last executing test programs: 2m52.89038541s ago: executing program 1 (id=4833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x40800) openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309000008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16=r4], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}}, 0x802) 2m52.639975567s ago: executing program 2 (id=4834): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000001c0)={0x2, 0xb1, "713ac1cfa6a53022a13942c7f8d7157d59c6cc1043993d5cdcd53fafa9586b9c9b861ad02e22ecc0285197fee10b81ef36ef3415a770cb3fcef6248061a0954f0414b3b34298d747c7bf1f3ff75834c8a9ef112828adfe9b7b4560dd8bd470ebd2628f0c85d5db70bd8f877a10884cbdff789ad734b289d1efe72f587b749ae841a796652a632b5c476037fd07728ea077def5323494e3b23c2071287623cf2e97f13f0ad9ba198965c1dce835f8fb9d2c"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000019700)={r3, 0x0, 0xfffffffffffffffc}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r6, 0x0, 0xcf, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0x4, 0xf4, 0x0, {0x6, 0x4, 0x0, 0x1, 0x3, 0x66, 0x3, 0x6, 0x6c, 0x5, @multicast2, @private=0xa010100, {[@timestamp={0x44, 0x4, 0x60, 0x0, 0x7}]}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="04"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f0000000740)=0xe) 2m52.143676536s ago: executing program 1 (id=4836): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x8101) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x4d10, 0x2, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) close_range(r0, r1, 0x0) 2m51.872067469s ago: executing program 2 (id=4837): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x50) memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000840), 0x80080) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@hyper, 0x10000000}, {@local}, 0x400, "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"}, 0x418, 0x80000000}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/pm_trace_dev_match', 0x0, 0x32) read$dsp(r2, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d411375726b09d20dcd7320f424a5b08ba20db1eb599bd7b68e0ef2eea7f85f133e65714763c5505"], 0x340a) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000800)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x50) (async) memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe2(&(0x7f0000000840), 0x80080) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@hyper, 0x10000000}, {@local}, 0x400, "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"}, 0x418, 0x80000000}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/pm_trace_dev_match', 0x0, 0x32) (async) read$dsp(r2, 0x0, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d411375726b09d20dcd7320f424a5b08ba20db1eb599bd7b68e0ef2eea7f85f133e65714763c5505"], 0x340a) (async) syz_open_procfs(0x0, &(0x7f0000000480)='maps\x00') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000800)={'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) (async) 2m51.50409226s ago: executing program 1 (id=4838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000722000000def19a5750e3019dc3df910e79efab9d9b81a86fe050f1cb9ece183cfff600fb030e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x3f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4000009f}]}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001708000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r9 = semget$private(0x0, 0x5, 0x0) semop(r9, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r9, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semop(r9, &(0x7f00000002c0)=[{0x3, 0x3, 0x800}], 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r10) r11 = socket$unix(0x1, 0x2, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000001080)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200)=r13, 0x12) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0x18, 0xb}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x0, 0xffffffff, 0xb}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) 2m51.22000497s ago: executing program 2 (id=4841): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc01000019000100fcffffff10000000ffffffff000000000000000000000000fc00000000000000000000000000000100020000ffff20000a0080002e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}}, 0x4048050) 2m50.560057677s ago: executing program 2 (id=4842): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x20000007, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x34bd, &(0x7f0000000000)={0x0, 0x3549, 0x0, 0x3, 0x34}, &(0x7f00000001c0), &(0x7f0000000300)) r3 = syz_io_uring_setup(0x10d4, &(0x7f0000000100)={0x0, 0x8193, 0x0, 0x3, 0x1000034f, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x3c}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m50.427980044s ago: executing program 1 (id=4843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r4, 0x0) r5 = syz_io_uring_setup(0xd7, &(0x7f0000000000)={0x0, 0xb46, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r11, 0x4c00, r10) ioctl$LOOP_SET_FD(r11, 0x4c05, r11) dup2(r10, r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd, 0xd4b, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000000)={0x3, 0x1, {0x2, 0x1, 0x0, 0x2, 0x1}, 0x4}) 2m49.348009612s ago: executing program 1 (id=4844): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000740)="2ae0e710", 0xfffffffffffffdc6, 0x24000040, &(0x7f0000000240)={0xa, 0x0, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x48001}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) sendmsg$nl_netfilter(r2, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000000700)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000480)="671dd21441a14cc90474761e6390b0df5286e0593a275f24f2d7d37f1fdebf374a72e85fc05a451eaa4da9a81335bc7b4d23a69514d2ee1b614745e2912af56a87e73f98007e6c0d784af2a607f3dd7374abf8d479db346c093716a10cfd4de9ba88a0958bc8da1e61015759ad219e092a53a2842992ecc959cf21c7e86ff5583d93c283ae738b5bf4785d", 0x8b}, {&(0x7f0000000400)="564f63a4fd016259d2187ec1a4eca00615", 0x11}, {0x0}, {&(0x7f00000007c0)="9bc34250b8ae677fbe75b52eb24db6625aa3185c04043b587462c37a49910f54255e450c26dccd88a0c45da97639aceb6eedd3d38f3d11be7648f571b1b6ee97546be883b2bf3bc38e21c2367065bf1ad3314f98b5af6704677df5fdaa75a59c8bbeb4084d69ba16a44a2f16c3224c5c4c3969569c9362cd7edb02fcb331f270eea0ab885ea86bd1c64a55d4059b07d5cf3d9eda8bd67b336f22611f7f640901e124ad2221d11e71225b05e475bed4e90d9e9534a9c149972f7c276b4b8a4b240bd6ffc6cb3ffb3baa223a2a6d2a436975f34be6271f206a", 0xd8}, {&(0x7f0000000600)="fecd58486a3dae4377e053b3cad4df5e379da581dfd0fa3d6a17ab1caad3a97fe513a3e15935a3edd6706f5c4f614603dd1112a86c0c70b3d3b525837c8ee88fd1d746e811d6309ff283fba7acca463bd3e2f246860ae37bd47443afe2c9421127aeebb0ca4fff9db326161d6af99ea71a6388896db7332b20cd24a79b83e9", 0x7f}, {&(0x7f00000008c0)="be0e672d08eecae5d856fd18396b105ef1ba872db6b41f8f34a9531623b73d8e0e15f3634017dccb488c364759106f06eb48937debed9443e748015c8e24743607f26083f1dca804de79005d020e2a784e86d1ea511a0560b494a21f96e661d8ed1cd099af73601fbb1898fbd47a28cea55d64a2cd7aec67d1549b042d472dfed5169fd95ad6965291dbb43e861c0ed0c53a00014706eba4ae70ee5ae41cb67cb0aa54400af9560beded48a6d42b2fb5ec4be136783ca31fd74e4b8ecc3e2724bd281f13372e28f3d9bb2f0b15d1be86fd98b26fc7fec36e10dea66f9a933e0f", 0xe0}, {&(0x7f00000013c0)="a33c7f165a54936cdba3d5b6ec3da5d3931789f695dd6e3289a0a192c61c612530fa83e4ce35a365103917182e9620690a4565f2ce2130ca60dbb4b5a26d46e0e672c2dafc5dbd4a1774cd2e773af983e03713a61adc06037e3dcbc125f4839cff666ea0547eabd7221fc595daf522c692d28991576ce2e07e52ffb99f1eea118f9e59676f1acb39ec4facaa842549690a020510f381889674fdd12d5ac1164c054e56d994d2a21be55a024dc905aae5dd7734616ccec54bd7a0a69b73dac71b25ae6a27bdc32093495fc89274509ab8f2d53fa31854841cc5cd3f77b9011157b7363f07e31b12f96ec9f6ac5167279d135e1d55481444cc158b139f16ce68d660b23ede1622dbb386ced130e390c54589e0a797c276ff67155b89e959ce96db7680edfa65f22dd0798d7db2a46f886d96e4cd390951b1324ea00bef5e16a8f799a938e9ed75cefb119baf96a8e9f451c36247361dab3f868d289b7b19270549827dea39bd3746ffa126582f4aaf623acf2b863cc4fc192fc08800a553e95c50cf819c6f69ae69fb1aea625eab5aa618c743bde89c196de25ca48d3bb89918ada921dfd05980b7d0f0856cd719a2559338f2e399c0ddd3feaa0acf3855bb662dd7b91f3940e5ce224de5ca1ee9faabb16c3fb3cadc5265402a30c1a17f9021346766355e5e30ed80f03ff60e1c1766b4243222a6d938b61626b5f7f581670700f8eaf46fe723c98353319ae46450cf691d669ee38c87103597a3854de18de406508337b284afbfa53b418a3ed5a4afcc54b2240dd1b43dbc9cb7b4a170cd8e9ca4c40cc113c581bd48205e91edf7c917be976ca7f9cc1c3e95a4dabf7d1d77978d4379a28bb1181a2a62df88b8bffb98600c7380172b6ad0a042b91e4babd49334530f547168612a68d8a02e3c7352679634736b909a78c9d7ce9f05ccf23a8c8a8a1eba465963855629d20476b21df8e5bdc8f9ac5f83350ebb4692cc9c3f54f9a79237176bb5f61d6f9fa92e7881f9ff604a77a523c64c744d9f6a3dd40c3b50c5a723e5a78b5290d6da45c6c9f92b376c7729dfe7c6617ec16d50cf33636b027a0bb7797b549c712803c0fb2c4de4782c4b613dac6ea023f9cc0dbf2b6cf418878e5ca6ad1b5a956035f99e7b45d7db8f264f0709cc85727bb84340e7fb660293ba0728e4aeac8693640509976aa2fac11a54d6579196495cbf756055cd29cafc7683cad57fa20c67d5bd504363017835da3b198a182d75b34b38564f9a71184e07d97244fbe35d1ef45e8ed4196a78028d18a6229bb0ca73c7ff45e56bec10ce1e61e15e958a65876548eec143feeed2c13c6585e0f0aef2a5eb2b7bfb9f76d0f68531f35f245b66eb91422fd70e7f7fe35733319a767e1d15f3928bc8507a9cd0b3250e1ee036d7ab4ac5e3ecd37f0dae443c528ae8f61d1293dedf77a24c163dd0a996b7b7e6ea9986f325c69b5de513cb954d7afea64061597c6259249d97668c470ccfbc86ed18b6086adcd834cc526aae0cee458b5601b589bfafad3e11ed8480f489bcc46889d55ba69b1f98253a9340dffbd4617d89e66c1097638cef3101789fdae4c8e34124c62fbfea9069e0020ada0a164691b5b64a354ab384afe85febd82f536ffff221dd061cee243d5cd98eb000989b11bf652b1d70bd2f85c3a0dd27e0e3d12905b5f60efc29847d76182dfd9c2b2e3f47e3666658d14167744ced7ea00a538d7b5eaa26145cacea500eb19cc300671485363d16c30b628fd454c0955c034e1f4c5167e5f25e85ee08604d9ed8f6aed6dd783cff6f775e9dc8f49e9fd8e011c8228845fbd75d5f1410e9302cccc6722d7d65233279c043f01d2b374a43976e45ea8fd1fe5b5985e70f0baf0d5944092558558a14a62c9edbef37123a5f7f1c669bc87e83eae619b63acd6b4756077d32b95908bf119d9aa4ddb40e947b6cfd653e8412b9f40f90d8506faee73ffdde95f1004f3224d7721ec586b02635a0777b8b5331900d2542aaffef69b75da2ce27433208d86c1f82de4485bd3c5c862c0016c8fc96bf6b7f4ada99f76ebe2940909f660bc338c725fa0040edaca0a99204fc9726c967d1061ca38dd705ac16bd9ec5d1ae45982daab3c4c253ad7f201e5c73130a56813b0eefa77a775b462777161e9236d2d2032da44fe9bfe3283d7d141fcb397ffe5e491fd92e7a7e9086d3b7b44d04409b4e2d569a42dd9051282c5ebfbf94fa41f9402648505dd2c0c2b583397d1b994fd6f6559b351aceed901cb56f1d3976e7253a4d202b899c22569c2ef97aa7f62537fd5686e46423fe3df217b9ac7ecf5b6f83ae707202899321ad5fbebbe66cdd91a7f664987b7da4c6ebf74bf96b2c0b58a3c48974939f6bc0f678301513e13d4b37302e7fe3f374220a58fc9fd9a3f80544bd728564b811be04b5e682d994f94b5ab04c5239d253860d81b46595caaec83006fd0b1bf8c3e63b48ba47cc717ceb80ee7c8e6606591b15afbfa2d7ca33bc6a068d537253461b31dec19e317b14b1c1d29084a1583f17517ccb15a133fb5680a4bc7ce75c0f577dc5f78531915140c5be6cc7ac1a89e3134e155e74189d47397d644bdea090b83db194fcd65706a488157b08e6bad50fe102d5a0620df8d5c4feb6e8d4f3c59c67f92dac1da8ed46c30242becb627d341fbeb73e767f53854c0d40b71130e9716a707cdcdff8909e60a0d9a7bd4521016797ef8fb942c66279b70214a5d5c2adeb444cd50d1159aa3493fc9caef21e88269240af98fec8570172fe9ac63afbf255c4b2055eeb4093aa22718119df240f234239f93ccda48923ab1ffa3a78d0321bff810498b9a221e7f68dae3151983a62c79becd8da96bf9680dee546c4a8284259e2c77b44eab69baf8b4a8fcfda721b48a6bd34f0e693fb9b6c87f35f827fa7f0e2d7d8dafa215181e4a9298706a15c795c1e4f9863575d694c43cd58314782d81fc3a30c4547fbfd40b7f95dc1ae14b0c59f5358931494308ff3632ce14c2600950b723411267914e775ccfc3043b186c4662c1c0737669d30bc3c5ce850ebd30cbb7f11cd80dce74f1e47625815cf2a2f11d721f2d0c4a8f1377a7e08d784a0140a290919bcb814ec1de39365de635b61854cf53793f754be8538d048bbb6200de7a5be35c5ae885662bdc577ed090e7130d4b95ac3411a94740aac01d26ee1fd20651a5f4b7f88439b78de3fbc2967f9ec30a41246e6706a204d9d118fb393dcaece1526cef0c500c2d9bae6b3803ff8bb6b734a2e740e34ef03a18ddf2701cb7f512d3c414448eea55a47e690005c5678a187a22b274e8d00a2ed6e42ea16c1298fcb84e346d9f7b24a267347f7417af78ed7c9b04d8850b30b3f79f38cd54ef71b670954e724b4314ba24332c9f215373f6d8b92ca3691ced2db54ae08a80bf5f87d5cccf5d264ddd7c640fb9e013280d41c5907fe41322ebed71b95c763270669ddc67be640b1d7f14f8deada5940771821dedebb6efdc010a830ccd790087f2e393cfa9639128ae8b604677a6e5e8366f84482d3ee3f6893a636e25e85eb51296457bb631ac251ba2bad69695d71b7632b7dd802829ce9703b8c2a00763d07fd894e47d9e20c19136c253822f34274ad966d2840ee5fc6fcd4ac3c78334457a7ab06f451e68f4dcf28b0b02261fb074df5b75fec6343291e2a79028f8260ef3243a88a21b4fdbf513a28d10986039903268b1b6424bf3d77f34eb6a0d909f63c788e655fd9d2e082e6b1943b339382e701fa05f053aca891cd22eb23acc9ee113a8edc13aee0ba56d97db02864c75b8e5bd5ba3641163135080dc2d3bec5d68d1a6454043ff92b8b808630468d037a5efdf25aab76331503d29cb4ea6f65b3ab294758f2a3e4c9bd41ece1529cf7349b3571a298c7f64fe6d007f03b8629de9434792069230c86caebbc050c8e97c2721b351c6455523ccfc202320a7e679ac07de835ecef9f807cd519ef8661fb89fc351d469b976845e95b27dc592fdbe732e35c1bb097501d8b73c2b54ae9641910016f480fe55a9afad1fa1e9220826022ac4136e730ffbc075de6a269886e919345898ffa8cd44b5d63cadb64e535d1af29f47be064e798f75ea7cff69995746a86a7027393c9d6810fc5d99607b3e5b023423e4edef906f0785d22477a246a76b465b62ba1ae82a8c51b67c7e98e5626133f1b932df46058a94f04044eb653ae56cab2dc55f2056b0574130694841ee16851d97e60a87fb7470565a600a7a42036bb118e8472b6a512eff48a5e92f0b1f8026675fca4ce1526cba6f16d07fdfbed3b77619c51cb5ee5818369339400a038971c5c152c438c5dacdd8b4bf580bb9f5ba3a3e9b0af29ada1f1808ee12ac3392fb47fae2150fceec3a14ab7b242e076652f0af0ffe4c3c256203a363a8d7e68bdd363d13714c5a83a637c03d7e68c9f8544b884196ff79388e618a7906c1be28c637107a5e7b7829ceccfa75ae2681d513569402be36da49a1f033bf03c20707bf8e803e199fe32c0e73a910f00db67832fa291071730697aeda5a86957ae1f3e876a286000bcd09625edca83917db22ea440536b6b53a760f0de0d44f3cc3cbc298baf3575eb1c99b04699176c20dc6e412d2b093a4cda3229116fefb9deaf13cfc06e3fc89022c3175951b9204b86b238a88b2edad722e89f65b74394185f4240b65bc8dd4ce516c7116caef3fd93934292902a30162811974cf0fea1aa03f74e4688b36ef0158ff48d78c27c6034dbc77c76fd082003defe28749647775997cf531776cacf7fc762aed2f8ada9b3842128b50d07d6c8da45e2e49d986375d571345804964510830e4814318da2392827fad94d8f43de5ff51bab8f8dc5c43802cdba5db7572f59e4086754003e8fb98bde429ddb6af8505207bdf231ad1d9e6b5fa24d0f75170ce476143afd9c38ae39133f73be6386abfb0b229c32bb722d0e0827ec63cafa77578a7382ae7a743e30bc5585b785b0f530b7fa7fc78f621bbc202631f9b2aafc7aa336da656d44653e716ff0e78eab8a8a00e7a8e0348ba246669dec87842627eced1b0bf1ebe2111f95a96033e2c0f81c5c958b8f5b4f6d12a33a0fe2771c8eb898f4951fd8651486d2b83e5980e00919531f687475639b51c42144132eeba9d06c2f729135b3d0f96ba5e3d5b05103309642d299e540cfe13655f89a6583a66690d7645937bf18795be4072d43e702039c293ff4c6d1eea8d61c29497d0780aaacceed6f042af443f2cd9e2179ad4f941b42f4d369fb631c5c15576384a55ccd55dfa37ed1326157ef791144a3fdfe258b068156df289b1f41b8272b40ff737ba2650404500da8974e340a590764197a927ab0a31ff56c27339dee84e9459830c1c6fb5a2f1392be4d283d62632d98a1230d8d8984accbd067d26fadb725d0785584792692622fe29ad109402ee41705fa320ed72ea70b9ccecb1f4b4f7c703fb57301ab6cc9919a3dac745cbcaa45a02887ad74ceeb35d5f41181ce7b43f7636b0c40b4fb279c44dcf3fb1b36178a0e87b0c38af077f3875434822fbac619159d4435d02c7982627161850fc2761bf2578e780e5c2f0e5f010f52f842d2dc8f7c5fa6a029a2996a1ed3244a4c5c05a81f431665c89bfa475a69976ea14110fd6613ef9d86ed1d8bd16a1c2d2c5eeb3eb1f37707f4a6a495aff40f5755260b463abc93238f085096f98f476a09a0f48e2631f2cac9880f7551acec6288604922e1e77bee33d8804a6ad179597c3a97a0edb3f7a877cd7ef1", 0x1000}, {&(0x7f0000000680)="b27a6f110eb55d0a29c232e6de0fdb90d3336320dc9bf2b73598c07038098635d33ba53ba1797de1894b6dd8c8f25483a4fc45ac2739343b", 0x38}, {&(0x7f00000009c0)="86b2c16fa52607b924e8d603ed1ab8342aa644e5f90f7a06cef84a14ed743f9d6d02e1c97a80425d04782992a2af6c01968931b46765f0b2e275aa28d49120998b259c8144fd2b502fb3e6ecae507471b5e0184068d2d84cec2fafe4d31b03c5f35d8b62e65236f52c72d791d44b18999465ec3d3f48c0a471a64039add5de56cf53e0ca0481b1d2", 0x88}], 0x9, &(0x7f0000000b40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @tclass={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1ff}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x3c, 0x0, '\x00', [@padn, @ra={0x5, 0x2, 0x10}]}}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x8, 0x12, '\x00', [@enc_lim={0x4, 0x1, 0xf3}, @generic={0x0, 0x90, "6c14e03c375520ce1c2920017eb8940b66e0d86dea95756dee348f6aa4a046d4dafed108549f5b48f6648c72c783049279b492b0344b7e237cc43a7fd76e8007d4ea09a9645963feab386ad057789e65555000b7e161f198e9acd4415bb134c9d211dd00a770f0573b94607c3ca946aaf2990ee416d0af573cf098cf439f09d051877e1d6ac004b4229b1cc5c20c21e9"}]}}}], 0x198}}], 0x1, 0x800) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), 0x4) sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x8, 0x0, r3, &(0x7f00000000c0)='!', 0x1, 0x3000000000000500}]) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r5 = eventfd(0x2) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0xe, r4, &(0x7f0000000040)="5d3caf864b90de70894125ca99920b6e6ae52040f66dda980997ef67aea7a1b6acd5f790f79c335dcdc91cd38bedf4b7f1f715f1e560b38565a7b1010f938cfcfd9e5b14b924521e73c2a6bcee02511f5dbbddc3628d86ec4cf768593196327c9528c358aae211c719913a80c773a761c63d119eee7af2f6e8838fbe2ad77a77be15987dbe2e027bf828a165ec5c525c79292a9bd992a47ddd7ef67932eae498f158fb8946aca963faa70264d134c46cdb8b88c600c7432371f9761d0dd515f5d36c2f0c14b1fa04274788ee34cdcdaea75b76ad0ddf7cb4e1307246a0", 0xdd, 0x490c, 0x0, 0x0, r5}]) unshare(0xa000200) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r6, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) select(0x40, &(0x7f00000001c0)={0x3000000, 0x3, 0x5, 0x4, 0x7, 0x0, 0x9, 0x5}, &(0x7f0000000280)={0x8001, 0x0, 0x8, 0x9, 0xffffffff7fffffff, 0x1, 0x2, 0xa}, &(0x7f00000002c0)={0x4, 0x3, 0x8, 0xa, 0xd, 0x9, 0x3, 0x1}, &(0x7f0000000340)={r7, r8/1000+10000}) semget$private(0x0, 0x4000, 0x0) 2m48.649769483s ago: executing program 1 (id=4847): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="0f0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6}, 0x94) read$FUSE(r1, &(0x7f0000001780)={0x2020}, 0x2020) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file1\x00', 0x0) 2m47.358332786s ago: executing program 32 (id=4847): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="0f0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6}, 0x94) read$FUSE(r1, &(0x7f0000001780)={0x2020}, 0x2020) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file1\x00', 0x0) 2m47.291236678s ago: executing program 2 (id=4850): socket$alg(0x26, 0x5, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xfffffde1, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={r4, 0x2, 0x6, @local}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00'}) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="bd70003934ece5b9cb", @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x41004) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) syz_usb_connect(0x0, 0x12, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@getchain={0x2c, 0x11, 0x43d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xc, 0xfff3}}, [{0x8, 0xb, 0x778}]}, 0x2c}}, 0x0) 2m42.591170377s ago: executing program 2 (id=4855): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x9}}}}, 0xf) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r2) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0x20000) preadv(r3, &(0x7f0000000240)=[{0x0, 0x43}, {&(0x7f00000001c0)=""/89, 0x59}], 0x2, 0x6, 0x2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xa6, 0x20, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x3, 0x64b, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xa2, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x2, 0x3e}}}}}}}]}}, 0xfffffffffffffffc) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000001c0)={@local, @broadcast, 0x0}, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0000000400", @ANYBLOB="010100"/13, @ANYRES32=r5, @ANYRES32, @ANYBLOB], 0x50) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r7, 0x540b, 0x0) 2m27.051288551s ago: executing program 33 (id=4855): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x88842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x6, 0x2}, {0x9}}}}, 0xf) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000}) close(r2) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0x20000) preadv(r3, &(0x7f0000000240)=[{0x0, 0x43}, {&(0x7f00000001c0)=""/89, 0x59}], 0x2, 0x6, 0x2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xa6, 0x20, 0xfc, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x3, 0x64b, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xa2, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x2, 0x3e}}}}}}}]}}, 0xfffffffffffffffc) r4 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0xd40, 0x82) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000001c0)={@local, @broadcast, 0x0}, 0x0) openat$btrfs_control(0xffffff9c, &(0x7f00000002c0), 0x20642, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e0000000400", @ANYBLOB="010100"/13, @ANYRES32=r5, @ANYRES32, @ANYBLOB], 0x50) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r7, 0x540b, 0x0) 11.308373676s ago: executing program 4 (id=5240): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x810) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x22, 0x2a}, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000164, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x154e, 0xffffffff, 0x1, 0x0, 0x0) 9.395519752s ago: executing program 5 (id=5244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000340)="f081550000a000000f00000f001e48b8feb65a0d000000000f23d00f21f835200000000f23f8be252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966b8f80cb8c087678eef66bac60fc72a45c194710a000000058a3bc4827dbcae009008f2", 0x6d}], 0x1, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000140)=[@cr4={0x1, 0x40be6}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r5 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8000000}, 0xc) bind$netlink(r5, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setitimer(0x1, &(0x7f00000000c0)={{0x8000000000000001, 0x1}, {0xffffffff}}, 0x0) getitimer(0x1, &(0x7f0000000000)) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0000000130a05000000000000000000000000020800034000000005840008006b29d747a350a3b9cb57edcee2dd798b8b6c145ea96e51f08b5a60f788fd302bd4489756ec734885c90211d2152d71e37c3e5576a80361018c27dcb1f5faf157c0f5ce032b700b898e3a8391152bf5b6527aa7dae48000dd84091a7326e0b287c74f817adef9d3d89d731865432988090d343d09c0a4bfd65f8a2a8b5a98330c0006400000000000000002080003400000000a0900020073797a320000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4080) 8.912599034s ago: executing program 5 (id=5246): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, 0x0, 0x2d, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r3, 0x0}]) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) getegid() ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) socket$l2tp(0x2, 0x2, 0x73) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003b2123f2046b3005fc250010203010902240001070520100904b2f7"], 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r4, 0x80045440, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.485561774s ago: executing program 4 (id=5249): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_cmd={0x8, 0x3, 0x3, 0x2, 0x5, 0x3, 0xd7, 0x6, 0xfe, 0x2, 0x8, 0x1000, 0x0, 0x7, 0xff, 0x7, [0x3, 0xffffce76]}}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000640)=[{&(0x7f0000001780)="12dfbd793db81fe455d97618c2aedf67f1b166ec59876a1fbbe13986e69655d6f6", 0x21}, {0x0}], 0x2, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendto$inet(r6, &(0x7f0000000280)="d1c8684baeeb7885bd337fd79e6871c9c583b270ef6f4c4e7fbea3d4640a1abe91082c63e292ca9200b8e6254b553ef032f7d4fbde89a21ec7af1702dadd227768c754ff9c3bc6888afb6b996172ae5ce303f659d678f695436258130f14b8303e45e5e224f6cbf3c4a3636654b129f34328c233c01de4e23dc6e0a9c4d3a00cb9cbce4f8f2603968635332aa5720a429c5fd30ea7f82eced3c33398f341d4ddb72c66d05e8daff818f379d7c8b5d31a01e43cb4e18bb4e4919736b3cb4d03df65655adafed839eb85f9e13ee6b4a9e587f162d54d4f5b1eb79618d70c25219c646b6ff4f962b0deca513d219b", 0xed, 0x10008084, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000400)) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x20000004) splice(r3, 0x0, r5, 0x0, 0x2000000002ffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000480)={0x1, 0x0, [{0x0, 0x2, 0x18, 0x0, @sint={0xe, 0x400}}]}) 7.34820735s ago: executing program 4 (id=5255): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ff9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xc0, 0x49, 0x7fff0000}]}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="240800084accebc5b9c712d3a92e29bd7000", @ANYRES32=0x0, @ANYBLOB="00e060"], 0x24}}, 0x40004040) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6.850389036s ago: executing program 5 (id=5256): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) setpriority(0x1, r2, 0x8) socket(0xa, 0x3, 0xff) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r3 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000080)=0x8, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000004a00030029bd7000fddbdf250a00", @ANYRES32=0x0, @ANYBLOB="00e060"], 0x24}}, 0x40004040) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 6.828528634s ago: executing program 6 (id=5257): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) clock_getres(0x2, 0x0) madvise(&(0x7f0000249000/0x1000)=nil, 0x1000, 0x10) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f00000b5000/0x4000)=nil) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000001480)=[{0x9, 0x8001, 0x0, 0x0}, {0x8, 0x11, 0x0, 0x0}], 0x2}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={0x0, 0x1, r5}) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) getdents64(r6, &(0x7f0000001f00)=""/4093, 0xffd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001000370429bdf000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="890c060000000000400012800b0001006970366772650000300002800400120014000700fc000000000000000000000000000000140006002001000000000000000000000000000003d64be0bffd4a39b0c8623bd88899c540e2adf97ba0d22e98fefb7d5e95e99e7e50c1df76085d5448f54fdb32f0c2fcaca63d621bcd97de"], 0x60}, 0x1, 0x0, 0x0, 0x2004c804}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x10, 0x3, 0x0) 4.912118792s ago: executing program 0 (id=5262): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 4.911659094s ago: executing program 3 (id=5263): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c0000040019840100000000140000000000000000190000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 4.612295339s ago: executing program 0 (id=5264): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x38, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xba11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="cfc02a7746071281e414ac68bd03270a793aad988ebd08739355e6195029dfce9ad421e8211eb3cbae8d", 0x2a}, {&(0x7f0000000140)="f0f7dea186c40b0000000000000000000f85002148a5fcd8f4a012e5da79005d7b78caf321bfb181a0fc0b3cfeee90eed0c84b5318d34ebb6ca121c6906675c431261e048022c77194727b3c5800438e49de57d0b1801bb5d89452de929c6d806df198fb008310f3ef336dbef89e7d4b51c47465a3bcfb19d429c201000080a14db601000100d68ee92454d107c0fdde4bec09df92bbb1dfddf19f9a6412e9d56f72e890ea7e5937d622c1a1508eb006964940245eb277cf8339bb86826894c9d9adfddbd124acea16bb17f6343ca030a76f6b10222d6016a68672aee82d3e96c6cb20971950d379275b936fdc799eb2298f8732461d3a95f7e815c38cb1", 0xfe}, {&(0x7f0000000240)="ab3993cc7618a7", 0x4d}], 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xd, 0x8001, 0x0, 0x9, 0x400000, 0xfffffe0000000001, 0xfa11}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x41, 0x0, @empty}, 0x20020003}}, 0x2e) close_range(r5, 0xffffffffffffffff, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 4.588656494s ago: executing program 3 (id=5265): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000880)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000003c0)="ce60f1b2f12622e27a20197bc60892c2cd3f78d5ee6c352ce469ff391af0d4ae36d12d086e1b9be65e108c844cada9343d8a2649a487ab3ba45fd1675467c0b9545c89c9d052e23e8d7520bbd42815f8"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004640)={0xc, 0x0, &(0x7f0000000300)=[@dead_binder_done={0x40086310, 0x1000000}], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d010203010902120001000000000904"], 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x80) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="14373d2f60d6144300000001"], 0x14) 4.386540201s ago: executing program 4 (id=5266): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000ffffffc900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.054883977s ago: executing program 4 (id=5267): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0x6e0}]}) socket$l2tp(0x2, 0x2, 0x73) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003b2123f2046b3005fc250010203010902240001070520100904b2f7"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.730495661s ago: executing program 5 (id=5268): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="6be00ff09321e32a7e0f1d45fb750f1ec1e15be572a7d646754b1e1cea02c1a06d0d9b86514e6d2afce29df5f1c8c9d7fe087f7116a341c9cbd7e536063d42367f79ccea05e0fcf72d19ca8c65612a23cc447ab5982f306298cdfc40a20a86edfb26c58e1491cae8751acfc1a22867f2c866f123215209101ec37c2734d97fb4612d3fcefd3a3c824ace75498471f1e35363631e29cc05b89e0f7c26948edbe418596cbc3c686d37d24c4e049f35e99d6b6de3470b342a4fd59bf1012aa8d0238f32d7f7702e0c293dcf71b3d4b2dc6c6527b070c12a5ae65027998d74526c4ad93283708c59afc157dd299b378f85e159970e6d3a248022714873dd40b54f4418012650d564b568730769a5f27fd458d5f535672fddbd105e2423a85bfdfda463d3cd154ea1185276b3c400ccc39953ef1af942faeff3095d9cdd9bc03374408464d4f85ab3c1fd2965b5e0fbd95a396baf089d5792b3ecc98c536c19b4d3cdf8cb499072f3491f0cf76b5f42ea959c5366ab26f2b7e2539e999d41d6bc583ba13a3f59fc4d3b37eb96374ffc22d53e79198778092656323188c7a052e0d9587a6b80cafa69a0ad770d514e5c9edc0b8556732c04549cc9f4d14299e75514d80b6e026a0f8daea3ff396aff507f89bf2ca4c48d0413f6a37c8ef193dbe07ab52e7487f4e115caa83153f729d4659f51e27939429c41a5e5152eb48e109e81baa49ebf076bb13ebdd031a0c077b18c0db18a085d5b3262cb50649b4e8fecf6b306a0430a8f89e2ff7fda3ca48fb8e2b1aad0999072f20c98466cc868970e53d6860b8fc76fa3b40eb40ab92863469346d5a6860c0297dfa94d908f1168ba2ac5197a9f9cbf3abc32fce7d14ee228d395ae53b1bc374939be6b2a135661048a02aaeeedfc755fe1df353b8e8e0aa093574321ab55fc3d16060ed0cd3e8c3f5954b745048d58061e834cfb142d027c03a69df52118f92acc387a734df458e28cd8324ae588bdcf3c12e4c492e4c14e47dc3efc9123bc189dcc677b619fd8cf34ebed6b73c2c740964072f1d87505ccc4ce189293b0c1e6cd68b8ad7a8cb8b049b8aa4f3675ab09787732643353c4f93cec2787e5ca3b96011459c133cb6947d51c408981798b675b9f9bc2186f016b585bdbb6100434e97033261967b1f6fc02bbe32e4125e922b364757008fff71df0ac6e9479caebefc5255727e8f9deb38bac48fcf65b70b7ff53b1b73682903d1300ba4fe2cf7a7c4b1a561f902d4bdfcc37697c68ff5e4f9bb0722f2be019fa57791da330e8ec69683e7b12d64ec27fe017bb18190609be3a406cc4b1c818e778c404c0e35b1f0cf2e8109f672ee2d649fb71e686930c434ad92fe5d290deed7fdf3fdd71d7409f23daab810569a01a8ae9167e558e71f84f88639ecb5ec1ae0eae0474e37ce81d73c7c93a912a56de243e39995c8d1a6194457509fbd62b94bcce0f1e7b3aca47d36c4874fd1aa8d8d1475a2af2f457ea39004dc3c1834bf20701c00416858c810bd72e8c55f4507c2187d062abf119fe91a1871e423c16964de5351c70dd668f08c99329fe189d78d7944a2e9ce47b2aad9657f8e860ab6bc03c365059528dd28350b84c06c56e87f019a0fe5a71595c7ccbf493c41fe52e907708020cdaf26be8e21d3a97c2ef6dd1de85ac6a9f8ba0771d48353b399555c5b6be41241c9de86888d0fcd5198343ad913fa35da296dc3eeecfe2ee4a56b56bf84e23a3bddc4601b504433b339468f029cd2dd9e637217e5816391010093471cd0ac2d352cb88ff5e5930dd589d1b03c5f408023c8207a1bfc2de6794a65985c1345ab256b8e7990fb8c3fe54b9b76dee19f4a7380a0659b730db58bf69efb51044eb4eaf0df5b7a07baf629a537fdef46c33c6dec622c27dc806025bc0144a3a1a64136cd8e7674a4e01aafaec604ef8356b921be7df063a2ec67dc312d964ff1c30f8d77b7c3e06588ac351a8818701c5b7c9e4b9e9721e12d0bc0731c7e2ccd0b1028e5ac990a3e45c44ba1ce8ea73a54927f6fda6cf5e52253a8ee0df194073fe76568f51c6cf45312f1aec20010db2b59d95d39c3b1a40067e6657964368e12173d71fe2f7950e5f0f3a2923ecd474b623010d77f674e52f23552eece20dccfe15c64fa05ffa6bec88d28fea4b2de624c8dd1106c86b220af9f53f15e00785d764224975efb15f290c4a6af055f7a8baeebe9903c0c9f48b53dc423997adcb8acbe7d82de105383644f9d9f3d8cc8f9a79bfa75c7e1a3f470d2448612ee26950b0affc39e98bb75a30583ae55383d376f22dce6c2cdc544ad8d68fa82e5d16b0a65c63ba4c4fae2ce1269ce321be2a0f2550c2b47c8cca190d0e44af824705dc3d5565c4c0a1ab68c50d83534fb32e7ba31c8dec6a17c127985a516ace1f9016278e85056f6288513ed706b873646e0fe3f1803ce71dc72d91da85ad5d385e0b072b6857ecf36746cceced48b0e4663b92cc349baeec28d27ff568ba9bf4d68191166cf65a13af7cf213c2ffca68b9379ea167c7bda82fa7261e2754a00a6f0b4065c57a8f9868f8247d39eca71faae27afbff8864bf934e746300d5e9a31a4b78ca059bb9c40d30bfe745336264daa57002085686f73f48474e2d4bc1e38e62ed4547a6bbd74b1d9fab3f4b2622eb6c8d32b79ef9ab691fefd7b1bfa787de85ccaa14687be5a0529f928dfd974752bde8b063bc717d2a07eb4a1651f465aa78be32457955f83b2cb4608e22a4ef7bccba0378274289a7adc38521cd8d691741e87b03f536b9196c2284baa062038a22320e6d8c3f9e29051450b16bb7909566e75e6ebe423fa88b7f395c0dae22f027efc014db76ffc4244dfeb4d014809569caed95c43f92486c8d9cde522d403efe788fbc3b54ac39e90bd2f2dc3f3d66308d2df22d9602da5ec2133f296252bf0da014020194cf9ee65e7b137c5488401eba99def61e721fa3889d86ecaa5d5a3e4c8642fc0f9ef43186edd427402f63f06bbfa26850f2e4c71bd6387978a8085740fe4b1012dde14413dfc12052acf9508fd6a8a64f59d5756a59c806b64f42cc4466aed5327071f32fe2cb24aa62d21da4c1de44c2aab46f01c53eef1d83002437668fc494953f4951fcc1bc050e402b7cb73d61b3fae4d806fe6b745160df0a6fb6e830d18b04f142b22de9fe78b4307f95c9badbeeca0a2cb134d229e19fbab6a913ea4a0c59b59ac4e9de55b4fe2d7d5585d57c21678931d151038442fc388557da00dc01bae0c7df06ac72be56668cfd942c9edcfe77c1128a6640ad4d4a210d69d94b5e306b3848c09c61c05ec638096ceff5fc156bd34cc3c461bbc4d3ea0eabeabf46459f98f15821e181dfec54b87c9c10bf1ae64449ed9e90fa660191d38760117f9a0ae6422ad983e8b348bc0579dba87ad505c24ccb683ffd8f734b8e5f0c65e3a749d86a2fb1aad19abb96490167993fa130db74152d8984084220ad17653c01f3fbbd2e1000d3ace6ed697f0d4a9bdfb2dff49148e8def07acd5e3355370d1c19d3afb7bd12fc30e6acb4841f641672dda483d0afc53150369ce1e2523b3706f5b65542032838d45a5dedfc2369e385390d1628e78dced081b931f67dc75e23cf2b0f529fde6c9c84e4b3894c11b9f56ddc65827f68b0fde08875fa8ad3cac7e212c7727d41f6d51434a890ccac19f3e9b0a594556fbf51e84e874de4e2eeba206369871dd844f6248ec180b3741f2ab3d23b76448562207f577b10f4d14949a926b837252cdcf62af32e83001d63ebde5c1d266c8d2b43f5545dbf070eaa47613481d6c920f1801b490d2a847d7e85872fe75f56d90f050fe741d94511058d71271daf9c565ced757402c315685820c80ed1f6a889a8db0326ecb58f1f287d24c5beb5b19b94d8400aa406daa591e292832c78be74613ffc2a12635951d487650c864ef55927036edb5ec02614e5eb75f67b933220ac39f891c37cc0b7fe23ce8b0ad8e5ec9c0efbfd706f5730c142fbd5297ac7f03f4ca6f49b9cba1e9cbee6b08e936c7ee1642e5f1e3eb566c294d10fc4fb45a7239590cbdebb7a16b972a983748e73aa23be7f66a30c22610456445234bb8ba11b412eaae69b808f76d90b7bb14223b644b8860c550f3c92ae47c06a38429d66da2a414c01985d4b7c935717a4dec2cd4e89092d5dc9aefd0ac0b23481459a2adcb654063743b667c3c3241f203f81385aeef164a0be7655d02074b6710b4e2c50c3ee0747892327e8f22aaf51fccf2b715b24c02c6690389afe83e6128a1ef199234c8c9803124089382c6bed5b296945fcfa937313caf39176b741809c7c7fde30468e8875266315d9e733258b9305cd92276211d0c75c97b103c31c52c0c4dd17dc5931c5a7644ddb15ab8de78cc32125f85b78ba00d09079626a813e589dce18010f427079ec6cb74a2752c7247e7b7df37dc701245e9cf37fbfac5b1c427ba477b15c21d48084d38253a4d49af73d9f25e23333ac3a84e4b671fd31abd4b32441fb07dfe30659915a88ddb684933bee5ee9dccd45763f6544fdacfa4d821f36d7907a42ab9db72b231cbc9e1ddf2000441586eab8d59277955f9665c5e358da456d759490bf9f79462ced96372b237ab61d8b48a78612c64f48d5bd89fb6e67b0818033743b7ffb3305bcdbab0f71b46d5ab61d8190c5106813ca4435386e55e43c6cb925cf81039ed5f11df2d96c53a448519ede7e83dee8b82acd143ce0d1b91318a0f0efdabb77c178cdee559c1d2181600b6b3847e05f41234c5bee021d4f0bbed10cd557f686e8b9769780a13df35fd069855fd8e2aec5bb84e8d0b7740fb7fa88b823826b7e8a979148b95177a2e720b45296c280a9abce6bc5d943e394c07eed5148f86a94450569af8c38e184603abc46a59b2ba01e84225da828ccb93ca557e4ffe9e8e8b98c1fa471409f9d7b9d9da4b0f4fb7d58d7474039204faa2ab1067a2eaf9df247a2ba1b099cdfe79a7db1273e0660e37f6e8afc125564c6b8b5e893231a6addf326988bd78578950e4b2f317ffb322fb44a570587c6c6baa59d6d844454e92f89534c7d902760b984fae30ff5eff5b90fe03f49429c5a5becd275c5c670ae8d39b5faf986970492e579a8d98aed5da2894c96bf8779e9aaba84724bf471734b4d9d4db6a0ebfcb1c31f88c59d4b0f38078435f575b0e7cc7cd5f6cc9a39bf16d3514e89b562ded72187c1e550d4852e9bdc585525d02ed1d3adc819a072d82c37935b2fe6ff3c3f0c7b7fbee2c25ad515835d067ea53af1c6d0b4a9b35de653f2e5a8a1d9261c49813ecab580f368a79515a8621f16b750fa9d711d2884764e222c723e7dd94532de5d5d40fe12660fef784d8ecf2ededbef7a61b881cf61e8c035f31d3801b34ea385fb5fd3895e6789ed741aab0e5d091050f7cde8aa1f4feb53683626870adc4190554316bcea49c6ee182fd66a6ccd2e198ba2ae6f3621a6a6186a6cbd5378e6347afbd88cbff663f73ff568ed47861219eee3598520625f64f7a6303be64361d705021104d9871592d28524f5cf391e7d445746a0e9e42924760e62c955301e1ab3744f79217841a1668a6a871bf2efc278b0bf0b4b46a769caadf243f1af31df19006080d11a4f84ee4932034f48fdde875415d949438e8c1bdea8bb9899c230561482960cac0e77ce78584e35d3430af7ed37ec71f33f265d62b397b99f71aeef08e0a92e221d8ef14c82616d06b1ccafa63969a7ab145928d9c7b1b23e16acc00754ac707f6ce3939b4604baf0f3fa69fa48bb7218f3a992e65a4aabd8a6adf4a7c1e32877273393a1567632348d480a84f3b4ae31eb810a22ccb652064be040c9a90e52b59031a22abfd1840b2ecec89d16426ab31dfb83177ae08255d1424a6ddf8bb5d5adb66a7e6cf7f68be0ce5b4a56fa3463da621062ac85af5334018c3a473c5af9c5686eb9abbd24420293df7ae5fd075b2d3b9aec226e1a016c989b029d1daed5933d285227dbedab33a32b0d71d4cb1fb79c3a8e342fb4126785a3259f241150c7c381918f8f88146fb8fcf14d42ace0fd5c0084db3726575b04ef47c2bd1a0ccf977c8232e1688d4d39c88f7ab8d565b578bed84bbfa17982308a9269933ebd2f7260a67e01a3790fca5673643aff626514846dc1634e3c2fbdb0eaedb163072d9c0bb2fc129aa57618ca1d2b37324aa49972117b9ca81092eb89089659c39eaa380fd950aa914181ac98c1990af713eb834fdb2b731f2791292e9b2774aaf3a091152e25d7ea92a6c80f3217fedba12816ec910677d3381b361272074143fb51f391e6cd1953dd6cbfa33ba97e5d019fddd3da76fe350b767c8eb706a5f46a536c3103da6af42c1a5a7cf488be7f0d3a8ae4598d0d1f4f8339a63c124a5ce1b18a225f840368d390acddeac589093a753ed2e45ae4bfa62f222d4c6a6fbaee8163e76a0bf6291619d3b4af530d03c1769a456ec52491996c6739290f4cd325e9a3c1f0db9b079e5809859f6bb2d6cc494a500862179b65aa65ded80971e60dd9338dddbbf736924626aae8d65fa4a32e8affbf49b5b20c546520aac759594fd996e5f573e8a359dc4192c2723e05d7f8d212d78a03e9a7ee41b3ed6d098964f77e1e96e0e6641222fa247757998d9e9d33787079d1b0913f9b6fd0163f7603d4bbb7430738ab618026ba0526b5722f7c5b155e9c20209ebdac884d4afc34ee32420892acfa0a63d93e1aa4fa71581166d783abe45cbfc66f65c75b803d932dc3a40851508499001dde84fd3646ae3743c1edcfe433579cd41ce625262082cea3e4f87ea17f26c2390e9c134972cbe8291c500ad925f896aeb4d652cc01e397ff9eec6c4ab32432f61f90ad6f24fc2f24c47d039e90cbdbdf97ea2c0b1ea6562c1ab651e46adab86814e14e9196366e6da5f16c743baa0d31a1b14200451df59b639dbf0ec8976e31b41462268a66d3fb55b0fb344a587890d92d7df87244b517276d6cef787cecdff92e2293d0d2e51228bba0ba3ba9e57483147727a90ab99b07498a1a9c46cd32e0af493e4c092e515ee9541c678c3566092e62a14a566e225741102071811d3306cb229b8c08da4119a565f9a37c06a983ceef668e7e97df595bdfbb43b0350fc823bcb53630508b3e7a42ff2ad5a8bbe83811c35b78578fa4842122ac76be6e7cd68a9d3ec8c6a3b83edc1f545a1f2a74ce5212f02ba85e104c0e1d21e4f77a7a6a0253fee2d486f65abc1d15e483b7fa87633e1c02e6f5aecdb779dd63af36c457905b2d4bf2c19cd4a4d2475245c45f3ef767654be5c17aa9b3e20f8019d356324baf677e4604e736c2a8b289874accbcb2ba300f063fae2c7d447f9a60daa87592275e501cbe880e7b46230659a7d62fc069ba7bbbbb71cd5ece453a692e2a3620cc8ccab581f4619963b1823c401b84092580dfcba08f63c14cef7963bf6af2d550e2fd43dc2ce1a5079e9018fe1a6ade4496b17f31dba644022c1bec7f7a345f2f02fe4eae1fcf5fb377fbf33c4774843cdbf1357741b0a9be5b403345db08d6ce70e4c5a18cd8725364b4096b69863964dc596cc115105043f6d80603873494c177b886299ca479d1c12a3547ff136a203282df0bcda49100de02b368ea5124385a03280d15319c5a5dd5e150b6eb19c969ca5f3c3368bdceef985c1ee957d5a61b3b9eb1c25e40b280fcec638726f78747dc2944e052c184cde480a6db7a2cd7b75f34cabcb2ca0e105b7af8c5d480b1cdb47d3675daf2e621db6e6e8924c157a028e860adde429979536c0ae06d3665e98166181eb47061fb20b4f0547daa938c54db21518a980ca5670a3dede7eb479497156b4998d11e838b6f112d3dfeae167bc3a8ed7c617fac11907094f25b0939bb9956f7aaeafbfa452ed4ec91b2d1450a43946096cd104a90a73d733da92125de061de39cf8e3d582e80f368b22c66cb69b86677a0af3bffc828ad1769a223f0f98e0857b60bc82f739fd6bbbc9a150830e1e850fa3bbd587bd9ca0fc157fb0b292cc91365348d01c435e2641885891306e177a108712290ec2d1ed3c6ac6d1c49aaffed07b6196787667cd8a7af66a1b631f9e9c6fd668509b7a2e3fb848d99e54e298742ca771bf913e50552faefdc0761a0b1aac3a38669fcead818c26a385ea630960c151199226c23d2b1c9ee42f864d4fe05d22eb826a80ad0738daa292938a4dcfcf18a60642b2b27f0e4998b0569e79c5dff424dd324641eea7b929d13735754b4ba6ba1540bba6b4bee8d3ee3c8eb8900e9c7e36854958f5b632b111abd2f722e2bc8aae4f112f488d8c1e68ba32fe88a39773ed81027a14cfb877ece8772dab7d360fab7cfdbe31a69d218ebdb7b0e42fd8b775348171f0f8a59386fa4fce2fcefefc09cc99a477cb856376541ea5048ab8fdda87ace560a565b2fef28327ca537eea30114a0581fee17e58ed375377a23d8ccbbf757a38aaac794a2630c42f9d4ed91cb886cb5277134b02ab691434ce897c5310472a691f99785cfda982c8e99bd2958589258228a7624137acc14a13414d06f6aee835b3637a0e7367a010652a076b2945fbdadeef39d65d503c18dddf7320fe07873331dcfd16e7cc786cac00d0934cbc6b024547e11132e413b7e5c4f926202128dd1aa76a39065a4228f109bc3327dac7028843868c32fc5d902e882494eb3cf81a90212434d404cbcfa72722e3ffae4079c2e6333a94d5f38e2a2948a01c10ef1a3adf58bae5b5629be02a1de64a201223c23eafd61a5be59c40188fa3463fd64e98f0646a9338bb9ee85f3ae5eabe370727121b4d8559fd32be127a6dbae3c1a0a43ef1173973b3b3332434c6c92b3144d9fb308768ac4067eb72d597b85882e0d228c6dece3da0677d9fa6c0b13788b3c2b0c9e67377ba0ada12aa956672c58f48fa6cfdf0357d3cacaabac46dc438632b1e7edd2e120310e7cd7aa2e55884b422b88e8eb9f5c468c04f9f045f4e5db6e12e9d7330f3e625a7e4676f61f93ef729e8cdcc743c44d409ff5720e85d4d447cfed7f187563ba04add8b27b4d5e1ffdd2bd61a167fcb2da8d58e67479ebc076329d27bd24ecaabc4cb05552a409ce732ecb86a6f0a213e35e53f895bc3c4ae020ece95499d4670375f61a32fa215c956734f5aa8127ec859cac7dfb5768864dbb7591f9d91c05e365c4dbbe864d207bf9eff04c4b3047b68cebef76a7915673dc5ccafceea57e38beb9a69473a1b2ae96c812ad737db0f66e87ca2305dcf4d66369e1afd74412a207a7a2d6d97982e1874afbb6a9b420d88c542bcdf6cf3c471c7535a3444ad20793876793ae8fce30fa468a50ef241a15ec0ea3229b1aafcc76eba39f8cd2a93f23ca2b04c8ab87c4f5a8a9a1db2bbcfc17a7aedf9877b669f8c2a05783586581656064dcfd19200a8f60c4a582766a0ca5148b56cafafc0ef1601336b5398a90d1bf68c6ecfd1ede4613fb9474bba76ac945f51129543e22f14fdea4e83c206032f0b5faa83a1de556d48d5f08bc53879f492897df7a59e0ddd00825706a2ac507e5fb31bad911885ffeb2d2368616786593f4c6a28de95edf2d993dab8412fa5b16eda075a934f46967fb1643085370da9d1e5895a5ddd6898429c85bdd41b28f58cc3e106ab683ecba03253b8122a8a5b6064eca49ebf4133c2351468cd01200332fca0a00c980262de8dcde7f7e145aefe3fa56b2dd6de3f2bd1514f5a2d143457a28bac927c248d4d89779835a83398fd54e7d53d7b2d1940fd12d7bc96e16b0fe15fbf16c3600b891b3bf6723303d01a73120734be1f27d43b5d5c374d6e44f42e0df163d2797da5bb292fbc58f8ac2056dbcb85b31c81d56fad2d70625b1304c04a508d6ccbfce072279358cb065a50f4bdf8c81ddd2d5ecf2b2c2b1015051b465e5ff682c9e3f8160123334b82dfe5a751d8b5f441587bbe7bed1325338cae6a8c06101081a55d499efbf77714e43ac99ecc08965e152bc84faba1bd966f4c01879f24b451b8f3ebae04852de5efd441396a6a871f97ea3dc413174886d71748c8beac5e5d403887e818e335cfdffa9d76b5074a5dcf12ad7725cb83cde0174679c0961643606a03082c5ec01590d687ff5bf9f8b2c3a84bfdb9c25622adc66aeb7f0355efddd4ab9954e5455c2428ee4e5383888ab466bd5fe817eb6b794a555c0eea446287cce32d9efd960e58771ddfb8ee2b4133b79d8953c2ae959a5d6ce09448d50da61bf22268fd32dcd501fd47c6b72cf8f50159a7aeec6e220ca81fc64ff97014ea77b6f791ccf6625eba88f60d1fe699cb16636a9acc4067786c537623c699568112c2093663bfba92ddc1ffcfe93f247f90accc6002faa61f43e54c3fab5e04a6ea1c5415e31ab129f8c9f82c3e3191513a4af151b1d6ab45a2f0eeca83f0870bc40da6257b9ea1c6238171a754995137d4123f2a4888e73db901f70a044ee0dd8176defd5dd82d9fc5a1a0d79effaf86fdf0b88eabc338c353f5fb040fe34db18211b20f8a3e4589b212e913665506488f21c88f5aec85eb694134a557c95d9a6ab9efc089e5c9848e591e3387cc11ca66fb03ca713513b98ebc2f35befcf64792ef44411e0f75ee4da42dcadfffdf9eecb761bd5e89183881103c5019e1ef3f3d80ba27fb0e1897e925d4122fdf3b3b568cc8795adf98643e86409226f2c5ed87cf481ffcd6e21a2bf0bff07a98bed3be5328118c3cb43c05f1b740242b0855f71400dd155c888b627615488025f81fcc6f5628efaf081489683c6d259c33b591edf4c9a4bfc54802c93ffbba4baf2a5030af8882b7d53eae80720e36a15c6c210658cdffa162630ba5d0217fbbf44879a04d41c58befb8a271abf4460a2d768be38d22f832e3cfad91b90f1b576924c8cbda71bbe89c85c239fa02f69c25e5422c977d97a54954fd16b85970db963db2b132b057a0282aef92614a9148e2a1a1edfa5ec46ae8d662dabae8f8141ea30dfddac44573ff52c3f93d82b0245b03c6db05b540e614cc9e3f702467054d688a92dcc9123f71a064cc52730fc5ee94b2746c80688521cc1cdb0f9455d4875f4af4afdc67d2e389361e1328edad7594d4bc9beec8b935aa3e5e98652c934d14fd16da50d685717303186da715778856da54666448d648d32becd2d63a6503ac21e56317903d15465ac4d3765f7a05420811307f71c1dc55ce5a4cd21130487cb0065397785da5094d27fae505996c1d404399797ff61d40f2ed63fca51db673197cd158a6e9b9ee93bb37df8bbaf92f47493c81c65439d359d578244a7f83629f4323a182e68526d674f4b6b64908350253520a4e564fae27df523e9218ff84f55a7ca622fc2e3bcc5edec9cc45c5a1b4c00c64038afdb165ad0ca3d8b66cea248e6a60a1c6d27e0dd2e5c7eec49fb8227a5266aedbc4fff982ffda402190548fb63fdeb67b3fb0894b11ce904b1c194f8f36cdecddc1312d64e9f227cc4b614b3679f978e0f1b6bb7aaeb2461cd28a94b73dd55eef1d5a98d72b9d8750b2dfe3a3cec044e13a8700", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, &(0x7f0000000540)="8bb3689fbf18", 0x6, 0x6}]) 3.396786672s ago: executing program 5 (id=5269): r0 = socket$inet(0x2, 0x6, 0x8) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x32000, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x68, 0x48b, 0x5, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r2, 0x5}, &(0x7f0000000200)=0x8) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) (async) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/236) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) (async) r7 = geteuid() (async) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r6, &(0x7f0000000480)={0xa0, 0x19, 0x1, {0x40, {0x2, 0x1, 0x1}, 0x90, r7, r8, 0x7, 0x3, 0xffffffffffffffff, 0x0, 0x7fff, 0x0, 0x100, 0x8000000000000000, 0x10, 0x101, 0xffffffffffffffff, 0x3, 0x2, 0xe, 0x6}}, 0xa0) (async) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000580)={0x3, &(0x7f0000000540)=[{0x0, 0x2, 0xd, 0x2987}, {0x1000, 0x7, 0xf7, 0xffff}, {0xd1, 0x8, 0x3, 0xfffffffb}]}) r9 = socket$inet(0x2, 0x6, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000005c0)={0x0, 0x1000}, 0x4) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r1) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0xc42b63e6bbc23bc2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, r10, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2232}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1000}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x58}}, 0x800) write$P9_RREADDIR(r1, &(0x7f0000000780)={0x2a, 0x29, 0x2, {0xff, [{{0x22, 0x1, 0x3}, 0x80000001, 0x9, 0x7, './file0'}]}}, 0x2a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000007c0)={0x0, 0x1, 0x8, 0x80000001, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10) (rerun: 64) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r11, &(0x7f0000001cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000840)={0x1438, 0x14, 0x1, 0x70bd2c, 0x25dfdbfe, {0x6, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "611e81c73979b5b0237a5d30c1f0c8f57c4927ee7bb86b3adcdfd18925f66730b35a9a9838240914a71b52ff5d3d2904872f2ea661a5a364e5b56e167291c4d905f180e3dc5a9e4230f37cb87c6752d023b76793119a915f3630ba0eae8e6fec5638b50f74348e9a46450e6774ae1ee745d3eabd3ad9f7a7aed41e387b687254a13f5b4df92c9efd03729a1f2a48034662954b214f74a20f346d7b59e3b9f7b882273f078c898952b7e38a15dcb942a859f139e2d1de217899edb0ba46247e5d0041eeaffdcf053b55747bebfda9c60d5eca10fbb180cc6cd3c3b418497c4e3078f8ca1e21ccfa3fa07e459009ea1c5a1b63d283afd4d656"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "2368cb573d0aba04029c474d6982b4aa398c98333387c5fd45fff4e0246c66678d6be682002526c0004f1f7ac65b7aab581b968bb3520e3a8f1fd3c2e4af66385406ebef7a5e086bc740bf2ebabc478fd5a36d9f2908a5809e602d6fef8c5ca029b5c90488cf50eaf22cfbe0417f4b2ce77329892eed831d879267dd2080d8cda096b6e13f05"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "e078d9c563c65a56afedb11a3a7b4ef86a6486b4969d0b2595a2d5ea3fd524fe7bcbde0bac7c1b9eaa9aba7a66e23fca22501a8cc667b02d7d6dbb173e1b40d4a3192c66a5b2d4592a91532a50169c11406ef41d2464e79e784e69177ff7ab0fe2e275c617d9bf83e2b41f9cc901acbd0b5f6311bf75a597635f4e95bba7c117876771c3af8ed60ca28bf30249099d6f16610f029b3946be6ef0a3aa09b05036d87bcffbccc3386a8916fba958ccff88e867e58ae67b3723cbb945dde73c4d5d3ea815cd74470e"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "321c5acce4341a6c4c6d81eec02331df2f00d5"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "8281b1756d5c426ca4ceb4bf8de2fdded074c3f3751729dabe7ca6057069eec981123ada74f0bb9309f79a3ee16d33f29b111df2b0c58775072a12b05638266535972d27840ba984e2d20636ee3f15262632f2fff4391f64aac0e5c1a303edeedde24d6be53c030964b7f3b79bed86ee5e1e558df9ecc11b7294e6251d197ef654bec68b385f9f6735f7a7115a0f2be035720e2eb70d9eb3ed9a954c393070952be7086b3b31d0076090a6af6ddc9def3fed34ea28d2810bb0df41e3d14e3f54d0d646762c06e5df0d86a82ab2ff1069b7362488e9fd"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "4ac8679270f76a0018649319a5d72fed39d10375c7cc14cd336eb9eec51f00bb95094e2e7dfae41aa0dbd22bd09ec125ea4e5ccb32107ea8ca66e01331f542a2dfaf48f3353cd4b32bda176f39ca7279f340ce1fdef91ddaa2974f521396212d587123697e7fe173767d6afc48e9a378968ea0cd0d49f251d3a25b5203b25b7b63171bb3babef56859b1ab5911c974015b3d730b8e5279558b462016d0442fcc7dfeb4e1440e0c07a834670f14dcf96dd9b3b68a1be9619b757735c366b0c2851c078c467fe00cc9a91df0de7d0feab0d90097"}]}, 0x1438}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001e80)={r1, 0x20, &(0x7f0000001e40)={&(0x7f0000001d00)=""/179, 0xb3, 0x0, &(0x7f0000001dc0)=""/73, 0x49}}, 0x10) (rerun: 64) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000001ec0)={0x1, "c1e50a3d0d29d456b996d30c55312c3ea0b0e95fda826a5708d07d78575edb80"}) r12 = fsmount(r3, 0x0, 0x7b) io_uring_enter(r12, 0x58ef, 0x36d9, 0x12, &(0x7f0000001f00)={[0xffffffffffffffff]}, 0x8) (async) syz_open_dev$cec(&(0x7f0000001f40), 0x0, 0x500) 3.143505994s ago: executing program 5 (id=5270): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) (async) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept(r5, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000000440)=0x80) (async) accept(r5, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000000440)=0x80) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x3, 0x8, 0xfffff526, 0x74b1, 0x8, 0x5, 0x6, 0xb0, 0x1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000000100677470002c00028008000200", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000000100677470002c00028008000200", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r6, 0x0) (async) listen(r6, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaeaaaaaaaaaaaaaaa0086dd6000000000180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078ffff03030800"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) 3.043702304s ago: executing program 3 (id=5271): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x1) (async, rerun: 32) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) (rerun: 32) close(r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) faccessat2(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x4000010, r2, 0x8000000) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x68, 0x0, @fd=r0, 0x5, 0x0, 0x9, 0x0, 0x0, {0x0, r4}}) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000140)={0x9c, 0xd41e, 0x4, "2908e8c940bd8d4119ad7593bbcf78bd57ca021e6df549f271edde8fab4fc51d4f9e7d152003f228cc6c80075afda4c6fe72b6d92898773c1f0eebcb573e5c5591b38b198c32f989f309030e8ed00b968b3be56ebcab3e8a23ea897b848f89145b4456e6d42af453bb3927aa376098847d98f67ecb58ab30aa49af068f739e2685bd44ba8e6474c221d20724cdf112c5b3f60604e1b36f08fc3a9d4d"}) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000200)='nfs\x00', 0x0, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r2, 0xffffffffffffffff}, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x8, 0x7, 0x100, {{0xb, 0x4, 0x1, 0x14, 0x2c, 0x65, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010102, @empty, {[@rr={0x7, 0x17, 0xa5, [@rand_addr=0x64010101, @local, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x3c}]}, @end]}}}}}) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ldst={0x2, 0x1, 0x2, 0x5, 0x0, 0x1, 0xffffffffffffffff}, @generic={0x81, 0x1, 0x7, 0x5, 0x8000}, @map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x14}, @ldst={0x0, 0x1, 0x1, 0x0, 0xb, 0x80, 0x1}, @jmp={0x5, 0x1, 0x5, 0x0, 0x4, 0x102, 0x8}, @map_idx={0x18, 0x8}]}, &(0x7f0000000300)='GPL\x00', 0x7f, 0x99, &(0x7f0000000340)=""/153, 0x41100, 0x8, '\x00', r6, @fallback=0xe, r7, 0x8, &(0x7f00000004c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000800)=[{0x4, 0x2, 0x3, 0xb}, {0x5, 0x2, 0x2, 0xc}], 0x10, 0xc}, 0x94) (async) mincore(&(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000900)=""/214) (async) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x9361, 0x80) (async, rerun: 64) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000a00)={0x7ff, 0x0, 0x0, 0x0, 0xf}, 0x14) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000a40)=0x0) sched_rr_get_interval(r11, &(0x7f0000000a80)) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000ac0)='syztnl1\x00', &(0x7f0000000b00)='./file0\x00', r2) (async) mlock2(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x0) (async, rerun: 32) read(r2, &(0x7f0000000b40)=""/28, 0x1c) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000c00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x34, r12, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x34}, 0x1, 0x0, 0x0, 0x8804}, 0x1) r14 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r14, &(0x7f0000000d00)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000d40)=0x20) 2.936988159s ago: executing program 6 (id=5272): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) r0 = msgget$private(0x0, 0x100) msgsnd(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000000000000cd1e0a9792ee6c4a7301abc03e6d77db24c5171f1bd236e29be4cfc5a66c2c76734599f1611f82ca582465ee250b5918a9c4c0c069"], 0x87, 0x800) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xd, 0x1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x1, 0x3, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 2.796910509s ago: executing program 3 (id=5273): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffc05]}, 0x0, 0xffffffffffffffc2) r0 = gettid() open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7f, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = getpid() rt_tgsigqueueinfo(r8, r0, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0xffffffff}) 2.218999021s ago: executing program 6 (id=5274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r2, 0x8903, 0x1000000000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="1ac8c78385e1b58d7f13c01f0a90582afac55b2fb8049cd5697cc2bc56c2922962e340869cf237eaae088c3515ad7af6c7a9f460d68b97f1aa667fe79dd1d7dfcb440bd6b057210b51b7b92eb7781cb90ab9061d3f17f7037789ce4fdd6d694f4c425a066add4a4a9266f177240e5072eadb2f8c623159da8d6944e6a209234101be4332f71fe593721f1ff59c1de2389aaf0c4c1bddd6956cc728633930346515238f77947813e56318e87470e2c323e2557ea7653898399febec51794f64915da11b81e1a99e3fd2a97381fae88311dbc1a775f22d922057c87c12a31ebb7f04281f711cd8"], 0xb8}, 0x1, 0x0, 0x0, 0x4008050}, 0x4400c000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.104083351s ago: executing program 0 (id=5275): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 1.963688468s ago: executing program 6 (id=5276): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='1', 0x1}, {&(0x7f0000000080)="9d0e", 0x2}], 0x2, 0x4, 0x7fff) 1.895874637s ago: executing program 0 (id=5277): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f00000001c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20004051) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x50, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0xf5, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0xa, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x3, 0xff}}]}}}]}}]}}, &(0x7f0000002400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x74, 0x5, 0x4, 0xff, 0x52}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x9, [{0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x414}}, {0xa, &(0x7f00000024c0)=@string={0xa, 0x3, "d23169415f83dd67"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x3401}}, {0xce, &(0x7f0000002280)=@string={0xce, 0x3, "54c7ee362d4ebd63b277f70c8569e97719033b0a2f24c0d14af203ecac1e6d01b69a1b4c64bf02ecd1795e5b2e0e329609ab9d00a25e185216218c113742f6a155181f57cf9253c0d5abe2fe27d0ba9a80a2f00ad323d72e127cf18a8f8a4940913d9e9970b3827e774bf64afe16b8bcc1cac60440b7ab19e1cfb94114499577cdfaf7bb8d4d11693cddaaeec06b7c37b3db8dbabef8ed007985cfd4b5bd52b7519cfbb61ddd606d985608b234c9ae935c4a9b664c1fa09125e4ccddd0ea070f7d436ad3b944f8bc97b44066"}}, {0x55, &(0x7f0000000380)=@string={0x55, 0x3, "b76fcf6bbcbbb0d3e2611ac1e22ffaf5c40ecad8100ac78c67805e5ca3d991d0e14eabc1a6c9c85c844a43c68d0785f1f58782444e5558a576fd6c72bea4d2bd321fa1e0f356397f9c9b0d79421363059bdc26"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x427}}, {0x10, &(0x7f0000002380)=@string={0x10, 0x3, "947c3cb37ed8d52c7b991433ce5f"}}, {0x4, &(0x7f00000023c0)=@lang_id={0xffffff39}}]}) syz_usb_control_io$printer(r7, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x0, 0x6, 0xdd, {0xdd, 0x3, "fb0455a8190d76c9220fef47e344c132ea236ef4c13517509b36c2664e776be8427977d8f6a72db3fba07e120d21dcf53e885cf94b330daa7093b085b1f93b4bbd9e55acdfb34d7737a07982ace879864562e5e68cc6a2a588fc576d7faf03d964020ffb9e7b4240837955f1bcee6e60513f06b87306ec4dc5fb7c5016a6bcb6625dc6c2918ec9ed883e3087317fd9b778f1a14b808fed8b79b2a4792de33136dfcc374a32ba8791195f7802cdeb16d264a9b64afc977a51447cab36c7732812466f9cbbe821ab60c804851c69e0aba40671fec6a5ab38f56fefe1"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4}}}, &(0x7f0000002500)={0x34, &(0x7f0000000640)={0x20, 0x15, 0x1f, "ecd309d6082dda94eb38d3f46886155618f163e690638366279428260aac6b"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0x4a, {0x48, "9a9812173fb192b5c856efee8a8d6947aa3fac3aeb643041c270c5bc193dcef692bb7af40d5e7fe8dfd7b3505effec4d901288e112e49999e11894726c4c6b9b9414fa9176a53e0d"}}, &(0x7f0000000780)={0x20, 0x1, 0x1, 0x7}, &(0x7f00000007c0)={0x20, 0x0, 0x1, 0x4}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x20, 0xd, 0xe, "084d917d4f14a809640f7bc724e6"}, 0x0, 0x0}) 1.811564655s ago: executing program 6 (id=5278): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001800cd8d00000000fedbdf2502201000fd04fe020000002008001e000100000008000700ac1414273f80530e4519709eed3a19e7fc29edc8a5b9c2895f8c83550d3747c27c30a5c8cbc0b3bd9f0c650478de4bc3a9ab85f887e047e2e399c461f7a1e810b1fde2e164d2690c"], 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) 1.579341699s ago: executing program 6 (id=5279): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x587, 0x9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}, @TCA_RATE={0x6, 0x5, {0x8f}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r9 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000000)=0x1d, 0x4) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000004a00030029bd7000fddbdf250a00", @ANYRES32=0x0, @ANYBLOB="00e060"], 0x24}}, 0x40004040) 1.156585968s ago: executing program 0 (id=5280): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x15d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14b, 0x1, 0x1, 0x4, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x7, 0x24, 0x6, 0x0, 0x0, "889e"}, {0x5, 0x24, 0x0, 0x8d}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x1, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0xe0, 0xe}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x10}, @obex={0x5, 0x24, 0x15, 0x9}, @dmm={0x7, 0x24, 0x14, 0x1647, 0x1ff}, @acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0xf1, 0x24, 0x13, 0x8, "636d44c83b2f1f18fb2f845296f2922df14de9d8c1c249abdfe46d751fd1486a69b7349a4e9a01c0d54abd1a95cef2a13bc90683b14caad29ef2d44bbf9387364dd55804f940d6c31169bb9dc93580631532da53cde36f640dc3b5fcf44815e99221e001e3ed203207948abbbc4263619040cbe430349ede575c65d34f50b6524a5c0e636e0d48418ff63a34bc88ccafc122272a3d7a8821d09f71b7e2bd8db04fed04c52426de0f20ea0cab43fdc69de77eea5514a1c21c38ffecf9b6c34b6297b2f4ab271fb3bc95cc65510a65d1803c0c1fe657af226b080638a4edd84b0c146d4c6c1937cca514c9c535ef"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x6, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xe, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xa, 0x7, 0x9, 0x40, 0x5}, 0xf2, &(0x7f0000000240)={0x5, 0xf, 0xf2, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x5, 0xff0f, 0x7, [0xf, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x1, 0x80, 0x7, 0x8}, @generic={0xbd, 0x10, 0x1, "d99265d7f24792aae7045d134ba02e6c1df21e38e68aef6a0b7b8f985de01cc7a706e19a7e7b79402221fb8adcedcd3f0ca1d8afa76544b7b3f4c2f9655cd1bc172f25b2eae0833c44d6832c240cb8cbebd571a7ed2bbb907ff09dd144f706e301013ef6ed0f2b671e994d43535b19a86f814b21a1d6c5b3d77408b6e11a0eab461898350a6f900165db8277fe0bc0ed9b63ade818f47ae3a024560802dc9d8be165e018479c179580d5ca19296abd8c90cdd85fdc6eee1c11fe"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x9, 0x71, 0xaa}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x459}}, {0x61, &(0x7f0000000380)=@string={0x61, 0x3, "fe9481bbd79fde4164758fc70774e94fdd1fea6bf3aaf8f7e14f4bc9a6c6d58779c55a8a7cf9b9c70ff9cf5c43b181c4e5847e33c3f09a81ee04c522ec5e0eaa9b5925a945c519c0f54fa1fbd3c50ae3883df61e15449fc67fee1f0e84c5d0"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000200)={0x40, 0x31, 0x14, "58cbc3b4819e115141e0cc1977eb513f5a7d3d9e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 831.822179ms ago: executing program 3 (id=5281): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) epoll_pwait(r0, &(0x7f0000000140)=[{}, {}], 0x2, 0x6783, &(0x7f00000001c0)={[0x4]}, 0x8) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x1, 0x1}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x2, @sliced={0xc, [0x0, 0x8, 0x127d, 0x7, 0x401, 0x1ff, 0x4e3, 0x3ff, 0x1ff, 0x4, 0x8, 0x4, 0x7, 0xfff7, 0x29c, 0x101, 0x985d, 0x7fff, 0x5, 0x5, 0x7, 0x1, 0x4, 0x4, 0xa, 0x796, 0x83, 0xa, 0x7, 0x6, 0x4, 0x4, 0x9, 0x81, 0xb446, 0x0, 0x7ff, 0x1, 0x1, 0x5, 0x7ff, 0x9, 0x6, 0x8, 0xf, 0x0, 0xe7e, 0x8], 0x5}}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffa, 0x3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x808) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x15, 0x3, 'nq\x00', 0x1, 0x0, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000540)=0x24) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000040)={{@my=0x1}, 0x0, 0x0, 0x8001}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x10, 0x8201, 0x0, 0x800, r6}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0xfffffffffffffe36, 0x892f, [0x80]}, {}, {}, {0xa888}}}}}}}, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000a40)={'sit0\x00', &(0x7f0000000a00)={@empty, @rand_addr=0x64010100, 0x1b, 0x16}}) 736.292835ms ago: executing program 4 (id=5282): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffc05]}, 0x0, 0xffffffffffffffc2) r0 = gettid() open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7f, 0x400, 0x0, 0xb2}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r0, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0xffffffff}) 503.396238ms ago: executing program 0 (id=5283): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r0, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000040)="518005bc3d11e28f6fcd258eb1e7d0b73f237c") syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f00000007c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$packet_buf(r2, 0x107, 0xd, &(0x7f0000000500)="e8666bd1c0c2d9fdddd5ad9d0262aa00109fd475bbd033f4ce3ee696446b10d8ff7fafb03437c5c8005aea79e6771cbe7db6ed079bc3ad3baa7c164cb63bc8091167db70280e863e8bcc64b19e29a82768719856fc7a43d1a9d24d0f5b819b83fc7ef13457d8076fcdce616fac9889f6d36111ec365e3213fd4a2048457961f4", 0x80) 0s ago: executing program 3 (id=5284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc01000019000100fcffffff10000000ffffffff000000000000000000000000fc00000000000000000000000000000100020000ffff20000a0080002e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}}, 0x4048050) kernel console output (not intermixed with test programs): config [ 1656.048378][T18685] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1656.081510][T18685] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1656.099993][T18685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1656.122323][T18685] usb 3-1: SerialNumber: syz [ 1656.367539][T18685] usb 3-1: 0:2 : does not exist [ 1656.396707][T18685] usb 3-1: unit 5 not found! [ 1656.451183][T18685] usb 3-1: USB disconnect, device number 95 [ 1656.576885][T21163] udevd[21163]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1656.615768][T23921] syz_tun: entered allmulticast mode [ 1656.635830][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4622'. [ 1656.714354][T23921] syz_tun (unregistering): left allmulticast mode [ 1656.734890][T23897] veth1_to_bond: left allmulticast mode [ 1657.107151][T18685] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1657.277304][T18685] usb 4-1: Using ep0 maxpacket: 8 [ 1657.288886][T18685] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1657.307165][T18685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.307202][T21265] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1657.349785][T18685] usb 4-1: Product: syz [ 1657.364823][T18685] usb 4-1: Manufacturer: syz [ 1657.384126][T18685] usb 4-1: SerialNumber: syz [ 1657.415210][T18685] usb 4-1: config 0 descriptor?? [ 1657.481869][T23932] fuse: Bad value for 'user_id' [ 1657.489124][T23932] fuse: Bad value for 'user_id' [ 1657.507228][T21265] usb 2-1: Using ep0 maxpacket: 32 [ 1657.532952][T21265] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1657.559919][T21265] usb 2-1: config 0 has no interface number 0 [ 1657.600590][T21265] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1657.630353][T21265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.659699][T21265] usb 2-1: Product: syz [ 1657.673414][T21265] usb 2-1: Manufacturer: syz [ 1657.691451][T21265] usb 2-1: SerialNumber: syz [ 1657.700352][T18685] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1657.725341][T21265] usb 2-1: config 0 descriptor?? [ 1657.750167][T21265] smsc95xx v2.0.0 [ 1657.932886][T18685] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1658.098888][T23944] syzkaller0: entered promiscuous mode [ 1658.115617][T23944] syzkaller0: entered allmulticast mode [ 1658.197931][T21265] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1658.235141][T21265] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1658.844169][T23964] veth1_to_bond: entered allmulticast mode [ 1659.026776][T23964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4634'. [ 1659.699542][T23977] binder: 23976:23977 unknown command 0 [ 1659.899509][T23977] binder: 23976:23977 ioctl c0306201 200000000080 returned -22 [ 1659.910171][T21265] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 1659.921854][T14036] usb 4-1: USB disconnect, device number 95 [ 1659.930041][T21265] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 1660.474852][ T10] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1660.779104][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1660.791606][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1660.805835][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1660.825816][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1660.845973][ T10] usb 4-1: Product: syz [ 1660.854816][ T10] usb 4-1: Manufacturer: syz [ 1660.867165][ T10] usb 4-1: SerialNumber: syz [ 1660.896221][ T10] usb 4-1: config 0 descriptor?? [ 1660.938981][ T10] usb 4-1: selecting invalid altsetting 0 [ 1661.131031][T23982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.140060][T23982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.196413][T23982] fuse: Bad value for 'group_id' [ 1661.224049][T23982] fuse: Bad value for 'group_id' [ 1661.299658][T23993] binder: 23984:23993 ioctl c018620c 200000000000 returned -22 [ 1661.808152][ T10] usb 2-1: USB disconnect, device number 93 [ 1661.828080][T18685] usb 4-1: USB disconnect, device number 96 [ 1662.763879][T23962] veth1_to_bond: left allmulticast mode [ 1662.947245][T24013] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 1662.984962][T24013] syz.3.4644 (24013): /proc/24005/oom_adj is deprecated, please use /proc/24005/oom_score_adj instead. [ 1663.803486][T24030] binder: 24026:24030 ioctl c018620c 200000000000 returned -22 [ 1663.862772][T24030] batadv_slave_1: entered promiscuous mode [ 1664.023413][T24030] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1664.664684][T24026] batadv_slave_1: left promiscuous mode [ 1666.637115][T24064] veth1_to_bond: entered allmulticast mode [ 1666.999349][T24066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4658'. [ 1668.077175][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1668.257312][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1668.348487][ T10] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 1668.459899][ T10] usb 2-1: config 0 has no interface number 0 [ 1668.517854][ T10] usb 2-1: config 0 interface 9 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1669.074056][ T10] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1669.222402][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.378825][ T10] usb 2-1: Product: syz [ 1669.392959][ T10] usb 2-1: Manufacturer: syz [ 1669.419551][ T10] usb 2-1: SerialNumber: syz [ 1669.449805][ T10] usb 2-1: config 0 descriptor?? [ 1671.212939][T24063] veth1_to_bond: left allmulticast mode [ 1672.594634][ T10] usb 2-1: can't set config #0, error -71 [ 1672.609158][ T10] usb 2-1: USB disconnect, device number 94 [ 1673.537195][ T10] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1673.932519][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1673.967187][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7 [ 1674.009807][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.016174][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.017773][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024 [ 1674.214133][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1674.224194][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.253509][ T10] usb 4-1: Product: syz [ 1674.280442][ T10] usb 4-1: Manufacturer: syz [ 1674.297299][ T10] usb 4-1: SerialNumber: syz [ 1674.324995][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4673'. [ 1674.337207][ T10] usb 4-1: config 0 descriptor?? [ 1674.359248][ T10] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 7f [ 1674.489361][T24122] bond3: option lacp_active: invalid value (5) [ 1674.538605][T24122] bond3 (unregistering): Released all slaves [ 1676.379975][ T10] usb 4-1: USB disconnect, device number 97 [ 1676.482042][T21149] udevd[21149]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1676.489754][T24146] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 1676.587415][T24146] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 1676.612639][T24147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4677'. [ 1676.717346][T24146] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1678.622824][T24164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1680.860717][T24182] xt_connbytes: Forcing CT accounting to be enabled [ 1680.869575][T24183] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4688'. [ 1680.878664][T24182] SET target dimension over the limit! [ 1682.049253][T24195] random: crng reseeded on system resumption [ 1683.379703][T24194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4689'. [ 1683.623905][T24206] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4692'. [ 1685.037297][T24217] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4695'. [ 1686.017897][T24224] batadv_slave_1: entered promiscuous mode [ 1686.209086][T24222] veth1_to_bond: entered allmulticast mode [ 1686.270725][T24224] batadv_slave_1: left promiscuous mode [ 1686.367335][T24228] xt_TCPMSS: Only works on TCP SYN packets [ 1686.674927][T24222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4697'. [ 1686.769962][T24220] veth1_to_bond: left allmulticast mode [ 1686.961849][T24232] netlink: zone id is out of range [ 1686.967002][T24232] netlink: zone id is out of range [ 1686.983062][T24232] netlink: zone id is out of range [ 1686.997403][T24232] netlink: zone id is out of range [ 1687.173655][T24232] netlink: zone id is out of range [ 1687.179138][T24232] netlink: zone id is out of range [ 1687.208102][T24232] netlink: zone id is out of range [ 1687.257522][T24232] netlink: zone id is out of range [ 1687.267661][T24232] netlink: zone id is out of range [ 1687.273051][T24232] netlink: zone id is out of range [ 1689.283611][T16274] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.306532][T24250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4703'. [ 1689.324299][T16274] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.353535][T16274] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1689.374275][T16274] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.839109][T24276] veth1_to_bond: entered allmulticast mode [ 1692.077740][T24276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4710'. [ 1692.234412][T24281] syzkaller0: entered promiscuous mode [ 1692.240871][T24281] syzkaller0: entered allmulticast mode [ 1692.255587][T24281] net_ratelimit: 548 callbacks suppressed [ 1692.255605][T24281] TC_ACT_REPEAT abuse ? [ 1695.058560][T24275] veth1_to_bond: left allmulticast mode [ 1695.778845][T24312] tipc: Enabling of bearer rejected, failed to enable media [ 1695.837250][ T10] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1696.009132][ T10] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1696.033957][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.071195][ T10] usb 4-1: config 0 descriptor?? [ 1696.110915][T24320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4726'. [ 1696.589599][ T10] hid_parser_main: 91 callbacks suppressed [ 1696.593397][ T10] chicony 0003:04F2:1236.002D: unknown main item tag 0x0 [ 1696.632228][ T10] chicony 0003:04F2:1236.002D: unknown main item tag 0x0 [ 1696.665123][ T10] chicony 0003:04F2:1236.002D: unknown main item tag 0x0 [ 1696.697724][ T10] chicony 0003:04F2:1236.002D: unknown main item tag 0x0 [ 1696.722441][ T10] chicony 0003:04F2:1236.002D: unknown main item tag 0x0 [ 1696.752044][ T10] chicony 0003:04F2:1236.002D: hidraw0: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.3-1/input0 [ 1696.774629][T24332] FAULT_INJECTION: forcing a failure. [ 1696.774629][T24332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1696.815339][T24332] CPU: 0 UID: 0 PID: 24332 Comm: syz.4.4729 Tainted: G L syzkaller #0 PREEMPT(full) [ 1696.815373][T24332] Tainted: [L]=SOFTLOCKUP [ 1696.815381][T24332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1696.815394][T24332] Call Trace: [ 1696.815403][T24332] [ 1696.815413][T24332] dump_stack_lvl+0xe8/0x150 [ 1696.815446][T24332] should_fail_ex+0x412/0x560 [ 1696.815477][T24332] _copy_from_user+0x2d/0xb0 [ 1696.815511][T24332] ___sys_sendmsg+0x1c6/0x360 [ 1696.815539][T24332] ? __lock_acquire+0x6b5/0x2cf0 [ 1696.815574][T24332] ? __pfx____sys_sendmsg+0x10/0x10 [ 1696.815649][T24332] ? __fget_files+0x2a/0x420 [ 1696.815672][T24332] ? __fget_files+0x3a0/0x420 [ 1696.815705][T24332] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1696.815735][T24332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1696.815773][T24332] ? __pfx_ksys_write+0x10/0x10 [ 1696.815814][T24332] do_syscall_64+0xe2/0xf80 [ 1696.815836][T24332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.815855][T24332] ? trace_irq_disable+0x37/0x100 [ 1696.815875][T24332] ? clear_bhb_loop+0x60/0xb0 [ 1696.815899][T24332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.815918][T24332] RIP: 0033:0x7f82ff59aeb9 [ 1696.815937][T24332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1696.815954][T24332] RSP: 002b:00007f83003a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1696.815976][T24332] RAX: ffffffffffffffda RBX: 00007f82ff815fa0 RCX: 00007f82ff59aeb9 [ 1696.815992][T24332] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1696.816005][T24332] RBP: 00007f83003a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1696.816019][T24332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1696.816032][T24332] R13: 00007f82ff816038 R14: 00007f82ff815fa0 R15: 00007f82ff93fa48 [ 1696.816065][T24332] [ 1696.816444][T24334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1696.890779][T14036] usb 4-1: USB disconnect, device number 98 [ 1697.575705][T24335] fido_id[24335]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1698.115723][T24350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4732'. [ 1698.361294][T14036] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1698.679675][T14036] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1698.714597][T14036] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1698.768772][T14036] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1698.831906][T14036] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1698.990492][T14036] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.177078][T14036] usb 3-1: Product: syz [ 1699.181309][T14036] usb 3-1: Manufacturer: syz [ 1699.285303][T14036] usb 3-1: SerialNumber: syz [ 1699.369802][T14036] usb 3-1: config 0 descriptor?? [ 1699.679957][T24345] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1699.896014][T24345] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1701.336819][ T10] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 1701.458609][T18685] usb 3-1: USB disconnect, device number 96 [ 1701.490200][T24376] FAULT_INJECTION: forcing a failure. [ 1701.490200][T24376] name failslab, interval 1, probability 0, space 0, times 0 [ 1701.623664][T24376] CPU: 1 UID: 0 PID: 24376 Comm: syz.3.4742 Tainted: G L syzkaller #0 PREEMPT(full) [ 1701.623696][T24376] Tainted: [L]=SOFTLOCKUP [ 1701.623704][T24376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1701.623717][T24376] Call Trace: [ 1701.623726][T24376] [ 1701.623735][T24376] dump_stack_lvl+0xe8/0x150 [ 1701.623767][T24376] should_fail_ex+0x412/0x560 [ 1701.623797][T24376] should_failslab+0xa8/0x100 [ 1701.623822][T24376] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 1701.623854][T24376] ? __alloc_skb+0x193/0x390 [ 1701.623878][T24376] ? __alloc_skb+0x1d7/0x390 [ 1701.623899][T24376] ? __local_bh_enable_ip+0xd0/0x130 [ 1701.623919][T24376] ? __alloc_skb+0x193/0x390 [ 1701.623943][T24376] __alloc_skb+0x1d7/0x390 [ 1701.623969][T24376] netlink_sendmsg+0x5d4/0xb40 [ 1701.624000][T24376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1701.624025][T24376] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1701.624052][T24376] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1701.624076][T24376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1701.624097][T24376] ____sys_sendmsg+0xa68/0xad0 [ 1701.624123][T24376] ? __might_fault+0xaf/0x130 [ 1701.624159][T24376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1701.624195][T24376] ? import_iovec+0x73/0xa0 [ 1701.624227][T24376] ___sys_sendmsg+0x2a5/0x360 [ 1701.624253][T24376] ? __lock_acquire+0x6b5/0x2cf0 [ 1701.624285][T24376] ? __pfx____sys_sendmsg+0x10/0x10 [ 1701.624347][T24376] ? __fget_files+0x2a/0x420 [ 1701.624369][T24376] ? __fget_files+0x3a0/0x420 [ 1701.624402][T24376] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1701.624434][T24376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1701.624472][T24376] ? __pfx_ksys_write+0x10/0x10 [ 1701.624512][T24376] do_syscall_64+0xe2/0xf80 [ 1701.624533][T24376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.624553][T24376] ? trace_irq_disable+0x37/0x100 [ 1701.624572][T24376] ? clear_bhb_loop+0x60/0xb0 [ 1701.624606][T24376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1701.624626][T24376] RIP: 0033:0x7f5cfaf9aeb9 [ 1701.624644][T24376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1701.624662][T24376] RSP: 002b:00007f5cfbe7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1701.624688][T24376] RAX: ffffffffffffffda RBX: 00007f5cfb215fa0 RCX: 00007f5cfaf9aeb9 [ 1701.624704][T24376] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1701.624716][T24376] RBP: 00007f5cfbe7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1701.624729][T24376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1701.624742][T24376] R13: 00007f5cfb216038 R14: 00007f5cfb215fa0 R15: 00007f5cfb33fa48 [ 1701.624774][T24376] [ 1702.194869][ T10] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1702.247891][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 1702.307249][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1702.318303][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1702.358815][ T10] usb 2-1: SerialNumber: syz [ 1702.500915][T24390] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4745'. [ 1702.592975][ T10] usb 2-1: USB disconnect, device number 95 [ 1703.047202][T14036] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1703.227165][T14036] usb 4-1: Using ep0 maxpacket: 8 [ 1703.308657][T14036] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1703.410065][T14036] usb 4-1: config 8 has no interfaces? [ 1703.428300][T14036] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1012, bcdDevice=93.2c [ 1703.447294][T14036] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.492711][T14036] usb 4-1: Product: syz [ 1703.685466][T14036] usb 4-1: Manufacturer: syz [ 1703.828677][T14036] usb 4-1: SerialNumber: syz [ 1704.651016][T24404] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 1704.657904][T24404] PKCS7: Only support pkcs7_signedData type [ 1705.842007][T24415] netlink: 'syz.4.4751': attribute type 10 has an invalid length. [ 1705.850037][T24415] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4751'. [ 1705.860216][T24415] bridge0: port 3(dummy0) entered blocking state [ 1705.866900][T24415] bridge0: port 3(dummy0) entered disabled state [ 1705.873718][T24415] dummy0: entered allmulticast mode [ 1705.885612][T24415] bridge0: port 3(dummy0) entered blocking state [ 1705.892176][T24415] bridge0: port 3(dummy0) entered forwarding state [ 1707.069178][T14036] usb 4-1: USB disconnect, device number 99 [ 1708.597414][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1708.750737][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1708.769627][T24445] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1708.789370][T24445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1708.821567][T24445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1708.857750][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1708.878204][ T10] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1708.896110][ T10] usb 2-1: can't read configurations, error -71 [ 1708.970015][T24451] xt_TCPMSS: Only works on TCP SYN packets [ 1709.909587][ T30] audit: type=1326 audit(1769770689.734:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.0.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3459b9aeb9 code=0x7ffc0000 [ 1710.006652][ T30] audit: type=1326 audit(1769770689.734:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.0.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3459b9aeb9 code=0x7ffc0000 [ 1710.133094][ T30] audit: type=1326 audit(1769770689.734:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.0.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3459b9aeb9 code=0x7ffc0000 [ 1710.240930][ T30] audit: type=1326 audit(1769770689.734:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.0.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3459b9aeb9 code=0x7ffc0000 [ 1710.301920][ T30] audit: type=1326 audit(1769770689.734:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.0.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3459b9aeb9 code=0x7ffc0000 [ 1710.356282][ T30] audit: type=1326 audit(1769770689.764:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.0.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3459b9aeb9 code=0x7ffc0000 [ 1710.463986][ T30] audit: type=1326 audit(1769770689.764:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.0.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3459b9aeb9 code=0x7ffc0000 [ 1710.508881][T24468] FAULT_INJECTION: forcing a failure. [ 1710.508881][T24468] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.727223][T24468] CPU: 0 UID: 0 PID: 24468 Comm: syz.3.4767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1710.727258][T24468] Tainted: [L]=SOFTLOCKUP [ 1710.727266][T24468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1710.727280][T24468] Call Trace: [ 1710.727288][T24468] [ 1710.727298][T24468] dump_stack_lvl+0xe8/0x150 [ 1710.727332][T24468] should_fail_ex+0x412/0x560 [ 1710.727374][T24468] should_failslab+0xa8/0x100 [ 1710.727399][T24468] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1710.727429][T24468] ? __netlink_lookup+0xc6/0x8b0 [ 1710.727453][T24468] ? skb_clone+0x212/0x3a0 [ 1710.727486][T24468] skb_clone+0x212/0x3a0 [ 1710.727518][T24468] __netlink_deliver_tap+0x404/0x850 [ 1710.727552][T24468] ? netlink_deliver_tap+0x2e/0x1b0 [ 1710.727576][T24468] netlink_deliver_tap+0x19c/0x1b0 [ 1710.727599][T24468] netlink_unicast+0x7e3/0x9b0 [ 1710.727639][T24468] ? __pfx_netlink_unicast+0x10/0x10 [ 1710.727669][T24468] ? __alloc_skb+0x193/0x390 [ 1710.727693][T24468] ? netlink_sendmsg+0x650/0xb40 [ 1710.727712][T24468] ? skb_put+0x11b/0x210 [ 1710.727741][T24468] netlink_sendmsg+0x813/0xb40 [ 1710.727772][T24468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.727797][T24468] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1710.727824][T24468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1710.727848][T24468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1710.727870][T24468] ____sys_sendmsg+0xa68/0xad0 [ 1710.727897][T24468] ? __might_fault+0xaf/0x130 [ 1710.727933][T24468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1710.727970][T24468] ? import_iovec+0x73/0xa0 [ 1710.728005][T24468] ___sys_sendmsg+0x2a5/0x360 [ 1710.728031][T24468] ? __lock_acquire+0x6b5/0x2cf0 [ 1710.728064][T24468] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.728136][T24468] ? __fget_files+0x2a/0x420 [ 1710.728158][T24468] ? __fget_files+0x3a0/0x420 [ 1710.728191][T24468] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1710.728221][T24468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1710.728259][T24468] ? __pfx_ksys_write+0x10/0x10 [ 1710.728301][T24468] do_syscall_64+0xe2/0xf80 [ 1710.728324][T24468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.728345][T24468] ? trace_irq_disable+0x37/0x100 [ 1710.728363][T24468] ? clear_bhb_loop+0x60/0xb0 [ 1710.728387][T24468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.728408][T24468] RIP: 0033:0x7f5cfaf9aeb9 [ 1710.728427][T24468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.728445][T24468] RSP: 002b:00007f5cfbe7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1710.728467][T24468] RAX: ffffffffffffffda RBX: 00007f5cfb215fa0 RCX: 00007f5cfaf9aeb9 [ 1710.728482][T24468] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1710.728495][T24468] RBP: 00007f5cfbe7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.728509][T24468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.728521][T24468] R13: 00007f5cfb216038 R14: 00007f5cfb215fa0 R15: 00007f5cfb33fa48 [ 1710.728554][T24468] [ 1710.729255][T24468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1711.039902][ T30] audit: type=1326 audit(1769770689.764:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.0.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3459b9aeb9 code=0x7ffc0000 [ 1711.157429][ T30] audit: type=1326 audit(1769770689.764:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.0.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3459b9aeb9 code=0x7ffc0000 [ 1711.183965][ T30] audit: type=1326 audit(1769770689.764:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24459 comm="syz.0.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3459b9aeb9 code=0x7ffc0000 [ 1711.341165][T24474] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4768'. [ 1711.540223][T24477] FAULT_INJECTION: forcing a failure. [ 1711.540223][T24477] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.608285][T24477] CPU: 0 UID: 0 PID: 24477 Comm: syz.3.4770 Tainted: G L syzkaller #0 PREEMPT(full) [ 1711.608318][T24477] Tainted: [L]=SOFTLOCKUP [ 1711.608327][T24477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1711.608340][T24477] Call Trace: [ 1711.608350][T24477] [ 1711.608359][T24477] dump_stack_lvl+0xe8/0x150 [ 1711.608392][T24477] should_fail_ex+0x412/0x560 [ 1711.608423][T24477] should_failslab+0xa8/0x100 [ 1711.608449][T24477] __kmalloc_cache_noprof+0x83/0x6e0 [ 1711.608468][T24477] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1711.608491][T24477] ? sctp_add_bind_addr+0x8c/0x370 [ 1711.608516][T24477] sctp_add_bind_addr+0x8c/0x370 [ 1711.608542][T24477] sctp_copy_local_addr_list+0x314/0x4f0 [ 1711.608567][T24477] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1711.608589][T24477] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1711.608613][T24477] ? sctp_v6_is_any+0x64/0x80 [ 1711.608635][T24477] ? sctp_copy_one_addr+0x93/0x360 [ 1711.608660][T24477] sctp_bind_addr_copy+0xb3/0x3c0 [ 1711.608682][T24477] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1711.608716][T24477] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1711.608745][T24477] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1711.608777][T24477] ? __local_bh_enable_ip+0xd0/0x130 [ 1711.608795][T24477] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1711.608827][T24477] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1711.608852][T24477] sctp_sendmsg+0x1528/0x2c10 [ 1711.608892][T24477] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1711.608914][T24477] ? aa_sk_perm+0x15a/0x960 [ 1711.608939][T24477] ? aa_sk_perm+0x82d/0x960 [ 1711.608970][T24477] ? __pfx_aa_sk_perm+0x10/0x10 [ 1711.608997][T24477] ? sock_rps_record_flow+0x19/0x400 [ 1711.609028][T24477] ? inet_sendmsg+0x2f4/0x370 [ 1711.609060][T24477] ____sys_sendmsg+0x894/0xad0 [ 1711.609098][T24477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1711.609134][T24477] ? import_iovec+0x73/0xa0 [ 1711.609173][T24477] ___sys_sendmsg+0x2a5/0x360 [ 1711.609198][T24477] ? __lock_acquire+0x6b5/0x2cf0 [ 1711.609232][T24477] ? __pfx____sys_sendmsg+0x10/0x10 [ 1711.609265][T24477] ? kstrtouint+0x6e/0xe0 [ 1711.609318][T24477] ? __fget_files+0x2a/0x420 [ 1711.609339][T24477] ? __fget_files+0x3a0/0x420 [ 1711.609372][T24477] __sys_sendmmsg+0x27c/0x4e0 [ 1711.609407][T24477] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1711.609433][T24477] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1711.609485][T24477] ? ksys_write+0x242/0x270 [ 1711.609518][T24477] ? __pfx_ksys_write+0x10/0x10 [ 1711.609556][T24477] __x64_sys_sendmmsg+0xa0/0xc0 [ 1711.609586][T24477] do_syscall_64+0xe2/0xf80 [ 1711.609608][T24477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.609628][T24477] ? trace_irq_disable+0x37/0x100 [ 1711.609649][T24477] ? clear_bhb_loop+0x60/0xb0 [ 1711.609674][T24477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.609694][T24477] RIP: 0033:0x7f5cfaf9aeb9 [ 1711.609713][T24477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.609730][T24477] RSP: 002b:00007f5cfbe7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1711.609752][T24477] RAX: ffffffffffffffda RBX: 00007f5cfb215fa0 RCX: 00007f5cfaf9aeb9 [ 1711.609767][T24477] RDX: 0000000000000002 RSI: 0000200000003440 RDI: 0000000000000003 [ 1711.609781][T24477] RBP: 00007f5cfbe7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.609795][T24477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1711.609815][T24477] R13: 00007f5cfb216038 R14: 00007f5cfb215fa0 R15: 00007f5cfb33fa48 [ 1711.609850][T24477] [ 1712.617180][ T10] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1712.778792][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1712.809771][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1712.852885][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1712.894106][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1712.943125][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1712.986439][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.065015][ T10] usb 4-1: config 0 descriptor?? [ 1713.495697][ T10] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1713.513715][ T10] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1713.544225][ T10] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1713.568356][ T10] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1713.588911][ T10] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1713.622724][ T10] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1713.697410][T22681] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1713.700925][T24485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.758428][T24485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.849960][T24485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1713.869352][T24485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1713.899110][ T10] usb 4-1: USB disconnect, device number 100 [ 1714.391364][T24494] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4775'. [ 1716.928397][T24530] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4786'. [ 1721.148849][T24533] syz.3.4787 (24533): drop_caches: 1 [ 1721.150319][T24535] syz.3.4787 (24535): drop_caches: 1 [ 1722.880146][ T10] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1723.090623][ T10] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 1723.102128][ T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 238, using maximum allowed: 30 [ 1723.134139][T24562] FAULT_INJECTION: forcing a failure. [ 1723.134139][T24562] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.134601][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1723.177279][T24562] CPU: 0 UID: 0 PID: 24562 Comm: syz.0.4796 Tainted: G L syzkaller #0 PREEMPT(full) [ 1723.177319][T24562] Tainted: [L]=SOFTLOCKUP [ 1723.177325][T24562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1723.177335][T24562] Call Trace: [ 1723.177342][T24562] [ 1723.177349][T24562] dump_stack_lvl+0xe8/0x150 [ 1723.177373][T24562] should_fail_ex+0x412/0x560 [ 1723.177394][T24562] should_failslab+0xa8/0x100 [ 1723.177412][T24562] __kmalloc_cache_noprof+0x83/0x6e0 [ 1723.177428][T24562] ? sctp_add_bind_addr+0x8c/0x370 [ 1723.177447][T24562] sctp_add_bind_addr+0x8c/0x370 [ 1723.177464][T24562] sctp_copy_local_addr_list+0x314/0x4f0 [ 1723.177482][T24562] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1723.177498][T24562] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1723.177514][T24562] ? sctp_v6_is_any+0x64/0x80 [ 1723.177531][T24562] ? sctp_copy_one_addr+0x93/0x360 [ 1723.177548][T24562] sctp_bind_addr_copy+0xb3/0x3c0 [ 1723.177563][T24562] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1723.177587][T24562] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1723.177608][T24562] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1723.177632][T24562] ? __local_bh_enable_ip+0xd0/0x130 [ 1723.177645][T24562] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1723.177662][T24562] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1723.177700][T24562] sctp_sendmsg+0x1528/0x2c10 [ 1723.177730][T24562] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1723.177746][T24562] ? aa_sk_perm+0x15a/0x960 [ 1723.177765][T24562] ? aa_sk_perm+0x82d/0x960 [ 1723.177788][T24562] ? __pfx_aa_sk_perm+0x10/0x10 [ 1723.177808][T24562] ? sock_rps_record_flow+0x19/0x400 [ 1723.177831][T24562] ? inet_sendmsg+0x2f4/0x370 [ 1723.177875][T24562] ____sys_sendmsg+0x894/0xad0 [ 1723.177913][T24562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1723.177958][T24562] ? import_iovec+0x73/0xa0 [ 1723.177984][T24562] ___sys_sendmsg+0x2a5/0x360 [ 1723.178003][T24562] ? __lock_acquire+0x6b5/0x2cf0 [ 1723.178028][T24562] ? __pfx____sys_sendmsg+0x10/0x10 [ 1723.178053][T24562] ? kstrtouint+0x6e/0xe0 [ 1723.178090][T24562] ? __fget_files+0x2a/0x420 [ 1723.178106][T24562] ? __fget_files+0x3a0/0x420 [ 1723.178142][T24562] __sys_sendmmsg+0x27c/0x4e0 [ 1723.178166][T24562] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1723.178184][T24562] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1723.178220][T24562] ? ksys_write+0x242/0x270 [ 1723.178245][T24562] ? __pfx_ksys_write+0x10/0x10 [ 1723.178272][T24562] __x64_sys_sendmmsg+0xa0/0xc0 [ 1723.178312][T24562] do_syscall_64+0xe2/0xf80 [ 1723.178328][T24562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.178343][T24562] ? trace_irq_disable+0x37/0x100 [ 1723.178358][T24562] ? clear_bhb_loop+0x60/0xb0 [ 1723.178376][T24562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.178391][T24562] RIP: 0033:0x7f3459b9aeb9 [ 1723.178405][T24562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.178419][T24562] RSP: 002b:00007f345ab3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1723.178436][T24562] RAX: ffffffffffffffda RBX: 00007f3459e15fa0 RCX: 00007f3459b9aeb9 [ 1723.178448][T24562] RDX: 0000000000000002 RSI: 0000200000003440 RDI: 0000000000000003 [ 1723.178458][T24562] RBP: 00007f345ab3d090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.178467][T24562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1723.178477][T24562] R13: 00007f3459e16038 R14: 00007f3459e15fa0 R15: 00007f3459f3fa48 [ 1723.178514][T24562] [ 1723.606381][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1723.618064][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 238 [ 1723.631124][ T10] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 48, using maximum allowed: 30 [ 1723.642959][ T10] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1723.735832][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1723.745084][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.753190][ T10] usb 4-1: Product: syz [ 1723.760099][ T10] usb 4-1: Manufacturer: syz [ 1723.764761][ T10] usb 4-1: SerialNumber: syz [ 1723.798268][T24552] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1723.877487][ T10] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1723.883795][ T10] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1723.895725][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1723.908520][ T10] cdc_ncm 4-1:1.1: bind() failure [ 1723.915929][ T10] usbtest 4-1:1.1: couldn't get endpoints, -22 [ 1723.922849][ T10] usbtest 4-1:1.1: probe with driver usbtest failed with error -22 [ 1724.017552][T18685] usb 4-1: USB disconnect, device number 101 [ 1724.168852][T24574] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4797'. [ 1724.657913][T24581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.804182][T24581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.887210][T18685] usb 3-1: new low-speed USB device number 97 using dummy_hcd [ 1725.279935][T14036] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1725.469376][T14036] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1725.510834][T14036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1725.564495][T14036] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1725.609655][T14036] usb 2-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 1725.648903][T14036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.698112][T14036] usb 2-1: config 0 descriptor?? [ 1725.723212][T24584] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1726.246969][T14036] wacom 0003:056A:0039.002F: hidraw0: USB HID v0.00 Device [HID 056a:0039] on usb-dummy_hcd.1-1/input0 [ 1726.382437][T24584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.517768][T24584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1726.582856][T18685] usb 2-1: USB disconnect, device number 98 [ 1727.503519][T24613] fido_id[24613]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1727.578830][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1727.607415][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1727.665391][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1727.697259][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1727.737123][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1727.783746][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1727.842550][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1727.887327][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1727.954904][T24621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4811'. [ 1728.015073][T24621] ip6gre0: left promiscuous mode [ 1728.056645][T24621] bond1: left promiscuous mode [ 1728.079990][T24621] ip6gre1: left promiscuous mode [ 1729.057131][T18685] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1729.592319][ T10] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1729.764173][T18685] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1729.783445][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1729.797929][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1729.816620][T18685] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 303 [ 1729.828390][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1729.850229][T18685] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1729.859549][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1729.870322][T18685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.886415][T24661] xt_hashlimit: size too large, truncated to 1048576 [ 1729.897802][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1729.906675][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1729.932743][T24647] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1729.957555][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.969254][T18685] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1730.157566][ T10] usb 4-1: 0:2 : does not exist [ 1730.194597][T18685] usb 2-1: USB disconnect, device number 99 [ 1731.232435][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1731.232456][ T30] audit: type=1326 audit(1769770711.054:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24678 comm="syz.2.4828" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f870d59aeb9 code=0x0 [ 1731.291846][T21265] IPVS: starting estimator thread 0... [ 1731.397157][T24683] IPVS: using max 34 ests per chain, 81600 per kthread [ 1732.468866][T24697] macvlan0: entered promiscuous mode [ 1732.505549][T24697] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1732.835223][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1732.903366][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1732.948117][ T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1733.070527][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1733.118966][ T10] usb 4-1: USB disconnect, device number 102 [ 1733.927291][T24715] tipc: Enabled bearer , priority 10 [ 1734.406313][T24729] netem: change failed [ 1735.637691][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.644138][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.740163][T16273] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1736.792604][T16273] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.687234][T16273] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1737.737405][T16273] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.165293][T24763] __nla_validate_parse: 62 callbacks suppressed [ 1738.165323][T24763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4849'. [ 1738.332275][T24764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4850'. [ 1738.486305][T16273] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1738.525881][T16273] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.701604][T16610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1738.715225][T16610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1738.724703][T16610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1738.771846][T24761] veth1_to_bond: entered allmulticast mode [ 1738.851841][T16610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1738.859904][T16610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1738.928595][T24762] veth1_to_bond: entered allmulticast mode [ 1739.101554][T16273] team0: Port device netdevsim0 removed [ 1739.139350][T16273] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1739.173492][T16273] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.252339][T16273] tipc: Resetting bearer [ 1740.977174][T16610] Bluetooth: hci0: command tx timeout [ 1741.811832][ T30] audit: type=1326 audit(1769770721.634:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfaf9aeb9 code=0x7ffc0000 [ 1741.860916][ T30] audit: type=1326 audit(1769770721.664:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfaf9aeb9 code=0x7ffc0000 [ 1741.884008][ T30] audit: type=1326 audit(1769770721.664:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfaf9aeb9 code=0x7ffc0000 [ 1741.916087][ T30] audit: type=1326 audit(1769770721.664:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfaf9aeb9 code=0x7ffc0000 [ 1741.963154][ T30] audit: type=1326 audit(1769770721.664:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfaf9aeb9 code=0x7ffc0000 [ 1741.997347][ T30] audit: type=1326 audit(1769770721.664:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cfaf9aeb9 code=0x7ffc0000 [ 1742.074427][ T30] audit: type=1326 audit(1769770721.664:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfaf9aeb9 code=0x7ffc0000 [ 1742.123310][ T30] audit: type=1326 audit(1769770721.664:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfaf9aeb9 code=0x7ffc0000 [ 1742.153656][ T30] audit: type=1326 audit(1769770721.664:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cfaf9aeb9 code=0x7ffc0000 [ 1742.201790][T16273] tipc: Disabling bearer [ 1742.209343][ T30] audit: type=1326 audit(1769770721.664:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24779 comm="syz.3.4853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f5cfaf9aeb9 code=0x7ffc0000 [ 1742.317578][T16273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1742.358685][T16273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.377305][T16273] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1742.386347][T16273] bond0 (unregistering): Released all slaves [ 1742.411667][T16273] bond1 (unregistering): Released all slaves [ 1742.452747][T24759] veth1_to_bond: left allmulticast mode [ 1742.464811][T24758] veth1_to_bond: left allmulticast mode [ 1742.478681][ T10] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1742.640867][T16273] tipc: Left network mode [ 1742.647404][ T10] usb 4-1: device descriptor read/64, error -71 [ 1742.686575][T16610] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1742.887263][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1743.048254][T16610] Bluetooth: hci0: command tx timeout [ 1743.067181][ T10] usb 4-1: device descriptor read/64, error -71 [ 1743.081906][T24766] chnl_net:caif_netlink_parms(): no params data found [ 1743.179267][ T10] usb usb4-port1: attempt power cycle [ 1743.367169][T21265] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1743.519125][ T10] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1743.557151][T21265] usb 3-1: Using ep0 maxpacket: 8 [ 1743.573165][T24766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.581428][T21265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 1743.584273][ T10] usb 4-1: device descriptor read/8, error -71 [ 1743.637925][T21265] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1743.667269][T24766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.674560][T24766] bridge_slave_0: entered allmulticast mode [ 1743.687240][T21265] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1743.734417][T24766] bridge_slave_0: entered promiscuous mode [ 1743.764702][T16273] hsr_slave_0: left promiscuous mode [ 1743.772523][T16273] hsr_slave_1: left promiscuous mode [ 1743.782439][T16273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1743.827264][T16273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.881348][T16273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1743.910683][T16273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1743.938290][ T10] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1743.993823][ T10] usb 4-1: device descriptor read/8, error -71 [ 1744.052010][T16273] veth1_macvtap: left promiscuous mode [ 1744.082977][T16273] veth0_macvtap: left promiscuous mode [ 1744.109016][ T10] usb usb4-port1: unable to enumerate USB device [ 1745.158000][T16610] Bluetooth: hci0: command tx timeout [ 1746.390285][T16273] team0 (unregistering): Port device team_slave_1 removed [ 1746.723512][T16273] team0 (unregistering): Port device team_slave_0 removed [ 1747.207350][T16610] Bluetooth: hci0: command tx timeout [ 1748.394600][T24766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.427447][T24766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.434743][T24766] bridge_slave_1: entered allmulticast mode [ 1748.488719][T24766] bridge_slave_1: entered promiscuous mode [ 1748.693838][T24766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.749919][T21265] usb 3-1: string descriptor 0 read error: -32 [ 1748.769741][T24766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.789650][T21265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1748.840591][T21265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.917561][T21265] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 1748.956971][T21265] usb 3-1: no configuration chosen from 1 choice [ 1749.015463][T24766] team0: Port device team_slave_0 added [ 1749.074434][T24766] team0: Port device team_slave_1 added [ 1749.224961][T16273] IPVS: stop unused estimator thread 0... [ 1749.494186][T24851] veth1_to_bond: entered allmulticast mode [ 1749.514308][T24766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.538144][T24766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.597695][T24853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4863'. [ 1749.800259][T24766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.959503][T24766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.988529][T24766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1750.036744][T24766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1750.891678][T24766] hsr_slave_0: entered promiscuous mode [ 1750.925695][T24766] hsr_slave_1: entered promiscuous mode [ 1750.966779][T24766] debugfs: 'hsr0' already exists in 'hsr' [ 1750.991211][T24766] Cannot create hsr debugfs directory [ 1752.259232][T24766] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1752.289042][T24766] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1752.441676][T24766] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1752.510343][T24766] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1753.240875][T24850] veth1_to_bond: left allmulticast mode [ 1753.466129][T24766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1753.641870][T24766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1753.680430][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.687639][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1753.736399][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.743611][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1754.084176][T24766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1754.281295][T24766] veth0_vlan: entered promiscuous mode [ 1754.336428][T24766] veth1_vlan: entered promiscuous mode [ 1754.439920][T24766] veth0_macvtap: entered promiscuous mode [ 1754.502070][T24914] fuse: Bad value for 'fd' [ 1754.525794][T24766] veth1_macvtap: entered promiscuous mode [ 1754.616443][T24766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1754.771470][T24917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4872'. [ 1754.802229][T24766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1754.951981][T24917] bond3: option lacp_active: invalid value (5) [ 1755.009382][T24917] bond3 (unregistering): Released all slaves [ 1755.106174][ T2925] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.131480][ T2925] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.195953][ T2925] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.235862][ T2925] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.618518][T16273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.656598][T16273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1755.762606][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1755.781237][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.509901][T24941] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4848'. [ 1757.409849][T24944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4875'. [ 1757.487258][T24958] input: syz0 as /devices/virtual/input/input69 [ 1758.448665][T21265] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1758.507299][T22681] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1758.531182][T22681] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1758.545055][T22681] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1758.554613][T22681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1758.563966][T22681] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1758.636221][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4880'. [ 1758.686058][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4880'. [ 1758.771192][T21265] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1758.814178][T21265] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1758.851569][T21265] usb 4-1: can't read configurations, error -71 [ 1758.873735][T24967] xt_CT: No such helper "pptp" [ 1759.145259][T24975] sit1: entered allmulticast mode [ 1759.983112][T24978] netlink: 'syz.3.4883': attribute type 1 has an invalid length. [ 1759.993533][T24971] chnl_net:caif_netlink_parms(): no params data found [ 1760.210433][T24985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4884'. [ 1760.283266][T24978] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1760.613635][T24971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.650981][T16610] Bluetooth: hci3: command tx timeout [ 1760.693888][T24971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.730568][T24971] bridge_slave_0: entered allmulticast mode [ 1760.763416][T24971] bridge_slave_0: entered promiscuous mode [ 1760.915158][T24992] delete_channel: no stack [ 1760.923955][T24971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.951533][T24971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.979213][T24971] bridge_slave_1: entered allmulticast mode [ 1761.017565][T24971] bridge_slave_1: entered promiscuous mode [ 1761.178078][ T5910] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1761.209717][T24971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1761.251372][T24971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1761.267668][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 1761.267688][ T30] audit: type=1326 audit(1769770741.094:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24994 comm="syz.5.4888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe24f9aeb9 code=0x0 [ 1761.348990][T24971] team0: Port device team_slave_0 added [ 1761.359960][T24971] team0: Port device team_slave_1 added [ 1761.377539][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 1761.386618][ T5910] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1761.400544][ T5910] usb 4-1: config 0 has no interface number 0 [ 1761.430985][ T5910] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1761.440873][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.459939][ T5910] usb 4-1: Product: syz [ 1761.469749][ T5910] usb 4-1: Manufacturer: syz [ 1761.480417][ T5910] usb 4-1: SerialNumber: syz [ 1761.501917][T24971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1761.510964][ T5910] usb 4-1: config 0 descriptor?? [ 1761.516039][T24971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1761.552767][ T5910] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1761.560935][T24971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1761.575800][T24971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1761.583490][T24971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1761.610811][T24971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1761.753030][T24991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1761.776295][T24991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1761.918292][T24971] hsr_slave_0: entered promiscuous mode [ 1761.948528][T24971] hsr_slave_1: entered promiscuous mode [ 1761.973744][T24971] debugfs: 'hsr0' already exists in 'hsr' [ 1761.985200][T24971] Cannot create hsr debugfs directory [ 1762.686860][T25017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4893'. [ 1762.742265][T16610] Bluetooth: hci3: command tx timeout [ 1763.024557][ T5910] gspca_spca1528: reg_r err -71 [ 1763.030536][ T5910] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 1763.055753][ T5910] usb 4-1: USB disconnect, device number 109 [ 1763.483045][T24971] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1763.514862][T24971] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1763.573297][T24971] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1763.770134][T24971] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1764.028436][ T5910] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1764.278521][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 1764.311586][T24971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1764.364989][T24971] 8021q: adding VLAN 0 to HW filter on device team0 [ 1764.404686][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.411894][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1764.692733][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1764.803448][ T5910] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1764.813882][T16610] Bluetooth: hci3: command tx timeout [ 1764.829135][T16276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.836372][T16276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.847149][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.866006][ T5910] usb 4-1: config 0 descriptor?? [ 1765.262478][T24971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1765.326123][T25041] openvswitch: netlink: Message has 251 unknown bytes. [ 1765.559830][ T5910] usbhid 4-1:0.0: can't add hid device: -71 [ 1765.593595][ T5910] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1765.716727][ T5910] usb 4-1: USB disconnect, device number 110 [ 1765.822336][T25049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4898'. [ 1765.880715][T24971] veth0_vlan: entered promiscuous mode [ 1765.960525][T24971] veth1_vlan: entered promiscuous mode [ 1766.089938][T24971] veth0_macvtap: entered promiscuous mode [ 1766.121858][T24971] veth1_macvtap: entered promiscuous mode [ 1766.222750][T24971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1766.285342][T24971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1766.472729][ T2925] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.513668][ T2925] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.720857][ T2925] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.763019][ T2925] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1766.898472][T16610] Bluetooth: hci3: command tx timeout [ 1767.134501][T25069] sit1: entered allmulticast mode [ 1767.830212][T25075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1767.921721][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1767.937720][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1768.131323][T16273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.144208][T16273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.377879][ T10] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1769.600953][T25091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 1769.649368][T25091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 1769.676589][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1769.776077][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1769.795491][ T10] usb 4-1: can't read configurations, error -71 [ 1769.904172][T25105] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4904'. [ 1770.608695][T25115] veth1_to_bond: entered allmulticast mode [ 1770.627729][T25115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4910'. [ 1770.893766][T25120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4912'. [ 1772.267896][T21265] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1772.457626][T21265] usb 7-1: Using ep0 maxpacket: 16 [ 1772.523937][T21265] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1772.609068][T21265] usb 7-1: config 0 has no interface number 0 [ 1772.638111][T21265] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.782318][T21265] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.813237][T25141] fuse: Bad value for 'fd' [ 1772.860536][T21265] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1772.923443][T21265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.019926][T21265] usb 7-1: config 0 descriptor?? [ 1773.494162][T21265] usbhid 7-1:0.1: can't add hid device: -71 [ 1773.516588][T21265] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1773.607104][T21265] usb 7-1: USB disconnect, device number 2 [ 1773.644097][T25149] loop2: detected capacity change from 0 to 7 [ 1773.820019][T25149] loop2: [ 1773.823046][T25149] loop2: partition table partially beyond EOD, truncated [ 1775.753599][T25114] veth1_to_bond: left allmulticast mode [ 1777.364930][T25214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4925'. [ 1777.482530][T25213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4930'. [ 1779.885853][T25240] fuse: Invalid rootmode [ 1780.186940][T21265] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1780.367870][T21265] usb 4-1: Using ep0 maxpacket: 16 [ 1780.396774][T21265] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1780.422840][T21265] usb 4-1: config 6 has an invalid interface number: 46 but max is 0 [ 1780.477619][T21265] usb 4-1: config 6 has an invalid interface association descriptor of length 5, skipping [ 1780.544677][T25253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4938'. [ 1780.676343][T21265] usb 4-1: config 6 has an invalid descriptor of length 13, skipping remainder of the config [ 1780.737224][T21265] usb 4-1: config 6 has no interface number 0 [ 1780.758339][T21265] usb 4-1: config 6 interface 46 altsetting 99 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1780.817564][T21265] usb 4-1: config 6 interface 46 has no altsetting 0 [ 1780.858889][T21265] usb 4-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=e0.c5 [ 1780.896960][T21265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.943761][T21265] usb 4-1: Product: syz [ 1780.963498][T21265] usb 4-1: Manufacturer: syz [ 1780.990268][T21265] usb 4-1: SerialNumber: syz [ 1781.236006][T25240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1781.361736][T25240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.501799][T21265] usb 4-1: USB disconnect, device number 113 [ 1783.248144][T25272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4942'. [ 1784.048857][T25282] fuse: Bad value for 'fd' [ 1784.770963][T25295] fuse: Bad value for 'fd' [ 1785.185754][T25297] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4945'. [ 1785.527133][ T10] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1785.747188][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1785.769987][ T10] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1785.826890][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.857143][ T10] usb 4-1: Product: syz [ 1785.861482][ T10] usb 4-1: Manufacturer: syz [ 1785.888623][ T10] usb 4-1: SerialNumber: syz [ 1785.925567][ T10] usb 4-1: config 0 descriptor?? [ 1785.951581][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 1786.398235][ T10] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1786.429264][ T10] se401 4-1:0.0: probe with driver se401 failed with error -71 [ 1786.557149][ T10] usb 4-1: USB disconnect, device number 114 [ 1786.675585][T25303] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.683673][T25303] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.744416][T25303] bridge0: entered allmulticast mode [ 1786.824323][T25308] bridge_slave_1: left allmulticast mode [ 1786.893068][T25308] bridge_slave_1: left promiscuous mode [ 1786.935319][T25308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.072528][T25308] bridge_slave_0: left allmulticast mode [ 1787.079146][T25308] bridge_slave_0: left promiscuous mode [ 1787.141054][T25308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.199990][T25333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4956'. [ 1788.447623][T25333] bond1: option lacp_active: invalid value (5) [ 1788.485117][T25333] bond1 (unregistering): Released all slaves [ 1788.970986][T25338] kAFS: unable to lookup cell '(,' [ 1788.998023][T25338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4958'. [ 1790.034513][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4961'. [ 1790.139072][T25355] openvswitch: netlink: Actions may not be safe on all matching packets [ 1790.214718][T25341] tmpfs: Unknown parameter 'rootmode' [ 1793.068583][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4968'. [ 1793.391009][T25381] bond4: option lacp_active: invalid value (5) [ 1793.477808][T25381] bond4 (unregistering): Released all slaves [ 1795.165282][T25407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.287403][T25407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.407650][T21265] usb 4-1: new low-speed USB device number 115 using dummy_hcd [ 1795.597705][T21265] usb 4-1: Invalid ep0 maxpacket: 32 [ 1795.747916][T21265] usb 4-1: new low-speed USB device number 116 using dummy_hcd [ 1795.937765][T21265] usb 4-1: Invalid ep0 maxpacket: 32 [ 1795.943835][T21265] usb usb4-port1: attempt power cycle [ 1796.376009][T25432] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4979'. [ 1796.428244][T25433] fuse: Bad value for 'fd' [ 1796.448608][T21265] usb 4-1: new low-speed USB device number 117 using dummy_hcd [ 1796.479251][T21265] usb 4-1: Invalid ep0 maxpacket: 32 [ 1796.707777][T21265] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 1796.749702][T21265] usb 4-1: Invalid ep0 maxpacket: 32 [ 1796.774788][T21265] usb usb4-port1: unable to enumerate USB device [ 1796.892958][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.917081][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.652088][T25450] kvm: user requested TSC rate below hardware speed [ 1798.947433][T18685] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1799.142322][ T5910] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1799.157936][T18685] usb 4-1: Using ep0 maxpacket: 8 [ 1799.169224][T18685] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1799.180685][T18685] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1799.205638][T18685] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1799.216159][T18685] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1799.296204][T18685] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1799.357419][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 1799.458677][ T5910] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1799.468431][T18685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.482515][ T5910] usb 6-1: config 0 has no interface number 0 [ 1799.532541][ T5910] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1799.572489][ T5910] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1799.582369][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.600927][ T5910] usb 6-1: Product: syz [ 1799.605386][ T5910] usb 6-1: Manufacturer: syz [ 1799.613344][ T5910] usb 6-1: SerialNumber: syz [ 1799.636769][ T5910] usb 6-1: config 0 descriptor?? [ 1799.652580][T25455] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1799.767571][T18685] usb 4-1: GET_CAPABILITIES returned 0 [ 1799.777566][T18685] usbtmc 4-1:16.0: can't read capabilities [ 1799.868139][T25455] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1799.904467][ T5910] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1799.988537][T25450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.998535][T25450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.011693][ T5910] usb 6-1: USB disconnect, device number 2 [ 1800.597727][ T5910] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1800.826124][ T5910] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1800.835996][ T5910] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1800.851146][ T5910] usb 6-1: can't read configurations, error -71 [ 1801.460964][T25483] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4994'. [ 1802.194301][ T5910] usb 4-1: USB disconnect, device number 119 [ 1802.234440][T25491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4995'. [ 1803.028582][ T30] audit: type=1326 audit(1769770782.854:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe24f9aeb9 code=0x7ffc0000 [ 1803.221003][ T30] audit: type=1326 audit(1769770782.854:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe24f9aeb9 code=0x7ffc0000 [ 1803.286268][T25511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5000'. [ 1803.819426][ T30] audit: type=1326 audit(1769770782.884:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fbe24f9aeb9 code=0x7ffc0000 [ 1803.886290][ T30] audit: type=1326 audit(1769770782.884:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe24f9aeb9 code=0x7ffc0000 [ 1803.909149][ T30] audit: type=1326 audit(1769770782.884:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe24f9aeb9 code=0x7ffc0000 [ 1804.086199][ T30] audit: type=1326 audit(1769770782.884:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe24f9aeb9 code=0x7ffc0000 [ 1804.196023][ T30] audit: type=1326 audit(1769770783.004:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe24f9aeb9 code=0x7ffc0000 [ 1804.317097][ T30] audit: type=1326 audit(1769770783.044:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe24f9aeb9 code=0x7ffc0000 [ 1804.414265][ T30] audit: type=1326 audit(1769770783.044:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe24f9aeb9 code=0x7ffc0000 [ 1804.511494][ T30] audit: type=1326 audit(1769770783.044:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.5.4995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe24f9aeb9 code=0x7ffc0000 [ 1805.125799][T25528] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4999'. [ 1805.993886][T25540] fuse: Bad value for 'user_id' [ 1806.023520][T25540] fuse: Bad value for 'user_id' [ 1806.287071][ T5910] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1806.517362][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 1806.555862][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1806.594319][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1806.620341][ T5910] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1806.687638][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.712742][ T5910] usb 4-1: config 0 descriptor?? [ 1806.869826][T25554] xt_hashlimit: max too large, truncated to 1048576 [ 1807.212056][ T5910] ft260 0003:0403:6030.0030: item fetching failed at offset 0/2 [ 1807.241676][ T5910] ft260 0003:0403:6030.0030: failed to parse HID [ 1807.297611][ T5910] ft260 0003:0403:6030.0030: probe with driver ft260 failed with error -22 [ 1807.447751][ T5919] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1807.661444][T21265] usb 4-1: USB disconnect, device number 120 [ 1807.689496][ T5919] usb 6-1: device descriptor read/64, error -71 [ 1807.957907][ T5919] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1808.257537][ T5919] usb 6-1: device descriptor read/64, error -71 [ 1808.479786][ T5919] usb usb6-port1: attempt power cycle [ 1808.955836][ T5919] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1809.025952][ T5919] usb 6-1: device descriptor read/8, error -71 [ 1809.299337][T25578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5014'. [ 1809.337177][ T5919] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1809.529423][ T5919] usb 6-1: device descriptor read/8, error -71 [ 1809.648792][ T5919] usb usb6-port1: unable to enumerate USB device [ 1810.488696][T25585] netlink: 'syz.6.5020': attribute type 49 has an invalid length. [ 1812.535133][T25609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5026'. [ 1816.369304][T25628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5031'. [ 1818.498776][ T10] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1818.514840][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1818.552624][ T5910] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 1818.647265][ T10] usb 4-1: device descriptor read/64, error -32 [ 1818.653749][T18685] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1818.739721][ T5910] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1818.748341][ T5910] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1818.790656][ T5910] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1818.805615][ T5910] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1818.822078][ T5910] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1818.837712][T18685] usb 6-1: Using ep0 maxpacket: 8 [ 1818.846179][ T5910] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1818.855688][ T5910] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1818.867789][T18685] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 1818.876083][T18685] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.896397][T18685] usb 6-1: config 6 has no interface number 0 [ 1818.902833][ T5910] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1818.915730][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1818.925732][T18685] usb 6-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 1818.939314][ T5910] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1818.950600][T18685] usb 6-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1818.966608][ T5910] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1818.980059][T18685] usb 6-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1818.994514][ T5910] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1819.008684][ T5910] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1819.022082][ T5910] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1819.036246][T18685] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1819.050293][T18685] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.058961][ T5910] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1819.072452][T18685] usb 6-1: Product: syz [ 1819.077326][T18685] usb 6-1: Manufacturer: syz [ 1819.082035][ T5910] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1819.093340][T18685] usb 6-1: SerialNumber: syz [ 1819.100616][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1819.118744][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.133235][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1819.143962][ T5910] usb 7-1: string descriptor 0 read error: -22 [ 1819.150334][ T5910] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1819.161314][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.169682][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.226284][ T5910] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1819.236677][T18685] hso 6-1:6.2: Failed to find INT IN ep [ 1819.251820][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1819.281454][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1819.297932][ T10] usb 4-1: Product: syz [ 1819.302148][ T10] usb 4-1: Manufacturer: syz [ 1819.346877][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1819.352672][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1819.363168][ T10] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1819.372088][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 1819.411781][ T10] usb 7-1: USB disconnect, device number 3 [ 1819.504684][T25654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5035'. [ 1819.809258][T25636] ptrace attach of "./syz-executor exec"[16618] was attempted by "./syz-executor exec"[25636] [ 1819.856630][ T5919] usb 4-1: USB disconnect, device number 122 [ 1820.134846][T25656] ip6t_rpfilter: unknown options [ 1820.597524][T25662] netlink: 'syz.6.5042': attribute type 15 has an invalid length. [ 1820.606007][T25662] IPv6: NLM_F_CREATE should be specified when creating new route [ 1820.937776][ T5910] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1821.038228][T25668] binder: 25667:25668 ioctl c0306201 0 returned -14 [ 1821.127063][ T5910] usb 7-1: Using ep0 maxpacket: 32 [ 1821.152830][ T5910] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1821.174027][ T5910] usb 7-1: config 0 has no interface number 0 [ 1821.211710][ T5910] usb 7-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1821.307309][ T10] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1821.326420][ T5910] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1821.362079][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.371577][T14036] usb 6-1: USB disconnect, device number 9 [ 1821.545296][ T5910] usb 7-1: Product: syz [ 1821.664105][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1821.757739][ T5910] usb 7-1: Manufacturer: syz [ 1821.762405][ T5910] usb 7-1: SerialNumber: syz [ 1821.979699][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1822.023545][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.036634][ T5910] usb 7-1: config 0 descriptor?? [ 1822.073556][ T5910] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1822.091184][ T10] usb 4-1: config 0 descriptor?? [ 1822.133594][ T10] pwc: Logitech QuickCam Zoom USB webcam detected. [ 1822.271461][T25662] netlink: 'syz.6.5042': attribute type 1 has an invalid length. [ 1822.300161][ T10] pwc: Warning: more than 1 configuration available. [ 1822.329093][ T10] pwc: Failed to set LED on/off time (-71) [ 1822.336506][ T10] pwc: send_video_command error -71 [ 1822.354844][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1822.363947][ T10] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1822.419637][ T10] usb 4-1: USB disconnect, device number 123 [ 1822.854739][T25682] bridge0: port 3(erspan0) entered blocking state [ 1822.877566][T25682] bridge0: port 3(erspan0) entered disabled state [ 1822.886665][T25682] erspan0: entered allmulticast mode [ 1822.903026][T25682] erspan0: entered promiscuous mode [ 1822.925554][T25685] erspan0: left allmulticast mode [ 1822.931545][T25685] erspan0: left promiscuous mode [ 1822.980768][T25685] bridge0: port 3(erspan0) entered disabled state [ 1823.137611][T25683] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5048'. [ 1823.517132][ T10] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1823.907100][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1823.937861][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1823.969954][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.036614][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1824.271899][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1824.345137][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.396786][ T10] usb 4-1: config 0 descriptor?? [ 1824.850644][ T5910] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1824.883471][ T5910] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 1824.914537][ T10] apple 0003:05AC:027A.0031: hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.3-1/input0 [ 1824.942393][ T5910] usb 7-1: USB disconnect, device number 4 [ 1825.056492][T25687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.073978][T25687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.477073][ T5910] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1825.647119][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 1825.656863][ T5910] usb 7-1: config 0 has no interfaces? [ 1825.666388][ T5910] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1825.678658][ T5910] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1825.697869][ T5910] usb 7-1: Manufacturer: syz [ 1825.717537][ T5910] usb 7-1: config 0 descriptor?? [ 1826.023065][ T5910] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1826.187284][ T5910] usb 6-1: device descriptor read/64, error -71 [ 1826.277666][T14036] usb 4-1: USB disconnect, device number 124 [ 1826.472762][ T5910] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1826.697135][ T5910] usb 6-1: device descriptor read/64, error -71 [ 1826.827559][ T5910] usb usb6-port1: attempt power cycle [ 1827.307132][ T5910] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1827.359627][ T5910] usb 6-1: device descriptor read/8, error -71 [ 1827.744123][T25725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5058'. [ 1827.817184][ T5910] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1827.920094][ T5910] usb 6-1: device descriptor read/8, error -71 [ 1828.187528][ T5910] usb usb6-port1: unable to enumerate USB device [ 1828.212146][ T5910] usb 7-1: USB disconnect, device number 5 [ 1828.431135][T25741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5063'. [ 1828.506800][T25739] kvm: pic: non byte read [ 1828.511765][T25739] kvm: pic: non byte read [ 1828.517882][T25739] kvm: pic: non byte read [ 1828.725045][T25739] kvm: pic: non byte read [ 1828.735775][T25739] kvm: pic: non byte read [ 1828.847667][T25739] kvm: pic: non byte read [ 1828.945952][T25739] kvm: pic: non byte read [ 1828.986754][T25739] kvm: pic: non byte read [ 1829.018621][T25747] loop2: detected capacity change from 0 to 7 [ 1829.026085][T25747] Dev loop2: unable to read RDB block 7 [ 1829.034193][T25747] loop2: AHDI p1 p2 p3 [ 1829.046700][T25746] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1829.049229][T25739] kvm: pic: non byte read [ 1829.079417][T25747] loop2: partition table partially beyond EOD, truncated [ 1829.111341][T25739] kvm: pic: non byte read [ 1829.171417][T25747] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1829.199293][T25747] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1829.665004][T25752] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5066'. [ 1830.065587][T25760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5067'. [ 1830.337501][T21265] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1830.679255][T21265] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1830.699284][T21265] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1830.737524][T21265] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1830.805680][T21265] usb 7-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.00 [ 1830.917591][T21265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.107801][T21265] usb 7-1: config 0 descriptor?? [ 1831.147605][ T5886] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1831.156446][T25760] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1831.302549][T25768] FAULT_INJECTION: forcing a failure. [ 1831.302549][T25768] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.376468][T25768] CPU: 0 UID: 0 PID: 25768 Comm: syz.4.5070 Tainted: G L syzkaller #0 PREEMPT(full) [ 1831.376503][T25768] Tainted: [L]=SOFTLOCKUP [ 1831.376511][T25768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1831.376525][T25768] Call Trace: [ 1831.376535][T25768] [ 1831.376545][T25768] dump_stack_lvl+0xe8/0x150 [ 1831.376579][T25768] should_fail_ex+0x412/0x560 [ 1831.376612][T25768] should_failslab+0xa8/0x100 [ 1831.376637][T25768] __kmalloc_cache_noprof+0x83/0x6e0 [ 1831.376658][T25768] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1831.376682][T25768] ? sctp_add_bind_addr+0x8c/0x370 [ 1831.376709][T25768] sctp_add_bind_addr+0x8c/0x370 [ 1831.376736][T25768] sctp_copy_local_addr_list+0x314/0x4f0 [ 1831.376760][T25768] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1831.376780][T25768] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1831.376804][T25768] ? sctp_v6_is_any+0x64/0x80 [ 1831.376840][T25768] ? sctp_copy_one_addr+0x93/0x360 [ 1831.376864][T25768] sctp_bind_addr_copy+0xb3/0x3c0 [ 1831.376887][T25768] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1831.376922][T25768] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1831.376962][T25768] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1831.376994][T25768] ? __local_bh_enable_ip+0xd0/0x130 [ 1831.377011][T25768] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1831.377034][T25768] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1831.377058][T25768] sctp_sendmsg+0x1528/0x2c10 [ 1831.377115][T25768] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1831.377138][T25768] ? aa_sk_perm+0x15a/0x960 [ 1831.377164][T25768] ? aa_sk_perm+0x82d/0x960 [ 1831.377195][T25768] ? __pfx_aa_sk_perm+0x10/0x10 [ 1831.377221][T25768] ? sock_rps_record_flow+0x19/0x400 [ 1831.377253][T25768] ? inet_sendmsg+0x2f4/0x370 [ 1831.377285][T25768] ____sys_sendmsg+0x894/0xad0 [ 1831.377329][T25768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1831.377366][T25768] ? import_iovec+0x73/0xa0 [ 1831.377400][T25768] ___sys_sendmsg+0x2a5/0x360 [ 1831.377426][T25768] ? __lock_acquire+0x6b5/0x2cf0 [ 1831.377459][T25768] ? __pfx____sys_sendmsg+0x10/0x10 [ 1831.377492][T25768] ? kstrtouint+0x6e/0xe0 [ 1831.377544][T25768] ? __fget_files+0x2a/0x420 [ 1831.377565][T25768] ? __fget_files+0x3a0/0x420 [ 1831.377599][T25768] __sys_sendmmsg+0x27c/0x4e0 [ 1831.377631][T25768] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1831.377657][T25768] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1831.377708][T25768] ? ksys_write+0x242/0x270 [ 1831.377741][T25768] ? __pfx_ksys_write+0x10/0x10 [ 1831.377778][T25768] __x64_sys_sendmmsg+0xa0/0xc0 [ 1831.377809][T25768] do_syscall_64+0xe2/0xf80 [ 1831.377831][T25768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.377851][T25768] ? trace_irq_disable+0x37/0x100 [ 1831.377870][T25768] ? clear_bhb_loop+0x60/0xb0 [ 1831.377895][T25768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.377915][T25768] RIP: 0033:0x7f82ff59aeb9 [ 1831.377935][T25768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.377952][T25768] RSP: 002b:00007f83003a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1831.377975][T25768] RAX: ffffffffffffffda RBX: 00007f82ff815fa0 RCX: 00007f82ff59aeb9 [ 1831.377990][T25768] RDX: 0000000000000002 RSI: 0000200000003440 RDI: 0000000000000003 [ 1831.378004][T25768] RBP: 00007f83003a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.378017][T25768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1831.378030][T25768] R13: 00007f82ff816038 R14: 00007f82ff815fa0 R15: 00007f82ff93fa48 [ 1831.378064][T25768] [ 1831.897534][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 1831.931240][ T5886] usb 4-1: too many configurations: 195, using maximum allowed: 8 [ 1831.969443][T21265] wacom 0003:056A:00DE.0032: Unknown device_type for 'HID 056a:00de'. Assuming pen. [ 1832.028804][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1832.036423][ T5886] usb 4-1: can't read configurations, error -61 [ 1832.068379][T21265] wacom 0003:056A:00DE.0032: hidraw0: USB HID v0.00 Device [HID 056a:00de] on usb-dummy_hcd.6-1/input0 [ 1832.189081][T21265] input: Wacom Bamboo 16FG 4x5 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00DE.0032/input/input71 [ 1832.267380][ T5886] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1832.559850][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 1832.625025][ T5886] usb 4-1: too many configurations: 195, using maximum allowed: 8 [ 1832.653792][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1832.668008][ T5886] usb 4-1: can't read configurations, error -61 [ 1832.699778][ T5886] usb usb4-port1: attempt power cycle [ 1833.117819][ T5886] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1833.199046][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 1833.216039][ T5886] usb 4-1: too many configurations: 195, using maximum allowed: 8 [ 1833.294745][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1833.440528][ T5886] usb 4-1: can't read configurations, error -61 [ 1833.537396][ T10] usb 7-1: reset full-speed USB device number 6 using dummy_hcd [ 1833.617685][ T5886] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1833.680650][ T5886] usb 4-1: Using ep0 maxpacket: 16 [ 1833.696675][ T5886] usb 4-1: too many configurations: 195, using maximum allowed: 8 [ 1833.722857][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1833.731960][ T5886] usb 4-1: can't read configurations, error -61 [ 1833.745885][ T5886] usb usb4-port1: unable to enumerate USB device [ 1834.624547][T25798] program syz.6.5078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1834.930245][T18685] usb 7-1: USB disconnect, device number 6 [ 1837.783182][T25829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5086'. [ 1839.093522][T25838] fuse: Unknown parameter 'fd0x0000000000000003' [ 1839.435080][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1839.702391][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1839.717085][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1839.728888][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1839.751617][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1839.762528][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.793959][ T10] usb 4-1: Product: syz [ 1839.798834][ T10] usb 4-1: Manufacturer: syz [ 1839.805990][ T10] usb 4-1: SerialNumber: syz [ 1840.025913][ T10] usb 4-1: config 0 descriptor?? [ 1840.111378][T25840] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1840.536256][T25840] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1842.223477][ T10] usb 4-1: USB disconnect, device number 3 [ 1842.876598][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1842.876617][ T30] audit: type=1326 audit(1769770822.694:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25851 comm="syz.3.5094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cfaf9aeb9 code=0x0 [ 1843.167765][T25855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5095'. [ 1845.082124][T25865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5098'. [ 1845.101570][T25865] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5098'. [ 1845.114263][T25866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5099'. [ 1845.142174][T25867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5097'. [ 1845.250531][T25866] bond1: option lacp_active: invalid value (5) [ 1845.270629][T25866] bond1 (unregistering): Released all slaves [ 1845.706878][T25881] fuse: Unknown parameter 'fd0x0000000000000003' [ 1846.541423][T25885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5103'. [ 1846.683323][T25889] netlink: 'syz.0.5104': attribute type 4 has an invalid length. [ 1847.330445][T25894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5106'. [ 1848.779291][T25914] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1848.817283][ T10] IPVS: starting estimator thread 0... [ 1848.827781][T25918] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1848.917902][T25917] IPVS: using max 42 ests per chain, 100800 per kthread [ 1849.516638][T25923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5115'. [ 1850.122369][T25926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5117'. [ 1850.285399][T25930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5119'. [ 1850.737792][T25943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5122'. [ 1850.746913][ T5919] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1850.930829][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1850.963508][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1851.007683][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1851.047790][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1851.094644][ T5919] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1851.130112][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.178188][ T5919] usb 6-1: config 0 descriptor?? [ 1851.776139][ T5919] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1852.115888][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5123'. [ 1852.366520][T25960] xt_policy: output policy not valid in PREROUTING and INPUT [ 1852.432419][T25961] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5120'. [ 1852.730171][T25957] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5124'. [ 1853.567710][ T5919] usb 6-1: reset high-speed USB device number 14 using dummy_hcd [ 1855.498886][T21265] usb 6-1: USB disconnect, device number 14 [ 1856.042480][T25989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5132'. [ 1856.701022][T26000] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5135'. [ 1856.742695][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1856.911643][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 1856.923641][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 1857.048103][T24924] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1857.069958][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1857.098927][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1857.108245][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.116285][ T10] usb 4-1: Product: syz [ 1857.121416][ T10] usb 4-1: Manufacturer: syz [ 1857.126018][ T10] usb 4-1: SerialNumber: syz [ 1857.133542][ T10] usb 4-1: config 0 descriptor?? [ 1857.144843][T25998] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1857.241646][T24924] usb 7-1: config 1 has an invalid interface number: 63 but max is 0 [ 1857.250276][T24924] usb 7-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 1857.262540][T24924] usb 7-1: config 1 has no interface number 0 [ 1857.468886][T24924] usb 7-1: config 1 interface 63 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1857.500838][T24924] usb 7-1: config 1 interface 63 has no altsetting 0 [ 1857.512436][T25998] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1857.576751][T26005] random: crng reseeded on system resumption [ 1857.605872][T24924] usb 7-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=90.56 [ 1857.625967][T24924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.651668][T24924] usb 7-1: Product: syz [ 1857.655938][T24924] usb 7-1: Manufacturer: syz [ 1857.660730][T24924] usb 7-1: SerialNumber: syz [ 1858.359519][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.366040][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.293686][T26005] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5136'. [ 1859.753390][T24924] ems_usb 7-1:1.63 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 1859.771412][T24924] ems_usb 7-1:1.63: probe with driver ems_usb failed with error -22 [ 1859.971421][T24924] usb 7-1: USB disconnect, device number 7 [ 1860.887263][T24924] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1861.405075][ T10] usb 4-1: USB disconnect, device number 4 [ 1861.496603][T24924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.516704][T24924] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1861.541669][T24924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.611634][T24924] usb 6-1: config 0 descriptor?? [ 1861.708079][T24924] pwc: Askey VC010 type 2 USB webcam detected. [ 1861.717738][T26028] IPVS: length: 153 != 24 [ 1861.949354][T26030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5143'. [ 1862.026910][T24924] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1862.042135][T24924] pwc: recv_control_msg error -32 req 02 val 2700 [ 1862.061589][T24924] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1862.102504][T24924] pwc: recv_control_msg error -32 req 04 val 1000 [ 1862.122656][T24924] pwc: recv_control_msg error -32 req 04 val 1300 [ 1862.144833][T24924] pwc: recv_control_msg error -32 req 04 val 1400 [ 1862.163861][T26018] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5140'. [ 1862.177363][T24924] pwc: recv_control_msg error -32 req 02 val 2000 [ 1862.197955][T24924] pwc: recv_control_msg error -32 req 02 val 2100 [ 1862.232558][T24924] pwc: recv_control_msg error -32 req 04 val 1500 [ 1862.252161][T24924] pwc: recv_control_msg error -32 req 02 val 2500 [ 1862.260259][T24924] pwc: recv_control_msg error -32 req 02 val 2400 [ 1862.272051][T24924] pwc: recv_control_msg error -32 req 02 val 2600 [ 1862.283500][T24924] pwc: recv_control_msg error -32 req 02 val 2900 [ 1862.763019][T26034] xt_policy: output policy not valid in PREROUTING and INPUT [ 1862.839331][T24924] pwc: recv_control_msg error -71 req 04 val 1100 [ 1862.882554][T24924] pwc: recv_control_msg error -71 req 04 val 1200 [ 1862.908312][T24924] pwc: Registered as video103. [ 1862.922362][T24924] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input75 [ 1862.982524][T24924] usb 6-1: USB disconnect, device number 15 [ 1863.287779][T21265] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1863.471728][T21265] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1863.569596][T21265] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1863.620592][T21265] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1863.657635][T21265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.703269][T21265] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1863.721947][T21265] usb 7-1: invalid MIDI out EP 0 [ 1863.788617][T26059] FAULT_INJECTION: forcing a failure. [ 1863.788617][T26059] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.895307][T26059] CPU: 0 UID: 0 PID: 26059 Comm: syz.4.5150 Tainted: G L syzkaller #0 PREEMPT(full) [ 1863.895338][T26059] Tainted: [L]=SOFTLOCKUP [ 1863.895346][T26059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1863.895359][T26059] Call Trace: [ 1863.895367][T26059] [ 1863.895377][T26059] dump_stack_lvl+0xe8/0x150 [ 1863.895409][T26059] should_fail_ex+0x412/0x560 [ 1863.895438][T26059] should_failslab+0xa8/0x100 [ 1863.895462][T26059] __kmalloc_cache_noprof+0x83/0x6e0 [ 1863.895481][T26059] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 1863.895502][T26059] ? sctp_add_bind_addr+0x8c/0x370 [ 1863.895521][T26059] sctp_add_bind_addr+0x8c/0x370 [ 1863.895540][T26059] sctp_copy_local_addr_list+0x314/0x4f0 [ 1863.895559][T26059] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1863.895575][T26059] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1863.895593][T26059] ? sctp_v6_is_any+0x64/0x80 [ 1863.895611][T26059] ? sctp_copy_one_addr+0x93/0x360 [ 1863.895628][T26059] sctp_bind_addr_copy+0xb3/0x3c0 [ 1863.895644][T26059] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1863.895670][T26059] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1863.895699][T26059] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1863.895724][T26059] ? __local_bh_enable_ip+0xd0/0x130 [ 1863.895738][T26059] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1863.895756][T26059] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1863.895775][T26059] sctp_sendmsg+0x1528/0x2c10 [ 1863.895805][T26059] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1863.895822][T26059] ? aa_sk_perm+0x15a/0x960 [ 1863.895842][T26059] ? aa_sk_perm+0x82d/0x960 [ 1863.895864][T26059] ? __pfx_aa_sk_perm+0x10/0x10 [ 1863.895884][T26059] ? sock_rps_record_flow+0x19/0x400 [ 1863.895908][T26059] ? inet_sendmsg+0x2f4/0x370 [ 1863.895932][T26059] ____sys_sendmsg+0x894/0xad0 [ 1863.895960][T26059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1863.895987][T26059] ? import_iovec+0x73/0xa0 [ 1863.896013][T26059] ___sys_sendmsg+0x2a5/0x360 [ 1863.896033][T26059] ? __lock_acquire+0x6b5/0x2cf0 [ 1863.896058][T26059] ? __pfx____sys_sendmsg+0x10/0x10 [ 1863.896083][T26059] ? kstrtouint+0x6e/0xe0 [ 1863.896120][T26059] ? __fget_files+0x2a/0x420 [ 1863.896136][T26059] ? __fget_files+0x3a0/0x420 [ 1863.896161][T26059] __sys_sendmmsg+0x27c/0x4e0 [ 1863.896186][T26059] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1863.896205][T26059] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1863.896242][T26059] ? ksys_write+0x242/0x270 [ 1863.896266][T26059] ? __pfx_ksys_write+0x10/0x10 [ 1863.896293][T26059] __x64_sys_sendmmsg+0xa0/0xc0 [ 1863.896321][T26059] do_syscall_64+0xe2/0xf80 [ 1863.896338][T26059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.896353][T26059] ? trace_irq_disable+0x37/0x100 [ 1863.896368][T26059] ? clear_bhb_loop+0x60/0xb0 [ 1863.896387][T26059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.896402][T26059] RIP: 0033:0x7f82ff59aeb9 [ 1863.896416][T26059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.896430][T26059] RSP: 002b:00007f83003a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1863.896448][T26059] RAX: ffffffffffffffda RBX: 00007f82ff815fa0 RCX: 00007f82ff59aeb9 [ 1863.896462][T26059] RDX: 0000000000000002 RSI: 0000200000003440 RDI: 0000000000000003 [ 1863.896474][T26059] RBP: 00007f83003a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.896485][T26059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1863.896495][T26059] R13: 00007f82ff816038 R14: 00007f82ff815fa0 R15: 00007f82ff93fa48 [ 1863.896520][T26059] [ 1864.532097][T21148] udevd[21148]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1864.565384][T26046] fuse: Unknown parameter 'rootmod' [ 1864.689729][T21265] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1865.109511][T26046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5146'. [ 1865.229880][T26070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1865.388287][T26072] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5153'. [ 1865.484184][T24924] usb 7-1: USB disconnect, device number 8 [ 1865.609984][T26056] Bluetooth: hci0: command 0x0406 tx timeout [ 1867.133391][T16610] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1867.651250][T26109] xt_policy: output policy not valid in PREROUTING and INPUT [ 1867.891141][T26112] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5162'. [ 1869.213313][T26123] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5166'. [ 1871.568590][ T30] audit: type=1326 audit(1769770851.394:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.4.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ff59aeb9 code=0x7ffc0000 [ 1871.620538][ T30] audit: type=1326 audit(1769770851.394:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.4.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ff59aeb9 code=0x7ffc0000 [ 1871.663029][ T30] audit: type=1326 audit(1769770851.414:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.4.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f82ff59aeb9 code=0x7ffc0000 [ 1871.782931][ T30] audit: type=1326 audit(1769770851.414:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.4.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ff59aeb9 code=0x7ffc0000 [ 1871.891203][ T30] audit: type=1326 audit(1769770851.414:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.4.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ff59aeb9 code=0x7ffc0000 [ 1871.916319][ T30] audit: type=1326 audit(1769770851.424:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.4.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82ff55b78e code=0x7ffc0000 [ 1871.948505][ T30] audit: type=1326 audit(1769770851.424:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.4.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ff59aeb9 code=0x7ffc0000 [ 1872.003665][ T30] audit: type=1326 audit(1769770851.424:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.4.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ff59aeb9 code=0x7ffc0000 [ 1872.182293][ T30] audit: type=1326 audit(1769770851.434:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.4.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f82ff59aeb9 code=0x7ffc0000 [ 1872.257991][T26165] loop5: detected capacity change from 0 to 7 [ 1872.264336][ T30] audit: type=1326 audit(1769770851.524:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26152 comm="syz.4.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ff59aeb9 code=0x7ffc0000 [ 1872.309298][T26165] Dev loop5: unable to read RDB block 7 [ 1872.315017][T26165] loop5: AHDI p2 p3 [ 1872.329685][T26165] loop5: partition table partially beyond EOD, truncated [ 1873.073212][T26182] xt_policy: output policy not valid in PREROUTING and INPUT [ 1873.088741][T26182] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5181'. [ 1873.138265][T26185] syzkaller0: entered promiscuous mode [ 1873.144173][T26185] syzkaller0: entered allmulticast mode [ 1875.675792][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5189'. [ 1876.608475][T26226] random: crng reseeded on system resumption [ 1876.628236][T26226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5192'. [ 1877.819741][T26227] futex_wake_op: syz.4.5186 tries to shift op by 32; fix this program [ 1878.640704][ T5910] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1878.844933][T26242] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5197'. [ 1878.930401][ T5910] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1879.078918][ T5910] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1879.098076][ T5910] usb 6-1: can't read configurations, error -71 [ 1879.117458][T26250] fuse: Bad value for 'fd' [ 1879.903730][T26255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1880.072598][T26260] xt_policy: output policy not valid in PREROUTING and INPUT [ 1880.204263][T26260] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5200'. [ 1880.407318][T26264] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5198'. [ 1880.890553][T26056] Bluetooth: hci3: command 0x0406 tx timeout [ 1881.153417][T26268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5202'. [ 1883.270292][T26291] FAULT_INJECTION: forcing a failure. [ 1883.270292][T26291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1883.327705][T26291] CPU: 1 UID: 0 PID: 26291 Comm: syz.0.5211 Tainted: G L syzkaller #0 PREEMPT(full) [ 1883.327731][T26291] Tainted: [L]=SOFTLOCKUP [ 1883.327737][T26291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1883.327747][T26291] Call Trace: [ 1883.327753][T26291] [ 1883.327760][T26291] dump_stack_lvl+0xe8/0x150 [ 1883.327785][T26291] should_fail_ex+0x412/0x560 [ 1883.327806][T26291] _copy_from_user+0x2d/0xb0 [ 1883.327830][T26291] ___sys_sendmsg+0x1c6/0x360 [ 1883.327850][T26291] ? __lock_acquire+0x6b5/0x2cf0 [ 1883.327873][T26291] ? __pfx____sys_sendmsg+0x10/0x10 [ 1883.327917][T26291] ? __fget_files+0x2a/0x420 [ 1883.327932][T26291] ? __fget_files+0x3a0/0x420 [ 1883.327955][T26291] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1883.327977][T26291] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1883.328003][T26291] ? __pfx_ksys_write+0x10/0x10 [ 1883.328033][T26291] do_syscall_64+0xe2/0xf80 [ 1883.328049][T26291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.328063][T26291] ? trace_irq_disable+0x37/0x100 [ 1883.328077][T26291] ? clear_bhb_loop+0x60/0xb0 [ 1883.328101][T26291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.328116][T26291] RIP: 0033:0x7f3459b9aeb9 [ 1883.328130][T26291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1883.328142][T26291] RSP: 002b:00007f345ab3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1883.328158][T26291] RAX: ffffffffffffffda RBX: 00007f3459e15fa0 RCX: 00007f3459b9aeb9 [ 1883.328169][T26291] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1883.328179][T26291] RBP: 00007f345ab3d090 R08: 0000000000000000 R09: 0000000000000000 [ 1883.328188][T26291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1883.328197][T26291] R13: 00007f3459e16038 R14: 00007f3459e15fa0 R15: 00007f3459f3fa48 [ 1883.328220][T26291] [ 1883.862474][T26297] loop5: detected capacity change from 0 to 7 [ 1883.891887][T26297] Dev loop5: unable to read RDB block 7 [ 1883.898487][T26297] loop5: AHDI p2 p3 [ 1883.914390][T26297] loop5: partition table partially beyond EOD, truncated [ 1884.254841][T26307] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1884.272818][T26307] bond3 (unregistering): Released all slaves [ 1884.868091][T26316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5214'. [ 1885.415659][T26325] xt_policy: output policy not valid in PREROUTING and INPUT [ 1885.679765][T26325] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5217'. [ 1886.730608][T26330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5218'. [ 1886.985415][T26335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.045133][T26335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.307183][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1887.331333][T26335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.340595][T26335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.483260][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1887.491412][ T10] usb 7-1: config 0 has no interface number 0 [ 1887.528041][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.625176][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1887.680093][ T10] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1887.748262][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.821044][ T10] usb 7-1: config 0 descriptor?? [ 1888.138147][ T10] usbhid 7-1:0.1: can't add hid device: -71 [ 1888.144140][ T10] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1888.199923][ T10] usb 7-1: USB disconnect, device number 9 [ 1892.106127][T26392] loop5: detected capacity change from 0 to 7 [ 1892.174394][T26392] Dev loop5: unable to read RDB block 7 [ 1892.200633][T26392] loop5: AHDI p2 p3 [ 1892.218796][T26392] loop5: partition table partially beyond EOD, truncated [ 1893.190612][T26403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5236'. [ 1893.252056][T26403] bond1: option lacp_active: invalid value (5) [ 1893.261645][T26403] bond1 (unregistering): Released all slaves [ 1893.475601][T26407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5238'. [ 1893.657984][T26407] cifs: Unknown parameter 'fd' [ 1893.789775][T26412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5237'. [ 1894.340695][T26426] batman_adv: batadv0: Adding interface: macsec2 [ 1894.364949][T26426] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1894.557538][T26426] batman_adv: batadv0: Interface activated: macsec2 [ 1895.642257][T26434] macsec0: entered promiscuous mode [ 1895.647859][T26434] macsec0: entered allmulticast mode [ 1895.653752][T26434] veth1_macvtap: entered allmulticast mode [ 1895.983615][T26436] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5244'. [ 1896.674958][T26448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5248'. [ 1896.846562][T26448] bond3: option lacp_active: invalid value (5) [ 1896.865841][T24924] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1896.908977][T26448] bond3 (unregistering): Released all slaves [ 1897.098058][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5246'. [ 1897.139840][T26439] bond0: entered promiscuous mode [ 1897.145216][T26439] bond_slave_0: entered promiscuous mode [ 1897.155359][T26439] bond_slave_1: entered promiscuous mode [ 1897.185988][T26439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1897.212273][T26439] bond0: left promiscuous mode [ 1897.217391][T26439] bond_slave_0: left promiscuous mode [ 1897.223186][T26439] bond_slave_1: left promiscuous mode [ 1897.349510][T24924] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1897.445972][T24924] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1897.457991][T24924] usb 6-1: can't read configurations, error -71 [ 1899.144734][T24924] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1899.372717][T24924] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.397236][T24924] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1899.438480][T24924] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1899.581839][T24924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.660550][T24924] usb 7-1: config 0 descriptor?? [ 1899.793777][T24924] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1899.801415][T24924] dvb-usb: bulk message failed: -22 (3/0) [ 1899.846589][T24924] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1899.883270][T24924] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1899.897138][T24924] usb 7-1: media controller created [ 1899.914413][T24924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1899.962054][T24924] dvb-usb: bulk message failed: -22 (6/0) [ 1899.979181][T24924] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1900.000993][T26486] dvb-usb: bulk message failed: -22 (2/0) [ 1900.142439][T24924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input76 [ 1900.221952][T24924] dvb-usb: schedule remote query interval to 150 msecs. [ 1900.282238][T24924] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1900.452033][T24924] dvb-usb: bulk message failed: -22 (1/0) [ 1900.469431][T24924] dvb-usb: error while querying for an remote control event. [ 1900.677118][T24924] dvb-usb: bulk message failed: -22 (1/0) [ 1900.683263][T24924] dvb-usb: error while querying for an remote control event. [ 1900.741060][T26507] binder: 26506:26507 ioctl c0306201 2000000001c0 returned -11 [ 1900.887146][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 1900.893601][ T5910] dvb-usb: error while querying for an remote control event. [ 1900.918119][T26511] loop5: detected capacity change from 0 to 7 [ 1900.926378][T26511] Dev loop5: unable to read RDB block 7 [ 1900.933328][T26511] loop5: AHDI p2 p3 [ 1900.937920][T26511] loop5: partition table partially beyond EOD, truncated [ 1900.988661][T24924] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1901.057161][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 1901.064025][ T5910] dvb-usb: error while querying for an remote control event. [ 1901.147272][T24924] usb 4-1: Using ep0 maxpacket: 16 [ 1901.156646][T24924] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1901.167104][T24924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.179700][T24924] usb 4-1: Product: syz [ 1901.186431][T24924] usb 4-1: Manufacturer: syz [ 1901.193083][T24924] usb 4-1: SerialNumber: syz [ 1901.218444][T24924] usb 4-1: config 0 descriptor?? [ 1901.267057][T24924] dvb-usb: bulk message failed: -22 (1/0) [ 1901.276047][T24924] dvb-usb: error while querying for an remote control event. [ 1901.436409][T24924] usb 4-1: USB disconnect, device number 5 [ 1901.463349][ T5910] dvb-usb: bulk message failed: -22 (1/0) [ 1901.469335][ T5910] dvb-usb: error while querying for an remote control event. [ 1901.647760][T24924] dvb-usb: bulk message failed: -22 (1/0) [ 1901.659974][T24924] dvb-usb: error while querying for an remote control event. [ 1901.849518][T24924] dvb-usb: bulk message failed: -22 (1/0) [ 1901.855366][T24924] dvb-usb: error while querying for an remote control event. [ 1902.047177][T24924] dvb-usb: bulk message failed: -22 (1/0) [ 1902.063601][T24924] dvb-usb: error while querying for an remote control event. [ 1902.164362][T24924] usb 7-1: USB disconnect, device number 10 [ 1902.283106][T24924] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1902.470449][T26535] 0: reclassify loop, rule prio 0, protocol 700 [ 1905.058892][ T31] INFO: task syz.2.4855:24804 blocked for more than 143 seconds. [ 1905.066685][ T31] Tainted: G L syzkaller #0 [ 1905.083977][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1905.139444][ T31] task:syz.2.4855 state:D stack:26752 pid:24804 tgid:24791 ppid:17916 task_flags:0x400040 flags:0x00080002 [ 1905.205307][ T31] Call Trace: [ 1905.223385][ T31] [ 1905.230263][ T31] __schedule+0x14ea/0x5050 [ 1905.249529][ T31] ? __pfx___schedule+0x10/0x10 [ 1905.265530][ T31] ? schedule+0x90/0x360 [ 1905.286742][ T31] schedule+0x164/0x360 [ 1905.306350][ T31] schedule_preempt_disabled+0x13/0x30 [ 1905.339075][ T31] __mutex_lock+0x7fe/0x1300 [ 1905.353346][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1905.374139][ T31] ? usbdev_open+0x182/0x770 [ 1905.405656][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1905.434132][ T31] ? bus_find_device+0x27d/0x2d0 [ 1905.471693][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1905.497644][ T31] ? __pfx_kobject_get_unless_zero+0x10/0x10 [ 1905.522704][ T31] ? usbdev_open+0xa7/0x770 [ 1905.543715][ T31] usbdev_open+0x182/0x770 [ 1905.575558][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1905.600837][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1905.633661][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1905.669823][ T31] chrdev_open+0x4cd/0x5e0 [ 1905.674313][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1905.717517][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1905.741676][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1905.756745][ T31] do_dentry_open+0x7ce/0x1420 [ 1905.775573][ T31] vfs_open+0x3b/0x340 [ 1905.795008][ T31] ? path_openat+0x346e/0x3e20 [ 1905.817611][ T31] path_openat+0x3486/0x3e20 [ 1905.822347][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 1905.877623][ T31] ? getname_flags+0xb7/0x540 [ 1905.893598][ T31] ? __pfx_path_openat+0x10/0x10 [ 1905.913384][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1905.936511][ T31] do_filp_open+0x22d/0x490 [ 1905.955859][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1905.981464][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1906.001084][ T31] ? alloc_fd+0x64b/0x6c0 [ 1906.020727][ T31] do_sys_openat2+0x12f/0x220 [ 1906.036797][ T31] ? __se_sys_futex+0x3a8/0x450 [ 1906.055091][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1906.075625][ T31] ? rcu_is_watching+0x15/0xb0 [ 1906.096330][ T31] __x64_sys_openat+0x138/0x170 [ 1906.115324][ T31] do_syscall_64+0xe2/0xf80 [ 1906.136677][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.165272][ T31] ? trace_irq_disable+0x37/0x100 [ 1906.186305][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1906.203365][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1906.223478][ T31] RIP: 0033:0x7f870d55b78e [ 1906.240719][ T31] RSP: 002b:00007f870b7d4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1906.271005][ T31] RAX: ffffffffffffffda RBX: 00007f870b7d56c0 RCX: 00007f870d55b78e [ 1906.329686][ T31] RDX: 0000000000020000 RSI: 00007f870b7d4c00 RDI: ffffffffffffff9c [ 1906.359651][ T31] RBP: 00007f870b7d4c00 R08: 0000000000000000 R09: 0000000000000000 [ 1906.388379][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1906.428648][ T31] R13: 00007f870d816218 R14: 00007f870d816180 R15: 00007f870d93fa48 [ 1906.459109][ T31] [ 1906.475740][ T31] [ 1906.475740][ T31] Showing all locks held in the system: [ 1906.514744][ T31] 1 lock held by khungtaskd/31: [ 1906.537590][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1906.568159][ T31] 5 locks held by kworker/1:1/43: [ 1906.595040][ T31] 2 locks held by getty/5583: [ 1906.610043][ T31] #0: ffff88814d31a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1906.654752][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1906.702779][ T31] 1 lock held by syz.2.4855/24804: [ 1906.725874][ T31] #0: ffff8881437eb198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 1906.759151][ T31] [ 1906.767958][ T31] ============================================= [ 1906.767958][ T31] [ 1906.796808][ T31] NMI backtrace for cpu 1 [ 1906.796833][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1906.796862][ T31] Tainted: [L]=SOFTLOCKUP [ 1906.796869][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1906.796881][ T31] Call Trace: [ 1906.796890][ T31] [ 1906.796899][ T31] dump_stack_lvl+0xe8/0x150 [ 1906.796936][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1906.796965][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1906.796997][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1906.797027][ T31] sys_info+0x135/0x170 [ 1906.797050][ T31] watchdog+0xf90/0xfe0 [ 1906.797076][ T31] ? watchdog+0x209/0xfe0 [ 1906.797105][ T31] kthread+0x726/0x8b0 [ 1906.797132][ T31] ? __pfx_watchdog+0x10/0x10 [ 1906.797153][ T31] ? __pfx_kthread+0x10/0x10 [ 1906.797180][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1906.797211][ T31] ? __pfx_kthread+0x10/0x10 [ 1906.797235][ T31] ret_from_fork+0x51b/0xa40 [ 1906.797269][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1906.797298][ T31] ? __switch_to+0xc82/0x1410 [ 1906.797329][ T31] ? __pfx_kthread+0x10/0x10 [ 1906.797353][ T31] ret_from_fork_asm+0x1a/0x30 [ 1906.797397][ T31] [ 1906.917858][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1906.923139][ C0] NMI backtrace for cpu 0 [ 1906.923159][ C0] CPU: 0 UID: 0 PID: 5176 Comm: syslogd Tainted: G L syzkaller #0 PREEMPT(full) [ 1906.923184][ C0] Tainted: [L]=SOFTLOCKUP [ 1906.923191][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1906.923202][ C0] RIP: 0033:0x7f98066766b0 [ 1906.923220][ C0] Code: 48 83 c4 10 5b 5d 41 5c c3 90 e8 db e4 00 00 e9 31 ff ff ff b8 ff ff ff ff c3 48 89 c5 e9 06 ff fa ff 0f 1f 84 00 00 00 00 00 <53> 48 89 f0 66 48 0f 6e c7 48 89 d6 48 89 ca 44 89 c1 66 0f 6c c0 [ 1906.923236][ C0] RSP: 002b:00007ffffd40cdb8 EFLAGS: 00000246 [ 1906.923253][ C0] RAX: 00007ffffd40cde0 RBX: 0000556f84acc910 RCX: 00007ffffd40cdc8 [ 1906.923266][ C0] RDX: 00007f980687e0f0 RSI: ffffffffffffffff RDI: 0000556f84accc50 [ 1906.923279][ C0] RBP: 00007ffffd40cfb0 R08: 0000000000000000 R09: 0000556f84acca60 [ 1906.923292][ C0] R10: 0000000000000000 R11: 00007f98067758e0 R12: 0000556f84acca50 [ 1906.923304][ C0] R13: 0000000000000004 R14: 0000556f84acca60 R15: 0000556f5fc1ad98 [ 1906.923316][ C0] FS: 00007f9806534c80 GS: 0000000000000000 [ 1907.343298][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1907.350217][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1907.360944][ T31] Tainted: [L]=SOFTLOCKUP [ 1907.365301][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1907.375400][ T31] Call Trace: [ 1907.378708][ T31] [ 1907.381712][ T31] vpanic+0x1e0/0x670 [ 1907.385746][ T31] panic+0xc5/0xd0 [ 1907.389516][ T31] ? __pfx_panic+0x10/0x10 [ 1907.393981][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1907.399406][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1907.405634][ T31] watchdog+0xfda/0xfe0 [ 1907.409829][ T31] ? watchdog+0x209/0xfe0 [ 1907.414207][ T31] kthread+0x726/0x8b0 [ 1907.418316][ T31] ? __pfx_watchdog+0x10/0x10 [ 1907.423023][ T31] ? __pfx_kthread+0x10/0x10 [ 1907.427654][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1907.432890][ T31] ? __pfx_kthread+0x10/0x10 [ 1907.437522][ T31] ret_from_fork+0x51b/0xa40 [ 1907.442156][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1907.447315][ T31] ? __switch_to+0xc82/0x1410 [ 1907.452029][ T31] ? __pfx_kthread+0x10/0x10 [ 1907.456658][ T31] ret_from_fork_asm+0x1a/0x30 [ 1907.461488][ T31] [ 1907.464736][ T31] Kernel Offset: disabled [ 1907.469066][ T31] Rebooting in 86400 seconds..