][T26944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.702016][T26944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.715056][ T24] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 1191.722071][ T24] smsusb 2-1:1.0: probe with driver smsusb failed with error -71 [ 1191.756166][ T24] usb 2-1: USB disconnect, device number 109 [ 1192.623601][T26957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.653263][T26957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.684799][ T5943] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1192.834720][ T5943] usb 5-1: Using ep0 maxpacket: 8 [ 1192.841851][ T5943] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1192.864733][ T869] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 1192.873955][ T5943] usb 5-1: config 0 has no interface number 0 [ 1192.903608][ T5943] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1192.920440][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.947592][ T5943] usb 5-1: Product: syz [ 1192.958611][ T5943] usb 5-1: Manufacturer: syz [ 1192.972159][ T5943] usb 5-1: SerialNumber: syz [ 1193.005497][ T869] usb 2-1: device descriptor read/64, error -71 [ 1193.014365][ T5943] usb 5-1: config 0 descriptor?? [ 1193.057997][ T5918] usb 7-1: USB disconnect, device number 80 [ 1193.143903][T26960] netlink: 316 bytes leftover after parsing attributes in process `syz.6.4797'. [ 1193.265551][ T869] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 1193.404850][ T869] usb 2-1: device descriptor read/64, error -71 [ 1193.441869][ T5943] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1193.449390][ T5943] uvcvideo 5-1:0.31: No valid video chain found. [ 1193.521262][ T869] usb usb2-port1: attempt power cycle [ 1193.536762][ T5943] usb 5-1: USB disconnect, device number 107 [ 1193.591458][T26970] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1193.591458][T26970] program syz.2.4802 not setting count and/or reply_len properly [ 1193.664776][T19983] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1193.816958][T19983] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1193.826158][T19983] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1193.839635][T19983] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1193.852956][T19983] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1193.864202][T19983] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1193.873162][T19983] usb 7-1: Product: syz [ 1193.878011][T19983] usb 7-1: Manufacturer: syz [ 1193.882825][T19983] usb 7-1: SerialNumber: syz [ 1193.894769][ T869] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 1193.902684][T19983] usb 7-1: config 0 descriptor?? [ 1193.914202][T19983] hub 7-1:0.0: bad descriptor, ignoring hub [ 1193.923860][T19983] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1193.935517][T19983] usb 7-1: selecting invalid altsetting 0 [ 1193.935704][ T869] usb 2-1: device descriptor read/8, error -71 [ 1194.216041][ T869] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 1194.245711][ T869] usb 2-1: device descriptor read/8, error -71 [ 1194.355136][ T869] usb usb2-port1: unable to enumerate USB device [ 1194.623441][ T5943] usb 7-1: USB disconnect, device number 81 [ 1194.743484][T26982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4805'. [ 1194.844733][ T5943] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 1194.969049][T26989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.993997][T26989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.016491][ T5943] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1195.028745][T26992] netlink: 316 bytes leftover after parsing attributes in process `syz.4.4808'. [ 1195.041075][ T5943] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1195.066051][ T5943] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1195.080346][ T5943] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1195.089979][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1195.100238][ T5943] usb 7-1: Product: syz [ 1195.104511][ T5943] usb 7-1: Manufacturer: syz [ 1195.110809][ T5943] usb 7-1: SerialNumber: syz [ 1195.137709][ T5943] usb 7-1: config 0 descriptor?? [ 1195.145474][ T5943] hub 7-1:0.0: bad descriptor, ignoring hub [ 1195.151496][ T5943] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1195.166229][T26998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4809'. [ 1195.251261][T26998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.260382][T26998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.288435][T27001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4810'. [ 1195.474047][ T5943] usb 7-1: selecting invalid altsetting 0 [ 1195.586243][T26998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.714770][ T869] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1195.756088][T26998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.884719][ T869] usb 5-1: Using ep0 maxpacket: 16 [ 1195.942501][T26995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.965253][ T869] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1195.994931][ T869] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 1196.003732][ T869] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.044718][ T869] usb 5-1: config 13 has no interface number 0 [ 1196.051479][T26995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.081817][ T869] usb 5-1: config 13 interface 50 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1196.110205][ T869] usb 5-1: config 13 interface 50 has no altsetting 0 [ 1196.163326][ T869] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1196.187409][ T869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.243651][ T869] usb 5-1: Product: syz [ 1196.274536][ T869] usb 5-1: Manufacturer: syz [ 1196.288839][ T869] usb 5-1: SerialNumber: syz [ 1196.543547][ T869] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1196.550940][ T869] usb 5-1: MIDIStreaming interface descriptor not found [ 1196.616653][ T869] usb 5-1: USB disconnect, device number 108 [ 1196.718217][T15239] udevd[15239]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1197.154776][ T869] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1197.274980][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.284433][T19983] usb 7-1: USB disconnect, device number 82 [ 1197.290871][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.314748][ T869] usb 5-1: device descriptor read/64, error -71 [ 1197.342647][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.397575][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.433020][T27035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.436871][T27037] netlink: 316 bytes leftover after parsing attributes in process `syz.6.4820'. [ 1197.461775][T27035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.576148][ T869] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1197.689491][T27035] macvtap0: left allmulticast mode [ 1197.714718][ T869] usb 5-1: device descriptor read/64, error -71 [ 1197.786576][T19983] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1197.875112][ T869] usb usb5-port1: attempt power cycle [ 1197.924787][T19983] usb 7-1: device descriptor read/64, error -71 [ 1198.691131][T27049] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4824'. [ 1198.695616][T19983] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1198.790774][ T869] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1198.835169][T19983] usb 7-1: device descriptor read/64, error -71 [ 1198.928283][T27057] xt_connbytes: Forcing CT accounting to be enabled [ 1198.944782][ T869] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1198.953028][T19983] usb usb7-port1: attempt power cycle [ 1198.975666][ T869] usb 5-1: device descriptor read/8, error -71 [ 1199.095316][ T869] usb usb5-port1: unable to enumerate USB device [ 1199.304776][T19983] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1199.325352][T19983] usb 7-1: device descriptor read/8, error -71 [ 1199.374709][ T24] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1199.527943][ T24] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1199.556161][ T24] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 1199.568724][T19983] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1199.576452][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1199.615681][ T24] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1199.645452][T19983] usb 7-1: device descriptor read/8, error -71 [ 1199.664730][T27070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4828'. [ 1199.683834][T27070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.693417][T27070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.728943][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1199.738683][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.835451][T19983] usb usb7-port1: unable to enumerate USB device [ 1199.959883][T27063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.968791][T27063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.981354][ T24] ath6kl: Failed to submit usb control message: -71 [ 1200.002525][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 1200.040369][ T24] ath6kl: Unable to send get target info: -71 [ 1200.070725][ T24] ath6kl: Failed to init ath6kl core: -71 [ 1200.077728][ T24] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1200.115018][ T24] usb 2-1: USB disconnect, device number 114 [ 1200.286644][T27074] FAULT_INJECTION: forcing a failure. [ 1200.286644][T27074] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.311039][T27074] CPU: 1 UID: 0 PID: 27074 Comm: syz.5.4829 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.311070][T27074] Tainted: [L]=SOFTLOCKUP [ 1200.311075][T27074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1200.311082][T27074] Call Trace: [ 1200.311091][T27074] [ 1200.311097][T27074] dump_stack_lvl+0xe8/0x150 [ 1200.311121][T27074] should_fail_ex+0x414/0x560 [ 1200.311152][T27074] should_failslab+0xa8/0x100 [ 1200.311175][T27074] __kmalloc_cache_node_noprof+0x88/0x700 [ 1200.311195][T27074] ? __get_vm_area_node+0x13f/0x300 [ 1200.311225][T27074] __get_vm_area_node+0x13f/0x300 [ 1200.311253][T27074] __vmalloc_node_range_noprof+0x371/0x16a0 [ 1200.311267][T27074] ? do_replace+0x210/0x430 [ 1200.311290][T27074] ? __lock_acquire+0x6b6/0x2cf0 [ 1200.311305][T27074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1200.311316][T27074] ? __might_fault+0xb0/0x130 [ 1200.311352][T27074] ? do_replace+0x210/0x430 [ 1200.311375][T27074] __vmalloc_noprof+0xd2/0x120 [ 1200.311392][T27074] ? do_replace+0x210/0x430 [ 1200.311418][T27074] do_replace+0x210/0x430 [ 1200.311441][T27074] ? __lock_acquire+0x6b6/0x2cf0 [ 1200.311452][T27074] ? __pfx_do_replace+0x10/0x10 [ 1200.311471][T27074] ? bpf_lsm_capable+0x9/0x20 [ 1200.311482][T27074] ? security_capable+0x7e/0x2e0 [ 1200.311497][T27074] do_ebt_set_ctl+0x1e3/0xb90 [ 1200.311521][T27074] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1200.311543][T27074] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1200.311568][T27074] ? rcu_is_watching+0x15/0xb0 [ 1200.311591][T27074] ? trace_contention_end+0x39/0x100 [ 1200.311620][T27074] ? nf_setsockopt+0x221/0x290 [ 1200.311637][T27074] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1200.311652][T27074] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1200.311663][T27074] ? aa_sk_perm+0x7ee/0x920 [ 1200.311677][T27074] ? __pfx_aa_sk_perm+0x10/0x10 [ 1200.311693][T27074] nf_setsockopt+0x26f/0x290 [ 1200.311712][T27074] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1200.311733][T27074] do_sock_setsockopt+0x17c/0x1b0 [ 1200.311759][T27074] __x64_sys_setsockopt+0x13f/0x1b0 [ 1200.311785][T27074] do_syscall_64+0xec/0xf80 [ 1200.311805][T27074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.311820][T27074] ? clear_bhb_loop+0x60/0xb0 [ 1200.311832][T27074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.311841][T27074] RIP: 0033:0x7effc398f749 [ 1200.311852][T27074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.311862][T27074] RSP: 002b:00007effc4861038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1200.311874][T27074] RAX: ffffffffffffffda RBX: 00007effc3be5fa0 RCX: 00007effc398f749 [ 1200.311886][T27074] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1200.311897][T27074] RBP: 00007effc4861090 R08: 0000000000000138 R09: 0000000000000000 [ 1200.311909][T27074] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1200.311921][T27074] R13: 00007effc3be6038 R14: 00007effc3be5fa0 R15: 00007effc3d0fa28 [ 1200.311950][T27074] [ 1200.312219][T27074] syz.5.4829: vmalloc error: size 128, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1200.698862][T27074] CPU: 1 UID: 0 PID: 27074 Comm: syz.5.4829 Tainted: G L syzkaller #0 PREEMPT(full) [ 1200.698892][T27074] Tainted: [L]=SOFTLOCKUP [ 1200.698899][T27074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1200.698911][T27074] Call Trace: [ 1200.698919][T27074] [ 1200.698928][T27074] dump_stack_lvl+0xe8/0x150 [ 1200.698954][T27074] warn_alloc+0x214/0x310 [ 1200.698969][T27074] ? __pfx_warn_alloc+0x10/0x10 [ 1200.698986][T27074] ? __get_vm_area_node+0x13f/0x300 [ 1200.699022][T27074] ? __get_vm_area_node+0x2b5/0x300 [ 1200.699051][T27074] __vmalloc_node_range_noprof+0x396/0x16a0 [ 1200.699088][T27074] ? __lock_acquire+0x6b6/0x2cf0 [ 1200.699113][T27074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1200.699122][T27074] ? __might_fault+0xb0/0x130 [ 1200.699142][T27074] ? do_replace+0x210/0x430 [ 1200.699156][T27074] __vmalloc_noprof+0xd2/0x120 [ 1200.699165][T27074] ? do_replace+0x210/0x430 [ 1200.699189][T27074] do_replace+0x210/0x430 [ 1200.699214][T27074] ? __lock_acquire+0x6b6/0x2cf0 [ 1200.699232][T27074] ? __pfx_do_replace+0x10/0x10 [ 1200.699266][T27074] ? bpf_lsm_capable+0x9/0x20 [ 1200.699286][T27074] ? security_capable+0x7e/0x2e0 [ 1200.699308][T27074] do_ebt_set_ctl+0x1e3/0xb90 [ 1200.699323][T27074] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1200.699336][T27074] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1200.699350][T27074] ? rcu_is_watching+0x15/0xb0 [ 1200.699365][T27074] ? trace_contention_end+0x39/0x100 [ 1200.699394][T27074] ? nf_setsockopt+0x221/0x290 [ 1200.699417][T27074] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1200.699444][T27074] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1200.699463][T27074] ? aa_sk_perm+0x7ee/0x920 [ 1200.699488][T27074] ? __pfx_aa_sk_perm+0x10/0x10 [ 1200.699504][T27074] nf_setsockopt+0x26f/0x290 [ 1200.699515][T27074] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1200.699526][T27074] do_sock_setsockopt+0x17c/0x1b0 [ 1200.699541][T27074] __x64_sys_setsockopt+0x13f/0x1b0 [ 1200.699563][T27074] do_syscall_64+0xec/0xf80 [ 1200.699583][T27074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.699601][T27074] ? clear_bhb_loop+0x60/0xb0 [ 1200.699622][T27074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.699640][T27074] RIP: 0033:0x7effc398f749 [ 1200.699658][T27074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.699674][T27074] RSP: 002b:00007effc4861038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1200.699688][T27074] RAX: ffffffffffffffda RBX: 00007effc3be5fa0 RCX: 00007effc398f749 [ 1200.699695][T27074] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 1200.699702][T27074] RBP: 00007effc4861090 R08: 0000000000000138 R09: 0000000000000000 [ 1200.699709][T27074] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1200.699715][T27074] R13: 00007effc3be6038 R14: 00007effc3be5fa0 R15: 00007effc3d0fa28 [ 1200.699730][T27074] [ 1200.699746][T27074] Mem-Info: [ 1200.998917][T27074] active_anon:16147 inactive_anon:237 isolated_anon:0 [ 1200.998917][T27074] active_file:20514 inactive_file:40424 isolated_file:0 [ 1200.998917][T27074] unevictable:790 dirty:155 writeback:0 [ 1200.998917][T27074] slab_reclaimable:11876 slab_unreclaimable:137773 [ 1200.998917][T27074] mapped:30761 shmem:9231 pagetables:2070 [ 1200.998917][T27074] sec_pagetables:0 bounce:0 [ 1200.998917][T27074] kernel_misc_reclaimable:0 [ 1200.998917][T27074] free:1246957 free_pcp:8186 free_cma:0 [ 1201.129823][T27074] Node 0 active_anon:64712kB inactive_anon:948kB active_file:82020kB inactive_file:161492kB unevictable:1624kB isolated(anon):0kB isolated(file):0kB mapped:123012kB dirty:620kB writeback:0kB shmem:35388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13856kB pagetables:8060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1201.178227][T27074] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1201.209083][T27074] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.442630][T27074] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 1201.450301][T27074] Node 0 DMA32 free:1061152kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:66028kB inactive_anon:948kB active_file:82020kB inactive_file:161492kB unevictable:1624kB writepending:620kB zspages:0kB present:3129332kB managed:2559464kB mlocked:88kB bounce:0kB free_pcp:31528kB local_pcp:14472kB free_cma:0kB [ 1201.507248][T27074] lowmem_reserve[]: 0 0 1 1 1 [ 1201.593926][T27074] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.649807][T27074] lowmem_reserve[]: 0 0 0 0 0 [ 1201.714354][T27074] Node 1 Normal free:3911064kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1201.833981][T27074] lowmem_reserve[]: 0 0 0 0 0 [ 1201.851777][T27074] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1201.881923][T27074] Node 0 DMA32: 2505*4kB (UM) 6606*8kB (UM) 3975*16kB (UME) 911*32kB (UME) 951*64kB (UME) 817*128kB (UME) 464*256kB (UME) 265*512kB (UME) 158*1024kB (UME) 10*2048kB (UME) 74*4096kB (UM) = 1060900kB [ 1201.936307][T27088] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4832'. [ 1201.990168][T27074] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1202.033071][T27074] Node 1 Normal: 204*4kB (UME) 47*8kB (UME) 37*16kB (UME) 209*32kB (UME) 86*64kB (UME) 32*128kB (UME) 21*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 6*2048kB (UME) 944*4096kB (M) = 3911064kB [ 1202.115466][T27074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.163312][T27074] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1202.210576][T27074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1202.236389][T27074] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1202.282028][T27074] 70165 total pagecache pages [ 1202.300566][T27074] 0 pages in swap cache [ 1202.313779][T27074] Free swap = 124996kB [ 1202.328112][T27074] Total swap = 124996kB [ 1202.342753][T27074] 2097051 pages RAM [ 1202.355159][T27074] 0 pages HighMem/MovableOnly [ 1202.359893][T27074] 425095 pages reserved [ 1202.387813][T27074] 0 pages cma reserved [ 1202.668594][T27096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4834'. [ 1202.805152][T27096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.865190][T27096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.122205][T27096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.133261][T27096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.335743][T27095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.358490][T27095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.422263][T27109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1203.446473][T27109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1203.930335][T27121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1204.564699][T19983] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1204.678141][T27136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'. [ 1204.741206][T19983] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1204.750678][T19983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.764496][T19983] usb 7-1: Product: syz [ 1204.774762][T19983] usb 7-1: Manufacturer: syz [ 1204.780941][T19983] usb 7-1: SerialNumber: syz [ 1204.804091][T19983] usb 7-1: config 0 descriptor?? [ 1204.832314][T19983] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 087 [ 1204.844863][ T5943] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1205.217835][ T5943] usb 2-1: config 1 has an invalid interface number: 63 but max is 0 [ 1205.226490][ T5943] usb 2-1: config 1 has no interface number 0 [ 1205.232684][ T5943] usb 2-1: config 1 interface 63 has no altsetting 0 [ 1205.272585][ T5943] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=90.56 [ 1205.284188][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.292670][ T5943] usb 2-1: Product: syz [ 1205.297457][ T5943] usb 2-1: Manufacturer: syz [ 1205.305089][ T5943] usb 2-1: SerialNumber: syz [ 1205.367685][T19983] (null): failure reading functionality [ 1205.566028][ T5943] ems_usb 2-1:1.63 (unnamed net_device) (uninitialized): couldn't initialize controller: -8 [ 1205.604233][ T5943] ems_usb 2-1:1.63: probe with driver ems_usb failed with error -8 [ 1205.614123][T19983] i2c i2c-3: failure reading functionality [ 1205.639552][T19983] i2c i2c-3: connected i2c-tiny-usb device [ 1205.643259][ T5943] usb 2-1: USB disconnect, device number 115 [ 1205.728528][T27150] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4848'. [ 1206.372380][T27165] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1206.384784][ T5918] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1206.544668][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 1206.552857][T27171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.554767][ T5918] usb 5-1: config 0 has no interfaces? [ 1206.578920][T27171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.599029][ T5918] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1206.615654][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.623721][ T5918] usb 5-1: Product: syz [ 1206.629092][ T5918] usb 5-1: Manufacturer: syz [ 1206.633758][ T5918] usb 5-1: SerialNumber: syz [ 1206.648885][ T5918] usb 5-1: config 0 descriptor?? [ 1206.714755][ T5943] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1206.887562][ T5943] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1206.897404][ T5943] usb 2-1: can't read configurations, error -61 [ 1206.992250][ T5918] usb 5-1: USB disconnect, device number 113 [ 1207.037510][ T5943] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1207.198315][ T5943] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1207.210657][ T5943] usb 2-1: can't read configurations, error -61 [ 1207.219129][ T5943] usb usb2-port1: attempt power cycle [ 1207.566900][ T5943] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1207.602761][ T5918] usb 7-1: USB disconnect, device number 87 [ 1207.692704][ T5943] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1207.701299][ T5943] usb 2-1: can't read configurations, error -61 [ 1207.712098][T27180] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4857'. [ 1207.855265][ T5943] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1207.908523][ T5943] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1207.928130][T27187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4859'. [ 1207.974933][ T5943] usb 2-1: can't read configurations, error -61 [ 1207.987782][ T5943] usb usb2-port1: unable to enumerate USB device [ 1208.023333][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1208.023344][ T30] audit: type=1326 audit(1768764054.149:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27183 comm="syz.6.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f8f749 code=0x7ffc0000 [ 1208.183197][ T30] audit: type=1326 audit(1768764054.149:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27183 comm="syz.6.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f8f749 code=0x7ffc0000 [ 1208.208234][ T30] audit: type=1326 audit(1768764054.189:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27183 comm="syz.6.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f8f749 code=0x7ffc0000 [ 1208.232358][ T30] audit: type=1326 audit(1768764054.189:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27183 comm="syz.6.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f8f749 code=0x7ffc0000 [ 1208.264714][T19983] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1208.275744][ T30] audit: type=1326 audit(1768764054.189:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27183 comm="syz.6.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f5bf4f8f749 code=0x7ffc0000 [ 1208.300534][ T30] audit: type=1326 audit(1768764054.209:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27183 comm="syz.6.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f8f749 code=0x7ffc0000 [ 1208.324500][ T30] audit: type=1326 audit(1768764054.209:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27183 comm="syz.6.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f8f749 code=0x7ffc0000 [ 1208.351030][ T30] audit: type=1326 audit(1768764054.209:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27183 comm="syz.6.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5bf4f8f749 code=0x7ffc0000 [ 1208.376238][ T30] audit: type=1326 audit(1768764054.209:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27183 comm="syz.6.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f8f749 code=0x7ffc0000 [ 1208.425127][T19983] usb 5-1: Using ep0 maxpacket: 16 [ 1208.445996][T19983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1208.461645][T19983] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1208.477371][T19983] usb 5-1: can't read configurations, error -61 [ 1208.489835][ T30] audit: type=1326 audit(1768764054.209:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27183 comm="syz.6.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bf4f8f749 code=0x7ffc0000 [ 1208.645975][T19983] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1208.804675][T19983] usb 5-1: Using ep0 maxpacket: 16 [ 1208.813389][T19983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1208.826521][T19983] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1208.834475][T19983] usb 5-1: can't read configurations, error -61 [ 1208.841676][T19983] usb usb5-port1: attempt power cycle [ 1208.954769][ T5943] usb 7-1: new full-speed USB device number 88 using dummy_hcd [ 1209.127307][ T5943] usb 7-1: config 0 has an invalid interface number: 139 but max is 0 [ 1209.135838][ T5943] usb 7-1: config 0 has no interface number 0 [ 1209.143151][ T5943] usb 7-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1209.180855][ T5943] usb 7-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 1209.184933][T19983] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1209.226764][T19983] usb 5-1: Using ep0 maxpacket: 16 [ 1209.235262][ T5943] usb 7-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 1209.236928][T19983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1209.259212][T19983] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1209.268641][T19983] usb 5-1: can't read configurations, error -61 [ 1209.288735][ T5943] usb 7-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1209.329945][ T5943] usb 7-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 1209.339515][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.353393][ T5943] usb 7-1: Product: syz [ 1209.358016][ T5943] usb 7-1: Manufacturer: syz [ 1209.371771][ T5943] usb 7-1: SerialNumber: syz [ 1209.391019][ T5943] usb 7-1: config 0 descriptor?? [ 1209.406882][T27193] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 1209.414976][T19983] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1209.416443][T27193] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 1209.476915][T19983] usb 5-1: Using ep0 maxpacket: 16 [ 1209.495999][T19983] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1209.508056][T19983] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1209.516053][T19983] usb 5-1: can't read configurations, error -61 [ 1209.526924][T19983] usb usb5-port1: unable to enumerate USB device [ 1209.733120][ T5943] mct_u232 7-1:0.139: MCT U232 converter detected [ 1209.759288][ T5943] usb 7-1: MCT U232 converter now attached to ttyUSB0 [ 1209.802260][T27206] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1209.811501][T27206] batadv1: entered promiscuous mode [ 1209.817333][T27206] batadv1: entered allmulticast mode [ 1209.825353][T27206] team0: Port device batadv1 added [ 1209.899266][ T5943] usb 7-1: USB disconnect, device number 88 [ 1210.062435][ T5943] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 1210.092001][ T5943] mct_u232 7-1:0.139: device disconnected [ 1210.309165][ T1328] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1210.319463][ T1328] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1210.646830][T27219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.673101][T27218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.673371][T27219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.743948][T27218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.968889][T27222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4869'. [ 1211.244804][ T5943] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1211.404441][T27231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1211.417061][ T5943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.435218][T27231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1211.452467][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1211.477290][ T5943] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1211.492860][T27228] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4867'. [ 1211.533579][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1211.542461][ T5943] usb 5-1: SerialNumber: syz [ 1211.549360][T27233] loop5: detected capacity change from 0 to 4096 [ 1211.639550][T27233] geneve3: entered promiscuous mode [ 1211.664730][T19153] usb 7-1: new full-speed USB device number 89 using dummy_hcd [ 1211.667253][T27233] geneve3: entered allmulticast mode [ 1211.774455][ T5943] usb 5-1: 0:2 : does not exist [ 1211.800799][T27235] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4867'. [ 1211.856584][T19153] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 1211.867228][T19153] usb 7-1: config 0 has no interface number 0 [ 1211.890374][ T5943] usb 5-1: USB disconnect, device number 118 [ 1211.898583][T19153] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1211.926757][T19153] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1211.954154][T19153] usb 7-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 1211.966082][T19153] usb 7-1: Manufacturer: syz [ 1212.007959][T19547] udevd[19547]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.099972][T19153] usb 7-1: config 0 descriptor?? [ 1212.200767][T19153] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input99 [ 1212.318869][T19153] usb 7-1: USB disconnect, device number 89 [ 1212.448273][T27251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4874'. [ 1212.460654][T27252] FAULT_INJECTION: forcing a failure. [ 1212.460654][T27252] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.476539][T27252] CPU: 0 UID: 0 PID: 27252 Comm: syz.4.4876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1212.476575][T27252] Tainted: [L]=SOFTLOCKUP [ 1212.476583][T27252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1212.476594][T27252] Call Trace: [ 1212.476602][T27252] [ 1212.476614][T27252] dump_stack_lvl+0xe8/0x150 [ 1212.476641][T27252] should_fail_ex+0x414/0x560 [ 1212.476672][T27252] should_failslab+0xa8/0x100 [ 1212.476695][T27252] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1212.476721][T27252] ? __alloc_skb+0x198/0x3a0 [ 1212.476740][T27252] ? __alloc_skb+0x1dc/0x3a0 [ 1212.476757][T27252] ? __local_bh_enable_ip+0xd0/0x130 [ 1212.476776][T27252] ? __alloc_skb+0x198/0x3a0 [ 1212.476796][T27252] __alloc_skb+0x1dc/0x3a0 [ 1212.476818][T27252] netlink_sendmsg+0x5c6/0xb30 [ 1212.476850][T27252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1212.476876][T27252] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1212.476900][T27252] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1212.476917][T27252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1212.476939][T27252] __sock_sendmsg+0x21c/0x270 [ 1212.476967][T27252] ____sys_sendmsg+0x505/0x820 [ 1212.476993][T27252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1212.477022][T27252] ? import_iovec+0x74/0xa0 [ 1212.477047][T27252] ___sys_sendmsg+0x21f/0x2a0 [ 1212.477070][T27252] ? __pfx____sys_sendmsg+0x10/0x10 [ 1212.477122][T27252] ? __fget_files+0x2a/0x420 [ 1212.477142][T27252] ? __fget_files+0x3a0/0x420 [ 1212.477167][T27252] __x64_sys_sendmsg+0x19b/0x260 [ 1212.477188][T27252] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1212.477215][T27252] ? __pfx_ksys_write+0x10/0x10 [ 1212.477241][T27252] do_syscall_64+0xec/0xf80 [ 1212.477260][T27252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.477276][T27252] ? trace_irq_disable+0x37/0x100 [ 1212.477295][T27252] ? clear_bhb_loop+0x60/0xb0 [ 1212.477314][T27252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.477330][T27252] RIP: 0033:0x7f6ce4f8f749 [ 1212.477347][T27252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1212.477362][T27252] RSP: 002b:00007f6ce5dd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1212.477381][T27252] RAX: ffffffffffffffda RBX: 00007f6ce51e5fa0 RCX: 00007f6ce4f8f749 [ 1212.477393][T27252] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1212.477405][T27252] RBP: 00007f6ce5dd7090 R08: 0000000000000000 R09: 0000000000000000 [ 1212.477414][T27252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1212.477425][T27252] R13: 00007f6ce51e6038 R14: 00007f6ce51e5fa0 R15: 00007f6ce530fa28 [ 1212.477452][T27252] [ 1213.401032][T27267] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4879'. [ 1213.724731][T19983] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1213.904661][T19983] usb 7-1: Using ep0 maxpacket: 16 [ 1213.965175][T19983] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1214.018455][T19983] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1214.033745][T19983] usb 7-1: can't read configurations, error -61 [ 1214.213669][T19983] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1214.404698][T19983] usb 7-1: Using ep0 maxpacket: 16 [ 1214.423195][T27283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.443840][T27284] gtp1: entered promiscuous mode [ 1214.453709][T27284] gtp1: entered allmulticast mode [ 1214.602859][T19983] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1214.610989][T27283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.679377][T19983] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1214.687416][T19983] usb 7-1: can't read configurations, error -61 [ 1214.694480][T19983] usb usb7-port1: attempt power cycle [ 1214.720798][T27283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.730894][T27283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.060843][T19983] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1215.234054][T19983] usb 7-1: Using ep0 maxpacket: 16 [ 1215.294266][T19983] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1215.316252][T19983] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1215.373790][T19983] usb 7-1: can't read configurations, error -61 [ 1215.502385][T27294] bond0: (slave dummy0): Releasing backup interface [ 1215.553463][T19983] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1215.591524][T27294] batman_adv: batadv0: Adding interface: dummy0 [ 1215.604205][T19983] usb 7-1: Using ep0 maxpacket: 16 [ 1215.627543][T19983] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1215.645656][T19983] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1215.664394][T19983] usb 7-1: can't read configurations, error -61 [ 1215.701858][T19983] usb usb7-port1: unable to enumerate USB device [ 1215.710381][T27294] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.844379][T27294] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1216.068778][T27300] netlink: 'syz.2.4887': attribute type 2 has an invalid length. [ 1217.474808][T19153] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1217.634773][T19153] usb 5-1: Using ep0 maxpacket: 32 [ 1217.642552][T19153] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1217.655868][T19153] usb 5-1: config 2 has an invalid interface number: 140 but max is 0 [ 1217.664402][T19153] usb 5-1: config 2 has no interface number 0 [ 1217.683480][T19153] usb 5-1: New USB device found, idVendor=2596, idProduct=8008, bcdDevice=7c.83 [ 1217.701086][T19153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.747661][T19153] usb 5-1: Product: syz [ 1217.903081][T19153] usb 5-1: Manufacturer: syz [ 1217.908326][T19153] usb 5-1: SerialNumber: syz [ 1218.537184][T19153] usb 5-1: USB disconnect, device number 119 [ 1219.964771][T19153] usb 7-1: new full-speed USB device number 94 using dummy_hcd [ 1220.127736][T19153] usb 7-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.150347][T19153] usb 7-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice= 3.00 [ 1220.181929][T19153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 1220.209924][T19153] usb 7-1: Product: syz [ 1220.222493][T19153] usb 7-1: Manufacturer: syz [ 1220.238516][T19153] usb 7-1: SerialNumber: syz [ 1220.357197][T19153] usb 7-1: selecting invalid altsetting 3 [ 1220.365232][T19153] comedi comedi5: could not set alternate setting 3 in high speed [ 1220.373325][T19153] usbduxsigma 7-1:252.0: driver 'usbduxsigma' failed to auto-configure device. [ 1220.432459][T19153] usbduxsigma 7-1:252.0: probe with driver usbduxsigma failed with error -22 [ 1221.517245][T27350] block device autoloading is deprecated and will be removed. [ 1222.373078][T27353] xt_socket: unknown flags 0x50 [ 1222.544880][T19983] usb 7-1: USB disconnect, device number 94 [ 1222.846005][T27359] pimreg: entered allmulticast mode [ 1222.866734][T27359] pimreg: left allmulticast mode [ 1223.484682][T19154] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1223.645796][T19154] usb 5-1: Using ep0 maxpacket: 8 [ 1223.659715][T19154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1223.693454][T19154] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1223.724384][T19154] usb 5-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1223.744012][T19154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.798178][T19154] usb 5-1: config 0 descriptor?? [ 1224.223134][T19154] logitech 0003:046D:C298.0040: unknown main item tag 0x0 [ 1224.244733][T19983] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 1224.288385][T19154] logitech 0003:046D:C298.0040: unknown main item tag 0x0 [ 1224.308428][T19154] logitech 0003:046D:C298.0040: unknown main item tag 0x0 [ 1224.375404][T19154] logitech 0003:046D:C298.0040: unknown main item tag 0x0 [ 1224.453217][T19154] logitech 0003:046D:C298.0040: unknown main item tag 0x0 [ 1224.466672][T19983] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 1224.492080][T19983] usb 2-1: config 5 has no interface number 0 [ 1224.529402][T19154] logitech 0003:046D:C298.0040: hidraw1: USB HID v0.09 Device [HID 046d:c298] on usb-dummy_hcd.4-1/input0 [ 1224.552540][T19983] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1224.688246][T19154] logitech 0003:046D:C298.0040: no inputs found [ 1224.694714][T19983] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1224.714085][T19154] usb 5-1: USB disconnect, device number 120 [ 1224.724731][T19983] usb 2-1: config 5 interface 123 has no altsetting 0 [ 1224.742136][T19983] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1224.752351][T19983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.768862][T19983] usb 2-1: Product: syz [ 1224.773176][T19983] usb 2-1: Manufacturer: syz [ 1224.779365][T19983] usb 2-1: SerialNumber: syz [ 1224.926339][T27389] fido_id[27389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1225.259086][T27398] random: crng reseeded on system resumption [ 1226.556663][T19983] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1226.605169][T19983] usb 2-1: USB disconnect, device number 120 [ 1229.666757][T25154] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 1230.815997][T27470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4939'. [ 1231.237617][T27480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.246659][T27480] team0: Port device batadv0 added [ 1231.534548][T27480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1231.544003][T27480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1232.816560][T19983] usb 6-1: USB disconnect, device number 41 [ 1232.823177][T19983] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 1232.987068][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1233.020123][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1233.032303][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1233.042472][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1233.055314][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1233.604963][T19154] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1233.697191][T27517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1233.756970][T27517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.780219][T19154] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.802157][ T3425] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.818699][T19154] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1233.828742][T19154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.856694][T19154] usb 2-1: config 0 descriptor?? [ 1233.863687][T27502] chnl_net:caif_netlink_parms(): no params data found [ 1233.873953][T19154] pwc: Askey VC010 type 2 USB webcam detected. [ 1233.938481][ T3425] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.050893][ T3425] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.217627][T27529] kvm: pic: non byte write [ 1234.275066][ T3425] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.287154][T19154] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1234.295233][T19154] pwc: recv_control_msg error -32 req 02 val 2700 [ 1234.306925][T19154] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1234.314281][T19154] pwc: recv_control_msg error -32 req 04 val 1000 [ 1234.326172][T19154] pwc: recv_control_msg error -32 req 04 val 1300 [ 1234.333514][T19154] pwc: recv_control_msg error -32 req 04 val 1400 [ 1234.340698][T19154] pwc: recv_control_msg error -32 req 02 val 2000 [ 1234.348987][T19154] pwc: recv_control_msg error -32 req 02 val 2100 [ 1234.356671][T19154] pwc: recv_control_msg error -32 req 04 val 1500 [ 1234.378837][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1234.378855][ T30] audit: type=1326 audit(1768764080.509:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27534 comm="syz.4.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce4f8f749 code=0x7ffc0000 [ 1234.479227][T27538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.490430][ T30] audit: type=1326 audit(1768764080.549:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27534 comm="syz.4.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce4f8f749 code=0x7ffc0000 [ 1234.511026][T27538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.533404][ T30] audit: type=1326 audit(1768764080.559:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27534 comm="syz.4.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ce4f8f749 code=0x7ffc0000 [ 1234.568877][T19154] pwc: recv_control_msg error -71 req 02 val 2400 [ 1234.571631][T27502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.585468][T27502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.598773][T27502] bridge_slave_0: entered allmulticast mode [ 1234.599472][T19154] pwc: recv_control_msg error -71 req 02 val 2600 [ 1234.606919][T27502] bridge_slave_0: entered promiscuous mode [ 1234.620883][T27502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.622884][ T30] audit: type=1326 audit(1768764080.559:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27534 comm="syz.4.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce4f8f749 code=0x7ffc0000 [ 1234.652065][T27502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.665690][T19154] pwc: recv_control_msg error -71 req 02 val 2900 [ 1234.667956][T27502] bridge_slave_1: entered allmulticast mode [ 1234.682617][T27502] bridge_slave_1: entered promiscuous mode [ 1234.689901][T19154] pwc: recv_control_msg error -71 req 02 val 2800 [ 1234.707127][T19154] pwc: recv_control_msg error -71 req 04 val 1100 [ 1234.714013][T19154] pwc: recv_control_msg error -71 req 04 val 1200 [ 1234.728097][ T30] audit: type=1326 audit(1768764080.559:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27534 comm="syz.4.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce4f8f749 code=0x7ffc0000 [ 1234.752683][T19154] pwc: Registered as video103. [ 1234.763502][T19154] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input101 [ 1234.776387][ T30] audit: type=1326 audit(1768764080.559:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27534 comm="syz.4.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f6ce4f8f749 code=0x7ffc0000 [ 1234.800478][ T30] audit: type=1326 audit(1768764080.559:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27534 comm="syz.4.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce4f8f749 code=0x7ffc0000 [ 1234.825559][T19154] usb 2-1: USB disconnect, device number 121 [ 1234.838571][ T30] audit: type=1326 audit(1768764080.559:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27534 comm="syz.4.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce4f8f749 code=0x7ffc0000 [ 1234.945649][T27502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1234.964732][ T30] audit: type=1326 audit(1768764081.079:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.4.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce4f8f749 code=0x7ffc0000 [ 1235.025095][T27502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.047526][ T30] audit: type=1326 audit(1768764081.089:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27544 comm="syz.4.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce4f8f749 code=0x7ffc0000 [ 1235.116592][T25154] Bluetooth: hci1: command tx timeout [ 1235.778052][T19154] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 1235.938730][T19154] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1235.946887][T19154] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1235.960364][T19154] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1235.990388][T19154] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1236.023148][T19154] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1236.052554][T19154] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.109344][T19154] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1236.126342][T19154] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1236.158442][T19154] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1236.194948][T19154] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1236.233486][T19154] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.259047][T19154] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1236.294637][T19154] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1236.347768][T19154] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1236.403615][T19154] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1236.451857][T19154] usb 5-1: string descriptor 0 read error: -22 [ 1236.468408][T19154] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1236.501496][T19154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.512307][ T3425] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1236.566339][T19154] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1237.096628][ T3425] team0: Port device geneve0 removed [ 1237.194949][T25154] Bluetooth: hci1: command tx timeout [ 1237.414915][T27603] fuse: Invalid rootmode [ 1238.315248][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.335594][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.381092][ T3425] bond0 (unregistering): Released all slaves [ 1238.729422][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.759741][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.077470][T19154] usb 5-1: USB disconnect, device number 121 [ 1239.223436][ T3425] bond1 (unregistering): Released all slaves [ 1239.253426][T27637] xt_hashlimit: size too large, truncated to 1048576 [ 1239.274727][T25154] Bluetooth: hci1: command tx timeout [ 1239.716395][T27643] netlink: 'syz.6.4972': attribute type 16 has an invalid length. [ 1239.869439][ T3425] bond2 (unregistering): Released all slaves [ 1239.882721][ T3425] bond3 (unregistering): Released all slaves [ 1239.902367][T27645] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4973'. [ 1239.914524][T27502] team0: Port device team_slave_0 added [ 1240.107309][T27502] team0: Port device team_slave_1 added [ 1240.211079][T27502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.268498][T27502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.297546][T27502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.311254][T27502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.326847][T27502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.452470][ T5918] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1240.462813][T27502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.566329][T27502] hsr_slave_0: entered promiscuous mode [ 1240.572991][T27502] hsr_slave_1: entered promiscuous mode [ 1240.724852][ T5918] usb 7-1: Using ep0 maxpacket: 16 [ 1240.731667][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.743256][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.754046][ T5918] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1240.763524][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.843662][ T5918] usb 7-1: config 0 descriptor?? [ 1241.304104][ T5918] macally 0003:060B:0001.0041: unknown main item tag 0x0 [ 1241.329216][ T5918] macally 0003:060B:0001.0041: unknown main item tag 0x0 [ 1241.348546][ T5918] macally 0003:060B:0001.0041: unknown main item tag 0x0 [ 1241.362408][T25154] Bluetooth: hci1: command tx timeout [ 1241.378677][ T5918] macally 0003:060B:0001.0041: unknown main item tag 0x0 [ 1241.394649][ T5918] macally 0003:060B:0001.0041: unknown main item tag 0x0 [ 1241.405264][ T5918] macally 0003:060B:0001.0041: unknown main item tag 0x0 [ 1241.414707][ T5918] macally 0003:060B:0001.0041: unknown main item tag 0x0 [ 1241.428189][ T5918] macally 0003:060B:0001.0041: unknown main item tag 0x0 [ 1241.433658][T27666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4978'. [ 1241.440929][ T5918] macally 0003:060B:0001.0041: unknown main item tag 0x0 [ 1241.476217][ T5918] macally 0003:060B:0001.0041: unknown main item tag 0x0 [ 1241.565077][ T5918] macally 0003:060B:0001.0041: hidraw1: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.6-1/input0 [ 1241.599296][ T5918] usb 7-1: USB disconnect, device number 95 [ 1241.687099][ T3425] : left promiscuous mode [ 1241.746009][T27674] vlan2: entered promiscuous mode [ 1241.768286][T27671] fido_id[27671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1241.769645][T27674] vlan2: entered allmulticast mode [ 1241.809852][T27674] hsr_slave_1: entered allmulticast mode [ 1241.887829][T27674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4980'. [ 1243.047325][ T3425] hsr_slave_0: left promiscuous mode [ 1243.053089][ T3425] hsr_slave_1: left promiscuous mode [ 1243.176247][ T3425] team0 (unregistering): Port device batadv2 removed [ 1243.318943][ T3425] team0 (unregistering): Port device batadv1 removed [ 1244.066056][T27707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.171330][T27707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.477314][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1244.492414][ T30] audit: type=1326 audit(1768764090.609:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.2.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1244.555055][ T30] audit: type=1326 audit(1768764090.609:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.2.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1244.594110][ T30] audit: type=1326 audit(1768764090.619:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.2.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1244.645490][ T30] audit: type=1326 audit(1768764090.619:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.2.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1244.707547][T19154] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1244.730999][ T30] audit: type=1326 audit(1768764090.619:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.2.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1244.870175][ T30] audit: type=1326 audit(1768764090.619:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.2.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1245.006502][T19154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.046414][T19154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.075840][ T30] audit: type=1326 audit(1768764090.619:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.2.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1245.135188][T19154] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1245.154733][T19154] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1245.162752][T19154] usb 5-1: Manufacturer: syz [ 1245.194686][ T30] audit: type=1326 audit(1768764090.619:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.2.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1245.219113][T19154] usb 5-1: config 0 descriptor?? [ 1245.274846][ T30] audit: type=1326 audit(1768764090.619:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27714 comm="syz.2.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1245.436719][ T3425] team0 (unregistering): Port device team_slave_1 removed [ 1245.643349][ T3425] team0 (unregistering): Port device team_slave_0 removed [ 1245.691265][T19154] pyra 0003:1E7D:2CF6.0042: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1245.785658][T27730] GUP no longer grows the stack in syz.2.4992 (27730): 200000005000-200000008000 (200000004000) [ 1245.824774][T27730] CPU: 0 UID: 0 PID: 27730 Comm: syz.2.4992 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.824808][T27730] Tainted: [L]=SOFTLOCKUP [ 1245.824815][T27730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1245.824827][T27730] Call Trace: [ 1245.824836][T27730] [ 1245.824846][T27730] dump_stack_lvl+0xe8/0x150 [ 1245.824875][T27730] fixup_user_fault+0x64a/0x700 [ 1245.824904][T27730] fault_in_user_writeable+0x72/0xe0 [ 1245.824925][T27730] futex_lock_pi+0x773/0xa90 [ 1245.824955][T27730] ? __pfx_futex_lock_pi+0x10/0x10 [ 1245.825002][T27730] ? __pfx_futex_wake_mark+0x10/0x10 [ 1245.825041][T27730] ? __pfx_futex_wake+0x10/0x10 [ 1245.825060][T27730] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 1245.825090][T27730] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1245.825119][T27730] do_futex+0x292/0x420 [ 1245.825143][T27730] ? __pfx_do_futex+0x10/0x10 [ 1245.825161][T27730] ? __vm_munmap+0x2c1/0x380 [ 1245.825190][T27730] __se_sys_futex+0x36f/0x400 [ 1245.825216][T27730] ? __pfx___se_sys_futex+0x10/0x10 [ 1245.825234][T27730] ? rcu_is_watching+0x15/0xb0 [ 1245.825262][T27730] ? __x64_sys_futex+0x21/0xf0 [ 1245.825283][T27730] do_syscall_64+0xec/0xf80 [ 1245.825304][T27730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.825321][T27730] ? trace_irq_disable+0x37/0x100 [ 1245.825343][T27730] ? clear_bhb_loop+0x60/0xb0 [ 1245.825364][T27730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.825382][T27730] RIP: 0033:0x7f39f698f749 [ 1245.825400][T27730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.825418][T27730] RSP: 002b:00007f39f7840038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1245.825438][T27730] RAX: ffffffffffffffda RBX: 00007f39f6be6180 RCX: 00007f39f698f749 [ 1245.825452][T27730] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 1245.825465][T27730] RBP: 00007f39f6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1245.825486][T27730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.825499][T27730] R13: 00007f39f6be6218 R14: 00007f39f6be6180 R15: 00007f39f6d0fa28 [ 1245.825528][T27730] [ 1245.914711][T19983] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1246.224731][T19983] usb 7-1: Using ep0 maxpacket: 32 [ 1246.238687][T19983] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1246.254743][T19983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.275380][T19983] usb 7-1: Product: syz [ 1246.279758][T19983] usb 7-1: Manufacturer: syz [ 1246.284476][T19983] usb 7-1: SerialNumber: syz [ 1246.307821][T19983] usb 7-1: config 0 descriptor?? [ 1246.367866][T27737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.383477][T27737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.544760][T19983] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: failure sending bit rate [ 1246.553377][T19983] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1246.591632][T27502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1246.608994][T19983] usb 7-1: USB disconnect, device number 96 [ 1246.632197][T27502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1246.686304][T27502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1246.773010][T27502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1247.094150][T19154] pyra 0003:1E7D:2CF6.0042: couldn't init struct pyra_device [ 1247.102039][T19154] pyra 0003:1E7D:2CF6.0042: couldn't install mouse [ 1247.110586][T19154] pyra 0003:1E7D:2CF6.0042: probe with driver pyra failed with error -71 [ 1247.127861][T19154] usb 5-1: USB disconnect, device number 122 [ 1247.185379][T19153] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1247.210309][ T3425] IPVS: stop unused estimator thread 0... [ 1247.347868][T27762] fido_id[27762]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1247.380559][T19153] usb 2-1: Using ep0 maxpacket: 8 [ 1247.395914][T19153] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1247.411032][T19153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.429725][T19153] usb 2-1: Product: syz [ 1247.442337][T19153] usb 2-1: Manufacturer: syz [ 1247.450027][T19153] usb 2-1: SerialNumber: syz [ 1247.464370][T27769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4998'. [ 1247.482150][T27502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.494008][T19153] usb 2-1: config 0 descriptor?? [ 1247.553941][T27502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.589636][T17827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.596760][T17827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.620460][T17827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.627710][T17827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.721105][T19153] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1247.800334][T19153] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1247.832796][T19153] usb 2-1: USB disconnect, device number 122 [ 1247.870078][T27502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.937145][T27502] veth0_vlan: entered promiscuous mode [ 1247.952478][T27502] veth1_vlan: entered promiscuous mode [ 1247.987728][T27502] veth0_macvtap: entered promiscuous mode [ 1247.999369][T27502] veth1_macvtap: entered promiscuous mode [ 1248.016297][T27502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1248.030688][T27502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1248.046925][ T6054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.056801][ T6054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.068763][ T6054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.079438][ T6054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.163559][T17827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.185178][T17827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.194731][T19983] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1248.240068][T17827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1248.248935][T19153] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1248.259893][T17827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.345665][T19983] usb 5-1: Using ep0 maxpacket: 16 [ 1248.356521][T19983] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.368338][T19983] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1248.381117][T19983] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1248.391333][T19983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.400082][T19983] usb 5-1: Product: syz [ 1248.404481][T19983] usb 5-1: Manufacturer: syz [ 1248.410971][T19983] usb 5-1: SerialNumber: syz [ 1248.415101][T19153] usb 2-1: Using ep0 maxpacket: 32 [ 1248.438278][T19153] usb 2-1: config 0 has an invalid interface number: 116 but max is 0 [ 1248.457685][T19153] usb 2-1: config 0 has no interface number 0 [ 1248.463813][T19153] usb 2-1: config 0 interface 116 has no altsetting 0 [ 1248.481307][T19153] usb 2-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=fb.9b [ 1248.492430][T19153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.500677][T19153] usb 2-1: Product: syz [ 1248.505842][T19153] usb 2-1: Manufacturer: syz [ 1248.510613][T19153] usb 2-1: SerialNumber: syz [ 1248.518677][T19153] usb 2-1: config 0 descriptor?? [ 1248.535366][T19153] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.116/input/input102 [ 1248.574774][T19154] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1248.677534][T27794] loop5: detected capacity change from 0 to 4399 [ 1248.713374][T15240] buffer_io_error: 28 callbacks suppressed [ 1248.713393][T15240] Buffer I/O error on dev loop5, logical block 549, async page read [ 1248.734800][T19154] usb 7-1: Using ep0 maxpacket: 16 [ 1248.743875][T19154] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1248.761481][T19154] usb 7-1: config 4 has an invalid interface number: 111 but max is 0 [ 1248.778366][ T5187] bcm5974 2-1:0.116: could not read from device [ 1248.786595][ T5187] bcm5974 2-1:0.116: could not read from device [ 1248.815650][T19154] usb 7-1: config 4 has no interface number 0 [ 1248.821938][T19154] usb 7-1: config 4 interface 111 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 8 [ 1248.827854][ T5187] bcm5974 2-1:0.116: could not read from device [ 1248.833650][T19154] usb 7-1: config 4 interface 111 has no altsetting 0 [ 1248.857641][T19153] usb 2-1: USB disconnect, device number 123 [ 1248.864317][ T5187] bcm5974 2-1:0.116: could not read from device [ 1248.883738][T19154] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 1248.903804][T19154] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.924869][T19154] usb 7-1: Product: syz [ 1248.934157][T19154] usb 7-1: Manufacturer: syz [ 1248.946072][T19154] usb 7-1: SerialNumber: syz [ 1248.985197][T27786] raw-gadget.5 gadget.6: fail, usb_ep_enable returned -22 [ 1249.174356][T19983] usb 5-1: 0:2 : does not exist [ 1249.211887][T19983] usb 5-1: USB disconnect, device number 123 [ 1249.242034][T19154] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1249.254751][T19154] pvrusb2: ********** [ 1249.262669][T19154] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1249.289653][T19154] pvrusb2: Important functionality might not be entirely working. [ 1249.323069][T19154] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1249.372234][T19154] pvrusb2: ********** [ 1249.387841][T19547] udevd[19547]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1249.395094][T19154] usb 7-1: selecting invalid altsetting 0 [ 1249.488372][ T2345] pvrusb2: control-write URB failure, status=-71 [ 1249.505978][T19154] usb 7-1: USB disconnect, device number 97 [ 1249.514363][ T2345] pvrusb2: Device being rendered inoperable [ 1249.527122][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1249.561071][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1249.762386][ T30] audit: type=1326 audit(1768764095.889:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27804 comm="syz.2.5008" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39f698f749 code=0x0 [ 1250.294781][T18739] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1250.434835][T18739] usb 7-1: device descriptor read/64, error -71 [ 1250.685965][T18739] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1250.814651][T18739] usb 7-1: device descriptor read/64, error -71 [ 1250.827059][T27852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.913247][T27852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.927971][T18739] usb usb7-port1: attempt power cycle [ 1251.027860][T27860] sg_write: data in/out 183286/8 bytes for SCSI command 0x0-- guessing data in; [ 1251.027860][T27860] program syz.4.5020 not setting count and/or reply_len properly [ 1251.274792][T18739] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1251.295287][T18739] usb 7-1: device descriptor read/8, error -71 [ 1251.546487][T18739] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1251.575583][T18739] usb 7-1: device descriptor read/8, error -71 [ 1251.695155][T18739] usb usb7-port1: unable to enumerate USB device [ 1251.868124][T27886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5030'. [ 1251.910708][T27890] : entered promiscuous mode [ 1252.078099][T18739] IPVS: starting estimator thread 0... [ 1252.192375][T27897] IPVS: using max 51 ests per chain, 122400 per kthread [ 1253.256358][T27910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.285875][T27910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.525919][ T5943] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1253.536459][T27914] RDS: rds_bind could not find a transport for fe88::106, load rds_tcp or rds_rdma? [ 1253.684672][ T5943] usb 7-1: Using ep0 maxpacket: 16 [ 1253.691743][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.703129][ T5943] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1253.712525][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.733230][ T5943] usb 7-1: config 0 descriptor?? [ 1253.804764][ T869] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1253.956763][ T869] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 1253.979634][ T869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 193, changing to 11 [ 1254.014492][ T869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 9852, setting to 1024 [ 1254.032910][ T869] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1254.043506][ T869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.073882][ T869] usb 6-1: config 0 descriptor?? [ 1254.086123][T27914] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1254.100726][ T869] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1254.210360][ T5943] mcp2221 0003:04D8:00DD.0043: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1254.630335][T27912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.655412][T27912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.679250][ T24] usb 7-1: USB disconnect, device number 102 [ 1254.818854][T27932] IPVS: set_ctl: invalid protocol: 43 172.20.20.53:20003 [ 1254.899015][T27932] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5041'. [ 1254.942615][T27935] tls_set_device_offload_rx: netdev not found [ 1255.209339][T27944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5043'. [ 1255.430177][T27950] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1255.543781][T27950] bond3 (unregistering): Released all slaves [ 1256.069532][T27959] dvmrp1: tun_chr_ioctl cmd 2147767521 [ 1256.681070][T27954] syz.6.5047 (27954): drop_caches: 2 [ 1256.695707][ T24] usb 6-1: USB disconnect, device number 42 [ 1256.839880][T19983] hid_parser_main: 1267 callbacks suppressed [ 1256.839900][T19983] hid-generic 0000:0003:0001.0044: unknown main item tag 0x0 [ 1256.904868][T19983] hid-generic 0000:0003:0001.0044: unknown main item tag 0x0 [ 1256.971693][T19983] hid-generic 0000:0003:0001.0044: hidraw1: HID v0.03 Device [syz0] on syz1 [ 1257.319263][T27973] fido_id[27973]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1257.624832][T27987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.692926][T27987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.756950][T27991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5056'. [ 1258.024751][ T869] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1258.085489][T28005] trusted_key: encrypted_key: insufficient parameters specified [ 1258.195325][ T869] usb 2-1: Using ep0 maxpacket: 32 [ 1258.216546][ T869] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1258.252452][ T869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.280373][ T869] usb 2-1: Product: syz [ 1258.284638][ T869] usb 2-1: Manufacturer: syz [ 1258.289246][ T869] usb 2-1: SerialNumber: syz [ 1258.314373][ T869] usb 2-1: config 0 descriptor?? [ 1258.346201][ T869] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1258.582702][T28014] nvme_fabrics: missing parameter 'transport=%s' [ 1258.604600][T28014] nvme_fabrics: missing parameter 'nqn=%s' [ 1258.770046][T28014] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5061'. [ 1258.840793][ T869] gspca_ov534_9: reg_w failed -71 [ 1258.848808][T28014] ip6gre1: entered promiscuous mode [ 1258.905245][T28014] ip6gre1: entered allmulticast mode [ 1258.960618][T28025] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5063'. [ 1258.962764][T28025] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 1259.197852][T19983] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1259.294710][ T869] gspca_ov534_9: Unknown sensor 0000 [ 1259.297601][ T869] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1259.317827][ T869] usb 2-1: USB disconnect, device number 125 [ 1259.364828][ T24] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1259.384961][T19983] usb 7-1: Using ep0 maxpacket: 32 [ 1259.395437][T19983] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1259.417069][T19983] usb 7-1: config 0 has no interface number 0 [ 1259.423198][T19983] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1259.471602][T19983] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1259.493173][T19983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.513442][T19983] usb 7-1: Product: syz [ 1259.523632][T19983] usb 7-1: Manufacturer: syz [ 1259.528796][T19983] usb 7-1: SerialNumber: syz [ 1259.536697][ T24] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1259.548156][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1259.579453][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1259.591936][ T24] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1259.608143][T19983] usb 7-1: config 0 descriptor?? [ 1259.614020][ T24] usb 6-1: Product: syz [ 1259.620002][T19983] smsc75xx v1.0.0 [ 1259.624796][ T24] usb 6-1: Manufacturer: syz [ 1259.635262][ T24] usb 6-1: SerialNumber: syz [ 1259.663112][ T24] usb 6-1: config 0 descriptor?? [ 1259.702986][ T24] usb 6-1: selecting invalid altsetting 0 [ 1260.226136][T19983] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1260.247022][T19983] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1260.865865][T19983] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1260.882227][T19983] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1260.904996][T19983] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1260.924988][T19983] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 1260.995052][ T869] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1261.155035][ T869] usb 5-1: Using ep0 maxpacket: 8 [ 1261.161950][ T869] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1261.170775][ T869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1261.191880][ T869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1261.207876][ T869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1261.229419][ T869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1261.239946][ T869] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.333189][ T869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1261.376855][ T869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.621163][T28042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.642058][T28042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.652558][ T869] usb 5-1: usb_control_msg returned -32 [ 1261.658371][ T869] usbtmc 5-1:16.0: can't read capabilities [ 1262.253850][T28085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5079'. [ 1262.339006][ T869] usb 6-1: USB disconnect, device number 43 [ 1262.369869][T28053] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1262.408268][T28053] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 1262.491480][T28090] netlink: 'syz.5.5081': attribute type 1 has an invalid length. [ 1262.620325][T28094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.661295][T28094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.808671][T28098] binder: BINDER_SET_CONTEXT_MGR already set [ 1262.826830][T28098] binder: 28092:28098 ioctl 4018620d 2000000000c0 returned -16 [ 1262.887825][T28098] binder: BINDER_SET_CONTEXT_MGR already set [ 1262.903766][T28098] binder: 28092:28098 ioctl 4018620d 200000000040 returned -16 [ 1262.919029][ T869] usb 7-1: USB disconnect, device number 103 [ 1263.151467][T28108] kvm: kvm [28107]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 1263.606673][ T869] usb 5-1: USB disconnect, device number 124 [ 1263.835911][T28127] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5090'. [ 1264.008227][T28132] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5091'. [ 1264.544649][ T869] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1264.764840][ T5943] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1264.774636][ T869] usb 5-1: Using ep0 maxpacket: 8 [ 1264.781854][ T869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1264.797850][ T869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1264.825210][ T869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1264.845344][ T869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1264.864291][ T869] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1264.891070][ T869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1264.913119][ T869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.945106][ T5943] usb 7-1: device descriptor read/64, error -71 [ 1265.137858][ T869] usb 5-1: GET_CAPABILITIES returned 0 [ 1265.143614][ T869] usbtmc 5-1:16.0: can't read capabilities [ 1265.185473][ T5943] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1265.342061][ T869] usb 5-1: USB disconnect, device number 125 [ 1265.355838][ T5943] usb 7-1: device descriptor read/64, error -71 [ 1265.464840][ T5943] usb usb7-port1: attempt power cycle [ 1265.656194][T28160] sctp: [Deprecated]: syz.2.5100 (pid 28160) Use of int in maxseg socket option. [ 1265.656194][T28160] Use struct sctp_assoc_value instead [ 1265.712373][T28162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5101'. [ 1265.804639][ T5943] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1265.852709][T28167] netlink: 'syz.2.5100': attribute type 1 has an invalid length. [ 1265.853726][ T5943] usb 7-1: device descriptor read/8, error -71 [ 1265.877717][T28167] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5100'. [ 1266.125103][ T5943] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1266.195569][ T5943] usb 7-1: device descriptor read/8, error -71 [ 1266.241495][T28181] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5106'. [ 1266.306856][ T5943] usb usb7-port1: unable to enumerate USB device [ 1266.508742][T28191] fuse: Unknown parameter 'f~.+ènY³h17Gýd' [ 1266.586503][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1266.611074][T28191] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5109'. [ 1266.669684][T28191] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5109'. [ 1266.768906][ T24] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1266.780511][ T24] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1266.794820][ T24] usb 6-1: Product: syz [ 1266.800043][ T24] usb 6-1: SerialNumber: syz [ 1266.888126][ T24] usb 6-1: config 0 descriptor?? [ 1267.031178][T28190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.054501][T28190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.409363][T28201] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5112'. [ 1267.552647][ T30] audit: type=1326 audit(1768764113.679:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28198 comm="syz.4.5111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ce4f8f749 code=0x0 [ 1267.656302][T28209] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 1267.702999][T28209] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1267.736353][T28209] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1267.775183][T28209] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1267.799043][T28209] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 1268.061859][T28221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.111024][T28221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.136450][T28221] 8021q: VLANs not supported on ip_vti0 [ 1268.144485][T28221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.159730][T28221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.644108][ T24] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1268.814646][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1268.822408][ T24] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 1268.845872][ T24] usb 2-1: config 0 has no interface number 0 [ 1268.863523][ T24] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 1268.898008][ T24] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 1268.910622][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.914751][ T5943] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1268.934694][ T24] usb 2-1: Product: syz [ 1268.939391][ T24] usb 2-1: Manufacturer: syz [ 1268.950597][ T24] usb 2-1: SerialNumber: syz [ 1268.974753][ T24] usb 2-1: config 0 descriptor?? [ 1268.995047][T28224] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1269.090450][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1269.118505][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1269.141736][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1269.152742][T18739] usb 6-1: USB disconnect, device number 45 [ 1269.173800][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1269.190195][ T5943] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1269.200431][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.239158][T28224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.248512][ T5943] usb 7-1: config 0 descriptor?? [ 1269.265680][T28224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.276012][T28224] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1269.695622][ T24] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1269.737219][ T24] asix 2-1:0.191 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1269.789563][ T24] asix 2-1:0.191: probe with driver asix failed with error -71 [ 1269.827423][ T24] usb 2-1: USB disconnect, device number 126 [ 1269.909255][ T5943] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1270.653759][T28260] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5127'. [ 1271.241659][T28274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.250669][T28274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.263822][T28274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.274118][T28274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.664713][T18739] usb 7-1: reset high-speed USB device number 108 using dummy_hcd [ 1271.784743][ T5940] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1271.794707][T18739] usb 7-1: device descriptor read/64, error -32 [ 1271.944714][ T5940] usb 5-1: Using ep0 maxpacket: 32 [ 1271.951940][ T5940] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1271.961553][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.979495][ T5940] usb 5-1: config 0 descriptor?? [ 1271.999019][ T5940] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1272.034683][T18739] usb 7-1: reset high-speed USB device number 108 using dummy_hcd [ 1272.184734][T18739] usb 7-1: device descriptor read/64, error -32 [ 1272.399842][ T5940] gspca_sunplus: reg_w_riv err -71 [ 1272.406123][ T5940] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1272.418774][ T5940] usb 5-1: USB disconnect, device number 126 [ 1272.434900][T18739] usb 7-1: reset high-speed USB device number 108 using dummy_hcd [ 1272.455585][T18739] usb 7-1: device descriptor read/8, error -32 [ 1272.700734][T28231] raw-gadget.3 gadget.6: failed to queue suspend event [ 1272.708550][T28231] raw-gadget.3 gadget.6: failed to queue disconnect event [ 1272.716755][T18739] usb 7-1: reset high-speed USB device number 108 using dummy_hcd [ 1272.944962][T18739] usb 7-1: device not accepting address 108, error -71 [ 1272.962588][T19983] usb 7-1: USB disconnect, device number 108 [ 1273.299857][T19983] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1273.456631][T19983] usb 7-1: Using ep0 maxpacket: 16 [ 1273.466417][T19983] usb 7-1: config 8 has an invalid interface number: 206 but max is 0 [ 1273.481818][T19983] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.650223][T19983] usb 7-1: config 8 has no interface number 0 [ 1273.658692][T19983] usb 7-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1273.692110][T19983] usb 7-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 1273.713200][T19983] usb 7-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 1273.723429][T19983] usb 7-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 1273.735305][T19983] usb 7-1: config 8 interface 206 has no altsetting 0 [ 1273.749679][T19983] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 1273.777467][T19983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.795579][T19983] usb 7-1: Product: syz [ 1273.799941][T19983] usb 7-1: Manufacturer: syz [ 1273.821676][T19983] usb 7-1: SerialNumber: syz [ 1273.884687][ T24] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1274.064699][T19154] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1274.075241][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1274.090222][ T24] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1274.113312][ T5943] hid-generic 0000:0003:0001.0046: unknown main item tag 0x0 [ 1274.113312][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.158733][ T5943] hid-generic 0000:0003:0001.0046: unknown main item tag 0x0 [ 1274.194264][ T5943] hid-generic 0000:0003:0001.0046: hidraw1: HID v0.03 Device [syz0] on syz1 [ 1274.229320][T19983] garmin_gps 7-1:8.206: Garmin GPS usb/tty converter detected [ 1274.245937][ T24] usb 5-1: config 0 descriptor?? [ 1274.262296][T19154] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1274.274319][T19154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.313926][T19983] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90 [ 1274.338480][T19154] usb 2-1: Product: syz [ 1274.342715][T19154] usb 2-1: Manufacturer: syz [ 1274.362247][T19983] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90 [ 1274.382675][T19154] usb 2-1: SerialNumber: syz [ 1274.433142][T19154] usb 2-1: config 0 descriptor?? [ 1274.438493][T19983] usb 7-1: USB disconnect, device number 109 [ 1274.445646][T28341] fido_id[28341]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1274.475894][T19983] garmin_gps 7-1:8.206: device disconnected [ 1274.485377][T19154] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1274.851817][T28354] gtp0: entered allmulticast mode [ 1274.894738][ T5943] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1274.935134][T19154] gspca_sunplus: reg_r err -71 [ 1274.972115][T19154] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1275.000237][T19154] usb 2-1: USB disconnect, device number 127 [ 1275.046059][ T5943] usb 6-1: device descriptor read/64, error -71 [ 1275.284640][ T5943] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1275.455701][ T5943] usb 6-1: device descriptor read/64, error -71 [ 1275.575095][ T5943] usb usb6-port1: attempt power cycle [ 1275.944690][T19154] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1275.974243][ T5943] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1276.365656][T28374] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 1276.406004][ T30] audit: type=1326 audit(1768764122.529:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28371 comm="syz.2.5161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x0 [ 1276.501863][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 1276.512569][ T5943] usb 6-1: device descriptor read/8, error -71 [ 1276.512606][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1276.534679][T19154] usb 2-1: device descriptor read/64, error -71 [ 1276.559080][ T24] usb 5-1: USB disconnect, device number 127 [ 1276.765659][ T5943] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1276.775499][T19154] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 1276.795343][ T5943] usb 6-1: device descriptor read/8, error -71 [ 1276.881656][T28384] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1276.917378][ T5943] usb usb6-port1: unable to enumerate USB device [ 1276.934703][T19154] usb 2-1: device descriptor read/64, error -71 [ 1277.051325][T19154] usb usb2-port1: attempt power cycle [ 1277.087236][T28384] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1277.180230][T28391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5165'. [ 1277.389508][T28393] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5166'. [ 1277.400657][T19154] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1277.414473][T28393] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5166'. [ 1277.426859][T19154] usb 2-1: device descriptor read/8, error -71 [ 1277.437935][T28393] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5166'. [ 1277.451112][T28393] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5166'. [ 1277.463884][T28393] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5166'. [ 1277.479104][T28393] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5166'. [ 1277.494740][T28393] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5166'. [ 1277.505064][T28393] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5166'. [ 1277.514299][T28393] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5166'. [ 1277.528125][T28393] bond2: left promiscuous mode [ 1277.674742][T19154] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1277.703062][T19154] usb 2-1: device descriptor read/8, error -71 [ 1277.715501][ T30] audit: type=1326 audit(1768764123.849:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839ed8f749 code=0x7ffc0000 [ 1277.780143][ T30] audit: type=1326 audit(1768764123.849:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.5.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839ed8f749 code=0x7ffc0000 [ 1277.815032][T19154] usb usb2-port1: unable to enumerate USB device [ 1277.868766][T28394] usb usb8: usbfs: process 28394 (syz.6.5166) did not claim interface 0 before use [ 1278.182825][T28406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.194731][T28406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1279.101399][T28420] input: syz0 as /devices/virtual/input/input104 [ 1279.284692][ T869] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1279.488339][ T869] usb 6-1: config 6 has an invalid interface number: 9 but max is 1 [ 1279.496829][ T869] usb 6-1: config 6 has an invalid interface number: 32 but max is 1 [ 1279.506360][ T869] usb 6-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 1279.516887][ T869] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.549692][ T869] usb 6-1: config 6 has no interface number 0 [ 1279.563817][ T869] usb 6-1: config 6 has no interface number 1 [ 1279.578774][ T5943] IPVS: starting estimator thread 0... [ 1279.588645][ T869] usb 6-1: config 6 interface 32 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1279.608382][ T869] usb 6-1: config 6 interface 32 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 1279.634447][ T869] usb 6-1: config 6 interface 32 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 1279.675256][T28432] IPVS: using max 31 ests per chain, 74400 per kthread [ 1279.717361][ T869] usb 6-1: config 6 interface 32 altsetting 7 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 1279.792524][ T869] usb 6-1: config 6 interface 9 has no altsetting 0 [ 1279.809780][ T869] usb 6-1: config 6 interface 32 has no altsetting 0 [ 1279.942942][ T869] usb 6-1: New USB device found, idVendor=083a, idProduct=e501, bcdDevice=e3.c2 [ 1279.963106][ T869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.982337][ T869] usb 6-1: Product: syz [ 1279.991057][ T869] usb 6-1: Manufacturer: syz [ 1280.046336][ T869] usb 6-1: SerialNumber: syz [ 1280.383660][T28442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.393547][T28442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.948698][T28449] wireguard0: entered promiscuous mode [ 1280.963647][T28449] wireguard0: entered allmulticast mode [ 1281.755822][ T869] usb 6-1: USB disconnect, device number 50 [ 1282.087786][T28463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.114974][T28463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.270779][T28478] __nla_validate_parse: 181 callbacks suppressed [ 1282.270798][T28478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5188'. [ 1282.286809][T28478] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5188'. [ 1282.301042][T28478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5188'. [ 1282.311017][T28478] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5188'. [ 1282.474730][ T869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1282.484706][T19154] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1282.654640][T19154] usb 2-1: device descriptor read/64, error -71 [ 1282.694693][ T869] usb 5-1: Using ep0 maxpacket: 8 [ 1282.707766][ T869] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1282.720577][ T869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1282.732138][ T869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1282.797512][T19153] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1282.816293][ T869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1282.845211][ T869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1282.855754][ T869] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1282.896306][ T869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1282.916731][ T869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.924741][T19154] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1282.997405][T19153] usb 6-1: config 0 has no interfaces? [ 1283.006608][T19153] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1283.043996][T19153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.052311][T19153] usb 6-1: Product: syz [ 1283.054695][T19154] usb 2-1: device descriptor read/64, error -71 [ 1283.056761][T19153] usb 6-1: Manufacturer: syz [ 1283.081105][T19153] usb 6-1: SerialNumber: syz [ 1283.094932][T19153] usb 6-1: config 0 descriptor?? [ 1283.141766][ T869] usb 5-1: usb_control_msg returned -32 [ 1283.177104][T19154] usb usb2-port1: attempt power cycle [ 1283.244743][ T869] usbtmc 5-1:16.0: can't read capabilities [ 1283.330413][T28483] macvtap1: entered promiscuous mode [ 1283.344809][T28483] macvtap1: entered allmulticast mode [ 1283.355817][T28483] veth1_vlan: entered allmulticast mode [ 1283.494661][T28496] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1283.545000][T19154] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1283.560922][T28498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5193'. [ 1283.575368][T19154] usb 2-1: device descriptor read/8, error -71 [ 1283.591741][T28498] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5193'. [ 1283.662015][ T30] audit: type=1326 audit(1768764129.789:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28503 comm="syz.2.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1283.692207][ T30] audit: type=1326 audit(1768764129.789:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28503 comm="syz.2.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1283.718524][ T30] audit: type=1326 audit(1768764129.789:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28503 comm="syz.2.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1283.742071][ T30] audit: type=1326 audit(1768764129.789:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28503 comm="syz.2.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1283.765037][ T30] audit: type=1326 audit(1768764129.789:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28503 comm="syz.2.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1283.787983][ T30] audit: type=1326 audit(1768764129.789:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28503 comm="syz.2.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1283.811075][ T30] audit: type=1326 audit(1768764129.789:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28503 comm="syz.2.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1283.824774][T19154] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1283.834320][ T30] audit: type=1326 audit(1768764129.789:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28503 comm="syz.2.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1283.864136][ T30] audit: type=1326 audit(1768764129.789:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28503 comm="syz.2.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1283.887387][ T30] audit: type=1326 audit(1768764129.789:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28503 comm="syz.2.5196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39f698f749 code=0x7ffc0000 [ 1283.904974][T19154] usb 2-1: device descriptor read/8, error -71 [ 1283.924827][ T5911] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1284.021414][T28511] netlink: 'syz.2.5197': attribute type 5 has an invalid length. [ 1284.025321][T19154] usb usb2-port1: unable to enumerate USB device [ 1284.037105][T28511] ip6erspan0: entered promiscuous mode [ 1284.074753][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 1284.081626][ T5911] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.095415][ T5911] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1284.104894][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.112922][ T5911] usb 7-1: Product: syz [ 1284.117379][ T5911] usb 7-1: Manufacturer: syz [ 1284.121992][ T5911] usb 7-1: SerialNumber: syz [ 1284.129035][ T5911] usb 7-1: config 0 descriptor?? [ 1284.138948][ T5911] streamzap 7-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1284.882332][T28516] program syz.2.5198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1285.185084][ T5911] usb 5-1: USB disconnect, device number 2 [ 1285.397749][T28525] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 1285.792466][T19153] usb 6-1: USB disconnect, device number 51 [ 1286.038525][T28548] program syz.5.5206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1286.060647][T28549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5203'. [ 1286.073376][T28549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5203'. [ 1286.138138][T19153] IPVS: starting estimator thread 0... [ 1286.244760][T28550] IPVS: using max 51 ests per chain, 122400 per kthread [ 1286.483186][T28556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5208'. [ 1286.506152][T28556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5208'. [ 1286.845271][T19154] usb 7-1: USB disconnect, device number 110 [ 1287.291145][T28567] __nla_validate_parse: 4 callbacks suppressed [ 1287.291159][T28567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5211'. [ 1287.492848][T28584] netlink: 752 bytes leftover after parsing attributes in process `syz.5.5215'. [ 1287.517560][T28584] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1287.603168][T28584] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1287.622213][T28591] ================================================================== [ 1287.630303][T28591] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1287.638896][T28591] Write of size 1280 at addr ffffc900049a7b10 by task vivid-000-vid-c/28591 [ 1287.647576][T28591] [ 1287.649891][T28591] CPU: 0 UID: 0 PID: 28591 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1287.649907][T28591] Tainted: [L]=SOFTLOCKUP [ 1287.649911][T28591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1287.649918][T28591] Call Trace: [ 1287.649925][T28591] [ 1287.649931][T28591] dump_stack_lvl+0xe8/0x150 [ 1287.649946][T28591] print_report+0xca/0x240 [ 1287.649957][T28591] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1287.649971][T28591] kasan_report+0x118/0x150 [ 1287.649984][T28591] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1287.649999][T28591] kasan_check_range+0x2b0/0x2c0 [ 1287.650010][T28591] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1287.650024][T28591] __asan_memcpy+0x40/0x70 [ 1287.650032][T28591] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1287.650060][T28591] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1287.650074][T28591] ? __lock_acquire+0x6b6/0x2cf0 [ 1287.650093][T28591] ? __perf_event_task_sched_in+0x15ec/0x17e0 [ 1287.650106][T28591] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1287.650120][T28591] ? vivid_thread_vid_cap+0x460/0x10d0 [ 1287.650135][T28591] vivid_thread_vid_cap+0x8da/0x10d0 [ 1287.650153][T28591] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1287.650166][T28591] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1287.650178][T28591] ? __kthread_parkme+0x7b/0x200 [ 1287.650188][T28591] ? __kthread_parkme+0x1a1/0x200 [ 1287.650199][T28591] kthread+0x711/0x8a0 [ 1287.650211][T28591] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1287.650223][T28591] ? __pfx_kthread+0x10/0x10 [ 1287.650235][T28591] ? _raw_spin_unlock_irq+0x23/0x50 [ 1287.650244][T28591] ? __pfx_kthread+0x10/0x10 [ 1287.650256][T28591] ret_from_fork+0x510/0xa50 [ 1287.650265][T28591] ? __pfx_ret_from_fork+0x10/0x10 [ 1287.650274][T28591] ? __switch_to+0xc9e/0x1480 [ 1287.650287][T28591] ? __pfx_kthread+0x10/0x10 [ 1287.650298][T28591] ret_from_fork_asm+0x1a/0x30 [ 1287.650314][T28591] [ 1287.650318][T28591] [ 1287.836449][T28591] The buggy address belongs to a 3-page vmalloc region starting at 0xffffc900049a5000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 1287.850171][T28591] The buggy address belongs to the physical page: [ 1287.856651][T28591] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880a6f0b000 pfn:0xa6f0b [ 1287.866699][T28591] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1287.873805][T28591] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1287.882388][T28591] raw: ffff8880a6f0b000 0000000000000000 00000001ffffffff 0000000000000000 [ 1287.890958][T28591] page dumped because: kasan: bad access detected [ 1287.897360][T28591] page_owner tracks the page as allocated [ 1287.903070][T28591] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN), pid 28590, tgid 28589 (syz.4.5216), ts 1287598436783, free_ts 1287598406259 [ 1287.921724][T28591] post_alloc_hook+0x234/0x290 [ 1287.926479][T28591] get_page_from_freelist+0x24e0/0x2580 [ 1287.932010][T28591] __alloc_frozen_pages_noprof+0x181/0x370 [ 1287.937887][T28591] alloc_pages_bulk_noprof+0x560/0x710 [ 1287.943330][T28591] alloc_pages_bulk_mempolicy_noprof+0x341/0x1650 [ 1287.949739][T28591] __vmalloc_node_range_noprof+0xa38/0x16a0 [ 1287.955621][T28591] vmalloc_user_noprof+0xad/0xf0 [ 1287.960563][T28591] vb2_vmalloc_alloc+0xef/0x360 [ 1287.965413][T28591] __vb2_queue_alloc+0x9c2/0x15a0 [ 1287.970425][T28591] vb2_core_reqbufs+0xc31/0x1420 [ 1287.975348][T28591] __vb2_init_fileio+0x318/0xff0 [ 1287.980272][T28591] __vb2_perform_fileio+0x284/0x1600 [ 1287.985541][T28591] vb2_fop_read+0x273/0x360 [ 1287.990021][T28591] v4l2_read+0x19c/0x2c0 [ 1287.994246][T28591] vfs_readv+0x5aa/0x850 [ 1287.998477][T28591] do_readv+0x14d/0x2d0 [ 1288.002621][T28591] page last free pid 28590 tgid 28589 stack trace: [ 1288.009096][T28591] __free_frozen_pages+0xbc8/0xd30 [ 1288.014199][T28591] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 1288.019728][T28591] alloc_vmap_area+0xdc4/0x14e0 [ 1288.024567][T28591] __get_vm_area_node+0x1f8/0x300 [ 1288.029585][T28591] __vmalloc_node_range_noprof+0x371/0x16a0 [ 1288.035467][T28591] vmalloc_user_noprof+0xad/0xf0 [ 1288.040385][T28591] vb2_vmalloc_alloc+0xef/0x360 [ 1288.045239][T28591] __vb2_queue_alloc+0x9c2/0x15a0 [ 1288.050258][T28591] vb2_core_reqbufs+0xc31/0x1420 [ 1288.055177][T28591] __vb2_init_fileio+0x318/0xff0 [ 1288.060093][T28591] __vb2_perform_fileio+0x284/0x1600 [ 1288.065357][T28591] vb2_fop_read+0x273/0x360 [ 1288.069839][T28591] v4l2_read+0x19c/0x2c0 [ 1288.074058][T28591] vfs_readv+0x5aa/0x850 [ 1288.078280][T28591] do_readv+0x14d/0x2d0 [ 1288.082417][T28591] do_syscall_64+0xec/0xf80 [ 1288.086901][T28591] [ 1288.089206][T28591] Memory state around the buggy address: [ 1288.094824][T28591] ffffc900049a7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1288.102865][T28591] ffffc900049a7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1288.110906][T28591] >ffffc900049a8000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1288.118948][T28591] ^ [ 1288.123001][T28591] ffffc900049a8080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1288.131737][T28591] ffffc900049a8100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1288.139779][T28591] ================================================================== [ 1288.178284][T28591] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1288.185522][T28591] CPU: 0 UID: 0 PID: 28591 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.196895][T28591] Tainted: [L]=SOFTLOCKUP [ 1288.201213][T28591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1288.211264][T28591] Call Trace: [ 1288.214555][T28591] [ 1288.217497][T28591] vpanic+0x1e0/0x670 [ 1288.221503][T28591] panic+0xb9/0xc0 [ 1288.225234][T28591] ? __pfx_panic+0x10/0x10 [ 1288.229651][T28591] ? preempt_schedule_thunk+0x16/0x30 [ 1288.235021][T28591] ? preempt_schedule_thunk+0x16/0x30 [ 1288.240397][T28591] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1288.246031][T28591] check_panic_on_warn+0x89/0xb0 [ 1288.250970][T28591] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1288.256605][T28591] end_report+0x6f/0x140 [ 1288.260839][T28591] kasan_report+0x129/0x150 [ 1288.265332][T28591] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1288.270960][T28591] kasan_check_range+0x2b0/0x2c0 [ 1288.275886][T28591] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1288.281510][T28591] __asan_memcpy+0x40/0x70 [ 1288.285925][T28591] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 1288.291422][T28591] vivid_thread_vid_cap_tick+0xfff/0x5fd0 [ 1288.297144][T28591] ? __lock_acquire+0x6b6/0x2cf0 [ 1288.302177][T28591] ? __perf_event_task_sched_in+0x15ec/0x17e0 [ 1288.308242][T28591] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 1288.314391][T28591] ? vivid_thread_vid_cap+0x460/0x10d0 [ 1288.319844][T28591] vivid_thread_vid_cap+0x8da/0x10d0 [ 1288.325133][T28591] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1288.330846][T28591] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1288.336640][T28591] ? __kthread_parkme+0x7b/0x200 [ 1288.341565][T28591] ? __kthread_parkme+0x1a1/0x200 [ 1288.346580][T28591] kthread+0x711/0x8a0 [ 1288.350641][T28591] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 1288.356359][T28591] ? __pfx_kthread+0x10/0x10 [ 1288.360940][T28591] ? _raw_spin_unlock_irq+0x23/0x50 [ 1288.366211][T28591] ? __pfx_kthread+0x10/0x10 [ 1288.370792][T28591] ret_from_fork+0x510/0xa50 [ 1288.375369][T28591] ? __pfx_ret_from_fork+0x10/0x10 [ 1288.380466][T28591] ? __switch_to+0xc9e/0x1480 [ 1288.385137][T28591] ? __pfx_kthread+0x10/0x10 [ 1288.389717][T28591] ret_from_fork_asm+0x1a/0x30 [ 1288.394481][T28591] [ 1288.397832][T28591] Kernel Offset: disabled [ 1288.402138][T28591] Rebooting in 86400 seconds..