last executing test programs: 10.470447236s ago: executing program 4 (id=2076): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x23) 9.950507677s ago: executing program 4 (id=2078): r0 = add_key(0x0, 0x0, &(0x7f0000000980)="475a251bdb1e4c438649cdf2494dde32cd76aeabc8ca9492", 0x18, 0xfffffffffffffffb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x1, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x30}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f000030e000/0x3000)=nil, 0x3000, 0x2, 0x8010, 0xffffffffffffffff, 0x30876000) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16=r4, @ANYRES8=r3], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 9.013177098s ago: executing program 2 (id=2080): r0 = eventfd2(0xe5c, 0x100000) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x2040400) io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r3, 0x4, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x2, r5, &(0x7f0000001280)='3', 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x3, 0x43, r4, 0x0, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000140)="f4fb6eac827532", 0x7, 0x2, 0x0, 0x3, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f00000002c0)="0792f27d613e9307f28d4f2897d631d48467048a", 0x14, 0x100000001, 0x0, 0x2, r0}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003f8fa83a268f55472730b19922707b5f587b332cff26404f3e90b615b5bcaea30532468efe1bcfce06bc7bfff5c9fe292440c30c3a79dabeb1f9dfd0eb55bdc5af22d531640308c922c80c2509158b2bdff6e6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0cc5640, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000007100)={0x2020}, 0x2020) write$FUSE_INIT(r7, 0x0, 0x0) read$FUSE(r7, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r9}, 0x10) syz_fuse_handle_req(r7, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) ioctl$FS_IOC_RESVSP(r8, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff}) 8.880172936s ago: executing program 3 (id=2081): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000001a00)="ce", 0x1}, {&(0x7f0000000400)="f702", 0x2}], 0x2, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0x0, 0xf8, 0x0, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x0, 0xff, 0xff, 0x45, [0x0, 0x89ff]}}) sendmsg(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r5, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r5) socket$alg(0x26, 0x5, 0x0) 8.835112881s ago: executing program 0 (id=2082): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = userfaultfd(0x80001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804a031}, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) readv(r2, &(0x7f0000000040), 0x10000000000000ef) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) r5 = socket(0x28, 0x1, 0x0) migrate_pages(0xffffffffffffffff, 0x101, &(0x7f0000000140)=0xb1c8, &(0x7f0000000180)=0x6) r6 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) io_uring_enter(r6, 0x47f6, 0xb277, 0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="ebeba069e39cfc1547e299f4f4a7f71c1926aee1afd7e0", 0x17}, {&(0x7f0000000300)="e8700e444d50a969ff67347cff6127e6ef12ee3819001482a4975a52c1ab9b8b4da6945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf0ddb8a87e649f31b4b0838cd0b157653c5e892962c80f158c443e9a7b8c6ad7d2a8103ef2f4b93766b9a21501f94c1ef8b13756b66f74f46cf801704d2da2e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f00000000000000007b4a241847bf9e343e", 0xc2}], 0x2}], 0x1, 0x40800) recvmsg(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000680)=""/158, 0x9e}], 0x2}, 0x10041) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f000019f000/0x4000)=nil, 0x4000, 0x9) 7.397767878s ago: executing program 0 (id=2085): socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, &(0x7f0000000240)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{&(0x7f0000000400)=@ax25={{0x3, @netrom}, [@default, @null, @bcast, @rose, @null, @netrom, @rose, @rose]}, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/150}, {&(0x7f0000000540)=""/179}, {&(0x7f0000000280)=""/151}, {&(0x7f00000006c0)=""/30}, {&(0x7f0000000700)=""/171}]}}], 0x10149, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x63, 0x0, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r3, r2, 0x0, 0x578410ed) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) shmdt(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 7.190531295s ago: executing program 4 (id=2086): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) write$cgroup_devices(r1, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) unshare(0x100) getdents64(r6, &(0x7f0000000940)=""/4096, 0x1000) lseek(r6, 0x24, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)=@multiplanar_userptr={0x3, 0x5, 0x4, 0x100000, 0x10, {0x0, 0xea60}, {0x2, 0xc, 0x6, 0x8, 0x9, 0x1, "fb4ccd8f"}, 0x6, 0x2, {&(0x7f00000001c0)=[{0x4, 0x7, {0x0}, 0x2e26}, {0x7, 0x7, {0x0}, 0x7c}]}, 0xd96}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x421, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x26d2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0xc080) sendmmsg$inet(r7, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e969367b847955b12a305b77c7d034bb7aaee762818a3c2264f65f06a2d6c36e122aac22f8d4c1283606d18d51aa8190de25027c0173d513242fa324be16d11780f148101e433cd1c764b4b563ccf06f1f4e1e837398ff5fe5830a75cc9c5a0d6726cbd74564889039957cfe7c613d4272589ab0e74a3a4d2f905276fd26494c37a376092d8bdd1aa5c8915492710cfc4748936e5b1e8d15d660b6851e580cf1fd4673dc15d7b14d3c04c8589cb0cd21551989b74cfc6e717e8af5e96f464faccfd5a5eaed7e2628", 0xc8}, {&(0x7f0000000140)="9302cd7750df611b", 0x8}], 0x2}}], 0x1, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x280101) 6.527697357s ago: executing program 2 (id=2087): lseek(0xffffffffffffffff, 0x4, 0x1) r0 = syz_io_uring_setup(0x2687, &(0x7f0000000000)={0x0, 0xe70c, 0x20000, 0x2, 0x232}, &(0x7f0000000080), &(0x7f00000000c0)) pread64(r0, &(0x7f0000000100)=""/79, 0x4f, 0x2b5dba83) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0x7fffffff, @empty, 0x60a}}, 0x5, 0x9, 0x67f6, 0x0, 0x80, 0x101, 0x4}, 0x9c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x8f6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r2, 0x2, 0x20}, 0xc) openat$nullb(0xffffff9c, &(0x7f00000003c0), 0x507000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000400)="8830e8055763fd112318c9478a69750fc6e06fdce7a547cd1da48b615a367da99ccd9d6a832209b78bfd042dc52f1627776fe6f7db0d85d9ff2eda58982db3ed9269f6c0fbc65fc8d03d934d743f3f618de1c17851ca9334418fbdc27f2fa7f80550a3c85ac1f6", 0x67, 0x4, &(0x7f00000004c0)={0x11, 0x15, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)=0x0) ptrace$getregset(0x4204, r5, 0x200, &(0x7f0000001540)={&(0x7f0000000540)=""/4096, 0x1000}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001580)={r2, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1}}}, &(0x7f0000001640)=0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001680)={r6, @in={{0x2, 0x4e24, @loopback}}, 0x347, 0x8, 0xf, 0x9, 0x4, 0x9, 0x4}, 0x9c) r7 = socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$usbfs(&(0x7f0000001740), 0x2, 0x100) ioctl$TCSETA(r1, 0x5406, &(0x7f0000001780)={0x8000, 0x3a5, 0x4, 0x7, 0x10, "a721215a97942540"}) pselect6(0x40, &(0x7f00000017c0)={0x800, 0x1, 0x1, 0x7, 0x1, 0xffffffffffffffff, 0x6, 0x1}, &(0x7f0000001800)={0x4, 0x6a64, 0x1, 0x509, 0x8, 0x2, 0x7, 0x250}, &(0x7f0000001840)={0x2, 0x5, 0x1, 0x2, 0x28, 0xe, 0x8000000000000000, 0x6}, &(0x7f0000001880)={0x0, 0x989680}, &(0x7f0000001900)={&(0x7f00000018c0)={[0xfff, 0x7ff]}, 0x8}) openat$sndseq(0xffffff9c, &(0x7f0000001940), 0x80000) fstatfs(r7, &(0x7f0000001980)=""/4096) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000002980)={0x1e0, 0xff8cced7bb2db8f2, 0x640, 0x384, 0xb10, 0x1, 0x1, 0x2, {0xa6bf, 0xfffffff7, 0x1}, {0xb, 0x7}, {0xf, 0x2, 0x1}, {0x3, 0x7}, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x2f, 0x2, 0x3, 0x6, 0x4, 0x10000, 0x8, 0xd086ecd0188d55ea, 0x0, 0x3}) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003ec0)={r1, 0xe0, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003c00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000003c40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003c80)=[0x0, 0x0, 0x0], 0x0, 0x69, &(0x7f0000003cc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000003d00), &(0x7f0000003d40), 0x8, 0x77, 0x8, 0x8, &(0x7f0000003d80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003f80)={0x11, 0x1a, &(0x7f0000002a40)=@raw=[@jmp={0x5, 0x0, 0x0, 0x1, 0x9, 0x8, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf1b8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000002b40)='GPL\x00', 0x1, 0x1000, &(0x7f0000002b80)=""/4096, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000003b80)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000003bc0)={0x1, 0x4, 0x6, 0x8001}, 0x10, r8, 0xffffffffffffffff, 0x2, &(0x7f0000003f00)=[r3], &(0x7f0000003f40)=[{0x2, 0x4, 0xf, 0x7}, {0x5, 0x1, 0xb, 0xc}], 0x10, 0xa}, 0x94) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000004040)={r2, 0xfffc, 0xffff, 0x8b, 0x9, 0x8000}, 0x14) getsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000004080), &(0x7f00000040c0)=0x4) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000006) recvmmsg(0xffffffffffffffff, &(0x7f000000b5c0)=[{{&(0x7f0000004100)=@caif=@dgm, 0x80, &(0x7f0000004340)=[{&(0x7f0000004180)=""/134, 0x86}, {&(0x7f0000004240)=""/251, 0xfb}], 0x2}, 0x80000000}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004380)=""/65, 0x41}, {&(0x7f0000004400)=""/242, 0xf2}, {&(0x7f0000004500)=""/71, 0x47}, {&(0x7f0000004580)=""/139, 0x8b}, {&(0x7f0000004640)=""/131, 0x83}, {&(0x7f0000004700)=""/21, 0x15}, {&(0x7f0000004740)=""/130, 0x82}, {&(0x7f0000004800)=""/215, 0xd7}], 0x8, &(0x7f0000004940)=""/87, 0x57}, 0x10000}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f00000049c0)=""/48, 0x30}, {&(0x7f0000004a00)=""/220, 0xdc}, {&(0x7f0000004b00)=""/20, 0x14}, {&(0x7f0000004b40)=""/177, 0xb1}], 0x4}, 0x4}, {{&(0x7f0000004c40)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000005cc0)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/75, 0x4b}, {&(0x7f0000006d40)=""/184, 0xb8}], 0x4}, 0x2}, {{&(0x7f0000006e40)=@ax25={{0x3, @netrom}, [@netrom, @netrom, @remote, @bcast, @bcast, @remote, @netrom, @netrom]}, 0x80, &(0x7f0000006fc0)=[{&(0x7f0000006ec0)=""/86, 0x56}, {&(0x7f0000006f40)=""/91, 0x5b}], 0x2}, 0x8}, {{&(0x7f0000007000)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000008680)=[{&(0x7f0000007080)=""/1, 0x1}, {&(0x7f00000070c0)=""/215, 0xd7}, {&(0x7f00000071c0)=""/23, 0x17}, {&(0x7f0000007200)=""/36, 0x24}, {&(0x7f0000007240)=""/151, 0x97}, {&(0x7f0000007300)=""/199, 0xc7}, {&(0x7f0000007400)=""/253, 0xfd}, {&(0x7f0000007500)=""/4096, 0x1000}, {&(0x7f0000008500)=""/189, 0xbd}, {&(0x7f00000085c0)=""/153, 0x99}], 0xa, &(0x7f0000008700)=""/13, 0xd}, 0x7}, {{&(0x7f0000008740)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000088c0)=[{&(0x7f00000087c0)=""/156, 0x9c}, {&(0x7f0000008880)=""/42, 0x2a}], 0x2, &(0x7f0000008900)=""/115, 0x73}, 0xbd}, {{0x0, 0x0, &(0x7f0000008c40)=[{&(0x7f0000008980)=""/69, 0x45}, {&(0x7f0000008a00)=""/105, 0x69}, {&(0x7f0000008a80)=""/244, 0xf4}, {&(0x7f0000008b80)=""/188, 0xbc}], 0x4, &(0x7f0000008c80)=""/235, 0xeb}, 0x6}, {{&(0x7f0000008d80)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f000000a340)=[{&(0x7f0000008e00)=""/244, 0xf4}, {&(0x7f0000008f00)=""/123, 0x7b}, {&(0x7f0000008f80)=""/149, 0x95}, {&(0x7f0000009040)=""/20, 0x14}, {&(0x7f0000009080)=""/207, 0xcf}, {&(0x7f0000009180)=""/55, 0x37}, {&(0x7f00000091c0)=""/227, 0xe3}, {&(0x7f00000092c0)=""/110, 0x6e}, {&(0x7f0000009340)=""/4096, 0x1000}], 0x9, &(0x7f000000a3c0)=""/70, 0x46}, 0x7}, {{0x0, 0x0, &(0x7f000000b540)=[{&(0x7f000000a440)=""/4096, 0x1000}, {&(0x7f000000b440)=""/24, 0x18}, {&(0x7f000000b480)=""/190, 0xbe}], 0x3, &(0x7f000000b580)=""/56, 0x38}, 0x8}], 0xa, 0x12040, &(0x7f000000b740)) 5.955140378s ago: executing program 2 (id=2088): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ae92e84f3b1113d424da9860926d3d4a3f9badf8738105ddbd4ae8149264887414d74b141ea078d47032a34b9bebd2e49d2b9a6209b9d28c6f14dfefce8ac7928501caf78987ccf29205db6af41333404f1ee2e3fc1f4d9a93c34764f812dc57d3a29e8dc5cfb28704e5bed281114b8afbc4254cdba39ba5c51307ce43", 0x7d) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf5000905"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 5.766797553s ago: executing program 3 (id=2090): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600017f3d9da1a1"], 0x8) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) unshare(0x22020600) r4 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc600c7, 0x0) io_uring_enter(r7, 0xbbc, 0xd582, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0xa, @pix_mp={0x1, 0x2, 0x5741255f, 0x6, 0x3, [{0x4, 0xb}, {0x10001, 0xa7000000}, {0x6}, {0x9, 0x9}, {0x3, 0x8}, {0x2, 0xe15}, {0x4, 0x5}, {0x9ec, 0xfffffff7}], 0x9, 0x1, 0x8, 0x2, 0x6}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000100)=[{r3, 0x144}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) 5.582905802s ago: executing program 0 (id=2091): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x4008af22, &(0x7f0000000280)) r4 = getpid() syz_pidfd_open(r4, 0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x12) socket(0xb, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newsa={0xfc, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff, 0x9544, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x94e, 0x7}, {0x40000, 0x1, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xe2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xa5}}]}, 0xfc}}, 0x4000084) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000580)={0x5, @raw_data="e1b3e2fb19f3de0f155f957001ed0b6d585b486a1fa8743db2849d0a05b8a5b6d403d19118b0caf96216ade4c99afa9c2d435fda334600d0dcad52bd67d034b17acb09b2f084efa2a40aeb57558091039ff479cda324a9a7c75355fc13414f0ffef95c5d20ca0bd8973b26308e23bb381991069422d4ee50a670573cfee1b2f026e672c8abad3573b62b15499693827453df4b6f7ae84f6cadd25bbe19c759020d4b3171ea2f0d2be38a8b8c961c4e92c37c929204ff8616dab4e15b53489411738da1152117359c"}) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) socket(0x22, 0x800, 0x80000000) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000000380)="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", 0x35e}, {&(0x7f00000041c0)="1269da71e0cc9189ddd4d5bc965c", 0xe}], 0x2, 0x0, 0x0, 0x4}}], 0x1, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x1) getsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x5608, 0x3) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x15, 0x7, 0x0, 0x0, 0x10, 0x0}) 5.148189189s ago: executing program 1 (id=2092): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000000000010203040506070b0c0d0e0f1011121314773810162d963415161718191a1b1c1d1e1f0b41b7f661a3e1bdcd1ca6ff2395202122232425262728292a2b2c2d2e2f303107000000000000"], 0x48, r0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000003240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000440)=0x1, &(0x7f0000000480)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000380)={0x1ff, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) close(r5) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0x18000c, 0x3, 0x59c, 0xffffffffffffffff}) write$binfmt_register(r7, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '#! ', 0x3a, '#\xa1\x11', 0x3a, './file1', 0x3a, [0x4f, 0x43, 0x50, 0x46, 0x4f, 0x50]}, 0x33) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f000000d1c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a65b2a966756c5e6ae46ffc4bf649f9744bc6c023dacd2c0ad144cde6e2379f398dcfbae9b3ab79758de66ae1141eb19929f52544899", 0x36}, {&(0x7f0000000200)="6ce71899edfc0073799e14ff58e92f9af002f74060088f723871a6c1d289971c686aae5dc8f56140e8eb33ad59c68e71c1999986f3d5a5c3ee524e136c87a3ba7426fecb5cde2e40f07e7f3c6b8d72908dee6fd45178ff71706552f8a5bb33ad7fa20f4621cdc8977997b8", 0x6b}], 0x2}}, {{&(0x7f0000001b80)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @remote}, 0x4, 0x1, 0x0, 0x2}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c00)="88", 0x1}], 0x1}}], 0x2, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0xfffff21b, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000003640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000029000000370000003c0000001000000010000000290000000800000007000000"], 0x24}}], 0x1, 0x4001c00) 4.553412012s ago: executing program 3 (id=2093): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004000) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003800800024000000000080001400000000040f503801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200abf4c00000000000000000200000009000200739e7a30000000000900010073797a30"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r2 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed44) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000004c927c930357eb42aa26230134705001000445017740000000000000a00000a1400000011"], 0x28}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x240040d1, 0x0, 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000280)="e142a02791ebcc28eb1be039322c5281161be6b2f4466a4018b72e31d30e0a3709281d3ed490d765359fad03c6c276cad96b4f5dbc9e27e285df8eec85600353c120a9548a12dc74e4961bad1bb1f6d8c9e7767ebc646aa7cf032a4ce0dc493735c3c5b857dc4c193f6b1d1b6752aae5", 0x70}, {&(0x7f0000000100)="0cbd617adaba9a6eaa8ed545654e24a22cac308e59d0b6cb2144c15990532848b05182d53d8bd44199a4352abf738dfa7258aea4", 0x34}, {&(0x7f0000000300)="53e9d92e18dcd5b2226b4ca19b7ec60590ceff52340bbb6caccdf6d1dba455879954e42c4fd17059aef98ba4a41b61cdd8a7fbc3b83910bc6d49db0d8691d865b9a1231920735a2ef79b82454a8d69c1ef76bf4e2d0452ca4075562433b3e381c28162", 0x63}, {&(0x7f0000000600)="91a0dfc47730d98b9d2850fa489489e792e367b78fc593426ce589145ea8ff11869c972293c15a819acfd1a7c270e9693bb20820df8729edbe520f41e24db88b97edf1e16eea3ee9cf3e719d1c852ebe12f6dcbf34cd472e397173ccdeafe1347b817257453b9e1f86b92e46", 0x6c}, {&(0x7f0000000780)="2812bf4aa640e917434d2bbd7319e8d467863a6b416d554e0815b8085b87a73f1005fca748595a217510ea52d0970c710d2f07bb60451f5d5282bd8eac047152b574af1028f22b1991936bdf145533d064546e54b89eadd5e5a5936e3b48c88f7030e56bd7059e64b39c4f3729dd14ac0755aad41ca4d9e02a9e5c871b5f214e259b560d5ee66cf3830456b0a650b302d7427edbc94ff68beb67818a3c0b5ddd73cea78f4a380218a5815f136d526e49983fc30693b061873c4b115c00c0ed5f8de7f0ab0bba51a14d357c90451c03970f92ddeeb4c712afad018249bf5f07bd99", 0xe1}], 0x5, 0x7ef1, 0xfff, 0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000880)={0x0, 0xfffffff7}, 0x8) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(r4, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRESOCT=r4], 0x28}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, "0400"}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0) 3.614229486s ago: executing program 4 (id=2094): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000000000010203040506070b0c0d0e0f1011121314773810162d963415161718191a1b1c1d1e1f0b41b7f661a3e1bdcd1ca6ff2395202122232425262728292a2b2c2d2e2f30310700000000000000"], 0x48, r0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000003240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000380)={0x1ff, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) close(r4) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0x18000c, 0x3, 0x59c, 0xffffffffffffffff}) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '#! ', 0x3a, '#\xa1\x11', 0x3a, './file1', 0x3a, [0x4f, 0x43, 0x50, 0x46, 0x4f, 0x50]}, 0x33) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0xfffff21b, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000029000000370000003c0000001000000010000000290000000800000007000000"], 0x24}}], 0x1, 0x4001c00) 3.528575028s ago: executing program 2 (id=2095): syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0xc48}, 0x0, 0xe3d08660d3cd4684}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000001080)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000400)="3cc25abfadecfb00c31ae55c526b12ee6c1086676df8b4aae531c84adcfac46f27f3493300c66fc7b733df25be8f070192691372c0afd15cfe2a7d9a1147f6ac2ad669820c9bc066fef0c4d333721da7977070e0413ab7a03ba1121fd2f1c0d5606a31ee55374557947f3624c553e1627c5cf0b4991dd7a68f5383e8cd4da9aecfac51cebc223a17c67bbdeed0c89e65cf9cbd2f79cdc10b4d76812ebb303857c659ccab2eadeb32b77bcf5f7be050c30e02bceac815466d3c3756d4b0676de5a9d25be719a5", 0xc6}], 0x1, &(0x7f00000008c0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x30, 0x1, 0x1, [r5, r3, r6, r4, r5, r0, r3, r0, r2]}}], 0x60, 0x4004890}}, {{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000008200)="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", 0x1000}, {&(0x7f0000000a80)="b9df4dd74ead1d92697b5326a3348d3529847037a1af6b0247b866a283f6af995154a2a248275610158e1544647a411976f4c8dab38a09a172ba1254a60c8f97c90738263b58194c57f00840061ff3cf8f197efb9b1f75464517f9aa9afb36fc11e38287931bcfedcd8c8c325e50b270431ec1c9d53e303d34e9c38134c75718c02a78ca25224cfd570d12", 0x8b}], 0x2, &(0x7f0000000700)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r0, r2, 0xffffffffffffffff]}}, @rights={{0xc}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xbc, 0x34}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000e00)="fce4300c7490b604317e33649acafef414f2b7d17716b2498872a0a9c4a9e6d85fb2d4313d8f0931445ed78933921291b73cf2872b9318ec0545becb1ebcb6e115c7d525bff1c489aa6a25353b882f30174fad54403fc16d2a1b57a6405f308a067cc6845365d31002c99a771e739019a3fb1f7aba20cd703108addb5ec9811199ebc7692183bc17df5a42370a9729809567b9b1aa1b733065bdcc88607e48c6656f886a1974e0e9c455278b0532010b5a67373a879d33aa47804a5514433cf6d900682882529cbc334a35cfc0cb7451473ed486cf4654fd2051", 0xda}, {&(0x7f0000000f00)="fbe02dc5716ec41184a08cc78558f636", 0x10}, {&(0x7f0000000f40)="76685dd4f03f6fb0af4004bcd71210944dd003455feff815b665a05f1ac5f9570d5a34e27db7af77ce06bc64a1ceb4", 0x2f}, {&(0x7f0000000f80)="ba0eea38402b13ae95eda71bb6f8d8171c94faba3eb0f870da49a40d9a12733632893c188a201c96fe0183ffc1cf1db16a7726fe3ad82ffcf609ab9b39a002f74f8db8caf89e2d75", 0x48}], 0x4, &(0x7f0000001040)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0x1c}}], 0x3, 0x4) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x1a, 0x8001, 0x0, 0x4, 0xfff, 0x1000, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000304af43a16395f7f5dcb79c4278a14e8343e0a05bd"], 0x113c}, 0x1, 0x0, 0x0, 0x48000}, 0x400c004) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) rseq(&(0x7f0000000a40), 0xffffffffffffff12, 0x0, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r8, 0x0) msync(&(0x7f000081e000/0x3000)=nil, 0x3000, 0x6) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) 3.461099896s ago: executing program 0 (id=2096): socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, &(0x7f0000000240)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000200)}}, {{&(0x7f0000000400)=@ax25={{0x3, @netrom}, [@default, @null, @bcast, @rose, @null, @netrom, @rose, @rose]}, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/150}, {&(0x7f0000000540)=""/179}, {&(0x7f0000000280)=""/151}, {&(0x7f00000006c0)=""/30}, {&(0x7f0000000700)=""/171}]}}], 0x10149, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x63, 0x0, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r3, r2, 0x0, 0x578410ed) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) shmdt(0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) 3.399220333s ago: executing program 1 (id=2097): r0 = eventfd2(0xe5c, 0x100000) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) unshare(0x2040400) io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r3, 0x4, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x2, r5, &(0x7f0000001280)='3', 0x1}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x3, 0x43, r4, 0x0, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000140)="f4fb6eac827532", 0x7, 0x2, 0x0, 0x3, r0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f00000002c0)="0792f27d613e9307f28d4f2897d631d48467048a", 0x14, 0x100000001, 0x0, 0x2, r0}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003f8fa83a268f55472730b19922707b5f587b332cff26404f3e90b615b5bcaea30532468efe1bcfce06bc7bfff5c9fe292440c30c3a79dabeb1f9dfd0eb55bdc5af22d531640308c922c80c2509158b2bdff6e6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r6, 0xc0cc5640, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r7, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000002140)={0x50, 0x0, r9, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r7, 0x0, 0x0) write$FUSE_INTERRUPT(r7, &(0x7f0000000000)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(r7, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) ioctl$FS_IOC_RESVSP(r8, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff}) 3.330569886s ago: executing program 3 (id=2098): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600017f3d9da1a1"], 0x8) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) unshare(0x22020600) r4 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc600c7, 0x0) io_uring_enter(r7, 0xbbc, 0xd582, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0xa, @pix_mp={0x1, 0x2, 0x5741255f, 0x6, 0x3, [{0x4, 0xb}, {0x10001, 0xa7000000}, {0x6}, {0x9, 0x9}, {0x3, 0x8}, {0x2, 0xe15}, {0x4, 0x5}, {0x9ec, 0xfffffff7}], 0x9, 0x1, 0x8, 0x2, 0x6}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000100)=[{r3, 0x144}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) 2.333547116s ago: executing program 3 (id=2099): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) set_mempolicy(0x2, &(0x7f00000001c0)=0x6c76, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300"], 0x14}}, 0x0) 1.6211318s ago: executing program 2 (id=2100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000800)=[{&(0x7f0000000000)="29605dc5df", 0x5}, {&(0x7f0000000040)="c6fe62ed", 0x4}], 0x2, 0x11, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000022c0)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in6=@empty, 0x4623, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in6=@private0, 0x4d5, 0x6c}, @in=@multicast1, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x1, 0x4}, {0x0, 0x9}, 0x0, 0x3504, 0x2, 0x1, 0x0, 0xb}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) r3 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f00003ca000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0608630002560e2be2c64c", 0xd, 0xfffffffffffffffd) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000003600)={0xb60, r7, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0xb4c, 0x8, 0x0, 0x1, [{0x550, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_ALLOWEDIPS={0x290, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3, @private1, 0x10000}}, @WGPEER_A_ALLOWEDIPS={0x224, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @local, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4903}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x2, @remote, 0x101}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffe}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @loopback, 0x8}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fe299f060197e232317cae0e2cbedfccd71c76a663fd5d8aa6409f59bc2fc496"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xf8, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eab192ddf00c469ce8a22f2258e2fa6683d089ec82f8f287f1efac1bc05eacfd"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de3a4861b1de6dc945983c1a21afc95bd8ffbfb66e50761b8fe072aca26ba8fc"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xe381, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffb}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x1, @remote, 0xd79}}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "665a3cad41cb38d689fbad3162a02d7198c653ef06f95a47bd3e445c49cb3cac"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0xd0c487fa67b3dca6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x198, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7797162af3c6f9ad749e39e12f67e2fe2a2d16cc43aed0698d4d88ec8a9d223e"}, @WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x3}}]}]}]}, {0xec, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xb60}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r8 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2e414ba5, 0x9, 0x800, 0x7fff, 0x5a, 0x100000000, 0x7, 0x8, 0x523, 0x0, 0x200040000000, 0xfffffffffffffffe, 0x134, 0x10000}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000880)={0x0, r9, "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", "e19df58d1bb9aec609d652701a1917f4059d92ca3387eaef8a341c7d5cc827073e41d1481cb416a2907eb11c3fb2d6cfca9f9d075a4000ea68d6673d1b998bdd902b9b8f07a8868db04a69926942195044a1c7f25894e0347f2851a3195ec50a7643fa9f626d258da6a11e46cec2ac59187e1254a6ab0dfe06b14f9b34f1c77cbcb341bc8d686a4f4b19737e0019937da77d286648153722d8867214a0197f291bc6d264d86ddb3404500a8a1b426c2115c81dfe63caa7d9778184dca2dccc1b103d9de6355ce73078658b0f50a9240ff00aa87d4f6e129877d739071060fdf33b4564d5915236b2bda30ec1bf28efb485f34046e440c3c4429fe8e16f2dca1aaa0383b3721c4d4adb8e61d4fec86d0bc29dbd52c07f8b89d19adf7302a29d359a0a473f4408f4509ffb2b93a4a822bedb40df5afbbd772b0b32c49154563c7eba377df73c3b5dc5dace95ffe7d54ebe428e9b1f0e3cb6168517329ba04d69ae48cbe9b19942edb87f3f68039a76cf1f4ab82edcba97e7a4d8eddc5008e4ef12213f897f921dbd28171b1c40ac3727865d0ecd964c8579cead0091259018b18491b5ec71e8b2c002ecd393aa3b76cdc9db2b8dc442f1784d8d90d9fb70b942b7f8a6786393d704bd8520a038c8f8966abd62e57a0a56d4d26db047139b409d67b3bc86674435f8426d12e6ac91caf5c9e0a0472d05ba2ce7d1930579f7281e28fb78211c9ea8454d3ce9602a252210690a9a304c7bb1cacb80bc94766beeb4bd8186c052e5f151f35a0e54b84dca09ab5cc1d468f4c6b7efbd31fce4db1cd5d6fdc0774f98b9f1b6e30507d31a23ff81460ddbcebbcf192de369df3e8b7627305b371cb6d9bc02c0edd8874cb5b7416f4cda961d38843278ec9bbdc4cbc17d0e611c004a91d13a7822890a1b03dfb3bab1be47e4c0930825fe7f5937d93714b7b2f89dd43fd31229181792fa68aa69f52658a74406c9e7402b3d77ad090181430dd5caef32677e1feeacd6a8bd1c135b350bfa1e0fa0d50b6fd4bbd52a9075531eff1e72e375a620ece12e472d2ebd45e4dc23cf7d7b58d0c9e02787c511f41190b3051f9ae0ef3038db1d20bb644933f0197785e74681bdcec0c60307f13d20a6a78165a962e143300ccbe41f90fda4c7290310c1f78ac8cb931565184bbd44f1c19666bb2b787493ccf3bb0ccad15bca3d065b905c7d3456cbe77600e43daa84cac04eea0919f4bc443ddd06f981eacd188add366446d45acc4c8aef52eddc7a931ada252cd4d173172f626dee80594e4176fc0808fd45abe61b5e723f5e6df12eb6841f1d59e2f4947e410c28f657464d18ac10f5e998404ab33248d258b2c110094186f482667f93411123d821cbfc3bb18587190c570dcafcdf8cad2f349bbf8a8d3cccc9ed278b14670c5117d361eb956af75c4353207d06bf60deb34ffad04e0c813e7e44a45c8b63fd92dacf3c1d774711132d7dc012d68edafd1b42da687d0a5cec0407dd6ff98efb9d5cfb828b228cbc7e354ff377206624bdf7b1604e914846b93af8dbb13fa6300e159ee538ee9c21e71349089845ebe42af3cdd3eb59a503d5a9ba1eb6f60d99114e4845b5163cffb5d49ab150baa8ccbab602718e6b6fcf8758a0e3af859955f8fe499e4ffb0ea0dc1c92036ffb0b7e42c47d19c5910fb6fabee04bb2ba358272c1a47accfd7153384b3c4cd3d20ab73458518f6204f16913b5d770c89768ea8a41a48c572d42c5b96c6e023d580dd2a1e682e7fd864256c1912ee117e6ffbe3f68e0f3e2a34b2044f1c76c81c3ee9f2108c9cbffbfd43d0a855c6bb2776e69c9d4d9a7a21554d5697ea9821b0a94647ed6e7a5060ca9af90321c2997ba94abed59514dd4878cab32f773db9844231f70f17afaa1fe0501629e213022bf4d95e202dc8e841d0fc39e8903d8023805b8241fa551ea58897c10184b2526b9004f2d5ee4e64a7041ec8592787ae5b9fdffd731f4efc61bc09fe1f805a77c34da39ca5e7d2c749e2c6759502333f8149ee4133df00b34b5b73a1951af5ef62b08d64f9d8eba2020216c332f14ab3329bb1ac01c466e3b1be77a6d2d088189b1d903391f266a19403a56afe80fa4bc5386bbd766bc37a732526e998ae086329fc6fc53fa34c35ef98e4b53063c15fc75583f1cad590ea967c3687927e65cebc2d01695784e16e4acd0ca27a2c6a61ee5c041c27b95eab1e39b4857d0fe3dc32d2d6d854ad323578c93c3bbe73fe625764642da22f411d862c359741f1ffff000517536435366900cf56145b6be9f37e11f2c4931fdaddc909f4d42e22d606365359892f45cc2c932699caa8dd85efcb493fe6b70384d6355cd2df08c6fe77473b49b5bd3b4801252d73ed531ec7dc7e35997317cbfccbdbce4e5a1512bd4739f44adf9b22329fad1d69e4d635948a4e20f33c91c717a14c624f615ed4dcba140c2cc680862fb85781b9d4f08de583c327e93b93c90b4d5890fc2ae4fcbbe2956a87fb921040b33b6d32e8a2c8d50823d1d09c0d014fa556eaf88093352eecf32f8ca00c028260b1bbbfbb4b673b92ff57a046fe707b11bd615e37ffe128f3e86d04a826708ec17f3a954b5c6d23b96d100ce530832d0a999e35555eac957cd253485aaba15d7b52383074b3c8ba0c3df9f727dff0f5225654affe7a2217117a64be90023d99fc2316608ccec65496bf8cab46e7a9a63ce73e2f9cfc6b77018905f8158bdbe0dd4f001ff256468082c9893258cd6cd557e175439dcf6620e3c15793c9a0d0b43e9cc80836fa52a2e0c785769cd9f040e82834de7b698897f01a5323d91ae02bbeb55b2a9898d6832849e3f9afd5df829174617fc9654af5b8d166c48f23768055302f06812d183c4d3c83bbcbdaa2c39c1eaf0ed7f3a8a847b8a136ca74f8b351a76dae3b71edf85188b4db8e7472f6341f3962928bc37fd6a08f9b324965121f1552cc5cb8fa2cfe3c542a8b13f9eaf1f696243df964c05db5dcd53c988cc90ca37e5365b91ffc6cc2665503304c9bf3e788cfd2e3198766293f535ebcc16f4fff52f71a2ad493f57d7e70e65950d8b835e7abdd9ca29297698654ffe419ef1ef62379ee10faddde65fd339a34cce966f974a761e446359097d0dc969e03c5e6174799aef9b9699f05c41c26e97bbe8d4891ac3669d068e944210ea5e2961cd40eb20f7758ff6853395a49dadcafb6611b883a336f975dda6393a9a6db2dd0a7cee84ec2e82d1763fe7ae9dc5b20426c138e792ba3ea6f6631775356ee0d3260a98893d50d8822f678abddd8918ca9ffc3f6defd105e980c5db57b6c04a42b5db5c91e53107157430e99cb2f0b44b27aa0118db15974ecc268b44fbc9b64ad265f298ec6f6de6ce42f8668e23de8221ff7ac0ee6aae80cff8c5f166115b2bd5dafa7340b3a2ebc76cdd98651cf37e31ca15d9af70b53d87c627226a756e82247f2cb32f84ac06c0fa7667b9573012478bd2b78c88aa667a021be57df4b82383baf29e96b2aae52638a9f08ac9783361c4ab74613c100dad3f3c4641e648377d193a92e6afcbe671865ef67e65f88c304123e5f0be2cff0f169316fc5a6cd8cf5712b8a9079f02a275395ec7703b075c22d02861e390900e8cb92448aad0f6edf242bc5638e46cb36ebb8042d472ee55aa588040d6d95883d499c84f8b8cd4b5f5aee9f67d3a386e1f04755513b87359fbf3592739e162a38a9c318fea58b99f299b692bad985b2194614801a6f6f00cbc56df1726faf2625956650dddae139d97d95e780d4933985a467dd8ad41bf6dc871239cfdeb9f56d06591bcfb6e157087f7daa53e1384204c08d0d3a9141da18ee16f92c6d0b1e11dc7c9314124c0dc7f7009131e887033a0686c1882bd7862fb46efcdc84b2048ba2ededc57df6d3257f31d170f85506485274aabd7f3d3badc93f86bb1d8f45c0aecadf4c003ea7c9378c1c7ff6b09e66ee9cdba4829024867a188d7ee6bf80b208203c8a7ad9a69d19c6b17fc7929816bcd7c92e065b8ca770d0522f33e7200f57fa6df6c35402f41cb50f5d0cd5e8c197837751987f2e56e78521ff0f318dea7599fe307f1c3ef487fdf87a90b58a18a3939f741ee7e7bd7112d2469538fbf380a96b6e2791cfba4469330f0a82959ed1733ee26a84e0fdc04c9307ef7caf873b1fc3e23f0f69bca595654a3125fd03f6c1881704796bf719fd3ef3c8ce0abac9104998af3e7839426cdde00ac9ff3da8455ed0fc345c056405f73c19e5769f892cf7d73ad92535c6e87a36fb3138d255294fbcfd510374731a28ecc4c0d178ca791c019591752e78fc37c17b799eed272a50525d34b754e4b054a7265e60c015367c1736cacbd3b06373b81d39130b4100dcc41da0e5e1546fda8280a2769bdb10f62da17e3d20509f3b4eedab0f95eecfd0bd7f965825227bb0e21cfdc741f307492e1f25649f7272259bef2958d180620101e0f4ee5c070e1c3173a1ae45bae81e4c837dc71bd93686508d607fe7ab94d6a28d1cfc75324866a09482cfdf2b566be7afa5d43bec5fb476ab665e9fde90710f6964af28e2481903505b6ea6d71fb02da2ae6c05adbca808898ad740cf493aa8f7a00a3da733ef4d8f20ef9493f92339b2260dd99b5b96cbdf537b2b0756b7dbf321b5bc47f0b858e0f09e3f2b60e906ae546972f22d6e1a2516d5a1f5c7b3ad437fba6345622894dc899b7b69ca3e729e6afcae5585e23d2e39886756d6be97febcfa7032bd40087a21b4c5f92ed64abae0c6651325d0c2e796eac90075ce655aed1bf66fd74a48de236bbe60ce1be0fc175f8fb14eebb7a2bb64b5eeceabdbbe43abeeb80fe10c4b7feb60f1bcec7bdb8781f812b88de3c41bb85b1d741614a8102537fc3b65ca47bd7fc7d2198b99f69001092a41a563768d545752a2b80456ddfccbc10e5ec3b82950c429ccc0f02b98593726eab2a9c8da74023a6683df158a5bdd188ff33d41857e67fa2aa7524ac75a4ea6ea32e9d024bfb107d2eb8dbea323de263e5376487edab63adb38e6db5cde5b51ad4ae98eee049500a377fd700a4b7360211136d82fc19eb24f6062ebbbb8fcc01352236ecbc733b0b89b2aa6ea6060b44cc20c22a4d911844ebdf97123e2b168bce43b39b2f409ef38ebd3abce65497f4c129583b90fb5422c876406d01b94f29798c5c27d1092d8c1106915a36c443005e61216038b79fc5ae5d2967a175c423bc7fe356e8b2c71ce80fa2cc178d667ed3b1e864aa7837c0391c782e53075d7278a436557535e97b2c70b305eb53374eb33c2614ddf476eabc0d729cb7d7f3de6aa3dfd110ad1363adeb1e519f45035331c365b67102efa58b3075ceca635139ee0809dc16d29fcc0dd346f373c9c971d8ad77c9ff3eb1763ca9b2382d"}) 1.319196268s ago: executing program 1 (id=2101): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') io_setup(0x8, &(0x7f0000004200)=0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x2, &(0x7f0000000840)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0xb00, r0, &(0x7f0000000880), 0x0, 0x7, 0x0, 0x2}]) 1.122770533s ago: executing program 1 (id=2102): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4c, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4, [0x0, 0x10, 0xfffffffe, 0x0, 0x400000], [0x40, 0x7, 0x3, 0x3, 0x3, 0x8, 0xfff, 0xffffffff, 0x0]}}) getgroups(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x13, r3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x41, 0x91, 0xe3, 0x10, 0x17e9, 0xd52, 0x9b89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x0, 0x1, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x3, 0x3}}]}}]}}]}}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x9, 0x40) 1.070432293s ago: executing program 0 (id=2103): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) time(&(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000140)=[{0x0, 0x97}, {&(0x7f0000000100)="bc", 0x1}], 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fcntl$getown(r0, 0x9) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r4, 0x0, 0x0, 0x40000021, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@ipv4_delroute={0x2c, 0x19, 0x10, 0x70bd29, 0x25dfdbfd, {0x2, 0x0, 0x14, 0x6, 0x0, 0x1, 0xfd, 0x7, 0x400}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_FLOW={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0xd1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0xa}, 0x4}) syz_open_dev$sndpcmp(0x0, 0xa8c, 0x2080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x1) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r9, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000100)="6306bc3795f8", 0x6}], 0x2, &(0x7f0000000240)=[@ip_retopts={{0xc}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x5e, 0x1, 0x2, [{@rand_addr=0x64010102, 0x10e}, {@rand_addr=0x64010102, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x56e}, {@private=0xa010101}, {@empty, 0x8}]}]}}}], 0x44}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$VIDIOC_G_PARM(r8, 0xc0cc5615, &(0x7f00000003c0)={0xa, @output={0x0, 0x0, {0x2, 0x2782}, 0x7, 0x4}}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 1.05049512s ago: executing program 4 (id=2104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1, 0x5004}], 0x1, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x400, 0x3a}) fcntl$lock(r3, 0x24, &(0x7f0000000d80)={0x0, 0x1, 0x6, 0x80}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfc, 0x0, 0x7fffff7f}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "088435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x4, {[@mss={0x2, 0x4, 0x9}]}}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)={0x50, r6, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}]}], @key_params=[@NL80211_ATTR_MAC={0xa}], @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 797.763754ms ago: executing program 3 (id=2105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=0x0, @ANYBLOB="0000000000000000000012000000000400"/28], 0x48) timerfd_create(0x7, 0x800) (async) mmap(&(0x7f0000fa2000/0x2000)=nil, 0x2000, 0xa, 0x30, r0, 0xfffff000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={&(0x7f0000000080)="6d466c6ceb19e5bf840ad5d14bdf6ac160c9633ab2546f10ba5574f92b085c6c1f6ede7a18b0f19d77fa06ed5c026f2ca70019b27f95db8ffe8d84f7e12e24f5640efff555dbec9f612ff93d082bb7762a58e324a13ac62b163f666d08804494cb68ca800020c4b19c5116d04403ac5007da46ddac9cad457db6ca9d0abd66caf95fbd77d69bb08c7b9a9ac09a416fc18e4b0ac9c3320fd838", &(0x7f0000000140)=""/30, &(0x7f0000000180)="c2493d1d7e20f7ddccdc8aa0b08627abe55b37fd957e205b18af3b2c523370137b8d89854b872bc80120911aac4f6086275ca0f7841f8b9f6fc03ad045df130465c50fd82b2258f0f46e649dd48d606748bd38301002fe17776a5e8c4008a0880d857f26f417a4a2db5521b89eac4e", &(0x7f0000000200)="34a193b8fa38d40067afc5a29a0fbd6d8f70a539116b4674dcd598a8c2c03598be5ba2b4ceb8d61533e7780d1470714356c9748724b5618fddffec7e4901f7685be896ce637c2cd5f9f68ba5af2261ef2ae7f8a1cc42f23f75fc5676ec43b02f84f8d0723d6fb648f9d736e5909772edaf39d560dab4a03bc13387018ad83171ead02f", 0x1, r0, 0x4}, 0x38) (async) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000540)="d8", 0x1}], 0x1) (async) unshare(0x66000080) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0) (async) unshare(0x46040400) 682.765697ms ago: executing program 4 (id=2106): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x4008af22, &(0x7f0000000280)) r4 = getpid() syz_pidfd_open(r4, 0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x12) socket(0xb, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newsa={0xfc, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff, 0x9544, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x94e, 0x7}, {0x40000, 0x1, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xe2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xa5}}]}, 0xfc}}, 0x4000084) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_PARM(r6, 0xc0cc5615, &(0x7f0000000580)={0x5, @raw_data="e1b3e2fb19f3de0f155f957001ed0b6d585b486a1fa8743db2849d0a05b8a5b6d403d19118b0caf96216ade4c99afa9c2d435fda334600d0dcad52bd67d034b17acb09b2f084efa2a40aeb57558091039ff479cda324a9a7c75355fc13414f0ffef95c5d20ca0bd8973b26308e23bb381991069422d4ee50a670573cfee1b2f026e672c8abad3573b62b15499693827453df4b6f7ae84f6cadd25bbe19c759020d4b3171ea2f0d2be38a8b8c961c4e92c37c929204ff8616dab4e15b53489411738da1152117359c"}) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) socket(0x22, 0x800, 0x80000000) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000000380)="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", 0x35e}, {&(0x7f00000041c0)="1269da71e0cc9189ddd4d5bc965c", 0xe}], 0x2, 0x0, 0x0, 0x4}}], 0x1, 0x1) fsmount(0xffffffffffffffff, 0x0, 0x1) getsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000000)=""/68, &(0x7f0000000080)=0x44) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r8, 0x5608, 0x3) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x15, 0x7, 0x0, 0x0, 0x10, 0x0}) 607.921697ms ago: executing program 2 (id=2107): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000000000010203040506070b0c0d0e0f1011121314773810162d963415161718191a1b1c1d1e1f0b41b7f661a3e1bdcd1ca6ff2395202122232425262728292a2b2c2d2e2f303107000000000000"], 0x48, r0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000003240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) migrate_pages(0x0, 0x8, &(0x7f0000000440)=0x1, &(0x7f0000000480)=0x6) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000380)={0x1ff, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) close(r5) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0x18000c, 0x3, 0x59c, 0xffffffffffffffff}) write$binfmt_register(r7, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '#! ', 0x3a, '#\xa1\x11', 0x3a, './file1', 0x3a, [0x4f, 0x43, 0x50, 0x46, 0x4f, 0x50]}, 0x33) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f000000d1c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="a65b2a966756c5e6ae46ffc4bf649f9744bc6c023dacd2c0ad144cde6e2379f398dcfbae9b3ab79758de66ae1141eb19929f52544899", 0x36}, {&(0x7f0000000200)="6ce71899edfc0073799e14ff58e92f9af002f74060088f723871a6c1d289971c686aae5dc8f56140e8eb33ad59c68e71c1999986f3d5a5c3ee524e136c87a3ba7426fecb5cde2e40f07e7f3c6b8d72908dee6fd45178ff71706552f8a5bb33ad7fa20f4621cdc8977997b8", 0x6b}], 0x2}}, {{&(0x7f0000001b80)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @remote}, 0x4, 0x1, 0x0, 0x2}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001c00)="88", 0x1}], 0x1}}], 0x2, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f00000001c0)={0xa, 0x4e23, 0xfffff21b, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000003640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="1400000029000000370000003c0000001000000010000000290000000800000007000000"], 0x24}}], 0x1, 0x4001c00) 448.681812ms ago: executing program 1 (id=2108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000680)="d9", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r1 = dup(r0) sendto$packet(r1, &(0x7f00000003c0)='(', 0x1, 0x24004090, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs={0xffe0, 0x0, 0x4e22}, 0x6e) 325.877452ms ago: executing program 1 (id=2109): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600017f3d9da1a1"], 0x8) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, 0x0) unshare(0x22020600) r4 = socket(0x2b, 0x80801, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, &(0x7f00000001c0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc600c7, 0x0) io_uring_enter(r6, 0xbbc, 0xd582, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0xa, @pix_mp={0x1, 0x2, 0x5741255f, 0x6, 0x3, [{0x4, 0xb}, {0x10001, 0xa7000000}, {0x6}, {0x9, 0x9}, {0x3, 0x8}, {0x2, 0xe15}, {0x4, 0x5}, {0x9ec, 0xfffffff7}], 0x9, 0x1, 0x8, 0x2, 0x6}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000100)=[{r3, 0x144}], 0x1, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) 0s ago: executing program 0 (id=2110): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r3 = msgget$private(0x0, 0x52d) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x8, 0x800) msgsnd(r3, &(0x7f0000001180)={0x3}, 0x4, 0x0) msgrcv(r3, &(0x7f0000000080)={0x0, ""/88}, 0x60, 0x2, 0x2000) msgrcv(r3, &(0x7f0000000100)={0x0, ""/35}, 0x27, 0x1, 0x3800) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) msgsnd(0x0, &(0x7f0000000240)={0x2, "e1f4cabd9aa25f08994bbaa2a87f18a60d93af92f7bd5c8a3ed354feffe0f88bb71ac413c982ec5738f239a165bc87d4b8e93c5f4c501be6e7892848dd00631245402b713ae8dc5dd6b408c2a1cc4babc99a68d68437efa93d22ff5176bae9e97830834f66dfff369d95c4272ea4b02c6b0b48080a061899ff9c92467bb60d347c2e7445d4d74503232da542294b094ab286de7cc9d17725643001b85eab60fc6f39bca0b771eb802b6b181dbf23fd01"}, 0xb4, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, 0x0, 0x40881) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{0x0}], 0x1}, 0x0) unshare(0x2c060000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x4000, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x2000810) unshare(0x24020400) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') openat$userio(0xffffffffffffff9c, 0x0, 0x2002, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r7 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) kernel console output (not intermixed with test programs): ig 0 interface 0 has no altsetting 0 [ 533.023843][ T5899] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 533.034637][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.042679][ T5899] usb 4-1: Product: syz [ 533.286009][ T5899] usb 4-1: Manufacturer: syz [ 533.290702][ T5899] usb 4-1: SerialNumber: syz [ 533.306638][ T5899] usb 4-1: config 0 descriptor?? [ 533.561587][ T5899] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25 [ 533.865078][T11756] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 534.870219][ T5183] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 535.445230][ T5183] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 535.493741][ T5913] usb 4-1: USB disconnect, device number 48 [ 536.003558][ T5918] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 536.194980][ T5918] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.206583][ T5918] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x43, changing to 0x3 [ 536.260733][ T5918] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.280162][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.302725][ T5918] usb 3-1: Product: syz [ 536.313291][ T5918] usb 3-1: Manufacturer: syz [ 536.328790][ T5918] usb 3-1: SerialNumber: syz [ 537.355522][T11803] loop6: detected capacity change from 0 to 1 [ 537.402986][ T5918] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 537.670581][ T5918] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 537.719649][ T5918] usb 3-1: USB disconnect, device number 63 [ 537.738289][ T5918] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 537.863301][ T5913] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 538.046412][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.087437][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.133088][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.160477][ T5913] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.189342][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.217807][ T5913] usb 5-1: config 0 descriptor?? [ 538.266851][T11815] FAULT_INJECTION: forcing a failure. [ 538.266851][T11815] name failslab, interval 1, probability 0, space 0, times 0 [ 538.296900][T11815] CPU: 0 UID: 0 PID: 11815 Comm: syz.0.1561 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.296943][T11815] Tainted: [L]=SOFTLOCKUP [ 538.296952][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 538.296966][T11815] Call Trace: [ 538.296976][T11815] [ 538.296987][T11815] dump_stack_lvl+0xe8/0x150 [ 538.297021][T11815] should_fail_ex+0x414/0x560 [ 538.297061][T11815] should_failslab+0xa8/0x100 [ 538.297091][T11815] __kmalloc_cache_noprof+0x84/0x700 [ 538.297114][T11815] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 538.297149][T11815] ? nft_trans_table_add+0x56/0x430 [ 538.297178][T11815] nft_trans_table_add+0x56/0x430 [ 538.297207][T11815] nf_tables_newtable+0xce3/0x1890 [ 538.297261][T11815] nfnetlink_rcv+0x11d9/0x2590 [ 538.297324][T11815] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 538.297365][T11815] ? ref_tracker_free+0x63a/0x7d0 [ 538.297416][T11815] ? __netlink_deliver_tap+0x807/0x850 [ 538.297443][T11815] ? netlink_deliver_tap+0x2e/0x1b0 [ 538.297488][T11815] netlink_unicast+0x82f/0x9e0 [ 538.297522][T11815] ? __pfx_netlink_unicast+0x10/0x10 [ 538.297546][T11815] ? __alloc_skb+0x198/0x3a0 [ 538.297569][T11815] ? netlink_sendmsg+0x642/0xb30 [ 538.297595][T11815] ? skb_put+0x11b/0x210 [ 538.297621][T11815] netlink_sendmsg+0x805/0xb30 [ 538.297658][T11815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.297689][T11815] ? __import_iovec+0x5d4/0x7f0 [ 538.297713][T11815] ? aa_sock_msg_perm+0xf1/0x1b0 [ 538.297742][T11815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.297761][T11815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.297790][T11815] __sock_sendmsg+0x21c/0x270 [ 538.297832][T11815] ____sys_sendmsg+0x505/0x820 [ 538.297866][T11815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.297898][T11815] ? kstrtouint+0x6e/0xe0 [ 538.297939][T11815] ___sys_sendmsg+0x21f/0x2a0 [ 538.297968][T11815] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.297994][T11815] ? get_pid_task+0x20/0x1f0 [ 538.298022][T11815] ? get_pid_task+0x20/0x1f0 [ 538.298047][T11815] ? get_pid_task+0x20/0x1f0 [ 538.298108][T11815] ? __fget_files+0x2a/0x420 [ 538.298134][T11815] ? __fget_files+0x3a0/0x420 [ 538.298169][T11815] __sys_sendmsg+0x164/0x220 [ 538.298196][T11815] ? __pfx___sys_sendmsg+0x10/0x10 [ 538.298231][T11815] ? __pfx_ksys_write+0x10/0x10 [ 538.298265][T11815] __do_fast_syscall_32+0x1dc/0x560 [ 538.298288][T11815] ? lockdep_hardirqs_on+0x7b/0x110 [ 538.298308][T11815] ? do_fast_syscall_32+0x34/0x80 [ 538.298332][T11815] ? irqentry_exit+0x10f/0x660 [ 538.298358][T11815] do_fast_syscall_32+0x34/0x80 [ 538.298383][T11815] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 538.298410][T11815] RIP: 0023:0xf7f81539 [ 538.298429][T11815] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 538.298449][T11815] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 538.298474][T11815] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 538.298490][T11815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.298503][T11815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 538.298516][T11815] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 538.298529][T11815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 538.298562][T11815] [ 538.852035][T11822] libceph: resolve '0..' (ret=-3): failed [ 538.869952][ T5913] usbhid 5-1:0.0: can't add hid device: -71 [ 538.876267][ T5913] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 538.886235][ T5913] usb 5-1: USB disconnect, device number 61 [ 540.165883][T11867] FAULT_INJECTION: forcing a failure. [ 540.165883][T11867] name failslab, interval 1, probability 0, space 0, times 0 [ 540.178798][T11867] CPU: 0 UID: 0 PID: 11867 Comm: syz.4.1570 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.178834][T11867] Tainted: [L]=SOFTLOCKUP [ 540.178844][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 540.178858][T11867] Call Trace: [ 540.178867][T11867] [ 540.178877][T11867] dump_stack_lvl+0xe8/0x150 [ 540.178912][T11867] should_fail_ex+0x414/0x560 [ 540.178952][T11867] should_failslab+0xa8/0x100 [ 540.178982][T11867] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 540.179018][T11867] ? __alloc_skb+0x198/0x3a0 [ 540.179040][T11867] ? __alloc_skb+0x1dc/0x3a0 [ 540.179060][T11867] ? __local_bh_enable_ip+0xd0/0x130 [ 540.179084][T11867] ? __alloc_skb+0x198/0x3a0 [ 540.179108][T11867] __alloc_skb+0x1dc/0x3a0 [ 540.179136][T11867] netlink_sendmsg+0x5c6/0xb30 [ 540.179175][T11867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.179207][T11867] ? __import_iovec+0x5d4/0x7f0 [ 540.179232][T11867] ? aa_sock_msg_perm+0xf1/0x1b0 [ 540.179262][T11867] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.179283][T11867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.179313][T11867] __sock_sendmsg+0x21c/0x270 [ 540.179348][T11867] ____sys_sendmsg+0x505/0x820 [ 540.179380][T11867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.179407][T11867] ? kstrtouint+0x6e/0xe0 [ 540.179438][T11867] ___sys_sendmsg+0x21f/0x2a0 [ 540.179461][T11867] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.179482][T11867] ? get_pid_task+0x20/0x1f0 [ 540.179506][T11867] ? get_pid_task+0x20/0x1f0 [ 540.179527][T11867] ? get_pid_task+0x20/0x1f0 [ 540.179572][T11867] ? __fget_files+0x2a/0x420 [ 540.179594][T11867] ? __fget_files+0x3a0/0x420 [ 540.179624][T11867] __sys_sendmsg+0x164/0x220 [ 540.179647][T11867] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.179675][T11867] ? __pfx_ksys_write+0x10/0x10 [ 540.179702][T11867] __do_fast_syscall_32+0x1dc/0x560 [ 540.179727][T11867] ? lockdep_hardirqs_on+0x7b/0x110 [ 540.179750][T11867] ? do_fast_syscall_32+0x34/0x80 [ 540.179770][T11867] ? irqentry_exit+0x10f/0x660 [ 540.179791][T11867] do_fast_syscall_32+0x34/0x80 [ 540.179811][T11867] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 540.179833][T11867] RIP: 0023:0xf7fe4539 [ 540.179849][T11867] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 540.179865][T11867] RSP: 002b:00000000f549455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 540.179885][T11867] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000240 [ 540.179898][T11867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.179909][T11867] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.179919][T11867] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.179931][T11867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.179956][T11867] [ 540.834448][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 540.885505][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 540.885521][ T30] audit: type=1326 audit(1766984265.618:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11863 comm="syz.2.1571" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x0 [ 540.991421][ T5899] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 541.243827][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 541.293675][ T5899] usb 4-1: config 0 has an invalid interface number: 15 but max is 0 [ 541.301906][ T5899] usb 4-1: config 0 has no interface number 0 [ 541.315307][ T5899] usb 4-1: New USB device found, idVendor=05ac, idProduct=e7da, bcdDevice=4b.a9 [ 541.324810][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.344947][ T5899] usb 4-1: Product: syz [ 541.353290][ T5899] usb 4-1: Manufacturer: syz [ 541.357928][ T5899] usb 4-1: SerialNumber: syz [ 541.381141][ T5899] usb 4-1: config 0 descriptor?? [ 541.595890][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 541.604946][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 541.962530][ T5899] ipheth 4-1:0.15: Unable to find alternate settings interface [ 542.283360][ T5899] usb 4-1: USB disconnect, device number 49 [ 543.355037][T11906] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1576'. [ 544.689875][T11925] libceph: resolve '0..' (ret=-3): failed [ 544.897902][T11930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1582'. [ 545.025139][T11934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.072417][T11934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.117491][T11934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.154428][T11934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.313511][ T44] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 545.573287][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 545.588989][ T44] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 545.613467][ T44] usb 4-1: config 0 has no interface number 0 [ 545.655355][ T44] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 545.673099][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.692433][ T44] usb 4-1: Product: syz [ 545.704351][ T44] usb 4-1: Manufacturer: syz [ 545.721575][ T44] usb 4-1: SerialNumber: syz [ 545.744082][ T44] usb 4-1: config 0 descriptor?? [ 545.779887][ T44] smsc95xx v2.0.0 [ 546.121960][T11943] FAULT_INJECTION: forcing a failure. [ 546.121960][T11943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.171315][T11943] CPU: 0 UID: 0 PID: 11943 Comm: syz.0.1586 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.171352][T11943] Tainted: [L]=SOFTLOCKUP [ 546.171361][T11943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.171375][T11943] Call Trace: [ 546.171385][T11943] [ 546.171395][T11943] dump_stack_lvl+0xe8/0x150 [ 546.171430][T11943] should_fail_ex+0x414/0x560 [ 546.171470][T11943] _copy_to_user+0x31/0xb0 [ 546.171501][T11943] simple_read_from_buffer+0xe1/0x170 [ 546.171536][T11943] proc_fail_nth_read+0x1b3/0x220 [ 546.171563][T11943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.171590][T11943] ? rw_verify_area+0x2a6/0x4d0 [ 546.171626][T11943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.171652][T11943] vfs_read+0x200/0xa30 [ 546.171672][T11943] ? fdget_pos+0x247/0x320 [ 546.171705][T11943] ? __pfx___mutex_lock+0x10/0x10 [ 546.171731][T11943] ? __pfx_vfs_read+0x10/0x10 [ 546.171752][T11943] ? __fget_files+0x2a/0x420 [ 546.171784][T11943] ? __fget_files+0x3a0/0x420 [ 546.171812][T11943] ? __fget_files+0x2a/0x420 [ 546.171859][T11943] ksys_read+0x145/0x250 [ 546.171884][T11943] ? __pfx_ksys_read+0x10/0x10 [ 546.171918][T11943] __do_fast_syscall_32+0x1dc/0x560 [ 546.171943][T11943] ? lockdep_hardirqs_on+0x7b/0x110 [ 546.171962][T11943] ? do_fast_syscall_32+0x34/0x80 [ 546.171991][T11943] ? irqentry_exit+0x10f/0x660 [ 546.172014][T11943] do_fast_syscall_32+0x34/0x80 [ 546.172038][T11943] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 546.172065][T11943] RIP: 0023:0xf7f81539 [ 546.172083][T11943] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 546.172102][T11943] RSP: 002b:00000000f5476590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 546.172126][T11943] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f5476620 [ 546.172142][T11943] RDX: 000000000000000f RSI: 00000000f7416ff4 RDI: 0000000000000000 [ 546.172155][T11943] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 546.172167][T11943] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 546.172180][T11943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.172213][T11943] [ 547.507317][ T44] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 547.561150][ T44] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 547.799111][T11970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1591'. [ 547.906042][ T30] audit: type=1326 audit(1766984272.658:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11966 comm="syz.4.1592" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x0 [ 547.969668][T11973] FAULT_INJECTION: forcing a failure. [ 547.969668][T11973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.983737][T11973] CPU: 0 UID: 0 PID: 11973 Comm: syz.1.1593 Tainted: G L syzkaller #0 PREEMPT(full) [ 547.983775][T11973] Tainted: [L]=SOFTLOCKUP [ 547.983784][T11973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.983799][T11973] Call Trace: [ 547.983808][T11973] [ 547.983818][T11973] dump_stack_lvl+0xe8/0x150 [ 547.983852][T11973] should_fail_ex+0x414/0x560 [ 547.983892][T11973] _copy_from_iter+0x1cd/0x1630 [ 547.983919][T11973] ? rep_movs_alternative+0x4a/0x90 [ 547.983957][T11973] ? __pfx__copy_from_iter+0x10/0x10 [ 547.983977][T11973] ? sock_alloc_send_pskb+0x86b/0x980 [ 547.984012][T11973] ? __pfx__copy_from_iter+0x10/0x10 [ 547.984039][T11973] ? page_copy_sane+0x16a/0x280 [ 547.984066][T11973] copy_page_from_iter+0xdd/0x170 [ 547.984105][T11973] skb_copy_datagram_from_iter+0x306/0x720 [ 547.984149][T11973] packet_sendmsg+0x3797/0x5080 [ 547.984190][T11973] ? aa_compat_map_xmatch+0xf6/0x9d0 [ 547.984250][T11973] ? aa_sk_perm+0x15f/0x920 [ 547.984278][T11973] ? __pfx_packet_sendmsg+0x10/0x10 [ 547.984306][T11973] ? aa_sk_perm+0x7ee/0x920 [ 547.984339][T11973] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 547.984377][T11973] ? aa_sock_msg_perm+0xf1/0x1b0 [ 547.984406][T11973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 547.984428][T11973] ? __pfx_packet_sendmsg+0x10/0x10 [ 547.984460][T11973] __sock_sendmsg+0x21c/0x270 [ 547.984495][T11973] __sys_sendto+0x3bd/0x520 [ 547.984519][T11973] ? __pfx___sys_sendto+0x10/0x10 [ 547.984540][T11973] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 547.984576][T11973] ? __fget_files+0x3a0/0x420 [ 547.984616][T11973] ? ksys_write+0x22a/0x250 [ 547.984647][T11973] ? __pfx_ksys_write+0x10/0x10 [ 547.984672][T11973] __ia32_sys_sendto+0xdd/0x100 [ 547.984699][T11973] __do_fast_syscall_32+0x1dc/0x560 [ 547.984723][T11973] ? lockdep_hardirqs_on+0x7b/0x110 [ 547.984743][T11973] ? do_fast_syscall_32+0x34/0x80 [ 547.984771][T11973] ? irqentry_exit+0x10f/0x660 [ 547.984797][T11973] do_fast_syscall_32+0x34/0x80 [ 547.984821][T11973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 547.984848][T11973] RIP: 0023:0xf6ffd539 [ 547.984867][T11973] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 547.984887][T11973] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 547.984912][T11973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 547.984928][T11973] RDX: 000000000000fce0 RSI: 0000000000000004 RDI: 0000000080000140 [ 547.984943][T11973] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 547.984956][T11973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 547.984970][T11973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 547.985002][T11973] [ 549.147986][ T44] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 549.163716][ T44] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 549.184271][ T44] usb 4-1: USB disconnect, device number 50 [ 549.906450][T12003] libceph: resolve '0..' (ret=-3): failed [ 550.341107][T12011] FAULT_INJECTION: forcing a failure. [ 550.341107][T12011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.060431][T12011] CPU: 1 UID: 0 PID: 12011 Comm: syz.1.1602 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.060468][T12011] Tainted: [L]=SOFTLOCKUP [ 551.060477][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.060491][T12011] Call Trace: [ 551.060501][T12011] [ 551.060512][T12011] dump_stack_lvl+0xe8/0x150 [ 551.060546][T12011] should_fail_ex+0x414/0x560 [ 551.060585][T12011] _copy_to_user+0x31/0xb0 [ 551.060615][T12011] simple_read_from_buffer+0xe1/0x170 [ 551.060647][T12011] proc_fail_nth_read+0x1b3/0x220 [ 551.060681][T12011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.060708][T12011] ? rw_verify_area+0x2a6/0x4d0 [ 551.060741][T12011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 551.060766][T12011] vfs_read+0x200/0xa30 [ 551.060786][T12011] ? fdget_pos+0x247/0x320 [ 551.060819][T12011] ? __pfx___mutex_lock+0x10/0x10 [ 551.060843][T12011] ? __pfx_vfs_read+0x10/0x10 [ 551.060866][T12011] ? __fget_files+0x2a/0x420 [ 551.060898][T12011] ? __fget_files+0x3a0/0x420 [ 551.060924][T12011] ? __fget_files+0x2a/0x420 [ 551.060960][T12011] ksys_read+0x145/0x250 [ 551.060984][T12011] ? __pfx_ksys_read+0x10/0x10 [ 551.061001][T12011] ? fput+0xa0/0xd0 [ 551.061039][T12011] __do_fast_syscall_32+0x1dc/0x560 [ 551.061064][T12011] ? lockdep_hardirqs_on+0x7b/0x110 [ 551.061083][T12011] ? do_fast_syscall_32+0x34/0x80 [ 551.061107][T12011] ? irqentry_exit+0x10f/0x660 [ 551.061133][T12011] do_fast_syscall_32+0x34/0x80 [ 551.061157][T12011] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.061184][T12011] RIP: 0023:0xf6ffd539 [ 551.061202][T12011] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 551.061221][T12011] RSP: 002b:00000000f53ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 551.061245][T12011] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53ed620 [ 551.061260][T12011] RDX: 000000000000000f RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 551.061274][T12011] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 551.061287][T12011] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 551.061300][T12011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.061332][T12011] [ 551.724705][T12025] program syz.3.1608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.735487][T12025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1608'. [ 551.864504][T12030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.889292][T12030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.953112][ T5939] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 552.115198][ T5939] usb 5-1: config 0 has no interfaces? [ 552.120806][ T5939] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 552.134053][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.158044][ T5939] usb 5-1: config 0 descriptor?? [ 552.516217][ T5899] usb 5-1: USB disconnect, device number 62 [ 552.933402][ T5939] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 552.997786][T12020] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.005184][T12020] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.123150][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 553.150818][ T5939] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 553.159669][ T5939] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.215235][T12020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.229765][T12020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.243102][ T5939] usb 2-1: config 0 has no interface number 0 [ 553.262067][ T5939] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 553.271417][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.280008][ T5939] usb 2-1: Product: syz [ 553.284633][ T5939] usb 2-1: Manufacturer: syz [ 553.292908][ T5939] usb 2-1: SerialNumber: syz [ 553.331536][ T5939] usb 2-1: config 0 descriptor?? [ 553.661005][ T5939] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 553.668813][ T5939] uvcvideo 2-1:0.105: No valid video chain found. [ 553.688219][ T5939] usb 2-1: USB disconnect, device number 40 [ 554.026763][ T3017] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.037429][ T3017] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.054823][T12060] netlink: 'syz.1.1614': attribute type 4 has an invalid length. [ 554.138473][T12062] netlink: 'syz.1.1614': attribute type 4 has an invalid length. [ 554.351060][ T3017] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.445399][ T3017] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.862653][T12068] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1615'. [ 554.912311][T12068] netlink: 'syz.0.1615': attribute type 13 has an invalid length. [ 554.997947][T12068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.744164][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1617'. [ 555.897078][T12079] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1618'. [ 556.529020][T12092] netlink: 'syz.1.1621': attribute type 10 has an invalid length. [ 556.597299][T12092] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 557.053039][ T5939] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 557.233456][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 557.252155][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 32770, setting to 64 [ 557.291980][ T5939] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 557.301194][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.309418][ T5939] usb 2-1: Product: syz [ 557.313728][ T5939] usb 2-1: Manufacturer: syz [ 557.318366][ T5939] usb 2-1: SerialNumber: syz [ 557.333597][ T5939] usb 2-1: config 0 descriptor?? [ 557.342283][ T5939] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 557.905584][ T5939] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 558.243617][ T5939] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 558.587154][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1628'. [ 558.705702][ T5939] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 558.732471][ T5939] em28xx 2-1:0.0: board has no eeprom [ 558.934464][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 559.007494][T12120] netlink: 'syz.2.1631': attribute type 4 has an invalid length. [ 559.033438][T12120] netlink: 'syz.2.1631': attribute type 4 has an invalid length. [ 559.073423][ T24] usb 4-1: device descriptor read/64, error -71 [ 559.363573][ T5939] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 559.373458][ T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 559.392476][ T5939] em28xx 2-1:0.0: dvb set to bulk mode. [ 559.413095][ T5913] em28xx 2-1:0.0: Binding DVB extension [ 559.513037][ T24] usb 4-1: device descriptor read/64, error -71 [ 559.623946][ T24] usb usb4-port1: attempt power cycle [ 559.973297][ T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 559.994248][ T24] usb 4-1: device descriptor read/8, error -71 [ 560.243159][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 560.274147][ T24] usb 4-1: device descriptor read/8, error -71 [ 560.321308][T12092] em28xx 2-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 560.363348][T12134] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1633'. [ 560.386839][ T5939] usb 2-1: USB disconnect, device number 41 [ 560.396922][ T5939] em28xx 2-1:0.0: Disconnecting em28xx [ 560.402290][ T24] usb usb4-port1: unable to enumerate USB device [ 560.532561][ T5913] em28xx 2-1:0.0: Registering input extension [ 560.571102][ T5939] em28xx 2-1:0.0: Closing input extension [ 560.592415][ T5939] em28xx 2-1:0.0: Freeing device [ 562.153103][ T5913] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 562.319914][ T5913] usb 2-1: config 171 has an invalid interface number: 109 but max is 0 [ 562.343051][ T5913] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 562.376169][ T5913] usb 2-1: config 171 has no interface number 0 [ 562.403112][ T5913] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 562.443484][ T5913] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 27904, setting to 64 [ 562.484755][ T5913] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 562.529751][ T5913] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 562.548593][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.590587][ T5913] usb 2-1: Product: syz [ 562.594993][ T5913] usb 2-1: Manufacturer: syz [ 562.599641][ T5913] usb 2-1: SerialNumber: syz [ 562.623481][T12149] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 562.867419][T12167] fuse: Bad value for 'fd' [ 562.910264][T12168] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1638'. [ 562.923628][T12167] netlink: 'syz.4.1642': attribute type 21 has an invalid length. [ 562.933456][T12167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 562.940724][T12167] IPv6: NLM_F_CREATE should be set when creating new route [ 562.948153][T12167] IPv6: NLM_F_CREATE should be set when creating new route [ 562.955453][T12167] IPv6: NLM_F_CREATE should be set when creating new route [ 562.973072][ T5939] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 563.011924][T12167] trusted_key: syz.4.1642 sent an empty control message without MSG_MORE. [ 563.145060][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.156106][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 563.178358][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 563.206804][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 256, setting to 64 [ 563.221096][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.316324][ T5939] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 563.328627][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.343129][ T5939] usb 3-1: Product: syz [ 563.367119][ T5939] usb 3-1: Manufacturer: syz [ 563.373936][ T5939] usb 3-1: SerialNumber: syz [ 563.417735][ T5939] usb 3-1: config 0 descriptor?? [ 563.468029][T12162] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 563.490305][ T5939] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27 [ 563.574247][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 563.673289][ T5913] ath6kl: Failed to submit usb control message: -110 [ 563.683082][ T5913] ath6kl: unable to send the bmi data to the device: -110 [ 563.703044][ T5913] ath6kl: Unable to send get target info: -110 [ 563.723091][ T5913] ath6kl: Failed to init ath6kl core: -110 [ 563.731379][ T5913] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 563.846976][ T44] usb 3-1: USB disconnect, device number 64 [ 563.853723][ C1] kbtab 3-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 564.420038][ T44] usb 2-1: USB disconnect, device number 42 [ 565.979200][T12191] fuse: Bad value for 'rootmode' [ 568.071412][T12215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1651'. [ 568.157878][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.164314][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.441365][ T30] audit: type=1326 audit(1766984293.188:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 568.733176][ T30] audit: type=1326 audit(1766984293.228:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 568.773097][ T5899] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 568.787127][ T30] audit: type=1326 audit(1766984293.228:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 568.836501][ T30] audit: type=1326 audit(1766984293.228:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 568.984393][ T30] audit: type=1326 audit(1766984293.228:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 569.010011][ T5899] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 569.026687][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.063017][ T5899] usb 4-1: config 0 has no interfaces? [ 569.073692][ T5899] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 569.085622][ T30] audit: type=1326 audit(1766984293.228:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 569.119851][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.141384][ T5899] usb 4-1: config 0 descriptor?? [ 569.148643][ T30] audit: type=1326 audit(1766984293.228:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 569.208582][ T30] audit: type=1326 audit(1766984293.228:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 569.273608][ T30] audit: type=1326 audit(1766984293.228:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 569.333616][ T30] audit: type=1326 audit(1766984293.228:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 570.103891][ T5899] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 570.233278][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 570.256931][ T5899] usb 2-1: config 4 has an invalid interface number: 247 but max is 0 [ 570.275552][ T5899] usb 2-1: config 4 has no interface number 0 [ 570.290777][ T5899] usb 2-1: config 4 interface 247 has no altsetting 0 [ 570.320323][ T5899] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 570.352386][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.374377][ T5899] usb 2-1: Product: syz [ 570.378802][ T5899] usb 2-1: Manufacturer: syz [ 570.383929][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 570.401782][ T24] usb 5-1: config 0 has an invalid interface number: 234 but max is 2 [ 570.414324][ T24] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 570.430483][ T5899] usb 2-1: SerialNumber: syz [ 570.449949][ T24] usb 5-1: config 0 has no interface number 1 [ 570.477951][ T24] usb 5-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 570.493422][ T5899] comedi comedi5: Wrong number of endpoints [ 570.505382][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.523042][ T5899] ni6501 2-1:4.247: driver 'ni6501' failed to auto-configure device. [ 570.537744][ T24] usb 5-1: Product: syz [ 570.541945][ T24] usb 5-1: Manufacturer: syz [ 570.565450][ T24] usb 5-1: SerialNumber: syz [ 570.601835][ T24] usb 5-1: config 0 descriptor?? [ 570.619548][ T24] usb 5-1: unknown number of interfaces: 2 [ 570.666528][ T24] usb 2-1: USB disconnect, device number 43 [ 570.940873][ T5899] usb 5-1: USB disconnect, device number 63 [ 571.143970][T12254] libceph: resolve '0..' (ret=-3): failed [ 571.414789][ T5899] usb 4-1: USB disconnect, device number 55 [ 573.819070][T12287] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 574.113423][T12302] netlink: 'syz.3.1673': attribute type 13 has an invalid length. [ 574.326106][T12306] libceph: resolve '0..' (ret=-3): failed [ 575.220577][T12302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.548896][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 575.753515][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 575.765229][ T24] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 575.822243][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.870432][ T24] usb 3-1: config 0 descriptor?? [ 576.105530][ T24] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 576.152835][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 576.175606][ T24] dib0700: firmware download failed at 7 with -22 [ 576.312750][T12311] dtv5100: wlen = 3, aborting. [ 576.322146][T12311] tipc: Enabling of bearer rejected, failed to enable media [ 576.689916][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 576.689933][ T30] audit: type=1326 audit(1766984301.428:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 576.851466][ T30] audit: type=1326 audit(1766984301.428:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 576.929067][ T30] audit: type=1326 audit(1766984301.428:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 577.002697][ T30] audit: type=1326 audit(1766984301.428:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 577.102330][ T30] audit: type=1326 audit(1766984301.428:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 577.209207][ T30] audit: type=1326 audit(1766984301.428:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 577.232369][ T30] audit: type=1326 audit(1766984301.428:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 577.294495][ T30] audit: type=1326 audit(1766984301.428:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 577.340621][ T30] audit: type=1326 audit(1766984301.428:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 577.373258][ T30] audit: type=1326 audit(1766984301.428:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12318 comm="syz.0.1677" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 577.400280][T12330] FAULT_INJECTION: forcing a failure. [ 577.400280][T12330] name failslab, interval 1, probability 0, space 0, times 0 [ 577.415694][T12330] CPU: 0 UID: 0 PID: 12330 Comm: syz.1.1681 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.415729][T12330] Tainted: [L]=SOFTLOCKUP [ 577.415738][T12330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.415755][T12330] Call Trace: [ 577.415765][T12330] [ 577.415774][T12330] dump_stack_lvl+0xe8/0x150 [ 577.415807][T12330] should_fail_ex+0x414/0x560 [ 577.415846][T12330] should_failslab+0xa8/0x100 [ 577.415887][T12330] kmem_cache_alloc_noprof+0x88/0x710 [ 577.415924][T12330] ? mas_alloc_nodes+0x291/0x350 [ 577.415962][T12330] mas_alloc_nodes+0x291/0x350 [ 577.416009][T12330] mas_preallocate+0x2e0/0x670 [ 577.416049][T12330] ? __pfx_mas_preallocate+0x10/0x10 [ 577.416095][T12330] ? __mas_set_range+0x12f/0x3c0 [ 577.416131][T12330] __split_vma+0x2fa/0xa00 [ 577.416172][T12330] ? __pfx___split_vma+0x10/0x10 [ 577.416224][T12330] vma_modify+0x952/0x1a70 [ 577.416271][T12330] vma_modify_flags+0x208/0x2e0 [ 577.416302][T12330] ? __pfx_vma_modify_flags+0x10/0x10 [ 577.416354][T12330] mprotect_fixup+0x43c/0xa30 [ 577.416390][T12330] ? __pfx_mprotect_fixup+0x10/0x10 [ 577.416429][T12330] do_mprotect_pkey+0x8c5/0xcd0 [ 577.416456][T12330] ? ksys_write+0x1cb/0x250 [ 577.416488][T12330] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 577.416541][T12330] ? __pfx_ksys_write+0x10/0x10 [ 577.416562][T12330] ? rcu_is_watching+0x15/0xb0 [ 577.416595][T12330] __ia32_sys_mprotect+0x7f/0x90 [ 577.416622][T12330] __do_fast_syscall_32+0x1dc/0x560 [ 577.416646][T12330] ? lockdep_hardirqs_on+0x7b/0x110 [ 577.416666][T12330] ? do_fast_syscall_32+0x34/0x80 [ 577.416689][T12330] ? irqentry_exit+0x10f/0x660 [ 577.416714][T12330] do_fast_syscall_32+0x34/0x80 [ 577.416738][T12330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 577.416765][T12330] RIP: 0023:0xf6ffd539 [ 577.416785][T12330] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 577.416803][T12330] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 000000000000007d [ 577.416826][T12330] RAX: ffffffffffffffda RBX: 0000000080fa3000 RCX: 0000000000003000 [ 577.416842][T12330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 577.416862][T12330] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 577.416875][T12330] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 577.416887][T12330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 577.416920][T12330] [ 578.057534][T12335] input: syz1 as /devices/virtual/input/input28 [ 578.120426][ T5917] usb 3-1: USB disconnect, device number 65 [ 578.152254][T12339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1685'. [ 578.406137][ T44] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 578.450323][T12343] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 578.605099][ T44] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 578.613414][ T44] usb 4-1: config 0 has no interface number 0 [ 578.619660][ T44] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 578.631003][ T44] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.760119][ T44] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 578.770092][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.974084][ T44] usb 4-1: Product: syz [ 579.000959][ T44] usb 4-1: Manufacturer: syz [ 579.013413][ T44] usb 4-1: SerialNumber: syz [ 579.028863][ T44] usb 4-1: config 0 descriptor?? [ 579.064084][T12332] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 579.100954][ T44] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 579.381299][ T44] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 579.483422][ T44] usb 4-1: USB disconnect, device number 56 [ 580.813168][T12371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 580.853118][T12369] netlink: 368 bytes leftover after parsing attributes in process `syz.4.1691'. [ 581.993698][T12399] netlink: 'syz.3.1696': attribute type 4 has an invalid length. [ 582.063226][T12404] netlink: 'syz.3.1696': attribute type 4 has an invalid length. [ 584.533277][ T5939] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 584.759676][ T5939] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 584.807799][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.821754][ T5939] usb 3-1: Product: syz [ 584.829958][ T5939] usb 3-1: Manufacturer: syz [ 584.835090][ T5939] usb 3-1: SerialNumber: syz [ 584.862627][ T5939] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 584.917622][T12428] bridge0: entered promiscuous mode [ 584.923622][T12428] macvlan3: entered promiscuous mode [ 584.938475][ T5913] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 584.963844][ T5917] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 585.245377][ T5917] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 585.254372][ T5917] usb 4-1: config 0 has no interface number 0 [ 585.260949][ T5917] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 585.270825][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.357067][ T5917] usb 4-1: config 0 descriptor?? [ 585.563577][ T5917] usb 4-1: selecting invalid altsetting 1 [ 585.572627][ T5917] dvb_ttusb_budget: ttusb_init_controller: error [ 585.581876][ T5917] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 585.769039][T12417] dtv5100: wlen = 0, aborting. [ 585.777200][T12417] dtv5100: wlen = 80, aborting. [ 585.931770][ T5917] DVB: Unable to find symbol cx22700_attach() [ 586.165012][ T5917] DVB: Unable to find symbol tda10046_attach() [ 586.179139][ T5917] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 586.196621][ T5917] usb 4-1: USB disconnect, device number 57 [ 586.234058][ T5913] usb 3-1: Service connection timeout for: 256 [ 586.242024][ T5913] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 586.290604][ T5913] ath9k_htc: Failed to initialize the device [ 586.299099][ T5939] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 586.361876][ T5913] usb 3-1: ath9k_htc: USB layer deinitialized [ 586.466308][ T5939] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 586.485840][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 586.526897][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 586.566171][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 586.595082][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 586.637385][T12440] xt_NFQUEUE: number of total queues is 0 [ 586.685994][ T5939] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 586.727837][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.782323][ T5939] usb 2-1: config 0 descriptor?? [ 586.804930][T12436] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 587.312084][ T5939] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 587.320729][ T5939] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 587.484944][ T5939] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 587.518321][ T5939] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 587.559833][ T5939] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 587.585167][ T5939] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 587.586509][ T5899] usb 3-1: USB disconnect, device number 66 [ 587.622176][ T5939] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 587.645650][ T5939] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 587.678664][ T5939] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 587.707720][ T5939] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 587.755532][ T5939] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 587.894784][ T5939] usb 2-1: USB disconnect, device number 44 [ 588.017890][T12452] fido_id[12452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 588.366436][T12454] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1711'. [ 589.084907][T12474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1715'. [ 589.115187][T12474] libceph: resolve '0..' (ret=-3): failed [ 593.597201][T12521] syzkaller0: entered promiscuous mode [ 593.611898][T12521] syzkaller0: entered allmulticast mode [ 598.616455][T12563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1737'. [ 599.163086][ T5899] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 599.303388][ T5899] usb 5-1: device descriptor read/64, error -71 [ 599.543381][ T5899] usb 5-1: new low-speed USB device number 65 using dummy_hcd [ 599.662137][T12584] netlink: 'syz.0.1743': attribute type 4 has an invalid length. [ 599.673207][ T5899] usb 5-1: device descriptor read/64, error -71 [ 599.679879][T12584] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1743'. [ 599.784860][ T5899] usb usb5-port1: attempt power cycle [ 600.018193][T12592] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 600.041502][T12592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.116147][T12592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.153511][ T5899] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 600.177652][ T5899] usb 5-1: device descriptor read/8, error -71 [ 600.316620][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1742'. [ 600.368886][T12597] usb usb1: usbfs: process 12597 (syz.2.1742) did not claim interface 0 before use [ 600.473310][ T5899] usb 5-1: new low-speed USB device number 67 using dummy_hcd [ 600.518027][ T5899] usb 5-1: device descriptor read/8, error -71 [ 600.683351][ T5899] usb usb5-port1: unable to enumerate USB device [ 603.259114][T12633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1755'. [ 604.136151][ T5939] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 604.387643][ T5939] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 604.396328][ T5939] usb 3-1: config 0 has no interface number 0 [ 604.402496][ T5939] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 604.528342][ T5939] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 604.636491][ T5939] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 604.677516][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.946707][ T5939] usb 3-1: Product: syz [ 604.961957][ T5939] usb 3-1: Manufacturer: syz [ 605.003123][ T5939] usb 3-1: SerialNumber: syz [ 605.048072][ T5939] usb 3-1: config 0 descriptor?? [ 605.083744][T12647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 605.124078][ T5939] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 605.608655][T12670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 605.625367][T12670] usb usb1: usbfs: process 12670 (syz.1.1759) did not claim interface 0 before use [ 606.656750][ T5939] usb 3-1: USB disconnect, device number 67 [ 606.665717][ T5939] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 606.834370][T12679] FAULT_INJECTION: forcing a failure. [ 606.834370][T12679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.849290][T12679] CPU: 0 UID: 0 PID: 12679 Comm: syz.0.1767 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.849332][T12679] Tainted: [L]=SOFTLOCKUP [ 606.849340][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.849350][T12679] Call Trace: [ 606.849357][T12679] [ 606.849365][T12679] dump_stack_lvl+0xe8/0x150 [ 606.849389][T12679] should_fail_ex+0x414/0x560 [ 606.849417][T12679] _copy_from_iter+0x1cd/0x1630 [ 606.849443][T12679] ? __pfx__copy_from_iter+0x10/0x10 [ 606.849459][T12679] ? __build_skb_around+0x22d/0x3c0 [ 606.849477][T12679] ? __alloc_skb+0x198/0x3a0 [ 606.849492][T12679] ? netlink_sendmsg+0x642/0xb30 [ 606.849510][T12679] ? skb_put+0x11b/0x210 [ 606.849529][T12679] netlink_sendmsg+0x6b2/0xb30 [ 606.849555][T12679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.849576][T12679] ? __import_iovec+0x5d4/0x7f0 [ 606.849602][T12679] ? aa_sock_msg_perm+0xf1/0x1b0 [ 606.849624][T12679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.849639][T12679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.849659][T12679] __sock_sendmsg+0x21c/0x270 [ 606.849685][T12679] ____sys_sendmsg+0x505/0x820 [ 606.849707][T12679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.849729][T12679] ? kstrtouint+0x6e/0xe0 [ 606.849757][T12679] ___sys_sendmsg+0x21f/0x2a0 [ 606.849777][T12679] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.849795][T12679] ? get_pid_task+0x20/0x1f0 [ 606.849822][T12679] ? get_pid_task+0x20/0x1f0 [ 606.849840][T12679] ? get_pid_task+0x20/0x1f0 [ 606.849880][T12679] ? __fget_files+0x2a/0x420 [ 606.849899][T12679] ? __fget_files+0x3a0/0x420 [ 606.849925][T12679] __sys_sendmsg+0x164/0x220 [ 606.849945][T12679] ? __pfx___sys_sendmsg+0x10/0x10 [ 606.849970][T12679] ? __pfx_ksys_write+0x10/0x10 [ 606.850006][T12679] __do_fast_syscall_32+0x1dc/0x560 [ 606.850024][T12679] ? lockdep_hardirqs_on+0x7b/0x110 [ 606.850038][T12679] ? do_fast_syscall_32+0x34/0x80 [ 606.850054][T12679] ? irqentry_exit+0x10f/0x660 [ 606.850072][T12679] do_fast_syscall_32+0x34/0x80 [ 606.850089][T12679] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 606.850110][T12679] RIP: 0023:0xf7f81539 [ 606.850129][T12679] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 606.850143][T12679] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 606.850160][T12679] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 606.850171][T12679] RDX: 0000000000000014 RSI: 0000000000000000 RDI: 0000000000000000 [ 606.850181][T12679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 606.850190][T12679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 606.850199][T12679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 606.850220][T12679] [ 607.443402][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 607.443425][ T30] audit: type=1326 audit(1766984332.178:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 607.506817][ T30] audit: type=1326 audit(1766984332.178:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 607.529803][ T30] audit: type=1326 audit(1766984332.178:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 607.552722][ T30] audit: type=1326 audit(1766984332.178:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 607.575612][ T30] audit: type=1326 audit(1766984332.178:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 607.639313][ T30] audit: type=1326 audit(1766984332.178:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 607.697260][ T30] audit: type=1326 audit(1766984332.178:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 607.993126][ T5899] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 608.156901][ T5899] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 608.166816][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.175406][ T5899] usb 2-1: Product: syz [ 608.181945][ T5899] usb 2-1: Manufacturer: syz [ 608.195467][ T5899] usb 2-1: SerialNumber: syz [ 608.210897][ T5899] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 608.229470][ T24] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 608.392420][T12699] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1772'. [ 608.834259][T12699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.850856][T12704] FAULT_INJECTION: forcing a failure. [ 608.850856][T12704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.870501][T12704] CPU: 1 UID: 0 PID: 12704 Comm: syz.2.1774 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.870530][T12704] Tainted: [L]=SOFTLOCKUP [ 608.870535][T12704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.870546][T12704] Call Trace: [ 608.870552][T12704] [ 608.870559][T12704] dump_stack_lvl+0xe8/0x150 [ 608.870584][T12704] should_fail_ex+0x414/0x560 [ 608.870612][T12704] _copy_from_iter+0x1cd/0x1630 [ 608.870637][T12704] ? __pfx__copy_from_iter+0x10/0x10 [ 608.870654][T12704] ? __build_skb_around+0x22d/0x3c0 [ 608.870672][T12704] ? __alloc_skb+0x198/0x3a0 [ 608.870688][T12704] ? netlink_sendmsg+0x642/0xb30 [ 608.870706][T12704] ? skb_put+0x11b/0x210 [ 608.870724][T12704] netlink_sendmsg+0x6b2/0xb30 [ 608.870751][T12704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.870772][T12704] ? __import_iovec+0x5d4/0x7f0 [ 608.870789][T12704] ? aa_sock_msg_perm+0xf1/0x1b0 [ 608.870810][T12704] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 608.870824][T12704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.870845][T12704] __sock_sendmsg+0x21c/0x270 [ 608.870869][T12704] ____sys_sendmsg+0x505/0x820 [ 608.870893][T12704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.870915][T12704] ? kstrtouint+0x6e/0xe0 [ 608.870943][T12704] ___sys_sendmsg+0x21f/0x2a0 [ 608.870963][T12704] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.870980][T12704] ? get_pid_task+0x20/0x1f0 [ 608.871000][T12704] ? get_pid_task+0x20/0x1f0 [ 608.871018][T12704] ? get_pid_task+0x20/0x1f0 [ 608.871058][T12704] ? __fget_files+0x2a/0x420 [ 608.871077][T12704] ? __fget_files+0x3a0/0x420 [ 608.871103][T12704] __sys_sendmsg+0x164/0x220 [ 608.871128][T12704] ? __pfx___sys_sendmsg+0x10/0x10 [ 608.871154][T12704] ? __pfx_ksys_write+0x10/0x10 [ 608.871205][T12704] __do_fast_syscall_32+0x1dc/0x560 [ 608.871232][T12704] ? lockdep_hardirqs_on+0x7b/0x110 [ 608.871246][T12704] ? do_fast_syscall_32+0x34/0x80 [ 608.871263][T12704] ? irqentry_exit+0x10f/0x660 [ 608.871280][T12704] do_fast_syscall_32+0x34/0x80 [ 608.871298][T12704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 608.871317][T12704] RIP: 0023:0xf70dd539 [ 608.871330][T12704] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 608.871344][T12704] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 608.871361][T12704] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 608.871372][T12704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 608.871382][T12704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 608.871391][T12704] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 608.871400][T12704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 608.871440][T12704] [ 609.513746][T12707] netlink: 'syz.0.1773': attribute type 13 has an invalid length. [ 609.523080][ T24] usb 2-1: Service connection timeout for: 256 [ 609.553190][ T24] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 609.794144][T12699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.811869][T12699] bond0 (unregistering): Released all slaves [ 609.850680][ T24] ath9k_htc: Failed to initialize the device [ 609.869149][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 610.084699][T12707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 610.642729][ T5917] usb 2-1: USB disconnect, device number 45 [ 611.311038][T12719] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 611.317752][T12719] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 611.330714][T12719] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 611.337126][T12719] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 611.377948][T12719] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 611.420993][T12719] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 611.445741][T12719] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 611.494442][T12719] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 611.549225][T12732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1779'. [ 611.559250][T12719] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 611.571062][T12719] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 611.614769][T12732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1779'. [ 612.536149][T12739] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1782'. [ 612.723152][T12744] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1783'. [ 612.773347][T12744] libceph: resolve '0..' (ret=-3): failed [ 612.781349][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 612.795323][T12741] usb usb1: usbfs: process 12741 (syz.2.1778) did not claim interface 0 before use [ 614.251327][T12766] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1789'. [ 614.386775][T12768] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1788'. [ 614.595904][T12772] netlink: 'syz.2.1791': attribute type 6 has an invalid length. [ 614.913183][ T5913] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 615.053761][ T5913] usb 2-1: device descriptor read/64, error -71 [ 615.074965][T12781] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1790'. [ 615.086847][T12781] netlink: 'syz.4.1790': attribute type 13 has an invalid length. [ 615.179196][T12781] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.233295][T12781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.397383][ T5913] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 615.554769][ T5913] usb 2-1: device descriptor read/64, error -71 [ 615.683351][ T5913] usb usb2-port1: attempt power cycle [ 616.235572][ T5913] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 616.264785][ T5913] usb 2-1: device descriptor read/8, error -71 [ 616.814910][ T5913] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 616.853766][ T5913] usb 2-1: device descriptor read/8, error -71 [ 617.003763][ T5913] usb usb2-port1: unable to enumerate USB device [ 617.669022][T12793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1795'. [ 617.702400][T12793] netlink: 'syz.1.1795': attribute type 39 has an invalid length. [ 617.955455][T12793] bond0: (slave syz_tun): Releasing backup interface [ 618.188801][T12799] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1796'. [ 618.806846][T12803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1799'. [ 619.062261][T12803] libceph: resolve '0..' (ret=-3): failed [ 619.327223][T12807] trusted_key: encrypted_key: insufficient parameters specified [ 619.525481][T12807] usb usb1: usbfs: process 12807 (syz.4.1797) did not claim interface 0 before use [ 620.270008][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.279211][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.812994][ T5918] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 622.003712][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 622.013598][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 622.041536][ T5918] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 622.084371][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 622.129164][ T5918] usb 2-1: Product: syz [ 622.141511][ T5918] usb 2-1: Manufacturer: syz [ 622.154764][ T5918] usb 2-1: SerialNumber: syz [ 622.187676][ T5918] usb 2-1: config 0 descriptor?? [ 622.206427][T12833] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 622.242855][ T5918] hub 2-1:0.0: bad descriptor, ignoring hub [ 622.257643][ T5918] hub 2-1:0.0: probe with driver hub failed with error -5 [ 622.503031][ T5918] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 622.717478][ T24] usb 2-1: USB disconnect, device number 50 [ 622.857193][ T5918] usb 4-1: config index 0 descriptor too short (expected 8237, got 45) [ 622.891092][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.902081][ T5918] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 623.002871][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.028450][ T5918] usb 4-1: config 0 descriptor?? [ 623.081712][ T5918] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 623.282977][ T5918] usb 4-1: USB disconnect, device number 58 [ 624.367842][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1811'. [ 625.275505][T12867] netlink: 'syz.4.1813': attribute type 16 has an invalid length. [ 625.291526][T12867] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1813'. [ 626.109238][T12876] netlink: 'syz.2.1816': attribute type 2 has an invalid length. [ 626.369445][T12889] macvlan2: entered promiscuous mode [ 626.386140][T12889] bridge0: entered promiscuous mode [ 626.737093][T12901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.748028][T12901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.816269][T12922] fuse: Bad value for 'fd' [ 629.055596][T12937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1827'. [ 629.533082][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.548999][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.067342][T12951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1830'. [ 630.086927][T12951] libceph: resolve '0..' (ret=-3): failed [ 630.138533][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 630.501049][T12957] program syz.4.1833 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.444828][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 632.687292][T12976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.393399][ T5899] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 633.585723][ T5899] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 633.596508][ T5899] usb 3-1: config 0 has no interface number 0 [ 633.608277][ T5899] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 633.631280][ T5899] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 633.703486][ T5918] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 633.735940][ T5899] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 633.763317][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.789357][ T5899] usb 3-1: Product: syz [ 633.801126][ T5899] usb 3-1: Manufacturer: syz [ 633.810858][ T5899] usb 3-1: SerialNumber: syz [ 633.863535][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 633.873755][ T5918] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 633.884722][ T5899] usb 3-1: config 0 descriptor?? [ 633.890867][T12997] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 633.915931][ T5918] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 633.931066][ T5899] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 633.945956][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.974690][ T5918] usb 4-1: Product: syz [ 633.978963][ T5918] usb 4-1: Manufacturer: syz [ 634.012180][ T5918] usb 4-1: SerialNumber: syz [ 634.095080][ T5918] usb 4-1: config 0 descriptor?? [ 634.111298][T13009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1844'. [ 634.263447][ T5918] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 634.848701][ T5918] gspca_zc3xx: reg_w_i err -71 [ 635.463050][ T5918] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 635.469568][ T5918] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 635.495151][ T5918] usb 4-1: USB disconnect, device number 59 [ 635.771450][T13027] fuse: Bad value for 'user_id' [ 635.790343][T13027] fuse: Bad value for 'user_id' [ 636.337277][ T5918] usb 3-1: USB disconnect, device number 68 [ 636.345432][ T5918] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 637.146128][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1852'. [ 637.224859][T13045] hsr_slave_0: left promiscuous mode [ 637.388356][T13045] hsr_slave_1: left promiscuous mode [ 637.729363][T13055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1854'. [ 637.747465][T13055] libceph: resolve '0..' (ret=-3): failed [ 638.673216][ T5918] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 638.904059][T13077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1859'. [ 639.000285][ T5918] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 639.009681][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.027370][ T5918] usb 4-1: Product: syz [ 639.033933][ T5918] usb 4-1: Manufacturer: syz [ 639.038634][ T5918] usb 4-1: SerialNumber: syz [ 639.055662][ T5918] usb 4-1: config 0 descriptor?? [ 639.064325][ T5918] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 639.076825][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 639.087189][ T5918] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 639.096510][ T5918] usb 4-1: media controller created [ 639.122009][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 639.263286][T13070] FAULT_INJECTION: forcing a failure. [ 639.263286][T13070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.293103][T13070] CPU: 0 UID: 0 PID: 13070 Comm: syz.3.1858 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.293139][T13070] Tainted: [L]=SOFTLOCKUP [ 639.293147][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 639.293161][T13070] Call Trace: [ 639.293170][T13070] [ 639.293186][T13070] dump_stack_lvl+0xe8/0x150 [ 639.293215][T13070] should_fail_ex+0x414/0x560 [ 639.293242][T13070] _copy_from_user+0x2d/0xb0 [ 639.293262][T13070] memdup_user+0x5e/0xd0 [ 639.293280][T13070] i2cdev_ioctl_rdwr+0x1c6/0x740 [ 639.293304][T13070] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 639.293324][T13070] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 639.293343][T13070] ? __fget_files+0x3a0/0x420 [ 639.293362][T13070] ? __fget_files+0x2a/0x420 [ 639.293383][T13070] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 639.293403][T13070] __ia32_compat_sys_ioctl+0x543/0x840 [ 639.293420][T13070] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 639.293435][T13070] ? __fget_files+0x3a0/0x420 [ 639.293458][T13070] ? fput+0xa0/0xd0 [ 639.293478][T13070] ? ksys_write+0x22a/0x250 [ 639.293494][T13070] ? __pfx_ksys_write+0x10/0x10 [ 639.293516][T13070] __do_fast_syscall_32+0x1dc/0x560 [ 639.293533][T13070] ? lockdep_hardirqs_on+0x7b/0x110 [ 639.293546][T13070] ? do_fast_syscall_32+0x34/0x80 [ 639.293562][T13070] ? irqentry_exit+0x10f/0x660 [ 639.293579][T13070] do_fast_syscall_32+0x34/0x80 [ 639.293596][T13070] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 639.293615][T13070] RIP: 0023:0xf70cd539 [ 639.293629][T13070] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 639.293642][T13070] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 639.293659][T13070] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 639.293669][T13070] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 639.293678][T13070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 639.293687][T13070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 639.293696][T13070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 639.293717][T13070] [ 639.877264][ T5918] DVB: Unable to find symbol mt352_attach() [ 640.057826][ T5918] DVB: Unable to find symbol nxt6000_attach() [ 640.064387][ T5918] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 640.145211][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 640.284930][ T5918] dvb-usb: schedule remote query interval to 1000 msecs. [ 640.292027][ T5918] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 640.353423][ T5918] dvb-usb: bulk message failed: -22 (7/0) [ 640.359342][ T5918] dvb-usb: bulk message failed: -22 (7/0) [ 640.459707][ T5918] usb 4-1: USB disconnect, device number 60 [ 640.669653][T13086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1861'. [ 640.865234][T13091] netlink: 'syz.4.1862': attribute type 4 has an invalid length. [ 640.929190][T13092] netlink: 'syz.4.1862': attribute type 4 has an invalid length. [ 641.200104][T13083] syzkaller0: entered promiscuous mode [ 641.205726][T13083] syzkaller0: entered allmulticast mode [ 641.331776][ T5918] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 641.349592][T13086] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1861'. [ 641.529909][T13086] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1861'. [ 641.543238][T13086] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 641.983049][ T5918] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 642.353137][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 642.379747][ T5918] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 642.394919][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.417960][ T5918] usb 3-1: Product: syz [ 642.438229][ T5918] usb 3-1: Manufacturer: syz [ 642.449191][ T5918] usb 3-1: SerialNumber: syz [ 642.483283][ T5918] usb 3-1: config 0 descriptor?? [ 642.497925][ T5918] gspca_main: spca501-2.14.0 probing 0497:c001 [ 642.698745][ T5918] gspca_spca501: reg write: error -71 [ 642.715145][ T5918] spca501 3-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 642.735590][ T5918] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 642.774911][ T5918] usb 3-1: USB disconnect, device number 69 [ 646.645852][T13132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1875'. [ 646.803350][T13139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1876'. [ 646.823036][ T5939] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 647.035900][ T5918] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 647.049099][ T5939] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 647.063341][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.161663][ T5939] usb 4-1: Product: syz [ 647.167112][ T5939] usb 4-1: Manufacturer: syz [ 647.186178][ T5939] usb 4-1: SerialNumber: syz [ 647.215221][ T5939] usb 4-1: config 0 descriptor?? [ 647.225193][ T5918] usb 2-1: config 9 has an invalid interface number: 3 but max is 0 [ 647.227906][ T5939] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 647.242605][ T5918] usb 2-1: config 9 has no interface number 0 [ 647.251119][ T5918] usb 2-1: config 9 interface 3 has no altsetting 0 [ 647.258614][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 647.281546][ T5939] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 647.511473][ T5918] usb 2-1: New USB device found, idVendor=0fcf, idProduct=1003, bcdDevice=87.04 [ 647.526334][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.541407][ T5918] usb 2-1: Product: syz [ 647.552924][ T5918] usb 2-1: Manufacturer: syz [ 647.564890][ T5918] usb 2-1: SerialNumber: syz [ 647.587959][ T5939] usb 4-1: media controller created [ 647.742606][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 648.252591][ T5918] hub 2-1:9.3: bad descriptor, ignoring hub [ 648.269799][ T5918] hub 2-1:9.3: probe with driver hub failed with error -5 [ 648.295070][ T5918] cp210x 2-1:9.3: cp210x converter detected [ 648.346335][ T5918] cp210x 2-1:9.3: failed to get vendor val 0x370b size 1: -71 [ 648.412975][ T5918] cp210x 2-1:9.3: querying part number failed [ 648.458254][ T5918] usb 2-1: cp210x converter now attached to ttyUSB0 [ 648.504935][ T5918] usb 2-1: USB disconnect, device number 51 [ 648.539246][ T5939] DVB: Unable to find symbol mt352_attach() [ 648.545667][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 648.585371][ T5918] cp210x 2-1:9.3: device disconnected [ 648.835418][ T5939] DVB: Unable to find symbol nxt6000_attach() [ 648.856136][ T5939] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 648.903462][ T5939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 648.934261][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1881'. [ 648.945951][ T5939] dvb-usb: schedule remote query interval to 1000 msecs. [ 648.961500][ T5939] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 648.986786][ T5939] dvb-usb: bulk message failed: -22 (7/0) [ 649.005394][ T5939] dvb-usb: bulk message failed: -22 (7/0) [ 649.044858][ T5939] usb 4-1: USB disconnect, device number 61 [ 649.107116][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1881'. [ 649.211637][ T5939] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 649.380308][T13168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1883'. [ 649.463880][T13168] libceph: resolve '0..' (ret=-3): failed [ 649.840305][ T30] audit: type=1326 audit(1766984374.588:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13154 comm="syz.4.1880" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x0 [ 650.139635][T13174] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1885'. [ 650.183154][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.212637][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.298760][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.512082][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.627733][T13183] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1886'. [ 650.645686][T13183] libceph: resolve '0..' (ret=-3): failed [ 650.843432][ T5918] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 650.997923][ T5918] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 651.032554][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.413012][ T5918] usb 2-1: Product: syz [ 651.417231][ T5918] usb 2-1: Manufacturer: syz [ 651.421945][ T5918] usb 2-1: SerialNumber: syz [ 651.446719][ T5918] usb 2-1: config 0 descriptor?? [ 651.927129][T13174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1885'. [ 651.974288][T13173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1885'. [ 651.996677][T13174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.027633][T13174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.070875][ T5918] usb 2-1: USB disconnect, device number 52 [ 652.990678][ T30] audit: type=1326 audit(1766984377.718:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 653.087157][ T30] audit: type=1326 audit(1766984377.718:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 653.149416][ T30] audit: type=1326 audit(1766984377.718:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 653.217491][ T30] audit: type=1326 audit(1766984377.718:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 653.374014][ T30] audit: type=1326 audit(1766984377.728:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 653.413067][ T30] audit: type=1326 audit(1766984377.728:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 653.464905][ T30] audit: type=1326 audit(1766984377.728:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 653.631334][ T30] audit: type=1326 audit(1766984377.728:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 653.729685][T13225] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1897'. [ 653.746187][ T30] audit: type=1326 audit(1766984377.728:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13213 comm="syz.1.1894" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6ffd539 code=0x7ffc0000 [ 654.295862][T13236] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1898'. [ 654.308291][T13236] netlink: 'syz.2.1898': attribute type 13 has an invalid length. [ 654.363618][T13236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 655.145029][T13241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1901'. [ 655.190466][T13241] libceph: resolve '0..' (ret=-3): failed [ 656.142650][ T5913] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 656.293228][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 656.304387][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 656.355716][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 656.493751][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.501821][ T5913] usb 5-1: Product: syz [ 656.523247][ T5913] usb 5-1: Manufacturer: syz [ 656.539677][ T5913] usb 5-1: SerialNumber: syz [ 656.605681][ T5913] usb 5-1: config 0 descriptor?? [ 656.635274][ T5913] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 656.651766][ T5913] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 656.746909][T13239] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1900'. [ 656.825498][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 657.255130][ T5913] em28xx 5-1:0.0: chip ID is em2874 [ 657.452473][ T5939] hid_parser_main: 5 callbacks suppressed [ 657.452490][ T5939] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 657.466987][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 657.467001][ T30] audit: type=1326 audit(1766984382.218:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 657.586977][ T5939] hid-generic 0000:0000:0000.001D: unknown main item tag 0x2 [ 657.587699][ C1] sd 0:0:1:0: [sda] tag#8837 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 657.605076][ C1] sd 0:0:1:0: [sda] tag#8837 CDB: Write(6) 0a 00 4e 20 00 00 00 09 00 00 00 00 [ 657.683014][ T5939] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 657.696485][ T30] audit: type=1326 audit(1766984382.248:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 657.726192][ T5939] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 657.734007][ T5939] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 657.742784][ T5939] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 657.750867][ T30] audit: type=1326 audit(1766984382.248:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 657.793331][ T5939] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 657.830956][ T5939] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 657.847931][ T5939] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 657.854637][ T5918] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 657.856219][ T30] audit: type=1326 audit(1766984382.248:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 657.893105][ T5939] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 657.903698][ T5939] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 657.915958][ T30] audit: type=1326 audit(1766984382.248:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 657.952276][ T30] audit: type=1326 audit(1766984382.248:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 657.993305][ T30] audit: type=1326 audit(1766984382.248:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 658.027641][ T30] audit: type=1326 audit(1766984382.248:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 658.210899][ T5918] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 658.228700][ T5918] usb 4-1: config 0 has no interface number 0 [ 658.246774][ T30] audit: type=1326 audit(1766984382.248:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 658.254165][ T5918] usb 4-1: config 0 interface 188 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 658.358503][ T5913] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 658.374195][ T5918] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 658.384700][T13283] fido_id[13283]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 658.403502][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.410607][ T5913] em28xx 5-1:0.0: board has no eeprom [ 658.418971][ T30] audit: type=1326 audit(1766984382.248:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13275 comm="syz.3.1905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 658.419750][ T5918] usb 4-1: Product: syz [ 658.505490][ T5918] usb 4-1: Manufacturer: syz [ 658.510237][ T5918] usb 4-1: SerialNumber: syz [ 658.532313][ T5918] usb 4-1: config 0 descriptor?? [ 658.544037][T13277] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 658.763001][ T5913] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 658.766705][T13276] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 658.782721][ T5913] em28xx 5-1:0.0: dvb set to bulk mode. [ 658.796789][ T5939] em28xx 5-1:0.0: Binding DVB extension [ 659.187045][ T5899] usb 5-1: USB disconnect, device number 68 [ 659.195847][ T5899] em28xx 5-1:0.0: Disconnecting em28xx [ 659.201589][ T24] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 659.306368][ T5939] em28xx 5-1:0.0: Registering input extension [ 659.395722][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 659.408514][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.429935][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 659.442483][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.443296][ T5939] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 659.487699][ T5939] Registered IR keymap rc-empty [ 659.533600][ T5939] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 659.583452][ T5939] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 659.643801][ T5939] em28xx 5-1:0.0: Input extension successfully initialized [ 659.665150][ T5899] em28xx 5-1:0.0: Closing input extension [ 659.728925][ T24] usb 3-1: usb_control_msg returned -32 [ 659.753466][ T24] usbtmc 3-1:16.0: can't read capabilities [ 659.824202][ T5899] em28xx 5-1:0.0: Freeing device [ 660.077697][T13304] usbtmc 3-1:16.0: stb usb_control_msg returned -32 [ 660.086505][ T5899] usb 3-1: USB disconnect, device number 70 [ 661.243037][ T5899] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 661.420181][ T5899] usb 3-1: device descriptor read/64, error -71 [ 661.551241][T13330] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1916'. [ 661.570043][T13330] netlink: 'syz.0.1916': attribute type 13 has an invalid length. [ 661.656784][T13330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 661.693069][ T5899] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 661.826495][ T5899] usb 3-1: device descriptor read/64, error -71 [ 661.986109][ T5899] usb usb3-port1: attempt power cycle [ 662.036064][ T5918] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 662.052847][ T5918] asix 4-1:0.188: probe with driver asix failed with error -71 [ 662.294708][ T5918] usb 4-1: USB disconnect, device number 62 [ 662.369922][ T5899] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 662.407165][ T5899] usb 3-1: device descriptor read/8, error -71 [ 662.654452][ T5899] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 662.711905][ T5899] usb 3-1: device descriptor read/8, error -71 [ 662.833392][ T5899] usb usb3-port1: unable to enumerate USB device [ 664.599662][T13361] usb usb8: usbfs: process 13361 (syz.2.1923) did not claim interface 0 before use [ 664.635411][T13361] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 664.702301][T13363] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1922'. [ 664.919213][T13370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.938380][T13370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.283049][ T5918] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 666.432978][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 666.442760][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 666.462538][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 666.490229][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 666.520889][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 666.548163][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 666.584992][ T5918] usb 2-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 666.601446][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.620503][ T5918] usb 2-1: Product: syz [ 666.634909][ T5918] usb 2-1: Manufacturer: syz [ 666.648921][ T5918] usb 2-1: SerialNumber: syz [ 666.671680][ T5918] usb 2-1: config 0 descriptor?? [ 666.694219][ T5918] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 667.099144][T13383] kvm: user requested TSC rate below hardware speed [ 667.118301][T13383] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1929'. [ 669.069886][ T5939] usb 2-1: USB disconnect, device number 53 [ 669.396238][T13440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1940'. [ 669.579061][T13445] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1942'. [ 669.615854][T13445] netlink: 'syz.3.1942': attribute type 13 has an invalid length. [ 669.814920][T13445] erspan0: left promiscuous mode [ 669.936439][T13445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.965115][T13445] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.173756][T13445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.569127][T13450] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1943'. [ 670.698617][T13450] libceph: resolve '0..' (ret=-3): failed [ 674.576692][T13510] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1954'. [ 674.673115][T13513] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1955'. [ 675.133672][T13515] libceph: resolve '0..' (ret=-3): failed [ 675.181494][T13510] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1954'. [ 675.229678][T13504] fuse: Unknown parameter '0x000000000000000b' [ 675.254845][T13506] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1954'. [ 675.538006][ T5939] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 676.606147][T13529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1957'. [ 676.840367][ T5939] usb 4-1: config 0 has too many interfaces: 229, using maximum allowed: 32 [ 676.850806][ T5939] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 229 [ 676.868338][ T5939] usb 4-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 676.879361][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=31 [ 676.890691][ T5939] usb 4-1: SerialNumber: syz [ 676.931596][ T5939] usb 4-1: config 0 descriptor?? [ 677.430777][ T5939] usb 4-1: USB disconnect, device number 63 [ 678.067244][T13545] netlink: 'syz.0.1962': attribute type 4 has an invalid length. [ 679.800005][T13559] input: syz1 as /devices/virtual/input/input33 [ 680.092213][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1966'. [ 680.107466][T13561] usb usb1: usbfs: process 13561 (syz.1.1966) did not claim interface 0 before use [ 680.441906][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 680.452133][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 680.842255][T13575] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1971'. [ 680.858825][T13574] FAULT_INJECTION: forcing a failure. [ 680.858825][T13574] name failslab, interval 1, probability 0, space 0, times 0 [ 680.874202][T13574] CPU: 1 UID: 0 PID: 13574 Comm: syz.0.1970 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.874241][T13574] Tainted: [L]=SOFTLOCKUP [ 680.874248][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 680.874257][T13574] Call Trace: [ 680.874264][T13574] [ 680.874272][T13574] dump_stack_lvl+0xe8/0x150 [ 680.874297][T13574] should_fail_ex+0x414/0x560 [ 680.874325][T13574] should_failslab+0xa8/0x100 [ 680.874345][T13574] kmem_cache_alloc_noprof+0x88/0x710 [ 680.874371][T13574] ? security_file_alloc+0x34/0x330 [ 680.874390][T13574] security_file_alloc+0x34/0x330 [ 680.874406][T13574] init_file+0x93/0x2f0 [ 680.874428][T13574] alloc_empty_file+0x6e/0x1d0 [ 680.874449][T13574] path_openat+0x108/0x3dd0 [ 680.874470][T13574] ? stack_trace_save+0x9c/0xe0 [ 680.874493][T13574] ? __pfx_stack_trace_save+0x10/0x10 [ 680.874519][T13574] ? stack_depot_save_flags+0x33/0x810 [ 680.874547][T13574] ? kasan_save_track+0x4f/0x80 [ 680.874561][T13574] ? kasan_save_track+0x3e/0x80 [ 680.874575][T13574] ? __kasan_slab_alloc+0x6c/0x80 [ 680.874590][T13574] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 680.874612][T13574] ? getname_flags+0xb8/0x540 [ 680.874629][T13574] ? do_sys_openat2+0xbc/0x200 [ 680.874650][T13574] ? __pfx_path_openat+0x10/0x10 [ 680.874666][T13574] ? __lock_acquire+0x6b6/0x2cf0 [ 680.874691][T13574] do_filp_open+0x1fa/0x410 [ 680.874707][T13574] ? __pfx_do_filp_open+0x10/0x10 [ 680.874736][T13574] ? _raw_spin_unlock+0x28/0x50 [ 680.874759][T13574] ? alloc_fd+0x64c/0x6c0 [ 680.874785][T13574] do_sys_openat2+0x121/0x200 [ 680.874838][T13574] ? __pfx_do_sys_openat2+0x10/0x10 [ 680.874869][T13574] ? ksys_write+0x22a/0x250 [ 680.874891][T13574] ? __pfx_ksys_write+0x10/0x10 [ 680.874923][T13574] __ia32_compat_sys_openat+0x131/0x160 [ 680.874960][T13574] __do_fast_syscall_32+0x1dc/0x560 [ 680.874986][T13574] ? lockdep_hardirqs_on+0x7b/0x110 [ 680.875010][T13574] ? do_fast_syscall_32+0x34/0x80 [ 680.875026][T13574] ? irqentry_exit+0x10f/0x660 [ 680.875044][T13574] do_fast_syscall_32+0x34/0x80 [ 680.875064][T13574] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 680.875084][T13574] RIP: 0023:0xf7f81539 [ 680.875097][T13574] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 680.875111][T13574] RSP: 002b:00000000f545555c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 680.875127][T13574] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 680.875139][T13574] RDX: 0000000000040080 RSI: 0000000000000010 RDI: 0000000000000000 [ 680.875149][T13574] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 680.875158][T13574] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 680.875167][T13574] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 680.875188][T13574] [ 681.354346][T13578] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1972'. [ 681.413022][ T5899] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 681.591108][ T5899] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 681.623315][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.632994][ T5939] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 681.641168][ T5899] usb 4-1: Product: syz [ 681.652459][ T5899] usb 4-1: Manufacturer: syz [ 681.657855][ T5899] usb 4-1: SerialNumber: syz [ 681.686275][ T5899] usb 4-1: config 0 descriptor?? [ 681.798510][ T5939] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 681.823151][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.861202][ T5939] usb 3-1: Product: syz [ 681.882753][ T5939] usb 3-1: Manufacturer: syz [ 681.921384][ T5939] usb 3-1: SerialNumber: syz [ 681.958813][T13575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1971'. [ 681.969983][T13573] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1971'. [ 681.996004][ T5939] usb 3-1: config 0 descriptor?? [ 682.000350][T13575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.088859][T13575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.217792][T13578] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1972'. [ 682.231362][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1975'. [ 682.253485][ T5939] usb 4-1: USB disconnect, device number 64 [ 682.304459][T13578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.322511][T13578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.335800][T13577] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1972'. [ 682.355427][ T5913] usb 3-1: USB disconnect, device number 75 [ 682.434499][T13085] udevd[13085]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 683.028365][T13593] fuse: Unknown parameter 'fd0x000000000000000b' [ 686.247624][T13630] __nla_validate_parse: 1 callbacks suppressed [ 686.247640][T13630] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1983'. [ 686.316159][T13635] fuse: Unknown parameter '' [ 686.352826][T13635] syzkaller0: entered promiscuous mode [ 686.366509][T13635] syzkaller0: entered allmulticast mode [ 686.542516][T13630] libceph: resolve '0..' (ret=-3): failed [ 687.665024][T13641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.683516][T13641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.712419][T13641] dtv5100: wlen = 0, aborting. [ 687.738095][T13641] dtv5100: wlen = 80, aborting. [ 690.993675][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.001761][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.340411][T13660] netlink: 203340 bytes leftover after parsing attributes in process `syz.3.1990'. [ 692.228131][ T5939] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 692.456103][ T5939] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 692.474062][ T5939] usb 5-1: config 0 has no interface number 0 [ 692.480878][ T5939] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 692.556775][ T5939] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 692.619137][ T5939] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 692.633135][ T5913] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 692.676207][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.701940][ T5939] usb 5-1: Product: syz [ 692.720785][ T5939] usb 5-1: Manufacturer: syz [ 692.736954][ T5939] usb 5-1: SerialNumber: syz [ 692.750709][ T5939] usb 5-1: config 0 descriptor?? [ 692.795005][ T5913] usb 4-1: config 1 has an invalid interface number: 166 but max is 0 [ 692.824934][T13693] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 692.834576][ T5913] usb 4-1: config 1 has no interface number 0 [ 692.842586][ T5913] usb 4-1: config 1 interface 166 has no altsetting 0 [ 692.855373][ T5939] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 693.195004][ T5913] usb 4-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=50.1a [ 693.236448][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.252608][ T5913] usb 4-1: Product: syz [ 693.281970][ T5913] usb 4-1: Manufacturer: syz [ 693.301125][ T5913] usb 4-1: SerialNumber: syz [ 693.920823][ T5913] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 694.094020][ T5913] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 694.124923][ T5913] dib0700: firmware download failed at 7 with -22 [ 694.165489][ T5913] usb 4-1: USB disconnect, device number 65 [ 694.467448][T13721] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2004'. [ 695.044811][ T5899] usb 5-1: USB disconnect, device number 69 [ 695.053298][ T5899] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 696.410989][T13739] syzkaller0: entered promiscuous mode [ 696.447151][T13739] syzkaller0: entered allmulticast mode [ 696.763687][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2013'. [ 697.247821][T13746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.272569][T13746] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.326878][T13746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 697.745260][T13761] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2015'. [ 697.765932][T13761] netlink: 'syz.4.2015': attribute type 13 has an invalid length. [ 698.078794][T13770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.123861][T13770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.403614][T13776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.510360][T13776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.933509][T13761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 698.984368][T13770] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2016'. [ 699.007091][T13767] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2016'. [ 700.350293][T13796] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2023'. [ 703.295499][T13820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2028'. [ 703.336265][T13820] libceph: resolve '0..' (ret=-3): failed [ 704.815534][T13840] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2035'. [ 705.836691][T13860] batadv_slave_0: entered promiscuous mode [ 705.842559][T13860] batadv_slave_0: entered allmulticast mode [ 705.854056][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2039'. [ 707.185839][T13876] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 707.923136][ T5913] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 708.133011][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 708.214967][ T5913] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 708.237749][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.293719][ T5913] usb 4-1: Product: syz [ 708.466303][ T5913] usb 4-1: Manufacturer: syz [ 708.475600][ T5913] usb 4-1: SerialNumber: syz [ 708.492555][ T5913] usb 4-1: config 0 descriptor?? [ 708.522391][T13890] sock: sock_timestamping_bind_phc: sock not bind to device [ 708.533705][ T5913] gspca_main: se401-2.14.0 probing 047d:5003 [ 708.569862][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2048'. [ 709.173548][T13880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.182468][T13880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.195718][ T5913] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 709.428829][ T5899] usb 4-1: USB disconnect, device number 66 [ 709.453546][ T5918] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 709.504048][T13902] binder: 13901:13902 ioctl c0306201 800003c0 returned -14 [ 709.530601][T13811] udevd[13811]: setting mode of /dev/video103 to 020660 failed: No such file or directory [ 709.572190][T13811] udevd[13811]: setting owner of /dev/video103 to uid=0, gid=28 failed: No such file or directory [ 709.624183][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 709.639839][ T5918] usb 5-1: unable to get BOS descriptor or descriptor too short [ 709.663960][ T5918] usb 5-1: config 9 has an invalid interface number: 160 but max is 0 [ 709.695463][ T5918] usb 5-1: config 9 has no interface number 0 [ 709.709080][ T5918] usb 5-1: config 9 interface 160 has no altsetting 0 [ 709.732504][ T5918] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=ba.f1 [ 709.762967][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.771152][ T5918] usb 5-1: Product: syz [ 709.792086][ T5918] usb 5-1: Manufacturer: syz [ 709.796856][ T5918] usb 5-1: SerialNumber: syz [ 709.916353][T13907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2052'. [ 709.948394][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 709.958473][T13907] netlink: 'syz.2.2052': attribute type 5 has an invalid length. [ 709.979443][T13907] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2052'. [ 710.020791][ T5918] qmi_wwan 5-1:9.160: More than one union descriptor, skipping ... [ 710.074202][ T5918] qmi_wwan 5-1:9.160: probe with driver qmi_wwan failed with error -22 [ 710.112441][ T5918] usb 5-1: USB disconnect, device number 70 [ 710.764909][T13911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2054'. [ 711.063148][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 711.063168][ T30] audit: type=1326 audit(1766984435.818:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 711.063445][ T30] audit: type=1326 audit(1766984435.818:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 711.064145][ T30] audit: type=1326 audit(1766984435.818:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 711.064744][ T30] audit: type=1326 audit(1766984435.818:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 711.064997][ T30] audit: type=1326 audit(1766984435.818:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 711.072539][ T30] audit: type=1326 audit(1766984435.818:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 711.078736][ T30] audit: type=1326 audit(1766984435.828:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 711.079017][ T30] audit: type=1326 audit(1766984435.828:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 711.117249][T13917] fuse: Bad value for 'user_id' [ 711.117265][T13917] fuse: Bad value for 'user_id' [ 711.117549][ T30] audit: type=1326 audit(1766984435.868:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 711.117603][ T30] audit: type=1326 audit(1766984435.868:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13913 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 711.783136][ T5913] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 712.029848][ T5913] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 712.029883][ T5913] usb 4-1: config 0 has no interface number 0 [ 712.029930][ T5913] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 712.029967][ T5913] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 712.037687][ T5913] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 712.037721][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.037742][ T5913] usb 4-1: Product: syz [ 712.037760][ T5913] usb 4-1: Manufacturer: syz [ 712.037777][ T5913] usb 4-1: SerialNumber: syz [ 712.042078][ T5913] usb 4-1: config 0 descriptor?? [ 712.043708][T13927] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 712.143284][ T5913] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 712.523055][ T5918] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 712.694360][ T5918] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 712.710320][ T5918] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 712.710355][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.710378][ T5918] usb 3-1: Product: syz [ 712.710395][ T5918] usb 3-1: Manufacturer: syz [ 712.710412][ T5918] usb 3-1: SerialNumber: syz [ 712.715878][ T5918] usb 3-1: config 0 descriptor?? [ 712.741718][ T5918] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 712.752102][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 712.756365][ T5918] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 712.756440][ T5918] usb 3-1: media controller created [ 712.962834][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 713.514325][T13937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2061'. [ 713.537548][ T5918] DVB: Unable to find symbol mt352_attach() [ 713.629749][ T5918] DVB: Unable to find symbol nxt6000_attach() [ 713.629778][ T5918] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 713.632710][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 713.638838][ T5918] dvb-usb: schedule remote query interval to 1000 msecs. [ 713.638859][ T5918] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 713.638873][ T5918] dvb-usb: bulk message failed: -22 (7/0) [ 713.638904][ T5918] dvb-usb: bulk message failed: -22 (7/0) [ 713.645344][ T5918] usb 3-1: USB disconnect, device number 76 [ 713.800125][ T5918] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 714.257119][T13945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.345224][T13945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.375554][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 714.420353][T13945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.430052][T13945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.468910][T13949] FAULT_INJECTION: forcing a failure. [ 714.468910][T13949] name failslab, interval 1, probability 0, space 0, times 0 [ 714.482081][T13949] CPU: 1 UID: 0 PID: 13949 Comm: syz.1.2063 Tainted: G L syzkaller #0 PREEMPT(full) [ 714.482107][T13949] Tainted: [L]=SOFTLOCKUP [ 714.482114][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 714.482123][T13949] Call Trace: [ 714.482132][T13949] [ 714.482140][T13949] dump_stack_lvl+0xe8/0x150 [ 714.482165][T13949] should_fail_ex+0x414/0x560 [ 714.482194][T13949] should_failslab+0xa8/0x100 [ 714.482215][T13949] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 714.482242][T13949] ? __alloc_skb+0x1dc/0x3a0 [ 714.482258][T13949] ? __local_bh_enable_ip+0xd0/0x130 [ 714.482275][T13949] ? __alloc_skb+0x198/0x3a0 [ 714.482291][T13949] __alloc_skb+0x1dc/0x3a0 [ 714.482310][T13949] alloc_skb_with_frags+0xca/0x890 [ 714.482329][T13949] ? __lock_acquire+0x6b6/0x2cf0 [ 714.482351][T13949] ? __lock_acquire+0x6b6/0x2cf0 [ 714.482370][T13949] sock_alloc_send_pskb+0x84d/0x980 [ 714.482404][T13949] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 714.482438][T13949] __ip6_append_data+0x2b43/0x3f30 [ 714.482475][T13949] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 714.482503][T13949] ? __pfx___ip6_append_data+0x10/0x10 [ 714.482521][T13949] ? __pfx_ip6_mtu+0x10/0x10 [ 714.482545][T13949] ip6_append_data+0x1c1/0x380 [ 714.482568][T13949] ? __pfx_icmpv6_getfrag+0x10/0x10 [ 714.482584][T13949] icmp6_send+0x1242/0x1990 [ 714.482610][T13949] ? icmp6_send+0x1e3/0x1990 [ 714.482645][T13949] ? __pfx_icmp6_send+0x10/0x10 [ 714.482671][T13949] ? ip6_route_input+0x7cc/0xad0 [ 714.482695][T13949] ? irqentry_exit+0x5dd/0x660 [ 714.482717][T13949] ? rcu_is_watching+0x15/0xb0 [ 714.482744][T13949] ? __pfx_ip6_pkt_discard+0x10/0x10 [ 714.482772][T13949] ip6_pkt_drop+0x53d/0x620 [ 714.482797][T13949] ip6_pkt_discard+0x1c/0x30 [ 714.482818][T13949] NF_HOOK+0x30c/0x3a0 [ 714.482836][T13949] ? skb_orphan+0x4f/0xd0 [ 714.482905][T13949] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 714.482934][T13949] ? NF_HOOK+0x9a/0x3a0 [ 714.482962][T13949] ? __pfx_NF_HOOK+0x10/0x10 [ 714.482991][T13949] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 714.483019][T13949] __netif_receive_skb+0xd3/0x380 [ 714.483048][T13949] ? netif_receive_skb+0x105/0x750 [ 714.483070][T13949] netif_receive_skb+0x1bb/0x750 [ 714.483093][T13949] ? __lock_acquire+0x6b6/0x2cf0 [ 714.483109][T13949] ? __pfx_netif_receive_skb+0x10/0x10 [ 714.483136][T13949] ? tun_rx_batched+0x160/0x730 [ 714.483157][T13949] tun_rx_batched+0x1b9/0x730 [ 714.483179][T13949] ? __pfx_tun_rx_batched+0x10/0x10 [ 714.483198][T13949] ? tun_get_user+0x266d/0x3dc0 [ 714.483216][T13949] ? tun_get_user+0x266d/0x3dc0 [ 714.483237][T13949] ? tun_get_user+0x2331/0x3dc0 [ 714.483254][T13949] ? __local_bh_enable_ip+0xd0/0x130 [ 714.483271][T13949] ? tun_get_user+0x266d/0x3dc0 [ 714.483289][T13949] tun_get_user+0x2aa3/0x3dc0 [ 714.483321][T13949] ? aa_file_perm+0x44c/0x1530 [ 714.483343][T13949] ? __pfx_tun_get_user+0x10/0x10 [ 714.483363][T13949] ? __lock_acquire+0x6b6/0x2cf0 [ 714.483380][T13949] ? kstrtoull+0x12f/0x1d0 [ 714.483408][T13949] ? ref_tracker_alloc+0x318/0x460 [ 714.483430][T13949] ? get_pid_task+0x20/0x1f0 [ 714.483451][T13949] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 714.483467][T13949] ? tun_get+0x1c/0x2f0 [ 714.483485][T13949] ? tun_get+0x1c/0x2f0 [ 714.483507][T13949] ? tun_get+0x1c/0x2f0 [ 714.483524][T13949] ? tun_get+0x1c/0x2f0 [ 714.483545][T13949] tun_chr_write_iter+0x113/0x200 [ 714.483565][T13949] vfs_write+0x5c9/0xb30 [ 714.483584][T13949] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 714.483602][T13949] ? __pfx_vfs_write+0x10/0x10 [ 714.483624][T13949] ? __fget_files+0x2a/0x420 [ 714.483650][T13949] ksys_write+0x145/0x250 [ 714.483666][T13949] ? __pfx_ksys_write+0x10/0x10 [ 714.483689][T13949] __do_fast_syscall_32+0x1dc/0x560 [ 714.483712][T13949] ? lockdep_hardirqs_on+0x7b/0x110 [ 714.483726][T13949] ? do_fast_syscall_32+0x34/0x80 [ 714.483742][T13949] ? irqentry_exit+0x10f/0x660 [ 714.483760][T13949] do_fast_syscall_32+0x34/0x80 [ 714.483778][T13949] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 714.483798][T13949] RIP: 0023:0xf6ffd539 [ 714.483813][T13949] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 714.483826][T13949] RSP: 002b:00000000f53cc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 714.483843][T13949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000980 [ 714.483853][T13949] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 714.483863][T13949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 714.483872][T13949] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 714.483882][T13949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 714.483905][T13949] [ 715.066420][ T5918] usb 4-1: USB disconnect, device number 67 [ 715.087200][ T5918] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 715.170802][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 715.509776][T13957] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2067'. [ 717.595336][T13980] usb usb1: usbfs: process 13980 (syz.3.2072) did not claim interface 0 before use [ 719.763091][ T5913] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 719.933056][ T5913] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 719.943010][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.947724][ T5913] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 720.025779][ T5913] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 720.060022][ T5913] usb 5-1: Manufacturer: syz [ 720.084894][ T5913] usb 5-1: config 0 descriptor?? [ 720.268850][T14008] bond2: option arp_interval: invalid value (18446744073709551615) [ 720.320638][T14008] bond2: option arp_interval: allowed values 0 - 2147483647 [ 720.333002][ T5913] rc_core: IR keymap rc-hauppauge not found [ 720.340329][ T5913] Registered IR keymap rc-empty [ 720.362451][ T5913] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 720.381239][T14008] bond2 (unregistering): Released all slaves [ 720.558344][ T5913] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input37 [ 720.933714][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 721.069910][ T5913] usb 5-1: USB disconnect, device number 71 [ 722.982501][T14043] input: syz0 as /devices/virtual/input/input38 [ 723.203429][ T5899] usb 3-1: new low-speed USB device number 77 using dummy_hcd [ 723.424993][ T5899] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 723.440277][ T5899] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 723.467957][ T5899] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 723.479316][ T5899] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 723.511214][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 723.547935][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F is Bulk; changing to Interrupt [ 723.674915][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 723.821961][T14056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2091'. [ 723.835203][T14056] usb usb1: usbfs: process 14056 (syz.0.2091) did not claim interface 0 before use [ 723.870512][ T5899] usb 3-1: string descriptor 0 read error: -22 [ 723.905683][ T5899] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 723.916117][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.931359][ T5899] usb 3-1: config 0 descriptor?? [ 723.964925][T14042] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 724.213974][ T5899] hub 3-1:0.0: bad descriptor, ignoring hub [ 724.224406][ T5899] hub 3-1:0.0: probe with driver hub failed with error -5 [ 724.276634][ T5899] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39 [ 724.484207][T14061] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2093'. [ 724.668985][ T5913] usb 3-1: USB disconnect, device number 77 [ 727.301600][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'. [ 727.934378][T14109] input: syz0 as /devices/virtual/input/input40 [ 728.323111][ T5939] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 728.465867][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'. [ 728.502598][T14122] usb usb1: usbfs: process 14122 (syz.4.2106) did not claim interface 0 before use [ 728.541267][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 728.554506][ T5939] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 728.563992][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.584561][ T5939] usb 4-1: config 0 descriptor?? [ 728.801830][ T5939] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 728.814087][T14114] ------------[ cut here ]------------ [ 728.819645][T14114] usb 1-1: BOGUS control dir, pipe 80001980 doesn't match bRequestType c0 [ 728.828292][T14114] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x105c/0x18d0, CPU#1: syz.3.2105/14114 [ 728.838810][T14114] Modules linked in: [ 728.843586][T14114] CPU: 1 UID: 0 PID: 14114 Comm: syz.3.2105 Tainted: G L syzkaller #0 PREEMPT(full) [ 728.854642][T14114] Tainted: [L]=SOFTLOCKUP [ 728.858999][T14114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 728.869191][T14114] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 728.876447][T14114] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 728.896245][T14114] RSP: 0018:ffffc9000b6df6c0 EFLAGS: 00010246 [ 728.902388][T14114] RAX: 0000000000000000 RBX: ffff888031c42200 RCX: 0000000080001980 [ 728.910675][T14114] RDX: ffff88807d698ee0 RSI: ffffffff8c140a00 RDI: ffffffff8f8ee390 [ 728.918803][T14114] RBP: 1ffff1100affafb8 R08: 00000000000000c0 R09: 0000000000000000 [ 728.926852][T14114] R10: ffffc9000b6df7c0 R11: fffff520016dbf04 R12: ffff8880343e6100 [ 728.935229][T14114] R13: ffff888057fd7dc0 R14: 0000000080001980 R15: ffff88807d698ee0 [ 728.943288][T14114] FS: 0000000000000000(0000) GS:ffff888125f21000(0063) knlGS:00000000f549cb40 [ 728.952250][T14114] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 728.958904][T14114] CR2: 00000000f545ada4 CR3: 0000000048bf2000 CR4: 00000000003526f0 [ 728.967360][T14114] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 728.975484][T14114] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 728.983630][T14114] Call Trace: [ 728.987031][T14114] [ 728.989981][T14114] ? __init_swait_queue_head+0xa9/0x150 [ 728.995923][T14114] usb_start_wait_urb+0x115/0x4f0 [ 729.000996][T14114] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 729.006637][T14114] usb_control_msg+0x232/0x3e0 [ 729.011429][T14114] dtv5100_i2c_msg+0x231/0x2f0 [ 729.016306][T14114] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 729.021204][T14114] __i2c_transfer+0x79a/0x1f00 [ 729.026573][T14114] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 729.032442][T14114] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 729.038402][T14114] ? i2c_transfer+0xc8/0x2d0 [ 729.043090][T14114] i2c_transfer+0x1cc/0x2d0 [ 729.047653][T14114] i2c_transfer_buffer_flags+0x105/0x190 [ 729.053885][T14114] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 729.060090][T14114] ? _copy_from_user+0x94/0xb0 [ 729.064978][T14114] i2cdev_write+0x113/0x1e0 [ 729.069631][T14114] vfs_writev+0x4b6/0x960 [ 729.074051][T14114] ? __pfx_i2cdev_write+0x10/0x10 [ 729.079123][T14114] ? __pfx_vfs_writev+0x10/0x10 [ 729.084455][T14114] ? __fget_files+0x2a/0x420 [ 729.089099][T14114] ? __fget_files+0x3a0/0x420 [ 729.093980][T14114] ? __fget_files+0x2a/0x420 [ 729.098626][T14114] do_writev+0x14d/0x2d0 [ 729.102942][T14114] ? __pfx_do_writev+0x10/0x10 [ 729.107764][T14114] __do_fast_syscall_32+0x1dc/0x560 [ 729.113385][T14114] ? do_fast_syscall_32+0x34/0x80 [ 729.118459][T14114] do_fast_syscall_32+0x34/0x80 [ 729.123389][T14114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 729.129762][T14114] RIP: 0023:0xf70cd539 [ 729.133906][T14114] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 729.154288][T14114] RSP: 002b:00000000f549c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 729.162776][T14114] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800006c0 [ 729.170845][T14114] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 729.178920][T14114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 729.187344][T14114] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 729.195402][T14114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 729.203553][T14114] [ 729.206603][T14114] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 729.213922][T14114] CPU: 1 UID: 0 PID: 14114 Comm: syz.3.2105 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.224988][T14114] Tainted: [L]=SOFTLOCKUP [ 729.229348][T14114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 729.239439][T14114] Call Trace: [ 729.242770][T14114] [ 729.245741][T14114] vpanic+0x1e0/0x670 [ 729.249780][T14114] panic+0xb9/0xc0 [ 729.253550][T14114] ? __pfx_panic+0x10/0x10 [ 729.258024][T14114] __warn+0x317/0x4b0 [ 729.262042][T14114] ? usb_submit_urb+0x105c/0x18d0 [ 729.267108][T14114] ? usb_submit_urb+0x105c/0x18d0 [ 729.272170][T14114] __report_bug+0x288/0x500 [ 729.276710][T14114] ? usb_submit_urb+0x105c/0x18d0 [ 729.281769][T14114] ? __pfx___report_bug+0x10/0x10 [ 729.286835][T14114] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 729.292689][T14114] ? lockdep_hardirqs_on+0x7b/0x110 [ 729.297922][T14114] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 729.303866][T14114] ? stack_depot_save_flags+0x3f3/0x810 [ 729.309636][T14114] report_bug_entry+0x19a/0x290 [ 729.314522][T14114] ? usb_submit_urb+0x111c/0x18d0 [ 729.319618][T14114] ? usb_submit_urb+0x1121/0x18d0 [ 729.324675][T14114] handle_bug+0xca/0x200 [ 729.328981][T14114] exc_invalid_op+0x1a/0x50 [ 729.333547][T14114] asm_exc_invalid_op+0x1a/0x20 [ 729.338448][T14114] RIP: 0010:usb_submit_urb+0x111c/0x18d0 [ 729.344127][T14114] Code: b8 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 a7 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 20 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 b7 f2 ff ff 89 e9 [ 729.363862][T14114] RSP: 0018:ffffc9000b6df6c0 EFLAGS: 00010246 [ 729.370002][T14114] RAX: 0000000000000000 RBX: ffff888031c42200 RCX: 0000000080001980 [ 729.378103][T14114] RDX: ffff88807d698ee0 RSI: ffffffff8c140a00 RDI: ffffffff8f8ee390 [ 729.386112][T14114] RBP: 1ffff1100affafb8 R08: 00000000000000c0 R09: 0000000000000000 [ 729.394114][T14114] R10: ffffc9000b6df7c0 R11: fffff520016dbf04 R12: ffff8880343e6100 [ 729.402203][T14114] R13: ffff888057fd7dc0 R14: 0000000080001980 R15: ffff88807d698ee0 [ 729.410236][T14114] ? __init_swait_queue_head+0xa9/0x150 [ 729.415838][T14114] usb_start_wait_urb+0x115/0x4f0 [ 729.421018][T14114] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 729.426840][T14114] usb_control_msg+0x232/0x3e0 [ 729.431666][T14114] dtv5100_i2c_msg+0x231/0x2f0 [ 729.436511][T14114] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 729.441442][T14114] __i2c_transfer+0x79a/0x1f00 [ 729.446265][T14114] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 729.452139][T14114] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 729.458010][T14114] ? i2c_transfer+0xc8/0x2d0 [ 729.462640][T14114] i2c_transfer+0x1cc/0x2d0 [ 729.467193][T14114] i2c_transfer_buffer_flags+0x105/0x190 [ 729.472877][T14114] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 729.479086][T14114] ? _copy_from_user+0x94/0xb0 [ 729.483903][T14114] i2cdev_write+0x113/0x1e0 [ 729.488450][T14114] vfs_writev+0x4b6/0x960 [ 729.492836][T14114] ? __pfx_i2cdev_write+0x10/0x10 [ 729.497935][T14114] ? __pfx_vfs_writev+0x10/0x10 [ 729.502843][T14114] ? __fget_files+0x2a/0x420 [ 729.507473][T14114] ? __fget_files+0x3a0/0x420 [ 729.512188][T14114] ? __fget_files+0x2a/0x420 [ 729.516919][T14114] do_writev+0x14d/0x2d0 [ 729.521296][T14114] ? __pfx_do_writev+0x10/0x10 [ 729.526309][T14114] __do_fast_syscall_32+0x1dc/0x560 [ 729.531916][T14114] ? do_fast_syscall_32+0x34/0x80 [ 729.536989][T14114] do_fast_syscall_32+0x34/0x80 [ 729.541880][T14114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 729.548247][T14114] RIP: 0023:0xf70cd539 [ 729.552350][T14114] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 729.572081][T14114] RSP: 002b:00000000f549c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 729.580551][T14114] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800006c0 [ 729.588653][T14114] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 729.596651][T14114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 729.604629][T14114] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 729.612610][T14114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 729.620611][T14114] [ 729.624273][T14114] Kernel Offset: disabled [ 729.628654][T14114] Rebooting in 86400 seconds..