last executing test programs: 29m47.237199388s ago: executing program 3 (id=709): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x100) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x202000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x22020600) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r3, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x1024301, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xa6\xb7Uu\xd3G\xbe\"\xbe\x87\xe7,]nW<:\xaa\xc9\xb8\x83C\x8c\xde$C4o~\xd7\xe5\xe9\xd2\xd9\x1bC)\xbf\xdf\xdb\xa6B\xe0x\xe5\xa3{\x82~\xd5(\xe7\x9c\xa2\xca\x8dnW\xf5\x16\"05\xf4\xadn\xcd\xa9\xe4\xe0/\x80>\xb9\xb3\xb4\xf5\xe2mN\xb4\xa3\x9e\x19{\xbe\xb8sj\xcb\xa4\x17(<\xbed\x17\xb0Dp\xce\xd8\xee0\xff\x98\x01Z8y*0\xfb\x9a\xbe\xb04\xbd\xecj\xad', &(0x7f0000000500)='\x00', 0x0) r6 = open_tree(r0, &(0x7f0000000340)='./file0\x00', 0x9000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000003c0)=0x72be) close(r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r7, 0x4) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r4, 0x0) 29m46.275865506s ago: executing program 3 (id=711): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x78}, 0xfeb1) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0028000}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000005c0)={{0xdddd2000, 0xf000, 0x9, 0xf7, 0x6, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0xffff1000, 0x1000, 0xd, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0xb, 0x3}, {0x3000, 0xa002, 0x9, 0x8, 0x29, 0x6, 0xf5, 0x7, 0xf4, 0x6, 0x4, 0x10}, {0x4, 0xe000, 0xc, 0xc, 0x21, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xe, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x0, 0xf000, 0x10, 0x0, 0xdc, 0x3, 0xf8, 0x81, 0x5, 0x2, 0x0, 0xc}, {0xa000, 0x8080000, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0xb000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0x1, 0x2, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0x6000, 0x400, 0xb, 0x9801, 0x1000, [0x9, 0x8001, 0x1000, 0xd378]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f00000000c0)={0xfffffffffffffeed}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 29m45.235855092s ago: executing program 3 (id=718): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x814, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x49323159}) r5 = socket(0x1d, 0x2, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r7, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x20000001, 0x4, 0x0, 0x5, 0x5}) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, r8, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) setsockopt$sock_int(r5, 0x1, 0x28, &(0x7f00000000c0)=0x4, 0x4) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000030000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000ef03000f00001000000000000000c5e3092f6160385ae961000300000000000000e9bf8bd1c6b627565d9bfd654d88e044271e4de7692b9cce7cf5d26faf9801aa9caf0c63169a4898b3f1bac01ba876b6f163fca5fa20fd27", @ANYRES32=0x0, @ANYBLOB="05220000000000002400128009000100766c616e00000000140002800c000200000000000000000004000480440012800b000100697036677265000034000280060010004e2300000800040009000000060011004e20000008000d000500000006000f000600000008001400ff070000"], 0x88}, 0x1, 0xba01}, 0x24000004) 29m42.741095433s ago: executing program 3 (id=727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x41) r4 = open_tree(r3, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r4, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x2c) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x1, 0x406, 0x0, 0xffffffff, 0x9}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x39, 0x5, 0x6, 0x7}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 29m41.101533943s ago: executing program 3 (id=732): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0x805, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x80000003}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10) syz_usb_disconnect(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="050000000010"}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, 0x0) 29m40.766920985s ago: executing program 3 (id=733): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000005000)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e21, 0x3, @remote, 0x2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="19", 0x1}], 0x1}}], 0x2, 0x48081) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0)) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, r3, &(0x7f0000000300)) keyctl$get_persistent(0x16, r3, r0) shutdown(r1, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0xc1105511, &(0x7f0000000040)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf0b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x41, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x3, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='\x00\x00\x00\x06\x00\x00\x00') 29m40.198406943s ago: executing program 32 (id=733): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000005000)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}, {{&(0x7f0000000940)={0xa, 0x4e21, 0x3, @remote, 0x2}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000ac0)="19", 0x1}], 0x1}}], 0x2, 0x48081) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f00000001c0)) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, r3, &(0x7f0000000300)) keyctl$get_persistent(0x16, r3, r0) shutdown(r1, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0xc1105511, &(0x7f0000000040)) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf0b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x41, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x3, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='\x00\x00\x00\x06\x00\x00\x00') 26m52.303807492s ago: executing program 0 (id=1335): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r5, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x165442, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)=0x5) dup(0xffffffffffffffff) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x25dfdbfe, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x4}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xd}, @TCA_FQ_CODEL_FLOWS={0x5, 0x5, 0x57}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x6}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x240001d0}, 0x8840) 26m50.505120514s ago: executing program 0 (id=1341): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_clone3(&(0x7f0000000140)={0x100001700, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)="180c4552", 0x4) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f30600301a0f4bdf7ffffffffffffff00"}}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000300)={r7, 0x6b, "a7d456ed44d61678c055f23512180bb7318f4e75ba37450c5f991ec1f2c47b853efc21093bb22c571bfd5897ea8c2d3fedbe92d1f8ae1426e7f298f22177e6a2ca360840d640f6c6e18fa9921573711a503f3e6d297c99df9306e6d84720f8de9570a1a5d4f522999173c3"}, &(0x7f0000000380)=0x73) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000040)={'veth1_to_bond\x00', 0x401}) 26m49.25590148s ago: executing program 0 (id=1344): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="db", 0x1, 0xe0, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r3, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xba}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "848ebe675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 26m49.061579718s ago: executing program 0 (id=1345): syz_open_dev$vim2m(0x0, 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x2b, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8002, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x2e0, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x955b, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x59, 0x3, 0xe66a70de2ec3ed2d, 0x3ff, r5, r6, 0x1, 0x4}}, {0x2, 0x537, 0x2b, 0x401, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}, {{0x1, 0x0, 0x9, 0x7, 0xec06, 0x5, {0x4, 0x823, 0x6, 0x6, 0x10000, 0x3, 0x7, 0x2, 0xb, 0x0, 0x5, r5, r6, 0x3, 0x18000000}}, {0x3, 0xaa7d, 0x2a, 0x6, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00'}}, {{0x0, 0x7ff, 0x0, 0x80, 0xfffffff7, 0x1, {0x3, 0x4, 0x8001, 0xbd94, 0x2, 0xd76, 0x4, 0x100, 0x3, 0x4000, 0x0, r5, 0x0, 0x0, 0x10}}, {0x4, 0x1ff, 0x5, 0xf2f, 'fuse\x00'}}, {{0x0, 0x0, 0x8000, 0x4, 0x3, 0x7, {0x2, 0x6, 0x4, 0x2, 0xf, 0x9, 0x10000, 0x2, 0x7828, 0xc000, 0xffffffff, r5, 0x0, 0x6, 0x2f5}}, {0x1, 0x7fffffffffffffff, 0x2, 0x1, '^%'}}]}, 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000300)='illinois', 0x8) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="002207000000a385e14e1815f5d56e31b16a198f9c0771338ced0da24a201033f6a712313fac1484bf7f2abe30d92d1dbe534410afe9d132cf9c6bb8b404f23d31d51cf9fa6337030096d0"], 0x0}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r9, &(0x7f0000000380)=""/55, 0x37) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 26m46.838284015s ago: executing program 0 (id=1352): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) sendfile(r0, r0, &(0x7f0000000040)=0x5, 0xf8) r1 = mq_open(0x0, 0x42, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f00000001c0)={0x0, 0x6, 0x3}) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x800, 0x9, 0x0, 0xff, 0x3604709d, 0x8000, 0x2, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffff8}}, [0x3, 0x28e1, 0x80000000, 0x0, 0xb, 0x3, 0x3, 0x5, 0x0, 0x6, 0x809, 0xff, 0x4, 0x5, 0xc04c]}, &(0x7f0000000480)=0xfc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x0, 0x1, 0x6, 0xfffffffffffffff6}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c27c70ce6125797e7a869c6d70443c03e53b5abd92c5080e1b2d865abd50649c3be1410f3deb987a89456383ceba51ed71ebdf72a38bcdd6f0f71a7e9f729b0bf4366fa2d5005dd3fcc4a8a8982a8883633520c43653016bbef19b3fbd8cbede415ef106387315827bfec2d85762d9aef1736baea3dd53bcb9ac89a47de0eb9f39d794fbbf3b72f7792b37972839ca6d834e5583228fbb7939b6579f72236fade8a8bddb4095c60e6f753b1c3b9783705ad973635c1d6f54e1edc4154dc11e61ef5db53259399a2b2c362e1cc5e85a25f00601d8b", @ANYRES16=r2], 0x0) r8 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) fanotify_init(0x200, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x300) write$P9_RVERSION(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="150000009f0d2166ee5176d3af8d0d395032303030e24c"], 0x5ce) 26m46.595008775s ago: executing program 0 (id=1353): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100007000003c0002802c00018014000300fe80000000000000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) write$uinput_user_dev(r8, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040), 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 26m45.92098203s ago: executing program 33 (id=1353): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x145, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100007000003c0002802c00018014000300fe80000000000000000000000000000000000000aa0c00028005000100000000000800074000000000"], 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) write$uinput_user_dev(r8, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040), 0x1) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 15m16.350388238s ago: executing program 5 (id=3648): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r3, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r5, &(0x7f0000000300)=""/79, 0x4f) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x7, 0xfffffffffffffffd, 0x9, 0x40, 0x1, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) 15m15.321854362s ago: executing program 5 (id=3654): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) dup(r1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ftruncate(0xffffffffffffffff, 0x581) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x1000000, 0x2, 0x0, 0x0, 0x7172, 0xa8b, 0x24, 0x51bf, 0xfffffffe, 0x0, [{0x6, 0x8, 0x8}, {0x200, 0x6, 0x8}, {0x1bd, 0x80000001, 0x9e6b}, {0x6, 0x5, 0x80000001}, {0x5, 0x3, 0x8}, {0xff, 0x6, 0x10000}, {0xa7c, 0x7, 0x4}, {0x7f, 0x6, 0xa}, {0xb, 0x8, 0x8}, {0x9, 0x920, 0x2}, {0xa, 0xcc3, 0x7a2b}, {0x7, 0x9, 0x75}, {0x5, 0x79, 0x8}, {0x2, 0xffff, 0x8}, {0x5, 0x9, 0xf0a4}, {0xa, 0xf, 0x5b}, {0xa, 0xb, 0xa35}, {0x8c, 0xfffffff8, 0x8}, {0x5, 0x4, 0x80000000}, {0x1, 0x6, 0xfff}, {0x40, 0x5, 0x3}, {0x8, 0x9, 0x1}, {0x2, 0x8, 0x3}, {0x4, 0x0, 0x2}, {0x5, 0x2, 0x4}, {0x34ad, 0x8, 0xffffffff}, {0x0, 0x3, 0xb}, {0x2, 0xfffffff1, 0x8}, {0x4, 0x80000001, 0x7}, {0xc, 0xfff, 0x8}, {0x4, 0x2, 0x5}, {0x5, 0x8001, 0x80000000}, {0x40006, 0x0, 0x9}, {0xd107, 0xa8db, 0x6}, {0x9, 0x0, 0x7}, {0x6, 0x2, 0x7}]}) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) listen(r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x0, 0x0, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x3, 0x5, 0x2, 0x6, 0x3ff, 0x7, 0x0, 0x80}, &(0x7f0000000040)={0x38, 0x400001000d, 0xb4b, 0x7, 0xffff, 0x19, 0x9, 0x1}, 0x0, 0x0, 0x0) 15m14.939660025s ago: executing program 5 (id=3658): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20280, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@e={0xff, 0x9, 0xb, 0x2, @SEQ_CONTROLLER, 0x2, 0x7, 0x8b}) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) r5 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0x2, 0xc2, 0x0, r4}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 15m11.648042728s ago: executing program 5 (id=3668): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000200), 0x40000, &(0x7f0000002400)=ANY=[]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000005c0)={0x64, 0x4, 0x35}) 15m10.699219119s ago: executing program 5 (id=3670): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) r4 = fanotify_init(0x200, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) (async) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) r5 = dup(r4) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) (async) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0cc5640, &(0x7f0000001a00)={0x1, @pix={0x5, 0x1, 0x32344d59, 0xb, 0x2, 0xd0, 0x2, 0xfeedcafe, 0x0, 0x8, 0x0, 0x1}}) write$sndseq(r5, &(0x7f0000000440)=[{0x9, 0x0, 0x6, 0xc0, @time={0x2, 0xdaac}, {0xff, 0x3}, {0x3, 0x3}, @quote={{0x4, 0x4}, 0x6c95}}], 0x15) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES32=r9, @ANYBLOB="00000000040000000c001a800800058004"], 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0163013110ff"}) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000040)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r11, &(0x7f0000000e00)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x30}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000140)="f9", 0x1}], 0x1}}], 0x1, 0x20044040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r13}, 0x10) r14 = syz_open_dev$vim2m(&(0x7f0000000300), 0x38c5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r14, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x20, 0x20, 0x31384142, 0x2, 0x0, [{}, {}, {0x7}]}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r14, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x20, 0x20, 0x31384142, 0x2, 0x0, [{}, {}, {0x7}]}}) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000300)={r13, 0x9124, 0x9, 0x2}, 0x10) 15m10.26950356s ago: executing program 5 (id=3671): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xbfd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=ANY=[@ANYBLOB="758c64477465206563007970ff667320757365723a757365723a00"], 0x1b, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 15m10.127867395s ago: executing program 34 (id=3671): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xbfd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=ANY=[@ANYBLOB="758c64477465206563007970ff667320757365723a757365723a00"], 0x1b, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, 0x0, 0xffdd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 10.253353755s ago: executing program 6 (id=6619): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58000000100001040000000200000000000000018ea43c810d678385c1dc8f605dd47e398fcb4607b77a5bb3e91f5e4f9ab4b66dd85cddffe5cdf7736df8ba8c121ca999e4254a007b61125b9ea7991ffc63ec1dae", @ANYRES32=0x0, @ANYBLOB="0131010000000000380012800e00010069703665727370616e000000240002801400050000000000000000000000ffff0a010101080004000000000004001200"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000f1fd000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000080000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000f6be91000000000000b702000001000000850000008400fd00b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000497fdf9c652386a6a2e963f6ad2cbb718800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r3, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="18010000", @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf25040000006400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006272696467655f736c6176655f30000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100b60e2b58d687c76f19341dcc217c7e50d667fb111fff3ff29716c63aec44b0b0061b30e366903a0308c0e09c941b7b0d77a481f7319f9d3ef38ae8c74f", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d7265673100000000000000000014000200736974300000000000000000000000000800", @ANYRES32=r10, @ANYBLOB], 0x118}, 0x1, 0x0, 0x0, 0x48000}, 0x24004084) syz_emit_ethernet(0xffffffffffffff89, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000ffffffffffff88a829008101000060070000000000ad43afc58c00d1903acf1b000000000000"], 0x0) 8.224175194s ago: executing program 6 (id=6627): socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000010c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x3c, 0x0, @private2, @local, {[@hopopts={0x32}]}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) (async, rerun: 32) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async, rerun: 32) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000001300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x3, 0x2d, 0xbc, 0x68, 0x0, 0x7, 0x1, 0x0, @broadcast, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x80000001}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0xa, [0x5e]}, @timestamp_addr={0x44, 0x3c, 0x65, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfb1}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb70}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@broadcast, 0x80000001}, {@local, 0x9}, {@private=0xa010101, 0x8}]}]}}, @redirect={0x5, 0x3, 0x0, @empty, {0x13, 0x4, 0x1, 0x1d, 0x8, 0x65, 0xf, 0x5, 0x2, 0x6, @broadcast, @multicast1, {[@ssrr={0x89, 0x7, 0x77, [@local]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0xc, "b2dbefe37e745d094f56"}, {0x1, 0x2}, {0x5, 0xd, "fff2fd43fdd82794801792"}, {0x1, 0xd, "37ff93ae02b06a962c1e2e"}]}]}}, "c1f4cce9"}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201f7ffffff0000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0) (async) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES32=r8, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) (async) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0x5b01, 0x0) (async) syz_usb_disconnect(r8) 7.7654201s ago: executing program 6 (id=6631): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, 0x0, 0x30, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2) r2 = openat$ptp0(0xffffff9c, &(0x7f0000000080), 0x10100, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000280), 0x91d, 0x440001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000300)={0x2c, 0x6, r4, 0x15, r1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}]}, 0x40}}, 0x4000010) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) ioctl$PTP_CLOCK_GETCAPS(r2, 0x80503d01, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r10, r10, &(0x7f0000000000)=0x1, 0x4) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000000180)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x2, 0x0, 0x800}, {0x0, 0x6}, {0x80000001, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}]}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) syz_usb_connect$uac1(0x5, 0xa2, &(0x7f0000000080)=ANY=[], 0x0) 7.280417939s ago: executing program 7 (id=6634): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f1000000010000000000000000000040000000ff"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x1, 0xe}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x298}, 0x1, 0x7}, 0x0) r2 = io_uring_setup(0x16c7, &(0x7f0000000080)={0x0, 0x814f, 0x1001, 0x0, 0x307}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x24, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000100)={0x6, 'tunl0\x00', {}, 0x4}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000040)) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r8, 0x100, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) getdents64(r8, &(0x7f0000000340)=""/206, 0xce) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'geneve1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1f}}) write$tun(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 6.678659773s ago: executing program 2 (id=6635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, '}S${}:', 0x3a, '', 0x3a, './file0'}, 0x2d) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_smc(0x2b, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x80}, {0x3, 0x0, 0x3}, {0x6, 0x0, 0xff}]}) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_CMP={0x18, 0x3fff, 0x0, 0x0, {{0x8001, 0x1, 0xfffa}, {0x8001, 0x101, 0x0, 0x0, 0xa, 0x1, 0x1}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 6.509112588s ago: executing program 1 (id=6636): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x7) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x1, 0x5, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mount$fuseblk(&(0x7f0000000080), &(0x7f00000003c0)='./file0\x00', 0x0, 0x195142d, 0x0) close(r2) fcntl$notify(r1, 0x402, 0x30) getdents64(r0, &(0x7f0000001f80)=""/4096, 0x1000) 6.2544768s ago: executing program 4 (id=6637): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58000000100001040000000200000000000000018ea43c810d678385c1dc8f605dd47e398fcb4607b77a5bb3e91f5e4f9ab4b66dd85cddffe5cdf7736df8ba8c121ca999e4254a007b61125b9ea7991ffc63ec1dae", @ANYRES32=0x0, @ANYBLOB="0131010000000000380012800e00010069703665727370616e000000240002801400050000000000000000000000ffff0a010101080004000000000004001200"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000f1fd000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000080000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000f6be91000000000000b702000001000000850000008400fd00b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000497fdf9c652386a6a2e963f6ad2cbb718800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r3, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="18010000", @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf25040000006400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006272696467655f736c6176655f30000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100b60e2b58d687c76f19341dcc217c7e50d667fb111fff3ff29716c63aec44b0b0061b30e366903a0308c0e09c941b7b0d77a481f7319f9d3ef38ae8c74f", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d726567310000000000000000001400020073697430000000000000000000000000080001", @ANYRES32=r10, @ANYBLOB], 0x118}, 0x1, 0x0, 0x0, 0x48000}, 0x24004084) syz_emit_ethernet(0xffffffffffffff89, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000ffffffffffff88a829008101000060070000000000ad43afc58c00d1903acf1b000000000000"], 0x0) 6.088294763s ago: executing program 7 (id=6638): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) shutdown(r1, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, '\x00', "fe4f47bafbb67ae68dc462427bd5a94a", "a4dd10c8", "96499e2301e9d879"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "43e4d37d1e658270", "3b49a1681a080489a95036f605884f2b", "bcf3eb41", "f9b3eaf92b67d01d"}, 0x28) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) syz_usb_connect(0x4, 0xbb7, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xa3, 0xe, 0xf4, 0x8, 0x19d2, 0xff4c, 0xf9ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba5, 0x4, 0x6, 0x7, 0x20, 0x3, [{{0x9, 0x4, 0xd4, 0x53, 0x5, 0xff, 0xff, 0xff, 0xa, [], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x0, 0x9, 0x6}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x6, 0x32}}, {{0x9, 0x5, 0x0, 0x4, 0x4, 0xf2, 0x38, 0x8}}, {{0x9, 0x5, 0x82, 0x0, 0x400, 0x3, 0x0, 0xfa}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x4, 0x66, 0x8, [@generic={0xda, 0x21, "31298d54655878f52330e2bbb6b659032c0187758bae757d243f29e528f6ffc026f9d51a409d1bae621ffeb5a38c996e61b07c5dddcb397cb155ec54d072bfb8d87a3d5a1219865734a30dce7b62ad9cc24f30025588ae954e3efec09012213d472516a38acf09c9437426e59ebed7027bc5a669d9d144481902a77b0cbac0b4b0fb4e6b4792da643fcd2bd945f4b2bb70791210bfbac5b28338646455b44a76eee1c7426d051dbd180a5a57bf82b52d5cc96e54ea127c66d4975afc69bd74caa8899dabf9f95acc8d695f12ae7f74c0a6d7b1426d3fe8e5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x6b}]}}]}}, {{0x9, 0x4, 0x3e, 0x5, 0x7, 0xc9, 0x8d, 0x4a, 0x0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "79d323"}, {0x5, 0x24, 0x0, 0x131}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x5, 0x18}, [@dmm={0x7, 0x24, 0x14, 0x1ff}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x23, 0x8ca}, @mdlm_detail={0x5a, 0x24, 0x13, 0x6, "ec239263c2a45fb3556c64b9fc70f6bb236cf520aed2ed323093162dfefa41648a1d868979e83d8e75113527d6b7f559e0d2e2231b2dac257a234ad2595d15be254ff53e5b04935bc588116b5412e2af7cb7eee9fc44"}, @mdlm_detail={0xe5, 0x24, 0x13, 0xff, "94ee3c8c3f61545becf3e773a9e3a8ad5d14f13ebdcca46bd789cdf0598eda741b8043f94996f1938bbd717b0aa774d8a6f4545793f89e7a12cfbe96e19944da7fd950c93031222c2f6aeb2f1719016ab40f991d9ee622ee0a600cfca0ac2a74d6afb73d456f839fba2e8f848eca47440f15bce176e86f4e7a14062924d349c6d9ae7f97ee755568637370c2d8b48b01529daaf96994e31669741279edd9ec2d496e68bcfbb8b9c75c1f16a99bad6ca72142eb05904545feba845d8fea25fd4b207be4eb44deb4a8e8e6ed195aff81b6f0399204adb91123b66b10f54ecf8d109a"}, @mdlm_detail={0xda, 0x24, 0x13, 0xf7, "bcb93309da729cf08871f0b0f0e82c3847c944ce503cc1963e461ea0523f1d4288f3e6e7f9b0361c9cd2db7d6015ebfe1525bacff94b372c1ebb8232f389099661cf6b1f34434dedc48c134b3e6da0467d262b05f6df1f38ceb997602478bf07827a065bac54993a9f024d68968781e3b5621ef9e143d7ba2c5636a94079ae8d1639596a1a7e5ee92b1e11dcca7f0977a2592c1768f23e086f886fe04881fcfa88c6d0fc848c33189665aa3e98fec97e6d7616454118bc1b4489c092516fbfe4bddf92bb9054123ca8945a123871402f4323388390bf"}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "b6db5c"}, {0x5, 0x24, 0x0, 0xff00}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x101, 0x59, 0x4b}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x6, 0x7, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x10, 0x4, 0xe6, [@generic={0x19, 0xf, "6eac5368bb2d81de5993422c2090a6a704f5b1b1d2380d"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0xfe, 0x9}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0xe2, 0x4, 0x1}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x8, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x5, 0x1000}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x0, 0x9, 0x2, [@generic={0x73, 0x22, "e796a4e4c8cff1032a4e1a4bd62f784ba57ff3e35892f3f2bd0b3785c27f2a1989e0db8bd9b8aa41e1efae2dd268dc86098135e4905b4e1fcab120db693887aaef8da2fbcbcdb3bb69c04eca876fde3cbe5fc153cfcc3bc241371675bb6ac0c3570baad57513902075690d9cc408f47b4a"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xad}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x9, 0xfc, 0x0, [@generic={0x16, 0x7, "1c17641eae654ce98ffc772b24c32ef7c0f27110"}, @generic={0xc4, 0x26, "861962d33698c40c6a713e05872f302e54ebab1e17cd7e725b86b053ac6f8caf5c2fe8e60539c8a63b8e512fe78bcacf5dbb6b4129e0e9557207a8455b06bec2a826d1e0823ddb5e6d589d7dfb4f2361cdba8298c5319117473466ea08b375a902b2d67aebca4053d33c553275369d1229eb712412e7b16328f33b7012ecbfec9f046284b8b73915709db8e5e01c846c849213dce2f2408077b3373724703058153480d920a9718b8539e1e72ca9b95bd66925078e09d129ce8aaa9f66ca6c35c6e2"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x5, 0x17, 0x9}}]}}, {{0x9, 0x4, 0x0, 0xb, 0x9, 0x7a, 0xe, 0x2d, 0x73, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "50e4bf9d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xaf, 0x9, 0x2, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0xff, 0xd, 0x5, 0x8f}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x9, 0xe2d}, @mbim={0xc, 0x24, 0x1b, 0xbd0, 0x6, 0x1, 0xc, 0x2, 0x81}, @country_functional={0xc, 0x24, 0x7, 0x3, 0xcc0, [0x1, 0x7, 0xfff]}]}], [{{0x9, 0x5, 0xf, 0x4, 0x20, 0x6d, 0x3, 0x9, [@generic={0x2a, 0xd, "1d332a1a7c03244bd340b75fe3289ca40e19bc730661649db759d4356172aeafd70be084f725ba54"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x2, 0xfb, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x27, 0x43, 0x1, [@generic={0x45, 0x21, "33a53c442d6375de74ed71abec9b4786f1b63b9fefb7b373a98ef0a740af88a43460e413ab9ba4031e2cd4255ae6aec176c5f84fe6c9e5d202ff5f2c648f004cc255d8"}, @generic={0x2c, 0xd, "feac83993281cd18fb0eeebd24a0d863af75c27079d45587fe9bc8a4c7bec2360e5928f326eeb883f1a1"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x9, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x6}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x9, 0xb, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7f, 0x5}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x6, 0x4, 0x2}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x1, 0x5, 0x4, [@generic={0x3d, 0x7, "fbdadd40cece6cbf338ee672ba541fef4052e31fc9cc86670e10e1b3a8078d1805179034fd122e73620fba92490f3b6a6ba6bc4e8069743fcfd6d2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x205}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x8, 0xb0, 0xa, [@generic={0x50, 0x3a, "78d1d4b475872bd755d927a2080ff1d3dfca610807601e540c35d26d2361c69867be97abde2ca7bd808679e0d4a19ab68aea9c0ad9b6696e74394076b77b36fdfeedd23464ab6b196b621418b92c"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc3, 0x5}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x81, 0x3f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x91, 0x5}]}}]}}, {{0x9, 0x4, 0x94, 0x8, 0xd, 0xbd, 0x9a, 0x4c, 0x5, [@uac_as], [{{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x80, 0xf8, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x2}, @generic={0xd0, 0x39, "4405b138838657ef8108f331151d16f6b1f665908538f50845272300c54cc19b99aee02edd68ad1a90d9cac8c0cb0efed9ce254c52796b8f5ef23ab2c3fde371dc8997a4fb993b3c95c493b9d2da57d18bba958a1592e65cb51a98f946206969053bcb625a6a828c6797e3b44fb50662ab64acdd8738002feb69491f2e96d4a97112400769d853f5adf05fae133d86bb1e4aca3236d88b30c3fc14ea717dbb8cb031f48b6cca857ddab0ef8cd78113187f78e9b78817ac1c68443dc6d94501d200a45099826605a51b333ccc6677"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x4, 0x2, 0x55, [@generic={0xcc, 0x1, "5b2858c6f1f5ff3c5e4939335b50e0af37dca052814244cdf4a0c29ea57ed539ae4ab2fabaff3c9b3d405088829c6d45e6f9fa78c4df170ab5c140a6d90399b4392acdbb806f9e2a2911bcc93e4084591073c186ad5e5703c16b7f310024688884c96a4e2c34b7eaf4ac28b3ea87a67d5d05498386801a173ff324f7e23adaef40e98642d8668e39ecc34188e62d0c6cb33ea58c0c65bed76c80f52f3b6809be1f341095d37b27d03350aef310a5bb54a3e89f47006a0473cc65a87bba7983655836d7e3f0dfefc9a8b9"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x59, 0x2}]}}, {{0x9, 0x5, 0xc, 0x0, 0x260, 0x9, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x2}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x8, 0x6, 0xbb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x4}]}}, {{0x9, 0x5, 0x5, 0x3, 0x40, 0x4, 0x1, 0x5, [@generic={0x1a, 0x4, "c091901b09cca997a0d2b13057fab7d24062b45359be2daa"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xb, 0x2}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x0, 0xc9, 0x4}}, {{0x9, 0x5, 0x5, 0x4, 0x3ff, 0x2, 0x1, 0x4}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x9, 0x1}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x0, 0x5, 0x7f}}, {{0x9, 0x5, 0xe, 0x4, 0x8, 0x15, 0xe, 0xd, [@generic={0xe1, 0x38, "a0880aa67de671144e68352d959e91fae6b1664b3f84ebbe05dc580bd06529519946bad226d430fd0fbf31e0b759dc1d328ec42a4454349a65180f71db5968b6811080e70d63cd80b45793420260dc1a9b648b744e847723079c80e282038dcbc192072548984bb4b9557c173242f1dfe3b14c5ce585cf460492cad9c1b0675ae6a5cea4b93067145b743ecfea6041d2ff09a9e8c6a701a3d05531d4695b85084b92f49e0f3c43c78e4065b154d33f666aedb7f0f3055810e27fd6356479c7a6971186247cddfe9a2cbb52c8f41cf73be46ea1bd1871d9ba74db51fdd9245f"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x14, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x0, 0x9, 0x1, [@generic={0x14, 0x20, "fa76414562f75e53541ee5951cd03a632305"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x10, 0x3a, 0x7, 0x8, [@generic={0xa3, 0xd, "4c2f4606820221320fcea59f74426865b22f67e6d743fb31bc67399b485922fe775e114a4673dd4085caa5390bcfa995806071effbed41b50c692d88ca5e2fe47a7212c48b5b67af0fbf0e78ece2fcd6b3c712742e079ad87dd787482e5d044debab66733dcf4588d1ebc57cc376288aabad5b7020737832347de19c02c4e07e7126f1bfdc625162748ddec0d1084c8105c232813be23fbb8d4ec668f0a8ebc2e9"}, @generic={0x58, 0x13, "c6180146dde5403e3039d44b90bae23fa5978f13262995623bc25ebdd3501cb43e4df221c4cabcb1818cfe3da843ed46403bdd9cf5fb0fea95e29d671d7bed5b15ed95ad1ca8cbb5dcc4348e9a675daae401199575d6"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x437c3e1f8a204978, 0x61, 0x7, 0x5, 0x10, 0x94}, 0x149, &(0x7f0000000dc0)={0x5, 0xf, 0x149, 0x6, [@generic={0x1d, 0x10, 0xa, "f0a6c8302e2c6841a28daaa0eea3c0c448c782a6f9cca43f08c9"}, @generic={0xff, 0x10, 0x0, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0x6, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0xa, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "c6e4b052e4ae7598af19ec8ad4b9f249"}, @ptm_cap={0x3}]}, 0x1, [{0xfb, &(0x7f0000000f40)=@string={0xfb, 0x3, "62107427f750ebe73014681dfcd74689b89f75fb449595a8154ee17223f61ab85d9d44471b9bf5c114c08dc5049440c031ee3a1559234b723170a3e5a806fa3731cf0ef23273f4d4bff4d3e006832ebb5d24e87020ea9a90a68403d96caefba7b492826ff7d2560c1797b66bb4ace66f8782f4ae8ab522edb467fbfe1a684ccef9f94aefac19ddcdaf30dc834c5e1d8461997e919b137b3df77fe5769e09d51f0a9790531bf72183289ec6082a6649cd4edb3d367c6e1226dce3cb797af2b78ae948c6458dd6ec088fd3f79bc38f36eebf9c86a62f27d5c5ce69e0d57aa276bbfd4f61980bae570d29edc169a755847988b67dbd3d3ee21a37"}}]}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) 5.701797286s ago: executing program 2 (id=6639): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x3c, 0x5c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) 5.188872698s ago: executing program 4 (id=6640): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) writev(r0, &(0x7f0000006380)=[{&(0x7f0000007480)="7acdbbb4699c10f9cafdaed25b32377c0d9142738aab77d74115d365720fae1d12c74f559d0e175d7ee841d67ff660316585ca589918219dd36a3569d335ff1d899feedf793213c2da825fee53c72271b58d6824b2b1e7a8ecc19189361a7f11ed14cee45c50cf5b32e72a2fc71d19a357625f0f24fe3041f39237cc032058a6db962877166323a082fd1cd9d4203da1c167cef6ae9d3cef00c57ad0324d51ad6c3ca390ec1b8646ea3cba039e18f5d636ea833369a6c838fea8032bd03e627bb484449fa311d981a47723d6826e5475670198d093077779e2870e4b73a512ad747c49a58788ff5c75e983ab29e688977c67dab7983e430cb8eb80020f7d888483818a90dcb6a80c5990a377a5c464fa2d220ab549f8b80577d875f5a6623a6cae914514fa65dc694248c18b6be1ef5eaf56497cc8a5c45c78ae647fd511840a0fcbf214fcad7c4bdf49488c83bbdefa3b467ef27b49c3d38eaba1ff1a8905aa1c3d4d6b712584b1b0ff686439a921eb4061fc2a8cf88c6c7a9a927e604582dcf53dfdc55b3e6d65a7da4c0e8d68bb8f63bbfc60c6db27b075f9c5db7e2bdba4b16dfecdb74cc3c4e7fbd758970385b3ae87dfe61be958f3f0cbd2e8888280690b0227846aab9e3380653d3a33e02fd2439c5fdfcd3c699065547f5ef3d72eede98a1d713921b4cb1863b1a11a8f3751908de175529b60d60cc0ee1d53faf82b0f5ad509d8003342251a86ccd5a3751e60b82a18d7d8d2002fed3947a48c706008b9daa3ea346c76f3f5fbd2a08ed5c83e11183084cf9841c01845c8ab28430f5dd2b25101a39f32e67150b5616597891c5b0c539b7c5d728cd9259c22bfa258c8f7fbe78f8b428ed03c7efc315106123b5eb0d817e9fdc5c78364da73e7c734b28fb69a38a3550a54bb711174c176e862c09697dd7cdb40cfdc4420448d86452f519a7592d99d0133d4e818a3a09d90321992b17f9ff5b08579850e72171472c77c6c3b36ea448bdb1bfb9a06a125d7cb6a124b839bec91c6b732415b8c870b696b147543f1ddeb8d812d547f3178ef54b781cc0e7611b5919333e3ee6c3ca38e331dce91d8e24b12c6c38c3549d02e15938d3eafa03831eb2846570a381e29a2a458cd29b059767852c4bbb6f802d862a1896daa62ae4efd01406f78b23b4a4487b6a0b9832c0d2a43c36eaf33bfc07637894b8f45af581d67745f33eaea1b0ba7ebe90a4489b6022f51ca6187b9cf7ad2ac45e04891ba674531245f6bbdb4a38173ab3df352400d890fcfbc6345768bfb0c7f40fd00ceb9b93a4623f9cc86b454d4924559c7bb8a1868c8dc2388c28cae4315bf56ad2cacd4d402a2a84bb9cd7f8503d60351a5afeeddbeb7940255d3c4a7f834c257be266d995ce0897e1b14c9306d8af000936c13c6c0aa161ceac665ccda516aa252e5525cac805ad5295d53843818d13bf9b169ebcbe7731feb2a6e1a39b7eaccd216e5af4c0fb5b2dc313d17f8ea4dd4b89729627a373a0a61c60184250a9240bfcbf8b1b792e4e6eb637f12c38f5f2dc6b1afa25afeaf04cbd726fd083c195a39cd19611768a75fcf1a4c40624bc388d473a4334a02a8084ad335bfc2c2dc44b9a43b77f557d1e7c288557596794cbe85af6218d2b33533fbc5bcb2f87bd53412585251baf7ff72a3483d4d0e22df2fe740096f9bacbb83e8e1c0a8700fa2cc5394afb48b877e7b50b98796d3a102e47e692ad10554a8ba87187e579decd4c9182913c951a67ec8b5e58a5fdf9c89cdac7a977e0e1d5671e0dbaa600de96631cf70b1330a4e305b4c3b61db5fb4ee6cd526cd6bff4d1deb0743ef0504d70d81c07236775ee2fbe6e76797a95024fc75a7ed127fb6ed348c7e4743899b93d6df9a70ca6bbd07be4674cdda77c816e77ece40f94c31e80ad43aa2e44b213aa114bf59e59291c63b5292fff4f48fe11e646dff90a5966139d67462a88bf00384f574fdbafb3d8220d2aaef2b03e9731c53bc0c69f72ded59a94a6312c320f8289abc87f0d29184ee7f78837c5d6b7ca7e25f561cc001edb7c0e9dad289dd54d2384d4eb469a28596d78e8fcdaab2b49859ce83e67a1512414df62265cc761c33bc4bc49b4f3071115d5e088c2994913f14d7a138e285b4ecf553b0f1099fdc9d588665b4dda207eadd2534b03ca567b121bce8d879102ed6f2e7fb7f779bb5611b18a9fbd00ea898d7b987c9f2db0829b330af50f52ff3e451baac0f90dd127bbb9b14876e5f3f6c50a14777b1138b936a4cae368a15d424a90cd999b4c833b93963219da5cc8cbe34318e271d63f2759ac52845b07905e6267d00192eac79adf17b52afdcb54c141508b27aa1753dd73d8c9d5f3433788d8298ac74510e7bb4db1fb5bd218912d3450dc976d5537f26ee4c6b2a4bd04089b9569f80859985d6e0af79b73329a84d86db351b35d5a0dca7abf181fe6b4a8ee1aac44f906c8ef951fd0afbdbd2e7f903d64c98fc46c3dab86baedd6d0266a50d231bba84a46ac6516c2af3f2da85278f3e91fe002c7f0c849890d5508a5e8ad2bee6dd214c483305b66c9d63018fa926ac6f9152199d99df84437a0024b6631fef37de66dfb0d141dc4478a19badbb9936440bee2c67e027353393958cb6b04c2c4ba8859a79bd63dafde241d9463070e46eb5f968b79f8e60318c9cf2ea77c67821932bf57174360dfc9fa49275ebce8d15aa6952a8ef55df8ed165cae9d9925c4c3b15344c1d72ad57081d3cf2be014f73243c68f5fa821b1801ee0a94e60ee7f1159710f493e54831febb120b931bb94b940f67b8ea43e0401f4e95627fc1e983c10c385a9550a465edbe808c1d39d0d6c8380388e2b65d660128c92b914467e80fb8f46e5e97405c806ef2f1e51e909f", 0x801}, {0x0}], 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d000905", @ANYRES32], 0x0) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000001c0)={0x466, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x4, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0xfe60) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000140)=0xc55) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8001, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x6) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x6) close(0x3) r8 = getegid() fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004680)=0x0) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000008440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r12, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="240002e7cfd93ac43f31ecae1ef0d27bfb199e082586317d0518743d26f2836e75ed45c8429f8778984b278c6233ee832cdbca003c39d9b88fb70c4dc2dcfefff11ecaa2bb04299e12cf0444281f7de66490a5c391b91e24e5a55180ce814c27c66ca8e25ecd2a4a9aafe5ef61b90e8c70c852ff3df9879917b3592a10da7312760d5cdd72214dd05ccc30d62807337b5f42e5132aab051af99c8099618747"]) read$FUSE(r12, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r12, &(0x7f0000000080)={0x50, 0x0, r13, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r12, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r12, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a3c0)=ANY=[@ANYBLOB="7801000000000000f9ffffffffffffff05000000000000000200000000000000030000000000000002000000000000000500000008000000060000000000000009000000000000000000000000000000ff0000000000000003000000000000000000000000000000ffffff7f570000000700000000800000ff030000", @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b000000090000003a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b000000000000000000000000000000000300000000000000ffffffff0000000002000000000000000000000077dc00000400000000000000dd6a0000000000000e0000000000000005000000000000000000000000000080000000000000000004000000080000009a000000004000007f000000", @ANYRES32=0x0, @ANYRES32=r14, @ANYBLOB="06000000ffffffbf00000000af00000000000000060000000000000003000000000200005b235c0000000000"], 0x0, 0x0, 0x0}) r15 = getgid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004880)=0x0) lstat(&(0x7f00000048c0)='./file0\x00', &(0x7f0000004900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000540)="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", 0x2000, &(0x7f0000004ac0)={&(0x7f0000000040)={0x50, 0xffffffffffffffda, 0xfffffffffffff001, {0x7, 0x2b, 0xffff, 0xffffffff80020000, 0x5, 0x3, 0x7, 0xffffffff, 0x0, 0x0, 0x10, 0x6}}, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x1000, {0x8001}}, &(0x7f0000000100)={0x18, 0xffffffffffffffda, 0x9, {0x6}}, &(0x7f0000000140)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000000180)={0x18, 0x0, 0x7fff, {0xff}}, &(0x7f0000000200)={0x28, 0x0, 0x8, {{0x1, 0xfffffffffffffe00, 0x0, r2}}}, &(0x7f0000000240)={0x60, 0x0, 0x7, {{0x6, 0x9, 0x7, 0x3, 0xa0ec00000000, 0x800, 0x9, 0x5}}}, &(0x7f00000002c0)={0x18, 0x0, 0xffffffff, {0x5}}, &(0x7f0000000300)={0x13, 0x0, 0x7, {',}\x00'}}, &(0x7f0000000340)={0x20, 0x0, 0x10000, {0x0, 0x1b}}, &(0x7f0000000400)={0x78, 0x0, 0x7, {0x7fffffff, 0x4543, 0x0, {0x5, 0x8, 0x1, 0x1, 0x3, 0x1ed, 0x80, 0x8, 0x484, 0x0, 0x1bb, r3, r8, 0x2, 0xffffaa38}}}, &(0x7f0000004580)={0x90, 0x0, 0x9, {0x2, 0x2, 0x100000000, 0x8, 0x1, 0x9, {0x1, 0xba, 0x800, 0xffffffffffffff01, 0x5, 0x9, 0x2, 0x1, 0x1, 0x2000, 0x5, r9, r10, 0xff, 0x2}}}, &(0x7f00000083c0)=ANY=[@ANYBLOB="f19bf11459d830000000daffffff04000000000000000000000000000000f739000000000000ae19457b764d3ff91e02b19284d8025fad7b5e3d22c2f2c69823b29df37652fddba378b5feb5bbc011d6d6fa347fd0b95d40ddd9ac144fdb4e75"], &(0x7f00000046c0)=ANY=[@ANYBLOB="a80000000000000006000000000000000400000000000000000000000000000006000000000000001000000000000000000000800800000006000000000000000000000000000000ffffffff00000000060000000000000001000000feffffff00000000006002000100000008000000090000000060000002000000", @ANYRES32=r11, @ANYRES32=r14, @ANYBLOB="000000800600000000000000050000000000000096080000000000000000000005000000"], &(0x7f0000004780)={0xa0, 0xfffffffffffffffe, 0x7, {{0x4, 0x0, 0xfffffffffffffffb, 0x8, 0x10, 0x2, {0x2, 0x0, 0x1, 0xfffffffffffffff1, 0x1, 0x100000001, 0xfffffff7, 0x8, 0x9, 0x8000, 0xec95, 0xffffffffffffffff, r15, 0x4, 0x890}}, {0x0, 0x4}}}, &(0x7f0000004840)={0x20, 0x0, 0x4, {0x607, 0x0, 0x540, 0x2}}, &(0x7f0000004980)={0x130, 0x0, 0x100000001, {0x18000000000000, 0x1, 0x0, '\x00', {0x400, 0x6, 0x3, 0xfffffff2, r16, r17, 0x4000, '\x00', 0x1, 0x80, 0xa, 0x1, {}, {0x9, 0x9}, {0x1, 0x10001}, {0x6, 0x8}, 0x2, 0x1, 0x7fff, 0x81}}}}) 5.007042972s ago: executing program 1 (id=6641): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000010000000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000074109dff3483a9713af42694099b40e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bff", 0xd8}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ftruncate(0xffffffffffffffff, 0x581) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x1000000, 0x2, 0x0, 0x0, 0x7172, 0xa8b, 0x20, 0x51bf, 0xfffffffe, 0x0, [{0x6, 0x8, 0x8}, {0x1bd, 0x80000001, 0x9e6b}, {0x6, 0x5, 0x80000001}, {0x5, 0x3, 0x8}, {0xff, 0x6, 0x10000}, {0x7f, 0x6, 0xa}, {0xb, 0x8, 0x8}, {0x9, 0x920, 0x2}, {0x7, 0x9, 0x75}, {0x5, 0x79, 0x8}, {0x2, 0xffff, 0x8}, {0x5, 0x9, 0xf0a4}, {0xa, 0xb, 0xa35}, {0x8c, 0xfffffff8, 0x8}, {0x5, 0x4, 0x80000000}, {0x1, 0x6, 0xfff}, {0x40, 0x5, 0x3}, {0x8, 0x9, 0x1}, {0x2, 0x8, 0x3}, {0x4, 0x0, 0x2}, {0x5, 0x2, 0x4}, {0x34ad, 0x8, 0xffffffff}, {0x0, 0x3, 0xb}, {0x2, 0xfffffff1, 0x8}, {0x4, 0x80000001, 0x7}, {0xc, 0xfff, 0x8}, {0x4, 0x2, 0x5}, {0x5, 0x8001, 0x80000000}, {0x40006, 0x0, 0x9}, {0xd107, 0xa8db, 0x6}, {0x9, 0x0, 0x7}, {0x6, 0x2, 0x7}]}) mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) listen(r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x0, 0x0, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x0, 0x0, &(0x7f0000000040)={0x38, 0x400001000d, 0xb4b, 0x7, 0xffff, 0x19, 0x9, 0x1}, 0x0, 0x0, 0x0) 4.810265335s ago: executing program 7 (id=6642): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_io_uring_setup(0x22b, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) (async) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) semget(0x1, 0x4, 0x10) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32=r2], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r6, &(0x7f0000000380)=""/144, 0x90) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r7) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x3, 0x300) 4.648475335s ago: executing program 6 (id=6643): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(r0, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff2}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendfile(r3, r0, 0x0, 0x558410e9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071108b00000000000600000000000000950000000000a0a1"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ftruncate(r0, 0x8800000) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff2}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) sendfile(r3, r0, 0x0, 0x558410e9) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071108b00000000000600000000000000950000000000a0a1"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) 3.875950113s ago: executing program 1 (id=6644): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 3.629918539s ago: executing program 1 (id=6645): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007bf2608133f4ed967da1be1b4f0b6f9c4afe40e1"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r0, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 3.465494986s ago: executing program 6 (id=6646): timer_create(0x3, 0x0, &(0x7f0000000300)) (async, rerun: 32) syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x20800, 0x0) utimensat(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0) setrlimit(0x0, &(0x7f0000000180)={0x2, 0x4}) (async) timer_settime(0x0, 0x0, &(0x7f0000000080), 0x0) (async) unshare(0x40000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000100)=0x4, 0x4) (async) wait4(r1, 0x0, 0x40000000, 0xffffffffffffffff) (async, rerun: 32) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) (rerun: 32) 3.43400198s ago: executing program 7 (id=6647): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="1ec4843196e2613e5057e3778afd4944bf368694cfd2fdda6e0fa148a08f59fa8d16ac2f55e37acf9bdaba43fbac61db", 0x30}, {&(0x7f0000000400)="cad8f3314e023258bf2156fb3575dba3d8b6be33f05272e78af3c82bdaa7a3ee214710ed3ccd6e64f8acc04b008e37de74718483cdb60699c3f53e92502e118e707e2c3628d7691580d4db9faff94d66329c87bc871bb8c76ad4572f4dce4f59bfabc62a943d26485d735a725c67b2da237e9b3218540434807634c24d09ac07146fe51e271d04c512203339c1", 0x8d}], 0x2, 0x0, 0x0, 0x800}}], 0x1, 0x4000040) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) (async) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xc, 0x4, 0x0, 0x2, 0x5c, 0x67, 0x0, 0x6, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@rr={0x7, 0xf, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000021d46bfffff2ac14142500000000000000000000000000000000000000009201000000000000a39b00000000f2ffffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000400000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x5, 0x0, 0x3}, 0x20) (async) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0xfffd, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99b5738", 0x4) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb", 0x18}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) 3.37601622s ago: executing program 1 (id=6648): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000500)={r3, 0x1, 0x6, @local}, 0x10) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) socket(0x2, 0x80805, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000020c0)=ANY=[@ANYRES8=0x0]) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) 3.242700479s ago: executing program 4 (id=6649): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x2, 0x2, 0x1}) (async) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0xe7ffffff, 0x0, {}, {0x5, 0x8, 0x0, 0x0, 0x4, 0x40}, 0x400, 0x1, {}, 0x4}) 2.997377099s ago: executing program 7 (id=6650): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000018, &(0x7f0000000380)=@base={0x1e, 0xffffffff, 0x4, 0xfffffc75, 0x0, 0xffffffffffffffff, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58000000100001040000000200000000000000018ea43c810d678385c1dc8f605dd47e398fcb4607b77a5bb3e91f5e4f9ab4b66dd85cddffe5cdf7736df8ba8c121ca999e4254a007b61125b9ea7991ffc63ec1dae", @ANYRES32=0x0, @ANYBLOB="0131010000000000380012800e00010069703665727370616e000000240002801400050000000000000000000000ffff0a010101080004000000000004001200"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000f1fd000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000080000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000f6be91000000000000b702000001000000850000008400fd00b7000000000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000497fdf9c652386a6a2e963f6ad2cbb718800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}}) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={r3, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="18010000", @ANYRES16=r5, @ANYBLOB="00022cbd7000fbdbdf25040000006400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006272696467655f736c6176655f30000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100b60e2b58d687c76f19341dcc217c7e50d667fb111fff3ff29716c63aec44b0b0061b30e366903a0308c0e09c941b7b0d77a481f7319f9d3ef38ae8c74f", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d726567310000000000000000001400020073697430000000000000000000000000080001", @ANYRES32=r10, @ANYBLOB], 0x118}, 0x1, 0x0, 0x0, 0x48000}, 0x24004084) syz_emit_ethernet(0xffffffffffffff89, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000ffffffffffff88a829008101000060070000000000ad43afc58c00d1903acf1b000000000000"], 0x0) 2.974018058s ago: executing program 4 (id=6651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) epoll_create1(0x0) (async) r2 = epoll_create1(0x0) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) (async) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0x11, 0x0, r3}, 0x11) (async) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r3, 0xffffffffffffffff, 0x11, 0x0, r3}, 0x11) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x80000000, 0x80000001, 0x81, 0xb, 0x2]}, &(0x7f00000000c0)=0x50) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0xfffffffd, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x1, 0x1800}}, 0x21}, 0x1, 0x0, 0x0, 0x48840}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000980e5b4035120e00eef0000000010902120001000000000904"], 0x0) 2.579573249s ago: executing program 6 (id=6652): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000180)=ANY=[@ANYBLOB="12010003000000086b1d010140000102030109028a0003010410250904000000010100000a240102000802010208240701060002a00624040410c3052404038f09040100000158e80fffe51158cd01020000090501090004040d010725018003bf03090402000001020000090402010101020000112402010f0105037dc855bd84f1d971c7072401060801000905820900027f000607250101015e08"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008001300001a01"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b02300ffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151f"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) shutdown(r2, 0x1) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000001740)=""/4060, &(0x7f00000004c0)=0xfdc) r3 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328}) io_uring_register$IORING_REGISTER_FILES(r3, 0x23, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="10f434732925c07cb0f79a7f6b39451933a23500f2a56a0ec0270271a13b9cb18196bc4a1b59803f", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x570}}, 0x0) close(r6) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0xf7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000240)=0x1e) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 2.097251242s ago: executing program 2 (id=6653): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) set_mempolicy(0x2, &(0x7f00000001c0)=0x8d22, 0x6) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x16000, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f00000000c0)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x42a5e4b325a47b01}) io_setup(0x2, &(0x7f00000002c0)=0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000000c0)={0x2}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r8, 0x2000) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r6, 0xc0844123, &(0x7f0000002fc0)) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2, r3, &(0x7f0000000080)='\x00'/10, 0xa, 0x8000}]) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) set_mempolicy(0x4000, &(0x7f0000000080)=0x3, 0x6) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) 1.801127581s ago: executing program 1 (id=6654): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1001, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$binfmt_misc(r1, &(0x7f0000000d80)="3e83fa4a46adaa5b83a200", 0xffffffffffffff87) io_setup(0x9, &(0x7f0000000040)=0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6d}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xffffffff}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r5, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)='>', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0xc, 0x10e, 0x6}], 0xc}}], 0x2, 0xc8845) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="2003040000001021d900ed8932cd00000000000000003b5ca595fff1cb54dc434d9a501a686e584f0844ce5598eb9f4acc523407e874c241d2ac84a22bd50246304969bcff1fb28ea8ed70cb7985bcd32d6cffcf1674f6d500d5a3d05af3d4a2d21647c6436d2c705ba896f8fbc78a1b043e6d3642df92a507b5d93507717a3ecec9dff7b5d91e5498cee2f06b06e5d2bc8302f58e49930d12accce0e892c502856dc73ba0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8a, 0x8d, 0x1c, 0x40, 0x57c, 0x2200, 0x34b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe4, 0x0, 0x2, 0x55, 0xcd, 0x89, 0x0, [], [{{0x9, 0x5, 0xf, 0x8, 0x0, 0xfc, 0xd, 0x5}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x4, 0x6, 0xf8}}]}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000240)={0xc, &(0x7f00000001c0)={0x0, 0x22, 0x24, {0x24, 0x2, "0ecf4905fc253d34f8f2c2e027f0e912d20e611fe92c02662f24c04146e0e396865a"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x15, &(0x7f0000000280)={0x20, 0x31, 0x45, "9556cbc7740928c9216fd712ad4696873390d2ba9495e60ed43d9099d8ef40333bf8c3069090c472162d9e44fafd74f7ac6c1e4c6c469c1b913254e272885269707eee7eed"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x7, 0x8, 0x7, 0x8, 0x8, 0x2, 0xc9, 0x5, 0x7, 0x7, 0x5, 0xf}}, &(0x7f0000000440)={0x20, 0x85, 0x4, 0xfffffffe}, &(0x7f00000004c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000500)={0x20, 0x87, 0x2, 0xa}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000600)={{0x12, 0x1, 0xdd43d91fc619cb91, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x38, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d137"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x8cf3, 0x9}, {0x6, 0x24, 0x1a, 0xff, 0x20}, [@obex={0x5, 0x24, 0x15, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xd0, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x80, 0x43, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x51, 0x6}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0xff, 0xe8, 0x0, 0xff, 0x2}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e80)={0xc, &(0x7f0000000dc0)={0x0, 0x7, 0x7e, {0x7e, 0x21, "d7d8e58b07fb85d1f42ea0c93e5bfc5469c073cb6b3560e876e82360e975838b4246da5c8e5e39dd1b286b26f2127e4edfdb483e69e6a6aa3012a7278300abd49fcb052f6544fd43b62b7b3af72d107fa39f9cb01394495e68d45afd78f7c8157683c43d3ca613459d3e4323250db9752f0406a8501587162f4c024c"}}, &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f80)={0x10, &(0x7f0000000ec0)={0x0, 0x14, 0x38, "551954666405c86e324031c131559dc44140083a1661b8a08655d068855564339811aceb0f71d3a1ab46c7932de71561d290839f3e4532cd"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x6e}}) syz_usb_control_io$cdc_ncm(r7, &(0x7f0000000a00)={0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00220c0000000c22850cfa2c5ad36a9b2aeae5f7814adde2b5596ed5389edddd4414846f05d8d9f1926af9619f387c998332880f9ca8c6d7aef92551ce5adb6e4f3f0029ddc4c408377a324f2fe621cd976cb6535bb0475b608b8433f50ef682e7a096c44f1ad2cb5652478fdc179eede498ef2e3dccea3a069fd3bac4d4a9ca2d47e4d1dbcfbf4d37f81b7811aaebb5a67326e14c9be7"], &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c80)={0x24, &(0x7f0000000a40)={0x0, 0x30, 0x46, "576dde84ebeea10fd0a39a195f070d561dd79d601927e4d65b409f5639efa76fab2b0f3c2aeb856953648c7ba2f05c8db5025feae59853be2eaefb04b2e004cfb5e9322adf6f"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xa9}, &(0x7f0000000b00)={0x0, 0x8, 0x1}, &(0x7f0000000b40)={0x20, 0x80, 0x1c, {0x7, 0x1, 0x74e, 0xcb82, 0x7fff, 0x6fd0, 0x3, 0x0, 0x400, 0x12, 0x40, 0xff}}, &(0x7f0000000b80)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000bc0)={0x20, 0x83, 0x2}, &(0x7f0000000c00)={0x20, 0x87, 0x2}, &(0x7f0000000c40)={0x20, 0x89, 0x2, 0x1}}) r8 = gettid() sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r8, 0x21, &(0x7f0000000100)={0x1f}) 1.741617749s ago: executing program 2 (id=6655): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500090122bd7000fcffffff544000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x5) (async) stat64(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c61737400000000040002800800034000000105"], 0xe4}}, 0x20050800) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc4040}, 0x4048804) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) (async) poll(&(0x7f0000000540)=[{0xffffffffffffffff, 0x400}], 0x1, 0x4) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x917a, @dev={0xfe, 0x80, '\x00', 0x34}, 0x2}]}, &(0x7f0000000180)=0xc) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000000c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000440)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000008c0)={0x0, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0xac, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x0, @private2}, @in6={0xa, 0x4e23, 0x5, @empty, 0x4}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x9}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0xfff, @rand_addr=' \x01\x00', 0x1}, @in6={0xa, 0x4e24, 0x401, @remote, 0x5}]}, &(0x7f00000003c0)=0xc) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) (async) write$cgroup_subtree(r9, &(0x7f0000000740)=ANY=[@ANYBLOB="2b63707520e431f104169ff404868e5566798528b8235f2917151349917c9d253dc7ef1537a90900000064858903200000eca42e7fa5318217d4a1be075f9a3037009088808982b4f185c404143f9bc44f8027901548a5ab9381b41c94443bc2498ab37f33041edf307781a8381be60ec13f4f39193341337f9190e22f81afd8762263ed8cf35cb8dc686aba4b0f6d39b415fca7d27db0e4fa77a69d9c96e405f54b07646d4c00c1c05f4560dc5c3881285b5f307d15a4500e213378030731c17605c5792b7fd72fce6ffa5b75f9798c519cc360ac10f7d0"], 0x5) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100003052cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="050300011a8e1c2404442e166e42592ebbcd058008ef0500", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x0) 1.593041607s ago: executing program 2 (id=6656): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 1.588352689s ago: executing program 7 (id=6657): keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/148, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x222) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(r1, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x10000000, 0x0, 0x1000b08, 0x4000000000000009, 0xfffffffffffffffa, 0xb, 0x6}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) io_setup(0x8, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x8020000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x20000}, 0x10, 0xffffffffffffffff}, 0x94) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000200)=""/74, 0x228000, 0x1000, 0x8, 0x1}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x7a084a4263f32ecd) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.552739724s ago: executing program 2 (id=6658): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000040)={0x40, 0x6, 0x6, "92afc102df3e"}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) 853.735579ms ago: executing program 4 (id=6659): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x0, 0x3a, '}S${}:', 0x3a, '', 0x3a, './file0'}, 0x2d) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10108, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x80}, {0x3, 0x0, 0x3}, {0x6, 0x0, 0xff}]}) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_CMP={0x18, 0x3fff, 0x0, 0x0, {{0x8001, 0x1, 0xfffa}, {0x8001, 0x101, 0x0, 0x0, 0xa, 0x1, 0x1}}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 0s ago: executing program 4 (id=6660): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x200000, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x5452, &(0x7f0000000240)=""/77) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x4, 0x7}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x2, 0xa}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xf, 0x5, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) syz_open_dev$dri(&(0x7f0000000180), 0x200000, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) (async) ioctl$EVIOCGLED(r3, 0x5452, &(0x7f0000000240)=""/77) (async) syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) (async) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x4, 0x7}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x2, 0xa}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0xf, 0x5, 0x7}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) kernel console output (not intermixed with test programs): report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1946.334532][T29043] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1946.369403][T29043] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1946.539687][T30597] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6068'. [ 1946.595459][T29043] asix 5-1:0.188: probe with driver asix failed with error -71 [ 1946.766081][T29043] usb 5-1: USB disconnect, device number 50 [ 1949.168338][T29043] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1949.394986][T29043] usb 2-1: Using ep0 maxpacket: 32 [ 1949.410516][T29043] usb 2-1: config 2 has an invalid interface number: 169 but max is 1 [ 1949.429413][T29043] usb 2-1: config 2 has an invalid interface number: 225 but max is 1 [ 1949.437634][T29043] usb 2-1: config 2 has no interface number 0 [ 1949.484820][T29043] usb 2-1: config 2 has no interface number 1 [ 1949.515233][T29043] usb 2-1: config 2 interface 169 altsetting 4 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 1949.552107][T29043] usb 2-1: config 2 interface 169 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1949.568932][T29043] usb 2-1: config 2 interface 225 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1949.592990][T29043] usb 2-1: config 2 interface 169 has no altsetting 0 [ 1949.604699][T29043] usb 2-1: config 2 interface 225 has no altsetting 0 [ 1949.614211][T29043] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=cb.65 [ 1949.638276][T29043] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.808060][T29043] usb 2-1: Product: syz [ 1949.848325][T29043] usb 2-1: Manufacturer: І [ 1949.857972][T29043] usb 2-1: SerialNumber: syz [ 1950.067637][T30631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1950.144600][T30619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.180673][T30619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.525571][T30636] Can't find ip_set type hash:net,por [ 1951.048390][T30083] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1951.200401][T30083] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1951.210516][T30083] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1951.226366][T30083] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1951.250397][T30083] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1951.264039][T30083] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.285515][T30083] usb 5-1: Product: 힃䣰믫嵯礻왳ãŸê„ï°á‚츖ꞎᚶ퓄癅íˆì¾â½“ç€ëŠºè¸·è¦™ë¤¶æ¡¡á’钶臼矒픽亽寒ﱸ䂢찣ࠬê©â€îµµä¿¢å“„ﱥ潄貎ሿի陱⺢嗘筣ऊå»å¬¦éª”伿銜䡕ì˜æ™ã‰½ë—ᷗ縨皯솅ïµï´ˆëª–᠃䖲뇺᳕績呼勃㿙㉞퇋 [ 1951.331701][T30083] usb 5-1: Manufacturer: በ[ 1951.340684][T30083] usb 5-1: SerialNumber: îšáœ¼áµŸî¿­ê™šå‰³â¬¨Ø—㛖ᮒ婕ힷ﷿똔愮ç»ê¼³íŽâ¸ªà¢¤ä±á§›â¤°ë•¿ç¸½è¨é¬í§ì¥œì·ËŸì‡ˆå¡­èŸ¥é£­â£æž’æšåŽ·ã¬€Ä•ìœ€î¡ï—ç‚誂⊟áଡẂ鈸뼎儒俺㋛ [ 1951.460253][T29043] usb 2-1: reset high-speed USB device number 61 using dummy_hcd [ 1951.485962][T29043] usb 2-1: device reset changed ep0 maxpacket size! [ 1951.514224][T29043] carl9170 2-1:2.225: probe with driver carl9170 failed with error -22 [ 1951.531922][T29043] usb 2-1: USB disconnect, device number 61 [ 1951.597491][T30083] cdc_ncm 5-1:1.0: bind() failure [ 1951.613449][T30658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6084'. [ 1951.623380][T30083] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1951.639295][T30083] cdc_ncm 5-1:1.1: bind() failure [ 1951.661240][T30083] usb 5-1: USB disconnect, device number 51 [ 1951.708506][T29043] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1951.880873][T29043] usb 2-1: Using ep0 maxpacket: 16 [ 1951.909937][T29043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.938940][T29043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1951.955212][T29043] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1951.995520][T29043] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1952.010529][T29043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.022530][T29043] usb 2-1: config 0 descriptor?? [ 1952.472864][T30652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1952.486990][T30652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.504543][T29043] hid_parser_main: 9 callbacks suppressed [ 1952.504561][T29043] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 1952.522015][T29043] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 1952.530381][T29043] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 1952.625149][T29043] microsoft 0003:045E:07DA.0046: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1952.738285][T29043] microsoft 0003:045E:07DA.0046: no inputs found [ 1952.744911][T29043] microsoft 0003:045E:07DA.0046: could not initialize ff, continuing anyway [ 1952.789206][T29043] usb 2-1: USB disconnect, device number 62 [ 1952.929915][T30675] fido_id[30675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1953.608981][T30684] gretap1: entered promiscuous mode [ 1953.700385][T30686] random: crng reseeded on system resumption [ 1954.647604][T30695] netlink: 'syz.1.6093': attribute type 3 has an invalid length. [ 1954.831794][T30692] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6093'. [ 1955.213166][T30710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6098'. [ 1955.513506][T26013] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1955.618136][T30716] input: syz1 as /devices/virtual/input/input125 [ 1955.677462][T30713] IPVS: set_ctl: invalid protocol: 12 172.20.20.42:0 [ 1955.731761][T30044] IPVS: starting estimator thread 0... [ 1955.799459][T26013] usb 3-1: device descriptor read/64, error -71 [ 1955.838697][T30718] IPVS: using max 28 ests per chain, 67200 per kthread [ 1956.088900][T26013] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1956.268302][T26013] usb 3-1: device descriptor read/64, error -71 [ 1956.394956][T26013] usb usb3-port1: attempt power cycle [ 1956.748301][T26013] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1957.169067][T26013] usb 3-1: device descriptor read/8, error -71 [ 1957.344557][T30727] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1957.438983][T26013] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1957.480932][T26013] usb 3-1: device descriptor read/8, error -71 [ 1957.608785][T26013] usb usb3-port1: unable to enumerate USB device [ 1957.666463][ T5883] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1957.850386][ T5883] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1957.858797][ T5883] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1957.868064][ T5883] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1957.881026][ T5883] usb 5-1: config 220 has no interface number 2 [ 1957.907162][ T5883] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1957.943898][ T5883] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1957.959689][ T5883] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1957.971953][ T5883] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1957.986347][ T5883] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1958.003364][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.016229][ T5883] usb 5-1: Product: syz [ 1958.022663][ T5883] usb 5-1: Manufacturer: syz [ 1958.032650][ T5883] usb 5-1: SerialNumber: syz [ 1958.304058][ T5883] usb 5-1: selecting invalid altsetting 0 [ 1958.347700][ T5883] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1958.373408][ T5883] uvcvideo 5-1:220.0: No valid video chain found. [ 1958.439223][ T5883] usb 5-1: selecting invalid altsetting 0 [ 1958.450564][ T5883] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1958.474778][ T5883] usb 5-1: USB disconnect, device number 52 [ 1958.513448][T30747] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6107'. [ 1958.567148][T30747] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6107'. [ 1958.728265][T29043] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1958.869014][T29043] usb 3-1: device descriptor read/64, error -71 [ 1959.288383][T29043] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1959.418459][T29043] usb 3-1: device descriptor read/64, error -71 [ 1959.438395][ T5919] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1959.538902][T29043] usb usb3-port1: attempt power cycle [ 1959.588359][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 1959.595588][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1959.615057][ T5919] usb 2-1: config 0 has an invalid interface number: 240 but max is 0 [ 1959.648267][ T5919] usb 2-1: config 0 has no interface number 0 [ 1959.654452][ T5919] usb 2-1: config 0 interface 240 has no altsetting 0 [ 1959.664107][ T5919] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ef [ 1959.679643][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.691372][ T5919] usb 2-1: Product: syz [ 1959.697333][ T5919] usb 2-1: Manufacturer: syz [ 1959.704237][ T5919] usb 2-1: SerialNumber: syz [ 1959.717884][ T5919] usb 2-1: config 0 descriptor?? [ 1959.878350][T29043] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1959.899195][T29043] usb 3-1: device descriptor read/8, error -71 [ 1959.941284][ T5919] uvcvideo 2-1:0.240: Found multiple Units with ID 1 [ 1959.979977][ T5919] uvcvideo 2-1:0.240: Found UVC 0.00 device syz (8086:0b5b) [ 1959.989725][ T5919] uvcvideo 2-1:0.240: No valid video chain found. [ 1960.012409][ T5919] usb 2-1: USB disconnect, device number 63 [ 1960.138298][T29043] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1960.159439][T29043] usb 3-1: device descriptor read/8, error -71 [ 1960.269321][T29043] usb usb3-port1: unable to enumerate USB device [ 1960.832707][T30761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1960.845637][T30761] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1961.943467][T30784] fuse: Unknown parameter 'ÚOçäß%Ž¢*OÌxMz9äýÜ~Íÿ‘2;ŒÔx3`Ø’ë]WTѼäÅabš(KæÕïíÄÑǧ)' [ 1962.153221][T30786] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6118'. [ 1962.545590][T30791] pim6reg: entered allmulticast mode [ 1963.054705][T30788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1963.061192][T30788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1963.068614][T30788] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1963.081337][T30788] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1963.096379][T30788] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1963.124003][T30788] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1963.182871][T30788] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1964.558025][T30816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6124'. [ 1964.648246][T30816] tc_dump_action: action bad kind [ 1964.708656][T28679] Bluetooth: hci2: command 0x0406 tx timeout [ 1965.110095][T13611] Bluetooth: hci5: command 0x0c1a tx timeout [ 1965.110105][T17020] Bluetooth: hci3: command 0x0c1a tx timeout [ 1965.116906][T26371] Bluetooth: hci4: command 0x0c1a tx timeout [ 1965.129029][T28679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1965.386987][T30829] fuse: Bad value for 'fd' [ 1965.490786][T30839] fuse: Invalid rootmode [ 1966.030379][T30851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6131'. [ 1966.045539][T30851] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6131'. [ 1966.113933][T30852] pimreg: entered allmulticast mode [ 1966.125373][T30852] pimreg: left allmulticast mode [ 1966.963783][ T1166] wlan0: Trigger new scan to find an IBSS to join [ 1967.194643][T30862] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6134'. [ 1967.204061][T28679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1968.733124][T30876] fuse: Unknown parameter 'ÚOçäß%Ž¢*OÌxMz9äýÜ~Íÿ‘2;ŒÔx3`Ø’ë]WTѼäÅabš(KæÕïíÄÑǧ)' [ 1968.798926][T30878] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1968.826688][T30878] dvmrp1: linktype set to 804 [ 1969.229101][T30873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1969.235420][T30873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1969.268290][T28679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1969.444840][T30873] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1969.516405][T30873] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1969.533425][T30873] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1969.805680][T30880] block device autoloading is deprecated and will be removed. [ 1970.870847][T13991] wlan0: Trigger new scan to find an IBSS to join [ 1971.268311][T26371] Bluetooth: hci3: command 0x0c1a tx timeout [ 1971.274460][T28679] Bluetooth: hci2: command 0x0406 tx timeout [ 1971.334394][T30899] netlink: zone id is out of range [ 1971.347132][T30899] netlink: zone id is out of range [ 1971.374315][T30899] netlink: zone id is out of range [ 1971.384319][T30899] netlink: zone id is out of range [ 1971.413915][T30899] netlink: zone id is out of range [ 1971.428690][T30899] netlink: zone id is out of range [ 1971.434062][T30899] netlink: zone id is out of range [ 1971.441907][T30899] netlink: zone id is out of range [ 1971.447035][T30899] netlink: zone id is out of range [ 1971.458434][T30899] netlink: zone id is out of range [ 1971.588622][T13611] Bluetooth: hci4: command 0x0c1a tx timeout [ 1971.594721][T26371] Bluetooth: hci5: command 0x0c1a tx timeout [ 1971.598390][T28679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1971.619830][T30910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6143'. [ 1971.629559][T30910] lo: entered promiscuous mode [ 1971.636713][T30910] tunl0: entered promiscuous mode [ 1971.660280][T30910] gre0: entered promiscuous mode [ 1971.695384][T30910] gretap0: entered promiscuous mode [ 1971.841421][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1971.988937][T30910] erspan0: entered promiscuous mode [ 1972.043319][T30910] ip_vti0: entered promiscuous mode [ 1972.110847][T30910] ip6_vti0: entered promiscuous mode [ 1972.352272][T30910] sit0: entered promiscuous mode [ 1972.378476][T30918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1972.420566][T30917] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1972.441759][T30910] ip6tnl0: entered promiscuous mode [ 1972.452294][T30910] ip6gre0: entered promiscuous mode [ 1972.559490][T30910] syz_tun: entered promiscuous mode [ 1972.609518][T30910] ip6gretap0: entered promiscuous mode [ 1972.758043][T30910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.765926][T30910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.780996][T30910] bridge0: entered promiscuous mode [ 1972.811520][T30910] vcan0: entered promiscuous mode [ 1972.895723][T30910] bond0: entered promiscuous mode [ 1972.912364][T30910] bond_slave_0: entered promiscuous mode [ 1972.923995][T30910] bond_slave_1: entered promiscuous mode [ 1972.957927][T30910] team0: entered promiscuous mode [ 1972.974731][T30910] team_slave_0: entered promiscuous mode [ 1973.044302][T30910] team_slave_1: entered promiscuous mode [ 1973.624984][T30910] dummy0: entered promiscuous mode [ 1973.648340][T30910] nlmon0: entered promiscuous mode [ 1973.656038][T30910] caif0: entered promiscuous mode [ 1973.680441][T30910] batadv0: entered promiscuous mode [ 1973.700989][T30910] vxcan0: entered promiscuous mode [ 1973.879728][T30910] vxcan1: entered promiscuous mode [ 1973.893205][T30910] veth0: entered promiscuous mode [ 1973.915068][T30910] veth1: entered promiscuous mode [ 1973.940788][T30910] wg0: entered promiscuous mode [ 1974.001156][T30910] wg1: entered promiscuous mode [ 1974.041044][T30910] wg2: entered promiscuous mode [ 1974.059010][T30910] veth0_to_bridge: entered promiscuous mode [ 1974.097282][T30910] veth1_to_bridge: entered promiscuous mode [ 1974.148820][T30910] veth0_to_bond: entered promiscuous mode [ 1974.173603][T30910] veth1_to_bond: entered promiscuous mode [ 1974.216909][T30910] veth0_to_team: entered promiscuous mode [ 1974.242955][T30910] veth1_to_team: entered promiscuous mode [ 1974.281910][T30910] veth0_to_batadv: entered promiscuous mode [ 1974.301117][T30910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1974.326683][T30910] batadv_slave_0: entered promiscuous mode [ 1974.361584][T30910] veth1_to_batadv: entered promiscuous mode [ 1974.388724][T30910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1974.417238][T30910] batadv_slave_1: entered promiscuous mode [ 1974.511475][T30910] xfrm0: entered promiscuous mode [ 1974.529401][T30910] veth0_to_hsr: entered promiscuous mode [ 1974.580465][T30910] veth1_to_hsr: entered promiscuous mode [ 1974.640186][T30910] hsr0: entered promiscuous mode [ 1974.691827][T30910] veth1_virt_wifi: entered promiscuous mode [ 1974.724839][T30910] veth0_virt_wifi: entered promiscuous mode [ 1974.795244][T30910] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1975.175277][T30910] vlan0: entered promiscuous mode [ 1975.189774][T30910] vlan1: entered promiscuous mode [ 1975.216340][T30910] macvlan0: entered promiscuous mode [ 1975.245544][T30910] macvlan1: entered promiscuous mode [ 1975.263863][T30910] ipvlan0: entered promiscuous mode [ 1975.276232][T30910] ipvlan1: entered promiscuous mode [ 1975.319025][T30910] macvtap0: entered promiscuous mode [ 1975.340582][T30910] macsec0: entered promiscuous mode [ 1975.372775][T30910] geneve0: entered promiscuous mode [ 1975.395576][T30910] geneve1: entered promiscuous mode [ 1975.431342][T30910] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1975.458760][T30910] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1975.484447][T30910] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1975.510880][T30910] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 1975.593101][T30910] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 1975.645282][T30910] mac80211_hwsim hwsim63 wlan1: entered promiscuous mode [ 1976.442309][T13999] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.469284][T13999] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.486572][T13999] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1976.616080][T13999] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1977.954390][T30967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6158'. [ 1978.773135][T26013] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1978.858705][T30933] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1978.952071][T30991] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1978.964978][T26013] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1978.980931][T26013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.002200][T26013] usb 3-1: Product: syz [ 1979.007665][T30991] sctp: [Deprecated]: syz.6.6164 (pid 30991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1979.007665][T30991] Use struct sctp_sack_info instead [ 1979.018382][T30933] usb 5-1: Using ep0 maxpacket: 32 [ 1979.024755][T26013] usb 3-1: Manufacturer: syz [ 1979.033961][T26013] usb 3-1: SerialNumber: syz [ 1979.054037][T26013] usb 3-1: config 0 descriptor?? [ 1979.068988][T30933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1979.080507][T30933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1979.083786][T26013] usb 3-1: Waiting for MOTU Microbook II to boot up... [ 1979.100755][T30933] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1979.126261][T30933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.128930][T26013] usb 3-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1979.155749][T26013] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1979.462897][T26013] usb 3-1: USB disconnect, device number 70 [ 1979.488920][T30933] usb 5-1: config 0 descriptor?? [ 1979.536767][T30933] hub 5-1:0.0: USB hub found [ 1979.723504][T30933] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1979.976190][T30933] hid-generic 0003:046D:C31C.0047: item fetching failed at offset 0/1 [ 1979.999298][T30933] hid-generic 0003:046D:C31C.0047: probe with driver hid-generic failed with error -22 [ 1980.311052][T26013] usb 5-1: USB disconnect, device number 53 [ 1981.113537][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.120173][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.716782][ T30] audit: type=1326 audit(1765532429.673:7939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31034 comm="syz.1.6175" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 1982.196260][T31044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6178'. [ 1982.395223][T31049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6180'. [ 1982.505848][T31051] pimreg: entered allmulticast mode [ 1982.521045][T31051] pimreg: left allmulticast mode [ 1982.774118][T31056] syzkaller0: entered promiscuous mode [ 1982.828404][T31056] syzkaller0: entered allmulticast mode [ 1982.948370][ T5883] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1983.090637][T31062] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6184'. [ 1983.118606][T31062] tc_dump_action: action bad kind [ 1983.133529][ T5883] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1983.143620][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.153742][ T5883] usb 2-1: config 0 descriptor?? [ 1983.228255][T30933] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1983.566306][T30933] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.583734][T30933] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1983.601688][T30933] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1983.628486][T30933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.637210][T30933] usb 3-1: Product: syz [ 1983.647291][T30933] usb 3-1: Manufacturer: syz [ 1983.652373][T30933] usb 3-1: SerialNumber: syz [ 1983.680275][T30933] usb 3-1: config 0 descriptor?? [ 1983.955969][T29043] usb 3-1: USB disconnect, device number 71 [ 1983.979675][T31054] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1983.990379][ T5883] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 1984.002630][ T5883] usb 2-1: USB disconnect, device number 64 [ 1984.330323][T31074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6187'. [ 1984.747184][T31086] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6192'. [ 1984.898280][T30933] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1985.072785][T30933] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1985.096962][T30933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.112361][T30933] usb 2-1: Product: syz [ 1985.119820][T30933] usb 2-1: Manufacturer: syz [ 1985.124508][T30933] usb 2-1: SerialNumber: syz [ 1985.568357][T30923] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1985.728313][T30923] usb 3-1: Using ep0 maxpacket: 32 [ 1985.739471][T30923] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1985.747789][T31080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1985.748286][T31080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.758935][T30923] usb 3-1: config 0 has no interface number 0 [ 1985.770796][T30923] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1985.781148][T30923] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1985.790377][T30923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.799794][T30923] usb 3-1: Product: syz [ 1985.804784][T30923] usb 3-1: Manufacturer: syz [ 1985.805894][T31080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1985.818318][T30923] usb 3-1: SerialNumber: syz [ 1985.825116][T30923] usb 3-1: config 0 descriptor?? [ 1985.831528][T31080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.846560][T30923] smsc75xx v1.0.0 [ 1985.894711][T30933] rtl8150 2-1:1.0: couldn't reset the device [ 1985.901331][T30933] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1985.916421][T30933] usb 2-1: USB disconnect, device number 65 [ 1986.892736][T31096] QAT: Invalid ioctl 21531 [ 1987.100635][T30923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1987.118045][T30923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1987.130178][T30923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1987.346602][T30923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1987.365013][T30923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1987.381298][T30923] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1987.414076][T30923] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1987.547894][T30923] usb 3-1: USB disconnect, device number 72 [ 1988.168449][T30923] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1988.368385][T30923] usb 3-1: Using ep0 maxpacket: 16 [ 1988.410168][T30923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1988.428888][T30923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1988.468472][T30923] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 1988.487239][T30923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1988.498475][T30923] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1988.600267][T30923] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1988.629528][T30923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.689472][T30923] usb 3-1: Product: syz [ 1988.733703][T30923] usb 3-1: Manufacturer: syz [ 1988.744692][T30923] usb 3-1: SerialNumber: syz [ 1988.770998][T30923] usb 3-1: config 0 descriptor?? [ 1988.805888][T30923] port100 3-1:0.0: NFC: Could not get supported command types [ 1988.849161][ T30] audit: type=1804 audit(1765532436.783:7940): pid=31146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.6211" name="/newroot/486/file1" dev="fuse" ino=1 res=1 errno=0 [ 1989.011041][T31135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1989.022654][T31135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.051003][T30923] usb 3-1: USB disconnect, device number 73 [ 1990.002505][ T30] audit: type=1800 audit(1765532437.963:7941): pid=31177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6218" name="file1" dev="tmpfs" ino=304 res=0 errno=0 [ 1990.236616][T31181] team0: Port device syz_tun added [ 1991.349421][T31197] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6223'. [ 1992.531302][T31216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6226'. [ 1992.544801][T31216] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6226'. [ 1994.048930][T19433] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1994.228399][T19433] usb 2-1: Using ep0 maxpacket: 32 [ 1994.240770][T19433] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1994.267673][T19433] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 8 [ 1994.306231][T19433] usb 2-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1994.338280][T19433] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1994.362450][T19433] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1994.376227][T19433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.394457][T19433] usb 2-1: Product: syz [ 1994.403411][T19433] usb 2-1: Manufacturer: ᶦížæƒ¬îƒã§˜ïž©ë‡¨ëž»ï¹ê¾¦î“˜ë¼»è®·è±­ï„‰ë¼¡ì‰¶ä‚•ã¦Œã‡çª ç‹¯í’å’ã¾â€¬ã®êŸ¯è”‡â€›î£žï¢è—©êªˆç§µê›¸á”‹å’肠烖촩캪а笠⌆ãºä¸žì…–늉②ꊡ℠桎äªç…™î„Œã˜Žæ©ì¬¨åŽ¿è­¬ï—ë„﫿㨢ᒲà±ã´ˆæ¯„㩓篆 [ 1994.459513][T19433] usb 2-1: SerialNumber: syz [ 1994.483144][T31236] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1994.496367][T31236] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1994.910158][T31236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1994.936972][T31236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.096512][T19433] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1995.315057][ T5919] usb 2-1: USB disconnect, device number 66 [ 1995.775322][T31269] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6239'. [ 1996.438342][ T30] audit: type=1800 audit(1765532444.373:7942): pid=31271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6241" name="file1" dev="tmpfs" ino=335 res=0 errno=0 [ 1996.959066][T31279] Cannot find add_set index 0 as target [ 1997.620833][T31287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6245'. [ 1997.779143][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6244'. [ 1997.793329][T31291] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6244'. [ 1998.215797][T31287] team0: Port device team_slave_0 removed [ 1998.902218][T31305] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6251'. [ 1998.955152][T31310] loop5: detected capacity change from 0 to 7 [ 1998.959832][T30923] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1998.962288][T19433] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1998.993053][T30983] Dev loop5: unable to read RDB block 7 [ 1998.998804][T30983] loop5: unable to read partition table [ 1999.004686][T30983] loop5: partition table beyond EOD, truncated [ 1999.014361][T31310] Dev loop5: unable to read RDB block 7 [ 1999.030313][T31310] loop5: unable to read partition table [ 1999.036335][T31310] loop5: partition table beyond EOD, truncated [ 1999.044297][T31310] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1999.118551][T30923] usb 3-1: Using ep0 maxpacket: 32 [ 1999.135765][T30923] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1999.152736][T19433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 1999.155329][T30923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.168885][T19433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1999.185498][T19433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1999.193944][T30923] usb 3-1: Product: syz [ 1999.202266][T30923] usb 3-1: Manufacturer: syz [ 1999.208793][T19433] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1999.212386][T30923] usb 3-1: SerialNumber: syz [ 1999.217855][T19433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.235793][T30923] usb 3-1: config 0 descriptor?? [ 1999.235793][T19433] usb 2-1: config 0 descriptor?? [ 1999.236810][T31299] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1999.503031][T19433] usb 2-1: USB disconnect, device number 67 [ 1999.857902][T30923] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1999.919206][T30923] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 1999.950942][T30923] usb 3-1: USB disconnect, device number 74 [ 2000.419990][T31328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2000.689019][T31337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6258'. [ 2000.698329][T31337] FAULT_INJECTION: forcing a failure. [ 2000.698329][T31337] name failslab, interval 1, probability 0, space 0, times 0 [ 2000.713759][T31337] CPU: 1 UID: 0 PID: 31337 Comm: syz.2.6258 Tainted: G L syzkaller #0 PREEMPT(full) [ 2000.713792][T31337] Tainted: [L]=SOFTLOCKUP [ 2000.713801][T31337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2000.713816][T31337] Call Trace: [ 2000.713825][T31337] [ 2000.713834][T31337] dump_stack_lvl+0x189/0x250 [ 2000.713877][T31337] ? __pfx____ratelimit+0x10/0x10 [ 2000.713909][T31337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2000.713935][T31337] ? __pfx__printk+0x10/0x10 [ 2000.713970][T31337] ? __pfx___might_resched+0x10/0x10 [ 2000.713994][T31337] ? fs_reclaim_acquire+0x7d/0x100 [ 2000.714024][T31337] should_fail_ex+0x414/0x560 [ 2000.714060][T31337] should_failslab+0xa8/0x100 [ 2000.714096][T31337] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2000.714132][T31337] ? __alloc_skb+0x255/0x430 [ 2000.714165][T31337] ? napi_skb_cache_get+0x4a5/0x780 [ 2000.714196][T31337] ? napi_skb_cache_get+0x151/0x780 [ 2000.714234][T31337] __alloc_skb+0x255/0x430 [ 2000.714269][T31337] ? __pfx___alloc_skb+0x10/0x10 [ 2000.714309][T31337] ? netlink_ack_tlv_len+0x6c/0x210 [ 2000.714336][T31337] netlink_ack+0x146/0xa50 [ 2000.714367][T31337] ? __pfx___schedule+0x10/0x10 [ 2000.714405][T31337] netlink_rcv_skb+0x28c/0x470 [ 2000.714430][T31337] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2000.714454][T31337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2000.714490][T31337] ? bpf_lsm_capable+0x9/0x20 [ 2000.714515][T31337] ? security_capable+0x7e/0x2e0 [ 2000.714545][T31337] nfnetlink_rcv+0x282/0x2590 [ 2000.714566][T31337] ? __local_bh_enable_ip+0x13e/0x1c0 [ 2000.714590][T31337] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2000.714631][T31337] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2000.714663][T31337] ? lockdep_hardirqs_on+0x98/0x140 [ 2000.714706][T31337] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2000.714736][T31337] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2000.714766][T31337] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2000.714794][T31337] ? rcu_preempt_deferred_qs_irqrestore+0x89c/0xce0 [ 2000.714831][T31337] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 2000.714864][T31337] ? rcu_is_watching+0x15/0xb0 [ 2000.714894][T31337] ? rcu_read_unlock_special+0x3d8/0x520 [ 2000.714917][T31337] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 2000.714939][T31337] ? netlink_deliver_tap+0x2e/0x1b0 [ 2000.714969][T31337] ? netlink_deliver_tap+0x2e/0x1b0 [ 2000.715000][T31337] netlink_unicast+0x82f/0x9e0 [ 2000.715029][T31337] ? __pfx_netlink_unicast+0x10/0x10 [ 2000.715052][T31337] ? netlink_sendmsg+0x642/0xb30 [ 2000.715075][T31337] ? skb_put+0x11b/0x210 [ 2000.715105][T31337] netlink_sendmsg+0x805/0xb30 [ 2000.715139][T31337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2000.715166][T31337] ? __import_iovec+0x5d4/0x7f0 [ 2000.715186][T31337] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2000.715211][T31337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2000.715231][T31337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2000.715255][T31337] __sock_sendmsg+0x21c/0x270 [ 2000.715287][T31337] ____sys_sendmsg+0x505/0x820 [ 2000.715315][T31337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2000.715344][T31337] ? kstrtouint+0x6e/0xe0 [ 2000.715381][T31337] ___sys_sendmsg+0x21f/0x2a0 [ 2000.715408][T31337] ? __pfx____sys_sendmsg+0x10/0x10 [ 2000.715437][T31337] ? rcu_read_lock_any_held+0xb3/0x120 [ 2000.715494][T31337] ? __fget_files+0x2a/0x420 [ 2000.715522][T31337] ? __fget_files+0x3a0/0x420 [ 2000.715561][T31337] __sys_sendmsg+0x164/0x220 [ 2000.715585][T31337] ? __pfx___sys_sendmsg+0x10/0x10 [ 2000.715618][T31337] ? __pfx_ksys_write+0x10/0x10 [ 2000.715646][T31337] ? __do_fast_syscall_32+0xbe/0x570 [ 2000.715670][T31337] __do_fast_syscall_32+0x1f7/0x570 [ 2000.715692][T31337] ? rcu_is_watching+0x15/0xb0 [ 2000.715717][T31337] ? do_fast_syscall_32+0x34/0x80 [ 2000.715744][T31337] do_fast_syscall_32+0x34/0x80 [ 2000.715765][T31337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2000.715793][T31337] RIP: 0023:0xf7f06539 [ 2000.715813][T31337] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2000.715833][T31337] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2000.715857][T31337] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2000.715872][T31337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2000.715885][T31337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2000.715916][T31337] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2000.715930][T31337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2000.715963][T31337] [ 2001.238310][T19433] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2001.392116][T19433] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2001.410731][T19433] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2001.446710][T19433] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2001.479256][T19433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2001.505776][T19433] usb 5-1: config 0 descriptor?? [ 2002.007115][T31354] bridge0: entered promiscuous mode [ 2002.015865][T31354] macsec1: entered promiscuous mode [ 2002.677449][T31368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6269'. [ 2002.687887][T31368] FAULT_INJECTION: forcing a failure. [ 2002.687887][T31368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2002.701675][T31368] CPU: 0 UID: 0 PID: 31368 Comm: syz.1.6269 Tainted: G L syzkaller #0 PREEMPT(full) [ 2002.701700][T31368] Tainted: [L]=SOFTLOCKUP [ 2002.701706][T31368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2002.701716][T31368] Call Trace: [ 2002.701722][T31368] [ 2002.701729][T31368] dump_stack_lvl+0x189/0x250 [ 2002.701753][T31368] ? __pfx____ratelimit+0x10/0x10 [ 2002.701783][T31368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2002.701810][T31368] ? __pfx__printk+0x10/0x10 [ 2002.701856][T31368] should_fail_ex+0x414/0x560 [ 2002.701898][T31368] _copy_to_user+0x31/0xb0 [ 2002.701917][T31368] simple_read_from_buffer+0xe1/0x170 [ 2002.701949][T31368] proc_fail_nth_read+0x1b3/0x220 [ 2002.701978][T31368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2002.702007][T31368] ? rw_verify_area+0x2a6/0x4d0 [ 2002.702028][T31368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2002.702053][T31368] vfs_read+0x200/0xa30 [ 2002.702072][T31368] ? fdget_pos+0x247/0x320 [ 2002.702095][T31368] ? __pfx___mutex_lock+0x10/0x10 [ 2002.702109][T31368] ? __pfx_vfs_read+0x10/0x10 [ 2002.702126][T31368] ? __fget_files+0x2a/0x420 [ 2002.702150][T31368] ? __fget_files+0x3a0/0x420 [ 2002.702169][T31368] ? __fget_files+0x2a/0x420 [ 2002.702196][T31368] ksys_read+0x145/0x250 [ 2002.702213][T31368] ? __pfx_ksys_read+0x10/0x10 [ 2002.702230][T31368] ? __do_fast_syscall_32+0xbe/0x570 [ 2002.702249][T31368] __do_fast_syscall_32+0x1f7/0x570 [ 2002.702264][T31368] ? rcu_is_watching+0x15/0xb0 [ 2002.702282][T31368] ? do_fast_syscall_32+0x34/0x80 [ 2002.702301][T31368] do_fast_syscall_32+0x34/0x80 [ 2002.702316][T31368] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2002.702335][T31368] RIP: 0023:0xf702d539 [ 2002.702349][T31368] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2002.702363][T31368] RSP: 002b:00000000f541d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2002.702379][T31368] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f541d620 [ 2002.702390][T31368] RDX: 000000000000000f RSI: 00000000f73c6ff4 RDI: 0000000000000000 [ 2002.702400][T31368] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2002.702409][T31368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2002.702418][T31368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2002.702440][T31368] [ 2003.108306][T29043] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2003.185031][T30923] usb 5-1: USB disconnect, device number 54 [ 2003.258246][T29043] usb 3-1: Using ep0 maxpacket: 8 [ 2003.258314][ T5919] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2003.285500][T29043] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2003.293932][T29043] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2003.305574][T29043] usb 3-1: config 0 has no interface number 0 [ 2003.314899][T29043] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2003.328895][T29043] usb 3-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 2003.338520][T29043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.357668][T29043] usb 3-1: config 0 descriptor?? [ 2003.371008][T29043] usb 3-1: bad CDC descriptors [ 2003.376957][T29043] cdc_acm 3-1:0.1: Zero length descriptor references [ 2003.384390][T29043] cdc_acm 3-1:0.1: probe with driver cdc_acm failed with error -22 [ 2003.438537][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 2003.445572][ T5919] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 2003.454274][ T5919] usb 2-1: config 0 has no interface number 0 [ 2003.465753][ T5919] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2003.475518][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.483997][ T5919] usb 2-1: Product: syz [ 2003.489199][ T5919] usb 2-1: Manufacturer: syz [ 2003.493900][ T5919] usb 2-1: SerialNumber: syz [ 2003.510193][ T5919] usb 2-1: config 0 descriptor?? [ 2003.533468][ T5919] smsc95xx v2.0.0 [ 2003.573564][T30911] usb 3-1: USB disconnect, device number 75 [ 2003.926003][ T5919] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2003.937211][ T5919] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2004.148593][T13995] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2005.033848][T31383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6273'. [ 2005.112887][T31383] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6273'. [ 2005.692041][T31386] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2005.887605][T31386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6274'. [ 2005.909868][T31389] netlink: 'syz.6.6275': attribute type 1 has an invalid length. [ 2006.273151][T31389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2006.295248][T31391] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 2006.608923][T31377] ucma_write: process 209 (syz.2.6272) changed security contexts after opening file descriptor, this is not allowed. [ 2006.719911][T31401] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6277'. [ 2007.866137][ T30] audit: type=1326 audit(1765532455.823:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.4.6282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2007.977920][ T30] audit: type=1326 audit(1765532455.923:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31415 comm="syz.4.6282" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2008.115641][ T5919] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 2008.166517][ T5919] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 2008.211276][ T5919] usb 2-1: USB disconnect, device number 68 [ 2008.678347][ T5919] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2008.688276][T26013] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2008.773222][ T748] bridge0: port 2(bridge_slave_1) entered disabled state [ 2008.838314][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 2008.846900][T31433] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2008.854991][T26013] usb 5-1: Using ep0 maxpacket: 32 [ 2008.860290][ T5919] usb 2-1: config 0 has an invalid interface number: 61 but max is 1 [ 2008.860319][ T5919] usb 2-1: config 0 has an invalid interface number: 98 but max is 1 [ 2008.860349][ T5919] usb 2-1: config 0 has no interface number 0 [ 2008.860368][ T5919] usb 2-1: config 0 has no interface number 1 [ 2008.875810][ T5919] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 2008.905360][T31433] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6287'. [ 2008.926723][T26013] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 2008.970940][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.973713][T26013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.994651][T26013] usb 5-1: Product: syz [ 2008.995089][ T5919] usb 2-1: Product: syz [ 2009.003414][ T5919] usb 2-1: Manufacturer: syz [ 2009.008036][ T5919] usb 2-1: SerialNumber: syz [ 2009.008385][T26013] usb 5-1: Manufacturer: syz [ 2009.029871][T26013] usb 5-1: SerialNumber: syz [ 2009.047042][T31437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6290'. [ 2009.047924][T26013] usb 5-1: config 0 descriptor?? [ 2009.079171][ T5919] usb 2-1: config 0 descriptor?? [ 2009.214765][T31446] tipc: Enabled bearer , priority 0 [ 2009.222285][ T5919] viperboard 2-1:0.61: version 0.00 found at bus 002 address 069 [ 2009.235531][T31446] syzkaller0: entered promiscuous mode [ 2009.256366][T31446] syzkaller0: entered allmulticast mode [ 2009.262772][ T5919] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2009.281678][ T5919] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 2009.315526][T31424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2009.325248][T31424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2009.380956][T31446] tipc: Resetting bearer [ 2009.389254][ T5919] viperboard 2-1:0.98: version 0.00 found at bus 002 address 069 [ 2009.412095][T31443] tipc: Resetting bearer [ 2009.420133][ T5919] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 2009.431226][ T5919] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 2009.453201][T29043] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2009.464748][T31443] tipc: Disabling bearer [ 2009.478690][ T5919] usb 2-1: USB disconnect, device number 69 [ 2009.480684][T31428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2009.574758][T31428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2009.608627][T26013] airspy 5-1:0.0: Board ID: 00 [ 2009.608653][T26013] airspy 5-1:0.0: Firmware version: [ 2009.741328][T29043] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2009.761381][T29043] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2009.773347][T29043] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.826801][T29043] usb 3-1: config 0 descriptor?? [ 2010.050071][T26013] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 2010.064524][T26013] airspy 5-1:0.0: Registered as swradio24 [ 2010.071999][T26013] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 2010.089962][T26013] usb 5-1: USB disconnect, device number 55 [ 2010.265956][T29043] keytouch 0003:0926:3333.0048: fixing up Keytouch IEC report descriptor [ 2010.273939][T29043] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0048/input/input127 [ 2010.378439][ T5919] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2010.429670][T29043] keytouch 0003:0926:3333.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 2010.495347][T31444] netlink: 'syz.2.6293': attribute type 1 has an invalid length. [ 2010.558753][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 2010.570354][T31468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6293'. [ 2010.624157][ T5919] usb 2-1: config 6 has an invalid interface number: 223 but max is 0 [ 2010.624189][ T5919] usb 2-1: config 6 has no interface number 0 [ 2010.624234][ T5919] usb 2-1: config 6 interface 223 has no altsetting 0 [ 2010.675371][T31444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2010.707574][ T5919] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 2011.048223][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.065499][T31468] bond1: entered promiscuous mode [ 2011.098357][ T5919] usb 2-1: Product: syz [ 2011.102997][T31471] bond1: (slave dummy0): making interface the new active one [ 2011.118793][ T5919] usb 2-1: Manufacturer: syz [ 2011.122431][T31471] dummy0: entered promiscuous mode [ 2011.123422][ T5919] usb 2-1: SerialNumber: syz [ 2011.205173][T31471] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2011.544329][ T5919] hdpvr 2-1:6.223: Could not find bulk-in endpoint [ 2011.575334][ T5919] hdpvr 2-1:6.223: probe with driver hdpvr failed with error -12 [ 2011.604525][ T5919] usb 2-1: USB disconnect, device number 70 [ 2011.832234][T31472] bond1 (unregistering): (slave dummy0): Releasing active interface [ 2011.845575][T31472] dummy0: left promiscuous mode [ 2011.870912][T31472] bond1 (unregistering): Released all slaves [ 2012.031668][ T5919] usb 3-1: USB disconnect, device number 76 [ 2012.213051][T31488] bridge0: entered promiscuous mode [ 2012.229692][T31488] macsec1: entered promiscuous mode [ 2012.311791][T31493] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6305'. [ 2013.032474][T31501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6307'. [ 2013.043444][T31501] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6307'. [ 2013.220272][T31494] netlink: 208 bytes leftover after parsing attributes in process `syz.1.6304'. [ 2013.652922][T31521] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6311'. [ 2013.672349][T31521] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6311'. [ 2013.968706][T29043] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2014.098421][T29043] usb 3-1: device descriptor read/64, error -71 [ 2014.359468][T29043] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2014.568294][T29043] usb 3-1: device descriptor read/64, error -71 [ 2014.689175][T29043] usb usb3-port1: attempt power cycle [ 2015.130133][T29043] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2015.168875][T29043] usb 3-1: device descriptor read/8, error -71 [ 2015.311800][T31534] pim6reg: entered allmulticast mode [ 2015.418339][T29043] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2015.438862][T29043] usb 3-1: device descriptor read/8, error -71 [ 2015.549167][T29043] usb usb3-port1: unable to enumerate USB device [ 2016.889737][T30911] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2017.152494][T31551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6319'. [ 2017.178327][T30911] usb 2-1: Using ep0 maxpacket: 8 [ 2017.192842][T30911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2017.226678][T31551] bridge_slave_1: left allmulticast mode [ 2017.240099][T31551] bridge_slave_1: left promiscuous mode [ 2017.246138][T31551] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.293320][T30911] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2017.328432][T31551] bridge_slave_0: left allmulticast mode [ 2017.334221][T31551] bridge_slave_0: left promiscuous mode [ 2017.340749][T31551] bridge0: port 1(bridge_slave_0) entered disabled state [ 2017.477574][T30911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2017.506639][T30911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.548863][T30911] usb 2-1: Product: syz [ 2017.563692][T30911] usb 2-1: Manufacturer: syz [ 2017.598027][T30911] usb 2-1: SerialNumber: syz [ 2017.630301][T30911] usb 2-1: bad CDC descriptors [ 2017.647207][T30911] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 2017.667128][T30911] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 2017.765428][T31564] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 2017.909521][T31566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6323'. [ 2017.922121][T31566] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6323'. [ 2018.143524][T31542] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6318'. [ 2019.251167][T30911] usb 2-1: USB disconnect, device number 71 [ 2019.667596][ T30] audit: type=1326 audit(1765532467.623:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31595 comm="syz.7.6336" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0 [ 2020.048355][T30911] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2020.210888][T30911] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2020.230947][T30911] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2020.251515][T30911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.290491][T30911] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2020.748379][ T5883] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2020.930415][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2020.940685][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2020.959200][ T5883] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 2021.001030][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.028580][ T5883] usb 3-1: Product: syz [ 2021.069432][ T5883] usb 3-1: Manufacturer: syz [ 2021.074068][ T5883] usb 3-1: SerialNumber: syz [ 2021.112391][ T5883] usb 3-1: config 0 descriptor?? [ 2021.132638][ T5883] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 2021.167502][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2021.197177][ T5883] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 2021.233810][ T5883] usb 3-1: media controller created [ 2021.267421][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2021.336588][T31609] tipc: Started in network mode [ 2021.350353][T31609] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 2021.351762][T30911] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 2021.361104][T31609] tipc: Enabled bearer , priority 10 [ 2021.409905][T31623] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6345'. [ 2021.418632][T30911] stv0680 5-1:4.0: STV(e): camera ping failed!! [ 2021.425539][T30911] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2021.458322][T30911] stv0680 5-1:4.0: last error: 0, command = 0x0 [ 2021.492964][T30911] usb 5-1: USB disconnect, device number 56 [ 2021.495006][ T5883] DVB: Unable to find symbol tda10046_attach() [ 2021.538215][ T5883] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 2021.557148][ T5883] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 2021.574540][T31623] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6345'. [ 2021.988602][T19433] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2022.138263][T19433] usb 5-1: Using ep0 maxpacket: 8 [ 2022.151025][T19433] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.168596][ T5883] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 2022.202644][ T5883] usb 3-1: USB disconnect, device number 81 [ 2022.212710][T19433] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2022.294977][T19433] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2022.316271][T19433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.338638][T19433] usb 5-1: Product: syz [ 2022.346381][T19433] usb 5-1: Manufacturer: syz [ 2022.354916][T19433] usb 5-1: SerialNumber: syz [ 2022.380147][T19433] usb 5-1: bad CDC descriptors [ 2022.390789][T19433] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 2022.410693][T19433] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 2022.634776][T31634] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6344'. [ 2022.723567][T19433] tipc: Node number set to 8432298 [ 2022.855732][T31658] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6351'. [ 2022.894446][T31658] bridge_slave_1: left allmulticast mode [ 2022.900519][T31658] bridge_slave_1: left promiscuous mode [ 2022.906599][T31658] bridge0: port 2(bridge_slave_1) entered disabled state [ 2023.120615][T31658] bridge_slave_0: left allmulticast mode [ 2023.127302][T31658] bridge_slave_0: left promiscuous mode [ 2023.133960][T31658] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.300018][T31669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2023.330790][T31669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.505149][T30923] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2023.641513][T30923] usb 3-1: device descriptor read/64, error -71 [ 2023.890243][T30923] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2024.048281][T30923] usb 3-1: device descriptor read/64, error -71 [ 2024.161504][T30923] usb usb3-port1: attempt power cycle [ 2024.508250][T30923] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2024.528917][T30923] usb 3-1: device descriptor read/8, error -71 [ 2024.619768][T19433] usb 5-1: USB disconnect, device number 57 [ 2024.798671][T30923] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2024.819911][T30923] usb 3-1: device descriptor read/8, error -71 [ 2024.827058][T31683] net_ratelimit: 7 callbacks suppressed [ 2024.827072][T31683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2024.863417][T31683] tap0: tun_chr_ioctl cmd 1074025675 [ 2024.869989][T31683] tap0: persist disabled [ 2024.958712][T30923] usb usb3-port1: unable to enumerate USB device [ 2026.558277][T19433] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2026.788525][T19433] usb 3-1: Using ep0 maxpacket: 32 [ 2026.797500][T19433] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 2027.248690][T19433] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2027.267652][T19433] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2027.290397][T19433] usb 3-1: config 1 has no interface number 0 [ 2027.479150][T19433] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2027.521025][T19433] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2027.568278][T19433] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2027.585019][T19433] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.634262][T19433] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 2027.843168][T19433] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 2028.174796][T31741] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6373'. [ 2028.354649][T31743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6374'. [ 2028.391640][T31747] tipc: Enabled bearer , priority 10 [ 2028.883611][T19433] snd_usb_pod 3-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 2029.258879][T31752] netlink: 'syz.7.6375': attribute type 1 has an invalid length. [ 2029.477055][T31741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2029.574011][T31741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2029.601313][T31741] bond0 (unregistering): Released all slaves [ 2029.690919][T31743] bridge_slave_1: left allmulticast mode [ 2029.714412][T31743] bridge_slave_1: left promiscuous mode [ 2029.760460][T31743] bridge0: port 2(bridge_slave_1) entered disabled state [ 2029.783014][T31743] bridge_slave_0: left allmulticast mode [ 2029.798615][T31743] bridge_slave_0: left promiscuous mode [ 2029.805763][T31743] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.895386][T19433] usb 3-1: USB disconnect, device number 86 [ 2029.904666][T19433] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 2032.908041][ T30] audit: type=1326 audit(1765532480.863:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31779 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2032.980904][ T30] audit: type=1326 audit(1765532480.863:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31779 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2033.012781][ T30] audit: type=1326 audit(1765532480.863:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31779 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2033.092208][T19433] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2033.097263][ T30] audit: type=1326 audit(1765532480.863:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31779 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2033.185375][ T30] audit: type=1326 audit(1765532480.873:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31779 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2033.266653][T19433] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2033.287078][ T30] audit: type=1326 audit(1765532480.873:7951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31779 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2033.290106][T19433] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2033.386383][T19433] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2033.403046][T19433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2033.427194][T19433] usb 2-1: Product: syz [ 2033.443540][T19433] usb 2-1: Manufacturer: syz [ 2033.454425][T19433] usb 2-1: SerialNumber: syz [ 2033.474339][T19433] usb 2-1: config 0 descriptor?? [ 2033.491389][T31783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2033.508914][T17847] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 2033.516926][T31783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2033.554900][ T30] audit: type=1326 audit(1765532480.873:7952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31779 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2033.618982][ T30] audit: type=1326 audit(1765532480.873:7953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31779 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2033.652089][ T30] audit: type=1326 audit(1765532480.873:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31779 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2033.757215][ T30] audit: type=1326 audit(1765532480.873:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31779 comm="syz.4.6386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2033.874165][T31783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2033.909243][T31783] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2034.405783][T31819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6395'. [ 2034.585297][T31822] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2034.753827][T31822] block device autoloading is deprecated and will be removed. [ 2034.790817][T31783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2034.804109][T31783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.089319][T19433] Error reading MAC address [ 2035.507706][T19433] usb 2-1: USB disconnect, device number 72 [ 2036.184830][T13995] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2036.683610][T17847] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2036.745674][T17847] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2036.763687][T17847] usb 5-1: can't read configurations, error -71 [ 2038.054725][T31847] netlink: 'syz.1.6402': attribute type 29 has an invalid length. [ 2038.408253][ T5957] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2038.578425][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 2038.585492][ T5957] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2038.609052][ T5957] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 2038.619649][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.627683][ T5957] usb 2-1: Product: syz [ 2038.632607][ T5957] usb 2-1: Manufacturer: syz [ 2038.637330][ T5957] usb 2-1: SerialNumber: syz [ 2038.659545][ T5957] usb 2-1: config 0 descriptor?? [ 2038.877905][T31847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.891926][T31847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2039.111457][T30911] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2039.268311][T30911] usb 3-1: Using ep0 maxpacket: 8 [ 2039.279711][T31849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6402'. [ 2039.298837][T30911] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2039.316322][T30911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.319214][T31849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6402'. [ 2039.338416][T30911] usb 3-1: Product: syz [ 2039.343715][T30911] usb 3-1: Manufacturer: syz [ 2039.353894][T30911] usb 3-1: SerialNumber: syz [ 2039.375410][T30911] usb 3-1: config 0 descriptor?? [ 2039.387720][T30911] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2040.016948][T31870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2040.031888][T31870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2040.071861][T31870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2040.088874][T31870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2040.111933][T30911] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 2040.124417][T30911] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2040.140762][T30911] usb 3-1: USB disconnect, device number 87 [ 2041.025597][ T5957] usb 2-1: USB disconnect, device number 73 [ 2042.552213][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.558814][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.893568][T31910] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 2042.906677][T31910] bond1 (unregistering): Released all slaves [ 2043.915957][T31921] netlink: 'syz.2.6425': attribute type 10 has an invalid length. [ 2043.924283][ T5919] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2043.985080][T31921] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2044.084980][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 2044.086416][T31927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2044.114337][ T5919] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 2044.122828][ T5919] usb 5-1: config 0 has no interface number 0 [ 2044.133253][ T5919] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2044.145786][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2044.162200][ T5919] usb 5-1: Product: syz [ 2044.166559][ T5919] usb 5-1: Manufacturer: syz [ 2044.172800][ T5919] usb 5-1: SerialNumber: syz [ 2044.181494][ T5919] usb 5-1: config 0 descriptor?? [ 2044.288282][T17847] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2044.395944][T31923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.407331][T31923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.423652][T31923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.435461][T31923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.447076][T31923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.458880][T17847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2044.471442][T17847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2044.482735][T31923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.496905][T17847] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2044.507853][T17847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2044.523090][T31923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.533863][T17847] usb 3-1: SerialNumber: syz [ 2044.542172][T31923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.572624][T31923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.585059][T31923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.626696][ T5919] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2044.679289][ T5919] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 2044.692547][ T5919] uvcvideo 5-1:0.31: Failed to create links for entity 5 [ 2044.706469][ T5919] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 2044.731275][ T5919] usb 5-1: USB disconnect, device number 60 [ 2044.785784][T17847] usb 3-1: 0:2 : does not exist [ 2044.824313][T17847] usb 3-1: USB disconnect, device number 88 [ 2044.872769][T30983] udevd[30983]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2044.970355][T31932] netlink: 148 bytes leftover after parsing attributes in process `syz.7.6428'. [ 2047.064761][T31948] FAULT_INJECTION: forcing a failure. [ 2047.064761][T31948] name failslab, interval 1, probability 0, space 0, times 0 [ 2047.134132][T31948] CPU: 0 UID: 0 PID: 31948 Comm: syz.6.6432 Tainted: G L syzkaller #0 PREEMPT(full) [ 2047.134158][T31948] Tainted: [L]=SOFTLOCKUP [ 2047.134164][T31948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2047.134174][T31948] Call Trace: [ 2047.134181][T31948] [ 2047.134189][T31948] dump_stack_lvl+0x189/0x250 [ 2047.134213][T31948] ? __pfx____ratelimit+0x10/0x10 [ 2047.134235][T31948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2047.134253][T31948] ? __pfx__printk+0x10/0x10 [ 2047.134280][T31948] ? __pfx___might_resched+0x10/0x10 [ 2047.134300][T31948] should_fail_ex+0x414/0x560 [ 2047.134325][T31948] should_failslab+0xa8/0x100 [ 2047.134345][T31948] __kmalloc_noprof+0xdf/0x800 [ 2047.134360][T31948] ? kfree+0x4d/0x660 [ 2047.134379][T31948] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2047.134402][T31948] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2047.134422][T31948] ? tomoyo_domain+0xd8/0x130 [ 2047.134444][T31948] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2047.134467][T31948] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2047.134493][T31948] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2047.134516][T31948] ? __lock_acquire+0x6b6/0x2cf0 [ 2047.134562][T31948] ? __fget_files+0x2a/0x420 [ 2047.134586][T31948] ? __fget_files+0x3a0/0x420 [ 2047.134604][T31948] ? __fget_files+0x2a/0x420 [ 2047.134626][T31948] security_file_ioctl_compat+0xcb/0x2d0 [ 2047.134652][T31948] __ia32_compat_sys_ioctl+0x128/0x840 [ 2047.134669][T31948] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2047.134685][T31948] ? __fget_files+0x3a0/0x420 [ 2047.134709][T31948] ? fput+0xa0/0xd0 [ 2047.134730][T31948] ? ksys_write+0x22a/0x250 [ 2047.134744][T31948] ? exc_page_fault+0x82/0x100 [ 2047.134766][T31948] ? __pfx_ksys_write+0x10/0x10 [ 2047.134784][T31948] ? __do_fast_syscall_32+0xbe/0x570 [ 2047.134825][T31948] __do_fast_syscall_32+0x1f7/0x570 [ 2047.134841][T31948] ? rcu_is_watching+0x15/0xb0 [ 2047.134860][T31948] ? do_fast_syscall_32+0x34/0x80 [ 2047.134879][T31948] do_fast_syscall_32+0x34/0x80 [ 2047.134893][T31948] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2047.134912][T31948] RIP: 0023:0xf7ff6539 [ 2047.134927][T31948] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2047.134941][T31948] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2047.134958][T31948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 2047.134969][T31948] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2047.134979][T31948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2047.134988][T31948] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2047.134997][T31948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2047.135019][T31948] [ 2047.135027][T31948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2048.168629][T31957] wireguard0: entered promiscuous mode [ 2048.205219][T31957] wireguard0: entered allmulticast mode [ 2049.923842][T31980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6440'. [ 2049.940653][T31980] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6440'. [ 2050.166917][T31973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6437'. [ 2050.279131][T31983] loop6: detected capacity change from 0 to 2640 [ 2050.317593][T31983] buffer_io_error: 2001 callbacks suppressed [ 2050.317613][T31983] Buffer I/O error on dev loop6, logical block 0, async page read [ 2050.506229][T31983] Buffer I/O error on dev loop6, logical block 0, async page read [ 2050.583269][T31985] fuse: Unknown parameter 'gid' [ 2050.698644][T31983] Buffer I/O error on dev loop6, logical block 0, async page read [ 2050.720197][T31983] Buffer I/O error on dev loop6, logical block 0, async page read [ 2050.748300][T31983] Buffer I/O error on dev loop6, logical block 0, async page read [ 2050.768338][T31983] Buffer I/O error on dev loop6, logical block 0, async page read [ 2050.805075][T31983] Buffer I/O error on dev loop6, logical block 0, async page read [ 2050.828527][T31983] Buffer I/O error on dev loop6, logical block 0, async page read [ 2050.852056][T31983] ldm_validate_partition_table(): Disk read failed. [ 2050.882354][T31983] Buffer I/O error on dev loop6, logical block 0, async page read [ 2050.912083][T31983] Buffer I/O error on dev loop6, logical block 0, async page read [ 2050.948444][T31983] Dev loop6: unable to read RDB block 0 [ 2050.973207][T31983] loop6: unable to read partition table [ 2051.032495][T31983] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2051.097670][T31991] usb usb8: usbfs: process 31991 (syz.2.6442) did not claim interface 0 before use [ 2051.238085][ T5201] ldm_validate_partition_table(): Disk read failed. [ 2051.248856][ T5201] Dev loop6: unable to read RDB block 0 [ 2051.254538][ T5201] loop6: unable to read partition table [ 2051.543385][T31998] FAULT_INJECTION: forcing a failure. [ 2051.543385][T31998] name failslab, interval 1, probability 0, space 0, times 0 [ 2051.593034][T31998] CPU: 1 UID: 0 PID: 31998 Comm: syz.2.6444 Tainted: G L syzkaller #0 PREEMPT(full) [ 2051.593072][T31998] Tainted: [L]=SOFTLOCKUP [ 2051.593081][T31998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2051.593094][T31998] Call Trace: [ 2051.593103][T31998] [ 2051.593112][T31998] dump_stack_lvl+0x189/0x250 [ 2051.593144][T31998] ? __pfx____ratelimit+0x10/0x10 [ 2051.593175][T31998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2051.593201][T31998] ? __pfx__printk+0x10/0x10 [ 2051.593239][T31998] ? __pfx___might_resched+0x10/0x10 [ 2051.593261][T31998] ? fs_reclaim_acquire+0x7d/0x100 [ 2051.593298][T31998] should_fail_ex+0x414/0x560 [ 2051.593333][T31998] should_failslab+0xa8/0x100 [ 2051.593361][T31998] __kmalloc_noprof+0xdf/0x800 [ 2051.593382][T31998] ? tomoyo_encode+0x28b/0x550 [ 2051.593413][T31998] tomoyo_encode+0x28b/0x550 [ 2051.593444][T31998] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2051.593473][T31998] ? tomoyo_domain+0xd8/0x130 [ 2051.593504][T31998] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2051.593538][T31998] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2051.593575][T31998] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2051.593609][T31998] ? __lock_acquire+0x6b6/0x2cf0 [ 2051.593671][T31998] ? __fget_files+0x2a/0x420 [ 2051.593704][T31998] ? __fget_files+0x3a0/0x420 [ 2051.593731][T31998] ? __fget_files+0x2a/0x420 [ 2051.593763][T31998] security_file_ioctl_compat+0xcb/0x2d0 [ 2051.593798][T31998] __ia32_compat_sys_ioctl+0x128/0x840 [ 2051.593824][T31998] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2051.593847][T31998] ? __fget_files+0x3a0/0x420 [ 2051.593882][T31998] ? fput+0xa0/0xd0 [ 2051.593911][T31998] ? ksys_write+0x22a/0x250 [ 2051.593931][T31998] ? exc_page_fault+0x82/0x100 [ 2051.593963][T31998] ? __pfx_ksys_write+0x10/0x10 [ 2051.593989][T31998] ? __do_fast_syscall_32+0xbe/0x570 [ 2051.594015][T31998] __do_fast_syscall_32+0x1f7/0x570 [ 2051.594037][T31998] ? rcu_is_watching+0x15/0xb0 [ 2051.594061][T31998] ? do_fast_syscall_32+0x34/0x80 [ 2051.594088][T31998] do_fast_syscall_32+0x34/0x80 [ 2051.594109][T31998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2051.594136][T31998] RIP: 0023:0xf7f06539 [ 2051.594154][T31998] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2051.594173][T31998] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2051.594195][T31998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 2051.594210][T31998] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2051.594224][T31998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2051.594236][T31998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2051.594248][T31998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2051.594288][T31998] [ 2051.595202][T31998] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2052.440115][T32015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6449'. [ 2054.017393][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2054.017408][ T30] audit: type=1804 audit(1765532501.973:7965): pid=32029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6452" name="/newroot/88/file1" dev="fuse" ino=1 res=1 errno=0 [ 2054.808628][T32042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6455'. [ 2054.898111][T32042] pimreg: entered allmulticast mode [ 2054.934146][T32042] pimreg: left allmulticast mode [ 2055.023943][T32043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6455'. [ 2056.458122][T32057] FAULT_INJECTION: forcing a failure. [ 2056.458122][T32057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2056.515814][T32057] CPU: 1 UID: 0 PID: 32057 Comm: syz.7.6459 Tainted: G L syzkaller #0 PREEMPT(full) [ 2056.515849][T32057] Tainted: [L]=SOFTLOCKUP [ 2056.515858][T32057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2056.515872][T32057] Call Trace: [ 2056.515882][T32057] [ 2056.515891][T32057] dump_stack_lvl+0x189/0x250 [ 2056.515924][T32057] ? __pfx____ratelimit+0x10/0x10 [ 2056.515955][T32057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2056.515983][T32057] ? __pfx__printk+0x10/0x10 [ 2056.516018][T32057] ? __might_fault+0xb0/0x130 [ 2056.516050][T32057] should_fail_ex+0x414/0x560 [ 2056.516076][T32057] _copy_from_user+0x2d/0xb0 [ 2056.516093][T32057] userfaultfd_ioctl+0x9c9/0x4c80 [ 2056.516115][T32057] ? kasan_save_free_info+0x46/0x50 [ 2056.516137][T32057] ? __kasan_slab_free+0x5c/0x80 [ 2056.516152][T32057] ? kfree+0x1c0/0x660 [ 2056.516173][T32057] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 2056.516197][T32057] ? security_file_ioctl_compat+0xcb/0x2d0 [ 2056.516220][T32057] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 2056.516234][T32057] ? __do_fast_syscall_32+0x1f7/0x570 [ 2056.516248][T32057] ? do_fast_syscall_32+0x34/0x80 [ 2056.516261][T32057] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2056.516286][T32057] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2056.516326][T32057] ? kasan_quarantine_put+0xdd/0x220 [ 2056.516341][T32057] ? lockdep_hardirqs_on+0x98/0x140 [ 2056.516370][T32057] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2056.516393][T32057] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2056.516419][T32057] ? do_vfs_ioctl+0xbe8/0x1430 [ 2056.516435][T32057] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2056.516475][T32057] ? __fget_files+0x2a/0x420 [ 2056.516497][T32057] ? __fget_files+0x3a0/0x420 [ 2056.516516][T32057] ? __fget_files+0x2a/0x420 [ 2056.516537][T32057] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2056.516558][T32057] __ia32_compat_sys_ioctl+0x543/0x840 [ 2056.516575][T32057] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2056.516590][T32057] ? __fget_files+0x3a0/0x420 [ 2056.516614][T32057] ? fput+0xa0/0xd0 [ 2056.516635][T32057] ? ksys_write+0x22a/0x250 [ 2056.516655][T32057] ? exc_page_fault+0x82/0x100 [ 2056.516678][T32057] ? __pfx_ksys_write+0x10/0x10 [ 2056.516700][T32057] ? __do_fast_syscall_32+0xbe/0x570 [ 2056.516726][T32057] __do_fast_syscall_32+0x1f7/0x570 [ 2056.516749][T32057] ? rcu_is_watching+0x15/0xb0 [ 2056.516774][T32057] ? do_fast_syscall_32+0x34/0x80 [ 2056.516810][T32057] do_fast_syscall_32+0x34/0x80 [ 2056.516831][T32057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2056.516856][T32057] RIP: 0023:0xf7ff1539 [ 2056.516870][T32057] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2056.516883][T32057] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2056.516900][T32057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 2056.516917][T32057] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2056.516931][T32057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2056.516944][T32057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2056.516957][T32057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2056.516988][T32057] [ 2056.568202][T32062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6460'. [ 2056.758256][T17847] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2057.018342][T17847] usb 2-1: device descriptor read/64, error -71 [ 2057.149399][T32071] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6464'. [ 2057.214237][T32071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6464'. [ 2057.259143][T32068] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 2057.275553][T17847] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2057.398295][T17847] usb 2-1: device descriptor read/64, error -71 [ 2057.524506][T17847] usb usb2-port1: attempt power cycle [ 2057.868529][T17847] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2057.954095][T17847] usb 2-1: device descriptor read/8, error -71 [ 2058.208450][T17847] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2058.432034][T17847] usb 2-1: device not accepting address 77, error -71 [ 2058.458582][T17847] usb usb2-port1: unable to enumerate USB device [ 2061.274944][T32121] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6475'. [ 2061.918241][T19433] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2062.048348][T19433] usb 3-1: device descriptor read/64, error -71 [ 2062.140918][T32121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2062.161579][T32121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2062.180985][T32121] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 2062.197436][T32121] bond0 (unregistering): Released all slaves [ 2062.289428][T19433] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2062.440989][T19433] usb 3-1: device descriptor read/64, error -71 [ 2062.559695][T19433] usb usb3-port1: attempt power cycle [ 2062.573329][ T30] audit: type=1804 audit(1765532510.523:7966): pid=32135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.6478" name="/newroot/548/file1" dev="fuse" ino=1 res=1 errno=0 [ 2062.758494][T29043] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2062.908393][T19433] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2063.102360][T19433] usb 3-1: device descriptor read/8, error -71 [ 2063.228246][T29043] usb 5-1: Using ep0 maxpacket: 8 [ 2063.325473][T29043] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2063.350214][T29043] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.366577][T29043] usb 5-1: Product: syz [ 2063.371630][T29043] usb 5-1: Manufacturer: syz [ 2063.376256][T29043] usb 5-1: SerialNumber: syz [ 2063.385560][T29043] usb 5-1: config 0 descriptor?? [ 2063.390683][T19433] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2063.404921][T29043] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2063.418946][T19433] usb 3-1: device descriptor read/8, error -71 [ 2063.528772][T19433] usb usb3-port1: unable to enumerate USB device [ 2064.013997][T32165] ptrace attach of "./syz-executor exec"[21331] was attempted by "./syz-executor exec"[32165] [ 2064.026133][T32165] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6485'. [ 2064.261185][T32169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2064.262062][T32169] netlink: 'syz.1.6486': attribute type 5 has an invalid length. [ 2064.800274][T32176] PKCS7: Unknown OID: [4] 4.2(bad) [ 2064.815763][T32176] PKCS7: Only support pkcs7_signedData type [ 2064.847192][ T5919] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 2064.868770][ T5919] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2065.530130][T29043] gspca_m5602: Failed to find a sensor [ 2065.548169][T29043] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 2065.575727][T29043] usb 5-1: USB disconnect, device number 61 [ 2065.600905][T32103] udevd[32103]: setting mode of /dev/bus/usb/005/061 to 020664 failed: No such file or directory [ 2065.629879][T32103] udevd[32103]: setting owner of /dev/bus/usb/005/061 to uid=0, gid=0 failed: No such file or directory [ 2066.508699][T32176] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6488'. [ 2066.718276][T29043] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2066.871030][T29043] usb 5-1: Using ep0 maxpacket: 16 [ 2066.877995][T29043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.889665][T29043] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.950160][T29043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2066.966404][T29043] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 2066.975649][T29043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.010582][T29043] usb 5-1: config 0 descriptor?? [ 2067.068265][T30911] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2067.280624][T30911] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2067.289148][T30911] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2067.308442][T30911] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2067.334464][T30911] usb 2-1: config 220 has no interface number 2 [ 2067.350585][T30911] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2067.385244][T30911] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2067.407775][T30911] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2067.423058][T30911] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2067.471843][T30911] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2067.490558][T30911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.506726][T30911] usb 2-1: Product: syz [ 2067.515647][T30911] usb 2-1: Manufacturer: syz [ 2067.524950][T30911] usb 2-1: SerialNumber: syz [ 2067.640035][T29043] usbhid 5-1:0.0: can't add hid device: -71 [ 2067.656535][T29043] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2067.756357][T29043] usb 5-1: USB disconnect, device number 62 [ 2067.777026][T30911] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2067.808291][T30911] uvcvideo 2-1:220.0: No valid video chain found. [ 2067.824075][T30911] usb 2-1: selecting invalid altsetting 0 [ 2067.869997][T30911] usb 2-1: selecting invalid altsetting 0 [ 2067.884234][T30911] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2067.920160][T30911] usb 2-1: USB disconnect, device number 78 [ 2068.299072][T32212] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6497'. [ 2068.461357][T32212] netlink: 43 bytes leftover after parsing attributes in process `syz.7.6497'. [ 2069.208289][T32222] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2069.356150][T32227] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6500'. [ 2069.695418][T32230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6501'. [ 2070.092820][T32235] syz.2.6502 (32235): drop_caches: 2 [ 2070.934183][T32247] IPv6: addrconf: prefix option has invalid lifetime [ 2071.177015][T32251] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6507'. [ 2071.239211][T32254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6508'. [ 2071.275192][T32256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6506'. [ 2071.286846][T32256] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6506'. [ 2072.241341][ T30] audit: type=1326 audit(1765532520.203:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32263 comm="syz.1.6511" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 2072.477619][T32270] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 2072.989785][T32286] batadv_slave_0: left promiscuous mode [ 2073.012926][T32286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2073.020992][T32286] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 2073.708222][ T5919] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 2073.869925][ T5919] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 29 [ 2073.881483][ T5919] usb 5-1: can't read configurations, error -22 [ 2074.028480][ T5919] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 2074.180814][ T5919] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 29 [ 2074.190354][ T5919] usb 5-1: can't read configurations, error -22 [ 2074.196995][ T5919] usb usb5-port1: attempt power cycle [ 2074.218935][T26237] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 2074.392510][T26237] usb 3-1: not running at top speed; connect to a high speed hub [ 2074.454030][T26237] usb 3-1: config 1 interface 0 altsetting 200 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2074.482433][T26237] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2074.504583][T26237] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.40 [ 2074.518104][T26237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.531160][T26237] usb 3-1: Product: syz [ 2074.537900][T26237] usb 3-1: Manufacturer: syz [ 2074.545599][T26237] usb 3-1: SerialNumber: syz [ 2074.558494][ T5919] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 2074.595040][ T5919] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 29 [ 2074.604323][ T5919] usb 5-1: can't read configurations, error -22 [ 2074.739447][ T5919] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 2074.788601][ T5919] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 29 [ 2074.925657][ T5919] usb 5-1: can't read configurations, error -22 [ 2074.938271][ T5919] usb usb5-port1: unable to enumerate USB device [ 2075.649512][T32314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6524'. [ 2075.668487][T32314] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6524'. [ 2075.974566][T26237] usbhid 3-1:1.0: can't add hid device: -71 [ 2075.984084][T26237] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 2076.008875][T26237] usb 3-1: USB disconnect, device number 93 [ 2076.643018][ T30] audit: type=1326 audit(1765532524.603:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32320 comm="syz.2.6526" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x0 [ 2078.147675][T32344] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2079.268793][T32357] tipc: Started in network mode [ 2079.273734][T32357] tipc: Node identity 22e88198728a, cluster identity 4711 [ 2079.289470][T32357] tipc: Enabled bearer , priority 0 [ 2079.369796][T32357] tipc: Resetting bearer [ 2079.418797][T32356] tipc: Disabling bearer [ 2079.509057][T32364] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6536'. [ 2080.635697][T32374] ip6erspan0: entered allmulticast mode [ 2080.668260][T26237] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 2080.747099][ T30] audit: type=1326 audit(1765532528.703:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32375 comm="syz.7.6543" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0 [ 2080.868689][T26237] usb 3-1: device descriptor read/64, error -71 [ 2081.118740][T26237] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 2081.259876][T26237] usb 3-1: device descriptor read/64, error -71 [ 2081.266428][T32385] loop2: detected capacity change from 0 to 7 [ 2081.275033][T32385] Dev loop2: unable to read RDB block 7 [ 2081.280783][T32385] loop2: AHDI p1 p2 p3 [ 2081.285099][T32385] loop2: partition table partially beyond EOD, truncated [ 2081.292697][T32385] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2081.299840][T32385] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2081.369878][T26237] usb usb3-port1: attempt power cycle [ 2081.748235][T26237] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 2081.771877][T26237] usb 3-1: device descriptor read/8, error -71 [ 2082.028250][T26237] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 2082.061420][T26237] usb 3-1: device descriptor read/8, error -71 [ 2082.168558][T26237] usb usb3-port1: unable to enumerate USB device [ 2083.163965][T32414] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6552'. [ 2084.059262][T32426] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6556'. [ 2084.263961][T32433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6558'. [ 2084.883761][ T30] audit: type=1326 audit(1765532532.813:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32454 comm="syz.4.6574" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 2086.835811][T32473] loop2: detected capacity change from 0 to 7 [ 2086.890352][T32103] Dev loop2: unable to read RDB block 7 [ 2086.896054][T32103] loop2: unable to read partition table [ 2086.911701][T32103] loop2: partition table beyond EOD, truncated [ 2086.929774][T32473] Dev loop2: unable to read RDB block 7 [ 2086.935437][T32473] loop2: unable to read partition table [ 2086.959529][T32473] loop2: partition table beyond EOD, truncated [ 2086.998247][T32473] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2087.210806][ T30] audit: type=1326 audit(1765532535.173:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32479 comm="syz.7.6570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2087.234669][T32481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6570'. [ 2087.256286][ T30] audit: type=1326 audit(1765532535.173:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32479 comm="syz.7.6570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2087.372878][T32488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'. [ 2087.405973][T32488] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6571'. [ 2087.415143][ T30] audit: type=1326 audit(1765532535.173:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32479 comm="syz.7.6570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2087.443974][ T30] audit: type=1326 audit(1765532535.173:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32479 comm="syz.7.6570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2087.466257][ T30] audit: type=1326 audit(1765532535.173:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32479 comm="syz.7.6570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2087.470538][T32490] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6569'. [ 2087.498965][ T30] audit: type=1326 audit(1765532535.193:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32479 comm="syz.7.6570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2087.614573][ T30] audit: type=1326 audit(1765532535.193:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32479 comm="syz.7.6570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2087.645313][T32493] tipc: Enabled bearer , priority 0 [ 2087.678719][ T30] audit: type=1326 audit(1765532535.193:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32479 comm="syz.7.6570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2087.704271][T32493] veth0: entered promiscuous mode [ 2087.713235][T32493] veth0: entered allmulticast mode [ 2087.736266][T32493] tipc: Disabling bearer [ 2087.815297][ T30] audit: type=1326 audit(1765532535.193:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32479 comm="syz.7.6570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2087.854800][T32497] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6573'. [ 2087.871035][ T30] audit: type=1326 audit(1765532535.193:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32479 comm="syz.7.6570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 2088.650991][T32463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6564'. [ 2090.182789][T32521] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6580'. [ 2092.270900][T32547] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6587'. [ 2092.469320][T32552] FAULT_INJECTION: forcing a failure. [ 2092.469320][T32552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2092.488540][T32552] CPU: 1 UID: 0 PID: 32552 Comm: syz.7.6589 Tainted: G L syzkaller #0 PREEMPT(full) [ 2092.488575][T32552] Tainted: [L]=SOFTLOCKUP [ 2092.488583][T32552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2092.488597][T32552] Call Trace: [ 2092.488606][T32552] [ 2092.488615][T32552] dump_stack_lvl+0x189/0x250 [ 2092.488648][T32552] ? __pfx____ratelimit+0x10/0x10 [ 2092.488679][T32552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2092.488706][T32552] ? __pfx__printk+0x10/0x10 [ 2092.488751][T32552] should_fail_ex+0x414/0x560 [ 2092.488786][T32552] _copy_from_user+0x2d/0xb0 [ 2092.488811][T32552] copy_folio_from_user+0x1e4/0x320 [ 2092.488852][T32552] mfill_atomic_copy+0xfe1/0x13f0 [ 2092.488894][T32552] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 2092.488933][T32552] userfaultfd_ioctl+0x2a01/0x4c80 [ 2092.488969][T32552] ? do_fast_syscall_32+0x34/0x80 [ 2092.488988][T32552] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2092.489024][T32552] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2092.489081][T32552] ? kasan_quarantine_put+0xdd/0x220 [ 2092.489104][T32552] ? lockdep_hardirqs_on+0x98/0x140 [ 2092.489145][T32552] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2092.489180][T32552] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2092.489228][T32552] ? do_vfs_ioctl+0xbe8/0x1430 [ 2092.489253][T32552] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2092.489311][T32552] ? __fget_files+0x2a/0x420 [ 2092.489350][T32552] ? __fget_files+0x3a0/0x420 [ 2092.489395][T32552] ? __fget_files+0x2a/0x420 [ 2092.489427][T32552] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2092.489458][T32552] __ia32_compat_sys_ioctl+0x543/0x840 [ 2092.489485][T32552] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2092.489509][T32552] ? __fget_files+0x3a0/0x420 [ 2092.489553][T32552] ? rcu_is_watching+0x15/0xb0 [ 2092.489588][T32552] ? __do_fast_syscall_32+0xbe/0x570 [ 2092.489615][T32552] __do_fast_syscall_32+0x1f7/0x570 [ 2092.489637][T32552] ? rcu_is_watching+0x15/0xb0 [ 2092.489664][T32552] ? do_fast_syscall_32+0x34/0x80 [ 2092.489691][T32552] do_fast_syscall_32+0x34/0x80 [ 2092.489713][T32552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2092.489739][T32552] RIP: 0023:0xf7ff1539 [ 2092.489758][T32552] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2092.489778][T32552] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2092.489802][T32552] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 2092.489818][T32552] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2092.489831][T32552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2092.489844][T32552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2092.489856][T32552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2092.489888][T32552] [ 2093.176388][T32564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6592'. [ 2093.221130][T32564] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 2093.328337][T19433] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2093.490174][T19433] usb 2-1: config 7 has an invalid interface number: 127 but max is 3 [ 2093.499315][T19433] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 2093.514996][T19433] usb 2-1: config 7 has an invalid interface number: 93 but max is 3 [ 2093.523440][ T5957] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2093.581517][T19433] usb 2-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 2093.708489][T19433] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 2093.729633][T32571] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6594'. [ 2093.845087][T19433] usb 2-1: config 7 has an invalid interface number: 71 but max is 3 [ 2093.853575][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 2093.859502][ T5957] usb 3-1: too many configurations: 97, using maximum allowed: 8 [ 2093.896445][T19433] usb 2-1: config 7 has an invalid interface number: 213 but max is 3 [ 2093.918395][T19433] usb 2-1: config 7 has no interface number 0 [ 2093.934189][T19433] usb 2-1: config 7 has no interface number 1 [ 2093.952506][T19433] usb 2-1: config 7 has no interface number 2 [ 2093.972532][T19433] usb 2-1: config 7 has no interface number 3 [ 2093.989767][T19433] usb 2-1: config 7 interface 127 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2094.012979][T19433] usb 2-1: config 7 interface 127 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 2094.035808][T19433] usb 2-1: config 7 interface 127 altsetting 0 endpoint 0xD has invalid maxpacket 935, setting to 64 [ 2094.065331][T19433] usb 2-1: config 7 interface 127 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 2094.089850][T19433] usb 2-1: config 7 interface 127 altsetting 0 endpoint 0x1 has invalid maxpacket 1632, setting to 64 [ 2094.107005][T19433] usb 2-1: config 7 interface 127 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2094.125236][T19433] usb 2-1: config 7 interface 127 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2094.143943][T19433] usb 2-1: config 7 interface 127 altsetting 0 endpoint 0x5 has an invalid bInterval 74, changing to 7 [ 2094.166723][T19433] usb 2-1: config 7 interface 127 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 2094.187714][T19433] usb 2-1: config 7 interface 127 altsetting 0 has a duplicate endpoint with address 0x87, skipping [ 2094.208857][T19433] usb 2-1: config 7 interface 127 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 2094.231064][T19433] usb 2-1: config 7 interface 127 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 2094.256063][T19433] usb 2-1: config 7 interface 127 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 2094.280480][T19433] usb 2-1: config 7 interface 127 altsetting 0 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 2094.298220][T19433] usb 2-1: config 7 interface 93 altsetting 127 has a duplicate endpoint with address 0xC, skipping [ 2094.328242][T19433] usb 2-1: config 7 interface 93 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 2094.348207][T19433] usb 2-1: config 7 interface 93 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 2094.368193][T19433] usb 2-1: config 7 interface 93 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 2094.388161][T19433] usb 2-1: config 7 interface 93 altsetting 127 has a duplicate endpoint with address 0x7, skipping [ 2094.410653][T19433] usb 2-1: config 7 interface 93 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 2094.442960][T19433] usb 2-1: config 7 interface 93 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 2094.470267][ T5957] usb 3-1: string descriptor 0 read error: -71 [ 2094.476492][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805679a000: rx timeout, send abort [ 2094.504084][ T5957] usb 3-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 2094.513287][T19433] usb 2-1: config 7 interface 93 altsetting 127 has a duplicate endpoint with address 0x2, skipping [ 2094.536031][ T5957] usb 3-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 2094.560132][T19433] usb 2-1: config 7 interface 71 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 2094.579272][T19433] usb 2-1: config 7 interface 71 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 2094.591570][ T5957] usb 3-1: rejected 8 configurations due to insufficient available bus power [ 2094.618244][ T5957] usb 3-1: no configuration chosen from 8 choices [ 2094.624814][T19433] usb 2-1: config 7 interface 71 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 2094.638597][ T5957] usb 3-1: USB disconnect, device number 98 [ 2094.662297][T19433] usb 2-1: config 7 interface 71 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 2094.678167][T19433] usb 2-1: config 7 interface 71 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 2094.703596][T19433] usb 2-1: config 7 interface 71 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 2094.758336][T19433] usb 2-1: config 7 interface 71 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 2094.786789][T19433] usb 2-1: config 7 interface 71 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 2094.808594][T19433] usb 2-1: config 7 interface 213 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 2094.823885][T19433] usb 2-1: config 7 interface 213 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 2094.848954][T19433] usb 2-1: config 7 interface 213 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 2094.868773][T19433] usb 2-1: config 7 interface 213 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 2094.886653][T19433] usb 2-1: config 7 interface 213 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 2094.898742][T19433] usb 2-1: config 7 interface 213 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 2094.909563][T19433] usb 2-1: config 7 interface 213 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 2094.920325][T19433] usb 2-1: config 7 interface 213 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 2094.931080][T19433] usb 2-1: config 7 interface 213 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 2094.942156][T19433] usb 2-1: config 7 interface 93 has no altsetting 0 [ 2094.948980][T19433] usb 2-1: config 7 interface 71 has no altsetting 0 [ 2094.955768][T19433] usb 2-1: config 7 interface 213 has no altsetting 0 [ 2094.977876][T19433] usb 2-1: New USB device found, idVendor=0c45, idProduct=6029, bcdDevice=1c.31 [ 2094.987055][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805679a000: abort rx timeout. Force session deactivation [ 2095.006975][T19433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.025511][T32561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2095.096793][T32577] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6595'. [ 2095.245156][T32561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2095.263599][T32561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2095.268245][ T5919] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2095.291433][T19433] usb 2-1: string descriptor 0 read error: -71 [ 2095.380654][T19433] usb 2-1: USB disconnect, device number 79 [ 2095.429707][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 2095.437221][ T5919] usb 5-1: config 4 has an invalid interface number: 8 but max is 0 [ 2095.460941][ T5919] usb 5-1: config 4 has no interface number 0 [ 2095.504275][ T5919] usb 5-1: config 4 interface 8 has no altsetting 0 [ 2095.526064][ T5919] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 2095.541441][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.555804][ T5919] usb 5-1: Product: syz [ 2095.562339][ T5919] usb 5-1: Manufacturer: syz [ 2095.571054][ T5919] usb 5-1: SerialNumber: syz [ 2095.797084][ T5919] opticon 5-1:4.8: opticon converter detected [ 2095.830527][ T5919] usb 5-1: opticon converter now attached to ttyUSB0 [ 2095.858068][ T5919] usb 5-1: USB disconnect, device number 67 [ 2095.912267][ T5919] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 2095.942117][ T5919] opticon 5-1:4.8: device disconnected [ 2096.009871][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2096.009890][ T30] audit: type=1326 audit(1765532543.973:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32593 comm="syz.1.6600" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702d539 code=0x0 [ 2096.386035][T32604] FAULT_INJECTION: forcing a failure. [ 2096.386035][T32604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2096.424809][T32604] CPU: 0 UID: 0 PID: 32604 Comm: syz.7.6603 Tainted: G L syzkaller #0 PREEMPT(full) [ 2096.424845][T32604] Tainted: [L]=SOFTLOCKUP [ 2096.424854][T32604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2096.424867][T32604] Call Trace: [ 2096.424876][T32604] [ 2096.424887][T32604] dump_stack_lvl+0x189/0x250 [ 2096.424919][T32604] ? __pfx____ratelimit+0x10/0x10 [ 2096.424950][T32604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2096.424977][T32604] ? __pfx__printk+0x10/0x10 [ 2096.425021][T32604] should_fail_ex+0x414/0x560 [ 2096.425057][T32604] _copy_from_user+0x2d/0xb0 [ 2096.425082][T32604] copy_folio_from_user+0x1e4/0x320 [ 2096.425122][T32604] mfill_atomic_copy+0xfe1/0x13f0 [ 2096.425160][T32604] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 2096.425197][T32604] userfaultfd_ioctl+0x2a01/0x4c80 [ 2096.425232][T32604] ? do_fast_syscall_32+0x34/0x80 [ 2096.425251][T32604] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2096.425304][T32604] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2096.425363][T32604] ? kasan_quarantine_put+0xdd/0x220 [ 2096.425386][T32604] ? lockdep_hardirqs_on+0x98/0x140 [ 2096.425426][T32604] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2096.425463][T32604] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2096.425508][T32604] ? do_vfs_ioctl+0xbe8/0x1430 [ 2096.425535][T32604] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2096.425595][T32604] ? __fget_files+0x2a/0x420 [ 2096.425638][T32604] ? __fget_files+0x3a0/0x420 [ 2096.425665][T32604] ? __fget_files+0x2a/0x420 [ 2096.425697][T32604] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2096.425727][T32604] __ia32_compat_sys_ioctl+0x543/0x840 [ 2096.425753][T32604] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2096.425776][T32604] ? __fget_files+0x3a0/0x420 [ 2096.425811][T32604] ? fput+0xa0/0xd0 [ 2096.425846][T32604] ? ksys_write+0x22a/0x250 [ 2096.425866][T32604] ? exc_page_fault+0x82/0x100 [ 2096.425897][T32604] ? __pfx_ksys_write+0x10/0x10 [ 2096.425922][T32604] ? __do_fast_syscall_32+0xbe/0x570 [ 2096.425948][T32604] __do_fast_syscall_32+0x1f7/0x570 [ 2096.425970][T32604] ? rcu_is_watching+0x15/0xb0 [ 2096.425995][T32604] ? do_fast_syscall_32+0x34/0x80 [ 2096.426022][T32604] do_fast_syscall_32+0x34/0x80 [ 2096.426042][T32604] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2096.426069][T32604] RIP: 0023:0xf7ff1539 [ 2096.426088][T32604] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2096.426108][T32604] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2096.426132][T32604] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c028aa03 [ 2096.426148][T32604] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2096.426161][T32604] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2096.426173][T32604] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2096.426186][T32604] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2096.426217][T32604] [ 2096.945803][ T30] audit: type=1326 audit(1765532544.903:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32611 comm="syz.7.6607" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0 [ 2098.435198][T19433] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2098.748270][T19433] usb 3-1: Using ep0 maxpacket: 16 [ 2098.757755][T19433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2098.767744][T19433] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2098.783777][T19433] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2098.799721][T19433] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2098.809573][T19433] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.823006][T19433] usb 3-1: Product: syz [ 2098.827325][T19433] usb 3-1: Manufacturer: syz [ 2098.841576][T19433] usb 3-1: SerialNumber: syz [ 2098.856070][T19433] usb 3-1: config 0 descriptor?? [ 2099.108944][T32624] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2099.306530][T19433] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 2099.469223][T19433] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 2099.741969][T19433] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 2099.767270][T19433] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 2099.808460][T19433] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 2100.229473][ T30] audit: type=1326 audit(1765532548.193:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32656 comm="syz.7.6617" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0 [ 2100.338891][T30911] usb 3-1: USB disconnect, device number 99 [ 2100.363975][T30911] mcba_usb 3-1:0.0 can0: device disconnected [ 2100.507444][T32673] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6619'. [ 2100.910308][T32684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6623'. [ 2100.972077][T32684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6623'. [ 2101.239849][T32684] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 2101.288433][T32684] bond0 (unregistering): Released all slaves [ 2102.728891][T30911] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2102.910173][T30911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2102.959963][T30911] usb 2-1: config 0 has no interfaces? [ 2102.980476][T30911] usb 2-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 2103.018238][T30911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.087721][T30911] usb 2-1: config 0 descriptor?? [ 2103.325330][T30911] usb 2-1: USB disconnect, device number 80 [ 2103.868185][ T30] audit: type=1326 audit(1765532551.823:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32743 comm="syz.2.6635" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x0 [ 2103.992444][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2103.998996][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2104.209270][T26237] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2104.388696][T26237] usb 2-1: Using ep0 maxpacket: 32 [ 2104.400780][T26237] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 2104.414307][T26237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2104.422527][T26237] usb 2-1: Product: syz [ 2104.426834][T26237] usb 2-1: Manufacturer: syz [ 2104.433877][T26237] usb 2-1: SerialNumber: syz [ 2104.442290][T26237] usb 2-1: config 0 descriptor?? [ 2104.474979][T32755] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6637'. [ 2104.487640][T26237] rtl8150 2-1:0.0: couldn't find required endpoints [ 2104.496522][T26237] rtl8150 2-1:0.0: probe with driver rtl8150 failed with error -5 [ 2104.760889][T26237] usb 2-1: USB disconnect, device number 81 [ 2105.291749][T32762] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6639'. [ 2105.531526][T32767] netlink: 'syz.1.6641': attribute type 21 has an invalid length. [ 2105.547517][T32767] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6641'. [ 2105.669364][T26237] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 2105.850300][T26237] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 2105.859010][T26237] usb 5-1: config 0 has no interface number 0 [ 2105.866331][T26237] usb 5-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2106.138085][T26237] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2106.196355][T26237] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 2106.218080][T26237] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 2106.260817][T26237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.295712][T26237] usb 5-1: config 0 descriptor?? [ 2106.321851][T32764] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2106.368329][T26237] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input129 [ 2106.638733][T30911] usb 5-1: USB disconnect, device number 68 [ 2106.638865][ C0] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19 [ 2107.360641][ T329] veth1_to_bond: entered allmulticast mode [ 2107.375350][ T329] program syz.1.6648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2107.728716][ T341] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6650'. [ 2107.838620][T26237] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2108.069279][T26237] usb 5-1: Using ep0 maxpacket: 16 [ 2108.083404][T26237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2108.097268][T26237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2108.111112][T26237] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2108.251448][ T324] veth1_to_bond: left allmulticast mode [ 2108.258329][T26237] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2108.269837][T26237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.349462][T26237] usb 5-1: config 0 descriptor?? [ 2108.797345][T26237] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 2108.818419][T26237] microsoft 0003:045E:07DA.004A: ignoring exceeding usage max [ 2108.928662][ T5919] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2108.996040][ T337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2109.006429][ T337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2109.022555][T26237] microsoft 0003:045E:07DA.004A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2109.034518][T26237] microsoft 0003:045E:07DA.004A: no inputs found [ 2109.042251][T26237] microsoft 0003:045E:07DA.004A: could not initialize ff, continuing anyway [ 2109.058573][T26237] usb 5-1: USB disconnect, device number 69 [ 2109.101032][ T360] fido_id[360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2109.125728][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 2109.133616][ T5919] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 2109.144877][ T5919] usb 2-1: config 0 has no interface number 0 [ 2109.154005][ T5919] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2109.163625][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.172015][ T5919] usb 2-1: Product: syz [ 2109.176351][ T5919] usb 2-1: Manufacturer: syz [ 2109.181406][T30911] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2109.189245][ T5919] usb 2-1: SerialNumber: syz [ 2109.196807][ T5919] usb 2-1: config 0 descriptor?? [ 2109.205220][ T5919] smsc95xx v2.0.0 [ 2109.348907][T30911] usb 3-1: Using ep0 maxpacket: 8 [ 2109.359931][T30911] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2109.369214][T30911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.377301][T30911] usb 3-1: Product: syz [ 2109.382238][T30911] usb 3-1: Manufacturer: syz [ 2109.386879][T30911] usb 3-1: SerialNumber: syz [ 2109.398013][T30911] usb 3-1: config 0 descriptor?? [ 2109.594962][ T30] audit: type=1326 audit(1765532557.553:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=361 comm="syz.4.6659" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x0 [ 2109.617191][T30911] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2109.624596][ T5919] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2109.635484][ T5919] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2109.924471][ T5919] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 2109.937673][ T5919] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 2110.495143][ T367] [ 2110.497513][ T367] ===================================================== [ 2110.504455][ T367] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2110.511930][ T367] syzkaller #0 Tainted: G L [ 2110.517926][ T367] ----------------------------------------------------- [ 2110.524872][ T367] syz.4.6660/367 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2110.532428][ T367] ffff8880767c0a98 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2110.541185][ T367] [ 2110.541185][ T367] and this task is already holding: [ 2110.548563][ T367] ffff88801d79c028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2110.558344][ T367] which would create a new lock dependency: [ 2110.564237][ T367] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2110.572351][ T367] [ 2110.572351][ T367] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2110.581797][ T367] (&client->buffer_lock){..-.}-{3:3} [ 2110.581825][ T367] [ 2110.581825][ T367] ... which became SOFTIRQ-irq-safe at: [ 2110.594893][ T367] lock_acquire+0x117/0x340 [ 2110.599593][ T367] _raw_spin_lock+0x2e/0x40 [ 2110.604311][ T367] evdev_pass_values+0xb9/0xbd0 [ 2110.609274][ T367] evdev_events+0x1e6/0x340 [ 2110.613884][ T367] input_pass_values+0x288/0x890 [ 2110.618933][ T367] input_event_dispose+0x3e5/0x6b0 [ 2110.624143][ T367] input_event+0x89/0xe0 [ 2110.628483][ T367] hidinput_hid_event+0x145e/0x1e50 [ 2110.633785][ T367] hid_process_event+0x4be/0x620 [ 2110.638833][ T367] hid_report_raw_event+0xe91/0x1720 [ 2110.644219][ T367] hid_input_report+0x44b/0x580 [ 2110.649181][ T367] hid_irq_in+0x47e/0x6d0 [ 2110.653609][ T367] __usb_hcd_giveback_urb+0x376/0x540 [ 2110.659106][ T367] dummy_timer+0x85f/0x45b0 [ 2110.663726][ T367] __hrtimer_run_queues+0x51c/0xc30 [ 2110.669048][ T367] hrtimer_run_softirq+0x187/0x2b0 [ 2110.674259][ T367] handle_softirqs+0x27d/0x850 [ 2110.679114][ T367] __irq_exit_rcu+0xca/0x1f0 [ 2110.683805][ T367] irq_exit_rcu+0x9/0x30 [ 2110.688155][ T367] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2110.693904][ T367] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2110.699975][ T367] kasan_check_range+0x1d4/0x2c0 [ 2110.705004][ T367] __asan_memset+0x22/0x50 [ 2110.709513][ T367] unwind_next_frame+0xc98/0x2390 [ 2110.714634][ T367] arch_stack_walk+0x11c/0x150 [ 2110.719496][ T367] stack_trace_save+0x9c/0xe0 [ 2110.724270][ T367] kasan_save_track+0x3e/0x80 [ 2110.729037][ T367] kasan_save_free_info+0x46/0x50 [ 2110.734173][ T367] __kasan_slab_free+0x5c/0x80 [ 2110.739037][ T367] kmem_cache_free+0x197/0x620 [ 2110.743902][ T367] __unix_dgram_recvmsg+0x9f9/0xd60 [ 2110.749201][ T367] sock_recvmsg+0x22c/0x270 [ 2110.753819][ T367] sock_read_iter+0x231/0x2f0 [ 2110.758598][ T367] vfs_read+0x55a/0xa30 [ 2110.762861][ T367] ksys_read+0x145/0x250 [ 2110.767228][ T367] do_syscall_64+0xfa/0xf80 [ 2110.771841][ T367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2110.777831][ T367] [ 2110.777831][ T367] to a SOFTIRQ-irq-unsafe lock: [ 2110.784845][ T367] (tasklist_lock){.+.+}-{3:3} [ 2110.784874][ T367] [ 2110.784874][ T367] ... which became SOFTIRQ-irq-unsafe at: [ 2110.797537][ T367] ... [ 2110.797547][ T367] lock_acquire+0x117/0x340 [ 2110.804724][ T367] _raw_read_lock+0x36/0x50 [ 2110.809333][ T367] __do_wait+0xde/0x740 [ 2110.813592][ T367] do_wait+0x1e8/0x4f0 [ 2110.817762][ T367] kernel_wait+0xab/0x170 [ 2110.822193][ T367] call_usermodehelper_exec_work+0xbe/0x230 [ 2110.828179][ T367] process_scheduled_works+0xad1/0x1770 [ 2110.833823][ T367] worker_thread+0x8a0/0xda0 [ 2110.838503][ T367] kthread+0x711/0x8a0 [ 2110.842666][ T367] ret_from_fork+0x599/0xb30 [ 2110.847344][ T367] ret_from_fork_asm+0x1a/0x30 [ 2110.852254][ T367] [ 2110.852254][ T367] other info that might help us debug this: [ 2110.852254][ T367] [ 2110.862484][ T367] Chain exists of: [ 2110.862484][ T367] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 2110.862484][ T367] [ 2110.875614][ T367] Possible interrupt unsafe locking scenario: [ 2110.875614][ T367] [ 2110.883930][ T367] CPU0 CPU1 [ 2110.889293][ T367] ---- ---- [ 2110.894664][ T367] lock(tasklist_lock); [ 2110.898927][ T367] local_irq_disable(); [ 2110.905689][ T367] lock(&client->buffer_lock); [ 2110.913065][ T367] lock(&new->fa_lock); [ 2110.919831][ T367] [ 2110.923296][ T367] lock(&client->buffer_lock); [ 2110.928345][ T367] [ 2110.928345][ T367] *** DEADLOCK *** [ 2110.928345][ T367] [ 2110.936488][ T367] 7 locks held by syz.4.6660/367: [ 2110.941507][ T367] #0: ffff888144f44118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 2110.950756][ T367] #1: ffff88801bbb2230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 2110.960860][ T367] #2: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 2110.970529][ T367] #3: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2110.980124][ T367] #4: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2110.989376][ T367] #5: ffff88801d79c028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2110.999573][ T367] #6: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2111.008645][ T367] [ 2111.008645][ T367] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2111.019045][ T367] -> (&client->buffer_lock){..-.}-{3:3} { [ 2111.024785][ T367] IN-SOFTIRQ-W at: [ 2111.028766][ T367] lock_acquire+0x117/0x340 [ 2111.034920][ T367] _raw_spin_lock+0x2e/0x40 [ 2111.041079][ T367] evdev_pass_values+0xb9/0xbd0 [ 2111.047591][ T367] evdev_events+0x1e6/0x340 [ 2111.053842][ T367] input_pass_values+0x288/0x890 [ 2111.060444][ T367] input_event_dispose+0x3e5/0x6b0 [ 2111.067214][ T367] input_event+0x89/0xe0 [ 2111.073115][ T367] hidinput_hid_event+0x145e/0x1e50 [ 2111.079976][ T367] hid_process_event+0x4be/0x620 [ 2111.086575][ T367] hid_report_raw_event+0xe91/0x1720 [ 2111.093524][ T367] hid_input_report+0x44b/0x580 [ 2111.100022][ T367] hid_irq_in+0x47e/0x6d0 [ 2111.106008][ T367] __usb_hcd_giveback_urb+0x376/0x540 [ 2111.113230][ T367] dummy_timer+0x85f/0x45b0 [ 2111.119413][ T367] __hrtimer_run_queues+0x51c/0xc30 [ 2111.126272][ T367] hrtimer_run_softirq+0x187/0x2b0 [ 2111.133055][ T367] handle_softirqs+0x27d/0x850 [ 2111.139472][ T367] __irq_exit_rcu+0xca/0x1f0 [ 2111.145715][ T367] irq_exit_rcu+0x9/0x30 [ 2111.151612][ T367] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2111.158920][ T367] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2111.166554][ T367] kasan_check_range+0x1d4/0x2c0 [ 2111.173159][ T367] __asan_memset+0x22/0x50 [ 2111.179251][ T367] unwind_next_frame+0xc98/0x2390 [ 2111.185935][ T367] arch_stack_walk+0x11c/0x150 [ 2111.192359][ T367] stack_trace_save+0x9c/0xe0 [ 2111.198788][ T367] kasan_save_track+0x3e/0x80 [ 2111.205138][ T367] kasan_save_free_info+0x46/0x50 [ 2111.211828][ T367] __kasan_slab_free+0x5c/0x80 [ 2111.218248][ T367] kmem_cache_free+0x197/0x620 [ 2111.224666][ T367] __unix_dgram_recvmsg+0x9f9/0xd60 [ 2111.231523][ T367] sock_recvmsg+0x22c/0x270 [ 2111.237699][ T367] sock_read_iter+0x231/0x2f0 [ 2111.244030][ T367] vfs_read+0x55a/0xa30 [ 2111.249847][ T367] ksys_read+0x145/0x250 [ 2111.255741][ T367] do_syscall_64+0xfa/0xf80 [ 2111.261927][ T367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2111.269478][ T367] INITIAL USE at: [ 2111.273378][ T367] lock_acquire+0x117/0x340 [ 2111.279451][ T367] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2111.286226][ T367] evdev_ioctl_handler+0x1095/0x1f10 [ 2111.293077][ T367] __ia32_compat_sys_ioctl+0x543/0x840 [ 2111.300101][ T367] __do_fast_syscall_32+0x1f7/0x570 [ 2111.306871][ T367] do_fast_syscall_32+0x34/0x80 [ 2111.313288][ T367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2111.321195][ T367] } [ 2111.323691][ T367] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 2111.331849][ T367] [ 2111.331849][ T367] the dependencies between the lock to be acquired [ 2111.331860][ T367] and SOFTIRQ-irq-unsafe lock: [ 2111.345376][ T367] -> (tasklist_lock){.+.+}-{3:3} { [ 2111.350689][ T367] HARDIRQ-ON-R at: [ 2111.354846][ T367] lock_acquire+0x117/0x340 [ 2111.361370][ T367] _raw_read_lock+0x36/0x50 [ 2111.367882][ T367] __do_wait+0xde/0x740 [ 2111.374053][ T367] do_wait+0x1e8/0x4f0 [ 2111.380157][ T367] kernel_wait+0xab/0x170 [ 2111.386526][ T367] call_usermodehelper_exec_work+0xbe/0x230 [ 2111.394421][ T367] process_scheduled_works+0xad1/0x1770 [ 2111.401976][ T367] worker_thread+0x8a0/0xda0 [ 2111.408661][ T367] kthread+0x711/0x8a0 [ 2111.414746][ T367] ret_from_fork+0x599/0xb30 [ 2111.421340][ T367] ret_from_fork_asm+0x1a/0x30 [ 2111.428121][ T367] SOFTIRQ-ON-R at: [ 2111.432296][ T367] lock_acquire+0x117/0x340 [ 2111.438818][ T367] _raw_read_lock+0x36/0x50 [ 2111.445343][ T367] __do_wait+0xde/0x740 [ 2111.451521][ T367] do_wait+0x1e8/0x4f0 [ 2111.457605][ T367] kernel_wait+0xab/0x170 [ 2111.463944][ T367] call_usermodehelper_exec_work+0xbe/0x230 [ 2111.471847][ T367] process_scheduled_works+0xad1/0x1770 [ 2111.479398][ T367] worker_thread+0x8a0/0xda0 [ 2111.485989][ T367] kthread+0x711/0x8a0 [ 2111.492064][ T367] ret_from_fork+0x599/0xb30 [ 2111.498660][ T367] ret_from_fork_asm+0x1a/0x30 [ 2111.505445][ T367] INITIAL USE at: [ 2111.509518][ T367] lock_acquire+0x117/0x340 [ 2111.515942][ T367] _raw_write_lock_irq+0xa2/0xf0 [ 2111.522806][ T367] copy_process+0x2185/0x3950 [ 2111.529398][ T367] kernel_clone+0x21e/0x820 [ 2111.535820][ T367] user_mode_thread+0xdd/0x140 [ 2111.542501][ T367] rest_init+0x23/0x300 [ 2111.548577][ T367] start_kernel+0x3a7/0x400 [ 2111.554998][ T367] x86_64_start_reservations+0x24/0x30 [ 2111.562383][ T367] x86_64_start_kernel+0x143/0x1c0 [ 2111.569435][ T367] common_startup_64+0x13e/0x147 [ 2111.576298][ T367] INITIAL READ USE at: [ 2111.580808][ T367] lock_acquire+0x117/0x340 [ 2111.587661][ T367] _raw_read_lock+0x36/0x50 [ 2111.594514][ T367] __do_wait+0xde/0x740 [ 2111.601028][ T367] do_wait+0x1e8/0x4f0 [ 2111.607453][ T367] kernel_wait+0xab/0x170 [ 2111.614152][ T367] call_usermodehelper_exec_work+0xbe/0x230 [ 2111.622397][ T367] process_scheduled_works+0xad1/0x1770 [ 2111.630301][ T367] worker_thread+0x8a0/0xda0 [ 2111.637249][ T367] kthread+0x711/0x8a0 [ 2111.643669][ T367] ret_from_fork+0x599/0xb30 [ 2111.650629][ T367] ret_from_fork_asm+0x1a/0x30 [ 2111.657748][ T367] } [ 2111.660442][ T367] ... key at: [] tasklist_lock+0x18/0x40 [ 2111.668351][ T367] ... acquired at: [ 2111.672324][ T367] _raw_read_lock+0x36/0x50 [ 2111.677013][ T367] send_sigio+0x101/0x370 [ 2111.681528][ T367] dnotify_handle_event+0x169/0x440 [ 2111.687078][ T367] fsnotify+0x1668/0x1ab0 [ 2111.691594][ T367] __fsnotify_parent+0x3fe/0x540 [ 2111.696732][ T367] notify_change+0xc55/0xf40 [ 2111.701583][ T367] do_truncate+0x1a4/0x220 [ 2111.706175][ T367] do_ftruncate+0x4a5/0x560 [ 2111.710853][ T367] __ia32_compat_sys_ftruncate+0x9e/0xf0 [ 2111.716747][ T367] __do_fast_syscall_32+0x1f7/0x570 [ 2111.722122][ T367] do_fast_syscall_32+0x34/0x80 [ 2111.727154][ T367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2111.733660][ T367] [ 2111.735988][ T367] -> (&f_owner->lock){...-}-{3:3} { [ 2111.741295][ T367] IN-SOFTIRQ-R at: [ 2111.745368][ T367] lock_acquire+0x117/0x340 [ 2111.751703][ T367] _raw_read_lock_irqsave+0xaf/0x100 [ 2111.758831][ T367] send_sigurg+0x55/0x420 [ 2111.765100][ T367] sk_send_sigurg+0x6c/0x2e0 [ 2111.771525][ T367] tcp_check_urg+0x200/0x760 [ 2111.777949][ T367] tcp_urg+0x164/0x3f0 [ 2111.783844][ T367] tcp_rcv_established+0xf4c/0x2580 [ 2111.790870][ T367] tcp_v4_do_rcv+0xa90/0x1430 [ 2111.797383][ T367] tcp_v4_rcv+0x2675/0x2f20 [ 2111.803834][ T367] ip_protocol_deliver_rcu+0x221/0x440 [ 2111.811154][ T367] ip_local_deliver_finish+0x3bb/0x6f0 [ 2111.818445][ T367] NF_HOOK+0x30c/0x3a0 [ 2111.824349][ T367] NF_HOOK+0x30c/0x3a0 [ 2111.830258][ T367] __netif_receive_skb+0x143/0x380 [ 2111.837205][ T367] process_backlog+0x622/0x1500 [ 2111.843978][ T367] __napi_poll+0xae/0x320 [ 2111.850140][ T367] net_rx_action+0x672/0xe50 [ 2111.856566][ T367] handle_softirqs+0x27d/0x850 [ 2111.863161][ T367] do_softirq+0xec/0x180 [ 2111.869242][ T367] __local_bh_enable_ip+0x17d/0x1c0 [ 2111.876283][ T367] sk_stream_wait_memory+0x71f/0xf70 [ 2111.883409][ T367] tcp_sendmsg_locked+0x1dfb/0x5520 [ 2111.890524][ T367] tcp_sendmsg+0x2f/0x50 [ 2111.896600][ T367] __sock_sendmsg+0x19c/0x270 [ 2111.903133][ T367] __sys_sendto+0x3bd/0x520 [ 2111.909473][ T367] __ia32_sys_sendto+0xdd/0x100 [ 2111.916161][ T367] __do_fast_syscall_32+0x1f7/0x570 [ 2111.923188][ T367] do_fast_syscall_32+0x34/0x80 [ 2111.929901][ T367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2111.938066][ T367] INITIAL USE at: [ 2111.942056][ T367] lock_acquire+0x117/0x340 [ 2111.948390][ T367] _raw_write_lock_irq+0xa2/0xf0 [ 2111.955076][ T367] __f_setown+0x67/0x370 [ 2111.961064][ T367] do_fcntl+0x173f/0x1a50 [ 2111.967140][ T367] do_compat_fcntl64+0x477/0x720 [ 2111.973829][ T367] __do_fast_syscall_32+0x1f7/0x570 [ 2111.980768][ T367] do_fast_syscall_32+0x34/0x80 [ 2111.987358][ T367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2111.995430][ T367] INITIAL READ USE at: [ 2111.999853][ T367] lock_acquire+0x117/0x340 [ 2112.006533][ T367] _raw_read_lock_irqsave+0xaf/0x100 [ 2112.014000][ T367] send_sigio+0x38/0x370 [ 2112.020427][ T367] dnotify_handle_event+0x169/0x440 [ 2112.027822][ T367] fsnotify+0x180b/0x1ab0 [ 2112.034426][ T367] fsnotify_mkdir+0x122/0x180 [ 2112.041279][ T367] vfs_mkdir+0x54e/0x5b0 [ 2112.047701][ T367] do_mkdirat+0x276/0x4b0 [ 2112.054220][ T367] __ia32_sys_mkdir+0x6c/0x80 [ 2112.061164][ T367] __do_fast_syscall_32+0x1f7/0x570 [ 2112.068728][ T367] do_fast_syscall_32+0x34/0x80 [ 2112.075840][ T367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2112.084351][ T367] } [ 2112.086941][ T367] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2112.095914][ T367] ... acquired at: [ 2112.099810][ T367] _raw_read_lock_irqsave+0xaf/0x100 [ 2112.105282][ T367] send_sigio+0x38/0x370 [ 2112.109724][ T367] kill_fasync+0x24d/0x4d0 [ 2112.114325][ T367] n_tty_receive_buf_common+0x974/0x1300 [ 2112.120140][ T367] tty_port_default_receive_buf+0x6e/0xa0 [ 2112.126045][ T367] flush_to_ldisc+0x24a/0x6e0 [ 2112.130911][ T367] process_scheduled_works+0xad1/0x1770 [ 2112.136635][ T367] worker_thread+0x8a0/0xda0 [ 2112.141431][ T367] kthread+0x711/0x8a0 [ 2112.145685][ T367] ret_from_fork+0x599/0xb30 [ 2112.150453][ T367] ret_from_fork_asm+0x1a/0x30 [ 2112.155416][ T367] [ 2112.157742][ T367] -> (&new->fa_lock){....}-{3:3} { [ 2112.162880][ T367] INITIAL USE at: [ 2112.166779][ T367] lock_acquire+0x117/0x340 [ 2112.172863][ T367] _raw_write_lock_irq+0xa2/0xf0 [ 2112.179377][ T367] fasync_remove_entry+0xf1/0x1c0 [ 2112.185981][ T367] sock_fasync+0x85/0xf0 [ 2112.191791][ T367] __fput+0x8a2/0xa70 [ 2112.197346][ T367] task_work_run+0x1d4/0x260 [ 2112.203511][ T367] get_signal+0x11ec/0x1340 [ 2112.209582][ T367] arch_do_signal_or_restart+0x9a/0x7a0 [ 2112.216708][ T367] exit_to_user_mode_loop+0x87/0x4f0 [ 2112.223559][ T367] __do_fast_syscall_32+0x3cb/0x570 [ 2112.230325][ T367] do_fast_syscall_32+0x34/0x80 [ 2112.236741][ T367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2112.244637][ T367] INITIAL READ USE at: [ 2112.248975][ T367] lock_acquire+0x117/0x340 [ 2112.255478][ T367] _raw_read_lock_irqsave+0xaf/0x100 [ 2112.262767][ T367] kill_fasync+0x199/0x4d0 [ 2112.269198][ T367] sock_wake_async+0x137/0x160 [ 2112.275975][ T367] af_alg_wmem_wakeup+0x3c0/0x440 [ 2112.283013][ T367] aead_recvmsg+0x1340/0x13b0 [ 2112.289694][ T367] sock_recvmsg+0x22c/0x270 [ 2112.296297][ T367] ____sys_recvmsg+0x1c9/0x460 [ 2112.303067][ T367] ___sys_recvmsg+0x1b5/0x510 [ 2112.309754][ T367] do_recvmmsg+0x36a/0x770 [ 2112.316183][ T367] __sys_recvmmsg+0x19d/0x280 [ 2112.323122][ T367] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2112.331292][ T367] __do_fast_syscall_32+0x1f7/0x570 [ 2112.338511][ T367] do_fast_syscall_32+0x34/0x80 [ 2112.345365][ T367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2112.353783][ T367] } [ 2112.356365][ T367] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2112.365143][ T367] ... acquired at: [ 2112.368949][ T367] _raw_read_lock_irqsave+0xaf/0x100 [ 2112.374438][ T367] kill_fasync+0x199/0x4d0 [ 2112.379073][ T367] evdev_pass_values+0x627/0xbd0 [ 2112.384195][ T367] evdev_events+0x1e6/0x340 [ 2112.388883][ T367] input_pass_values+0x288/0x890 [ 2112.394003][ T367] input_event_dispose+0x330/0x6b0 [ 2112.399310][ T367] input_inject_event+0x1dd/0x340 [ 2112.404513][ T367] evdev_write+0x2fc/0x480 [ 2112.409115][ T367] vfs_write+0x27e/0xb30 [ 2112.413534][ T367] ksys_write+0x145/0x250 [ 2112.418043][ T367] __do_fast_syscall_32+0x1f7/0x570 [ 2112.423423][ T367] do_fast_syscall_32+0x34/0x80 [ 2112.428452][ T367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2112.435069][ T367] [ 2112.437390][ T367] [ 2112.437390][ T367] stack backtrace: [ 2112.443282][ T367] CPU: 1 UID: 0 PID: 367 Comm: syz.4.6660 Tainted: G L syzkaller #0 PREEMPT(full) [ 2112.443306][ T367] Tainted: [L]=SOFTLOCKUP [ 2112.443312][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2112.443324][ T367] Call Trace: [ 2112.443333][ T367] [ 2112.443341][ T367] dump_stack_lvl+0x189/0x250 [ 2112.443365][ T367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2112.443385][ T367] ? __pfx__printk+0x10/0x10 [ 2112.443414][ T367] __lock_acquire+0x2a95/0x2cf0 [ 2112.443440][ T367] ? kill_fasync+0x199/0x4d0 [ 2112.443465][ T367] lock_acquire+0x117/0x340 [ 2112.443481][ T367] ? kill_fasync+0x199/0x4d0 [ 2112.443511][ T367] _raw_read_lock_irqsave+0xaf/0x100 [ 2112.443534][ T367] ? kill_fasync+0x199/0x4d0 [ 2112.443559][ T367] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2112.443582][ T367] ? do_raw_spin_lock+0x121/0x290 [ 2112.443609][ T367] kill_fasync+0x199/0x4d0 [ 2112.443634][ T367] ? kill_fasync+0x53/0x4d0 [ 2112.443659][ T367] evdev_pass_values+0x627/0xbd0 [ 2112.443687][ T367] ? evdev_pass_values+0x5a1/0xbd0 [ 2112.443714][ T367] evdev_events+0x1e6/0x340 [ 2112.443737][ T367] ? evdev_events+0x79/0x340 [ 2112.443761][ T367] ? input_pass_values+0x8d/0x890 [ 2112.443784][ T367] input_pass_values+0x288/0x890 [ 2112.443810][ T367] ? input_handle_event+0x70c/0xf30 [ 2112.443830][ T367] input_event_dispose+0x330/0x6b0 [ 2112.443852][ T367] input_inject_event+0x1dd/0x340 [ 2112.443872][ T367] ? input_inject_event+0xb6/0x340 [ 2112.443892][ T367] evdev_write+0x2fc/0x480 [ 2112.443919][ T367] ? __pfx_evdev_write+0x10/0x10 [ 2112.443945][ T367] ? bpf_lsm_file_permission+0x9/0x20 [ 2112.443963][ T367] ? security_file_permission+0x75/0x290 [ 2112.443989][ T367] ? rw_verify_area+0x255/0x4d0 [ 2112.444005][ T367] ? __pfx_evdev_write+0x10/0x10 [ 2112.444031][ T367] vfs_write+0x27e/0xb30 [ 2112.444051][ T367] ? __pfx_vfs_write+0x10/0x10 [ 2112.444067][ T367] ? __fget_files+0x2a/0x420 [ 2112.444089][ T367] ? __fget_files+0x2a/0x420 [ 2112.444110][ T367] ? __fget_files+0x3a0/0x420 [ 2112.444131][ T367] ? __fget_files+0x2a/0x420 [ 2112.444155][ T367] ksys_write+0x145/0x250 [ 2112.444172][ T367] ? __pfx_ksys_write+0x10/0x10 [ 2112.444190][ T367] ? __do_fast_syscall_32+0xbe/0x570 [ 2112.444207][ T367] __do_fast_syscall_32+0x1f7/0x570 [ 2112.444224][ T367] ? rcu_is_watching+0x15/0xb0 [ 2112.444244][ T367] ? do_fast_syscall_32+0x34/0x80 [ 2112.444267][ T367] do_fast_syscall_32+0x34/0x80 [ 2112.444283][ T367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2112.444304][ T367] RIP: 0023:0xf70fd539 [ 2112.444319][ T367] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2112.444335][ T367] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2112.444354][ T367] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 2112.444366][ T367] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000 [ 2112.444376][ T367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2112.444387][ T367] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2112.444397][ T367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2112.444415][ T367] [ 2112.793532][T30911] usb write operation failed. (-71) [ 2112.824136][T30911] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2112.824947][ T368] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6652'. [ 2112.837059][T30911] dvbdev: DVB: registering new adapter (Terratec H7) [ 2112.850404][T30911] usb 3-1: media controller created [ 2112.855922][T30911] usb read operation failed. (-71) [ 2112.862222][T30911] usb write operation failed. (-71) [ 2112.869451][T30911] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2112.883647][T30911] usb 3-1: USB disconnect, device number 100 [ 2112.910538][ T368] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6652'. [ 2112.924559][ T5957] usb 2-1: USB disconnect, device number 82