last executing test programs: 6m8.523177469s ago: executing program 1 (id=3030): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/netstat\x00') lseek(r0, 0x2000, 0xfffffffffffffff5) 6m8.294151393s ago: executing program 1 (id=3032): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="000100050000000429bd7000feffffff00010000", @ANYRES32=0x0, @ANYBLOB="03800000800000001c00128009000100766c616e000000000c0002800600010001000000b80034801400350076657468315f746f5f626f6e640000001400350073797a5f74756e0000000000000000001400350070696d3672656730000000000000000014003500776c616e30000000000000000000000014003500726f7365300000000000000000000000140035006261746164765f736c6176655f3100001400350067656e657665310000000000000000001400350076657468315f746f5f626f6e640000001400350067656e657665300000000000000000000a000200aaaaaaaaaabb0000"], 0x100}}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x1) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x2) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x12, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) landlock_restrict_self(r3, 0x4) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x43a8}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 6m8.16893532s ago: executing program 1 (id=3034): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000082c0)=ANY=[@ANYBLOB="b40500000000000071103500000000000500000000000000950000000000000076e3283e872f22aa32e992dbc71a00f3aad7290c86e567fda2dbdb200fa689085cd2af3c1c7c5e464ba74d866c7795972c826bcbe67959d7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b6967335", 0x8}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a0000000018000000000000001701000004000000060200000040000018"], 0x60}], 0x1, 0x8001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x303e, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 6m7.961082251s ago: executing program 1 (id=3035): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(0x0, 0x0, 0x9) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0xffffffffffffff12) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x516e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="01980000031300001c0012800900010069706970000083000c00028008000300e00000015c413394c2cd647ccea14a"], 0x3c}}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000380), &(0x7f0000000480)=""/82, 0x52, 0x0) keyctl$reject(0x13, 0x0, 0x49f, 0xdcc, r3) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r4, 0x0) 6m4.867826852s ago: executing program 1 (id=3040): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x2}, {}, {0x0, 0x0, 0xffffff0a}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c}]}, 0x170}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) 6m3.896198607s ago: executing program 1 (id=3042): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x21, 0x1, [{0x5, 0xe, "429e2f9e9421f915c7b9a3f4"}, {0x5, 0xd, "49f07c97f193f2c1571080"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xd, [@remote, @rand_addr=0x64010100, @empty, @multicast2, @local, @rand_addr=0x64010100]}, @noop, @generic={0x89, 0x9, "1648cbe296074e"}, @end, @end, @ssrr={0x89, 0x17, 0x54, [@remote, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010100]}]}}}], 0x78}}], 0x1, 0x24004044) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000140)=0x7) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$video(&(0x7f00000001c0), 0x2, 0x101000) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0xfffffffe, 0x3136564e, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x9}, {0x2, 0x5}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x204, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)='ip_vti0\x00', 0x2, 0x2, 0x5}) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x7f, 0x9, 0x7, 0xf}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x24, 0x6eaa, 0x7ff}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 5m48.854403897s ago: executing program 32 (id=3042): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) socket$packet(0x11, 0x2, 0x300) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x74, 0x0, 0x7, {[@cipso={0x86, 0x21, 0x1, [{0x5, 0xe, "429e2f9e9421f915c7b9a3f4"}, {0x5, 0xd, "49f07c97f193f2c1571080"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xd, [@remote, @rand_addr=0x64010100, @empty, @multicast2, @local, @rand_addr=0x64010100]}, @noop, @generic={0x89, 0x9, "1648cbe296074e"}, @end, @end, @ssrr={0x89, 0x17, 0x54, [@remote, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010100]}]}}}], 0x78}}], 0x1, 0x24004044) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000140)=0x7) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$video(&(0x7f00000001c0), 0x2, 0x101000) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0xfffffffe, 0x3136564e, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x9}, {0x2, 0x5}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x204, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)='ip_vti0\x00', 0x2, 0x2, 0x5}) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x7f, 0x9, 0x7, 0xf}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000040)={0x24, 0x6eaa, 0x7ff}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r7, 0x100000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 10.180148307s ago: executing program 5 (id=4574): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca"}, 0x8f) fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 7.346971369s ago: executing program 0 (id=4592): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1ce7, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0xfffff, 0x18d}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0xed, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r2, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x715301, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x62, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r3, r4, r5, r6, r7], &(0x7f0000000500)=[{0x1, 0x3, 0x8, 0x6}, {0x5, 0x2, 0x6, 0x8}], 0x10, 0xff}, 0x94) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) preadv(r8, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 7.096122058s ago: executing program 5 (id=4593): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x800011, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x4) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="8f", 0x1}], 0x1, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 6.927959995s ago: executing program 5 (id=4594): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x3, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newtclass={0x50, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xfff1, 0xd}, {0x2, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3d}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x50}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00003f00000000000000000020000000000000000000000000000000c60cc62c05339ba0167ea98fa79a75d9f6e50da3448547202203230140cf7699234de14080f9e2dd68dc6c5b89f25803065e3528c43ec35322fab3adbf1a53cddb35aa8b45f7a4"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001880)=ANY=[@ANYBLOB="64000400150001002abd7000fbdbdf257f0000011a6442246b05703300000000200100000000000000000000000000014e2200104e2300000a00a0803b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b96b6e000200000008001f00030000000a0010000000000000000000"], 0x64}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r6, 0x4b2f, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="10001d01"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x40040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open_tree(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.709807992s ago: executing program 0 (id=4595): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe4d3}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x48, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0xa, 0xe}, {0xfff2}}, [{0x4}, {0x4}, {0x12}, {0x4}, {0x4}, {}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x4080) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getqdisc={0x48, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, {0xa, 0xe}, {0xfff2}}, [{0x4}, {0x4}, {0x12}, {0x4}, {0x4}, {}, {0x4}, {0x4}, {0x4}]}, 0x48}}, 0x4080) 6.381984899s ago: executing program 0 (id=4598): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a000907000000400300000000000005001a00ff020000000000000000000000000001ac14bb000000000000000000000000000000f3"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002c0003801c00"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0xc004) 6.368372944s ago: executing program 5 (id=4599): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005000500010000000500040001000000140003006272696467655f736c6176655f300000"], 0x60}}, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01027578000000000000020000000925cb0073797a31375a741ab9aaeadd0bafbff1faf8511a0000000008000440000000000900010073797a300000320000080003aae6a55523b9a7d30fdecd008a8fbb9c400000000a1400000013000100000000000000000000266a192436513852c508459400000a19d232a7032003307f5bf8181d6223f8e3b4e604c441c2bdd5eb7a8c66f6514cd16f5527c6b308ac00"/198], 0x64}}, 0x81) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x70, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf42a}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x128c00000000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20004020) getsockopt$inet6_int(r7, 0x29, 0x35, 0x0, &(0x7f0000000140)) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="fb000010c3aa3740d6100022000101020301090212000100000000"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.216071476s ago: executing program 3 (id=4600): r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) landlock_restrict_self(r1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fc, &(0x7f0000001300)={0x2, 0x4e23, @local}, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) 5.159445697s ago: executing program 3 (id=4603): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca"}, 0x8f) fsopen(&(0x7f0000000040)='fuse\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000003e040000000000005d000000000000000704000012da0aff2500000017ffffffae040000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9"], &(0x7f00000001c0)='GPL\x00'}, 0x94) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 5.079685617s ago: executing program 2 (id=4605): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x800, 0x0, 0x0) r3 = dup(r0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000440)={{0x9, 0x5, 0x6, 0x1, '\x00', 0xffffffff}, 0x5, 0x4, 0xff, r4, 0x3, 0x4, 'syz0\x00', &(0x7f0000000100)=['\x00', '\x00', '$]},/+.+..,(%\\%B\x00'], 0x13}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) pipe(&(0x7f0000000380)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendmsg$AUDIT_SET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x3e9, 0x2, 0x70bd28, 0x25dfdbfd, {0x20, 0xffffffff, 0x1, r4, 0x1, 0x5, 0x4, 0x0, 0x0, 0xa79f, 0x6}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000041) sendfile(r6, r6, 0x0, 0x9) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000540), &(0x7f0000001680), 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r7, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0x0, 0x0, 0x4, 0x2d, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffe, 0x1}}) 4.763178216s ago: executing program 4 (id=4606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x119, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="008308003125117009000109fb5b4606602f68b373ca2b64ddbca78f6047972ec04ff9ece96d6541f48048af28891070462d46b489141f26c59c828e1f7cb89c824496be98c30992ef235a16cb49186d961ea0bc38fdcd276e8877a851a75c04e80eeee9007bd20b38c589585780a886184ff626cc2ae3c0"], 0xa0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x114, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xce3}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x800, @empty, 0xa8}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1f21}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000c090) 4.531333098s ago: executing program 0 (id=4607): syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x557800) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/anycast6\x00') setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) fcntl$getownex(r1, 0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0xffffff6f) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000dc0)='syz0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x102, 0x0) fchown(r5, 0xee01, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000380), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r6, r6, 0x0, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000e00)={0x1414, 0x15, 0x4, 0x70bd2b, 0x25dfdbff, {0x19}, [@nested={0x134, 0x7f, 0x0, 0x1, [@nested={0x4, 0xe9}, @generic="0b6b3d90dd080b37f457285e2efab4a8d1d481079f777b694e02bcb2eed7c37c1815a21aa98e6905486c41874ebd285f4310b8a8f76078df377501c83eb0aa84fb0d536fd500b362422693b1806511afe62369616dcdcee2cf7b4d3c6e3280cc27788d75a715fc622264f876653148e104054e60e2cc229696ce287d52f2920653c6da0705d6459aad0d83234db912604780247b96f39a45cb36dc750d283484d73c2015a880fc2cf45597497ab107e209209e7804ec1adf0ec54ec541e4ff8730e8a53e0c2f931fe0d1fc", @nested={0x4, 0x2e}, @generic="32468a76ca2ee5b170e57112aac32002c820fa02cf250f97c9b6cc6f0379fbf966cff8404729752c383d37b488e316dccc343ba224f9901e395aab57fcda53f587060153d1177ff422651679dd0761e9c8efc88d21", @typed={0x8, 0x14e, 0x0, 0x0, @u32=0x7fffffff}]}, @generic="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", @generic="22a35aa9e1de913e4bf77991eb0f7ed112899f9c65a051c153b6f2bca1a86a967d3954a49ebdd9bcf2c3b11995535d16e151d9825dd157dffb05cebbb6d569fb417644e2e1bd05d0f5cc087a12f3aff0163d6c6b0f2295f785302de0472dc4cee3697fb63c9a7e1a34cab40740ffcaf8cb5aabcb4eb7643523a5340f421e4e1e1b03e3293c4c5a2d111e8f5808d604b5ffd20ef1759072f2610e", @typed={0x4, 0x13e}, @nested={0x169, 0x84, 0x0, 0x1, [@nested={0x4, 0x5b}, @generic="ed305b921761cc93602656dbb00905c82999bc7d9d8ae4be90", @generic="c81a81c98d403f9a2bc708350ad76fab1a99d0ad49f7f25abc469cf15249e0ae984e37fa52e009b5999c39d38d2dc3220f61d8414d56ba67edb7ae0ce6dc1825d2026e2881c78a4a2d4a17043892003a2784bcbf10a1e6b108b7bd483897eae3851aabe238f0bbda8ec23600c898e31c542399889f07b6dd1908c730286aafac593e27e02a6388ba6367d2", @nested={0x4, 0x17}, @generic="296287c018a70c9c2c8b5a547b5a1c1c20a63c6d28ab5f64936d71891c9c34091e3fbcd003186f556d8da16ced48c029d9741ccce1b2beb2238dc35c8462102cf0f68f7fc165aa2d0f1c456837574d2b3f786b0f0df2d4ce692b9aa401b30fd3b63bf9405ed2ab1dd06d9c18849a3b235c19022a357fe4cca6486ac3ec5f0a7a933ec985e1f1fc9b21c5afed2ec32b49ccdd1a18f3d04e4eae6a4f23a1f694564d987a593ea382f9cb9d21548732649326d3fdd944036c0d46", @generic]}, @nested={0x10, 0x13c, 0x0, 0x1, [@typed={0xc, 0xd5, 0x0, 0x0, @u64=0x4}]}, @nested={0xc, 0x48, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @pid}]}, @generic="1ceb4e7a0a601f858011e96791061d6c8d4661b10864294119da79f419", @typed={0xc, 0x8, 0x0, 0x0, @u64=0xffff}, @generic="21eee231b0b8bb6a5ab7f8d66087e4bd7336ff5cd1089fef6e8e17764e1214cd7eaa36b9d81848c16b5e0bd56e2ac28bd90a098c3b3c9d9cbef1fcc6d44d9e47f3f807c77c7d9b7f173bae4c3dd6c6d688a2b967a8ec612e0f48eaef5a0a29f5ac32928c53f781349abb2753e02db5847dccedf0892569dcdb2c712ced"]}, 0x1414}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) syz_io_uring_setup(0x3a51, &(0x7f0000000180)={0x0, 0x4ade, 0x1000, 0x3, 0x330, 0x0, r0}, 0x0, 0x0, 0x0) 3.885555503s ago: executing program 4 (id=4608): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='6', 0x1}], 0x1, 0x0, 0x30, 0x40045}}], 0x1, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x6, &(0x7f0000000080)={&(0x7f0000000000)=""/87, 0x57}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000300)="3fa402883c2e", 0x6}], 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200200, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sync() ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 3.365469747s ago: executing program 0 (id=4609): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0xd) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x7d}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r1, 0x8ae, 0xe643, 0x17, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(r0, 0x4068aea3, &(0x7f00000008c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0xf) io_setup(0x5, &(0x7f0000000300)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) shutdown(r2, 0x0) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000104355470000000000000109022400010000a00009040000010300000009210500080122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x110, 0x6a, 0xe5, 0xd5, 0x20, 0x2c42, 0x16f8, 0x8b70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x33, 0x18, 0x80, 0x5, "", [{{0x9, 0x4, 0xd0, 0x8, 0x0, 0x5b, 0x9b, 0x42, 0x40}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r6, &(0x7f0000001200)={0x2c, 0x0, &(0x7f0000001100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, 0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x854) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r7, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x3}], 0x10000000000000a3, 0x0, 0x0) syz_usb_control_io$uac2(r6, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x0, 0xe, 0x88, {0x88, 0x5, "cb22e71e2e1040138c3c3241fdbb8e9349e285a6412705aa1e80832e69f10d94fdaefdcb666eed21b03c95bcf5d476fc2ff67ad3d962434d754e7f6193c6c10d87c353d494a2bfe96fd0929494d53a04d1e93ab389ecc4339975080da19cdaa95c09cf0f3574a86b3e815a48b214c38c588b0791aaca12a0ba6e64fb72e77652c031d88b0fbd"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}}, &(0x7f0000000840)={0x44, &(0x7f0000000580)={0x0, 0xa, 0xc0, "e384f3f4ef752f41b15a6209711a77ce47c0ab27f624b7662cd2312e325d24d555869e718d14d9a4dc39ac9973c57c46e71a7102f29a469136c48933f1ec758496e640f112c7171ac14e317892cf24af2bd9ae871216dec09abec9d2ff5bbff6aa0afd3a3b57564c6d50bd7475589706674735b1d89c8d10eb348054f42d0805838ffbcb3437359fb302d748f9006c43189241d2ea7d959802429a33eb1c49df3758507c7e1fdf4f3e43ec1df360e8f27d8e4b7359210a974f960d8b69359880"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000700)={0x20, 0x81, 0x2, "58b4"}, &(0x7f0000000740)=ANY=[@ANYBLOB="2014f740c16d03954e"], &(0x7f0000000780)={0x20, 0x83, 0x3, "040842"}, &(0x7f00000007c0)=ANY=[@ANYBLOB="2084030000000b6500"], &(0x7f0000000800)={0x20, 0x85, 0x3, "0ee025"}}) 3.184212536s ago: executing program 2 (id=4610): syz_open_dev$sndmidi(&(0x7f0000000000), 0xfffffffffffffbff, 0x101000) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0xfffffffffffffbff, 0x101000) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8fcf"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) 3.078826966s ago: executing program 5 (id=4611): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$usbfs(0x0, 0x775, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000040)={0x18, r2}) 2.873278463s ago: executing program 4 (id=4612): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008040) 2.770731714s ago: executing program 4 (id=4613): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xfffffffffffffdff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="400a2e0000004e1e"], 0x0, 0x0, 0x0, 0x0}) r3 = getpid() ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000002c0)) fcntl$lock(r1, 0x25, &(0x7f00000001c0)={0x2, 0x2, 0x80000000000000, 0x5, r3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x800, 0x0) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) 1.891593602s ago: executing program 2 (id=4614): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getdents(r0, &(0x7f0000000100)=""/171, 0xab) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000fedbdf2500000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000fdffffffffffff7ffeff1c00008040000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000002b00000002000000fc0200000000000000000000000000000600000004"], 0xfc}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000006ac0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2, @mcast1, 0x6}, 0x1c, 0x0}}], 0x1, 0x4000000) 1.792768889s ago: executing program 2 (id=4615): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x1000, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000600)={0x0, 0x7, 0x8}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="9000000004000000a7ffffff"]) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000040)=@canfd={{0x4, 0x1, 0x1}, 0xb3, 0x2, 0x0, 0x0, "02e5d0ce725ca6c2018d21ec53afa60cc630aa4cee0410da7ee9eac706a9ffa6c2b7f84eb392e088f1f85a948e6dd818c853ded1e1270ba99bd142cffde7c90f"}, 0x48}}, 0x20008884) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000ac0)=[@wr_drn={0x68, 0x20, {0x4, 0x7fffffff}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x202b, 0xc, 0xb745, 0xd}}, @wr_crn={0x67, 0x20, {0x4}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x2, 0x7}}, @cpuid={0x64, 0x18, {0xf, 0xc4c}}, @nested_vmresume={0x130, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x1, 0x3}}, @nested_create_vm={0x12d, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x4, 0x40}}, @nested_amd_clgi={0x17f, 0x10}, @nested_load_syzos={0x136, 0x40, {0x1, 0x3, [@wrmsr={0x65, 0x20, {0x400005cc, 0x8000000000000001}}]}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x5ec1, 0x80, 0x1}}, @cpuid={0x64, 0x18, {0xadc8, 0x4}}, @set_irq_handler={0xc8, 0x20, {0x2d}}, @wr_crn={0x67, 0x20, {0x4, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control64=0x2019, 0x6, 0x8, 0x101}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @uexit={0x0, 0x18, 0x8}, @set_irq_handler={0xc8, 0x20, {0xf8, 0x2}}, @cpuid={0x64, 0x18, {0x877, 0x7}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x6, 0x16e7, 0x1}}, @cpuid={0x64, 0x18, {0xcd5b, 0xc}}, @nested_load_code={0x12e, 0x5a, {0x1, "420f01c366ba200066ed2e2e66410fc7350b000000f30f01dfb9a5020000b800000000ba010000000f30f7df430f7918c4a18c5c4cc8000fe0f3b8010000000f01d9"}}], 0x372}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc9, 0x9, 0x68, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r8}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.468013935s ago: executing program 3 (id=4616): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0xd) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) unshare(0x6020400) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_VLAN={0x6, 0x5, 0x4}]}, 0x24}}, 0x0) fcntl$setownex(r2, 0xf, &(0x7f00000002c0)) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x5a) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r4, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0xbbd) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x1, 0x3, 0x7, 0x8001, 0x7}]}) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 1.386836612s ago: executing program 5 (id=4617): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) setsockopt$inet_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x303100) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x7, 0x5, 0x4, 0x100, 0x200803, "000000ffff060024000a0000002800", '\x00', "05030400", '\x00\b\x00', ['\x00', "6cf8ffffffeff0ff00000100", "f00800000000000000000010", "f4ffffff73f3b5bd2afbddd8"]}) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req={0x1467, 0x0, 0x5, 0x4}, 0x10) unshare(0x6020400) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$packet_int(r1, 0x107, 0x2, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x54840) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000200000180012800e0001007769726567756176640000000400028008001f0007000000"], 0x40}}, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000001ec0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002100)="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", 0x1e9}, {&(0x7f0000000700)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1c26aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51762f860fbb37b4fe035bbb095873048fa979fc3f2d70c50d92f13ef0d97bbb40eeec11c2292fe9fdf7fd29f267142583d7b9c286e83d3648c185e4b743ee488d8f46cb92b88a1085824aa782c18eefb8559e28cf49b62b58cdd5bfef2d9ad31075f645d5ce9747b3a00d127c96911ef7948c618745fc7f9946f9ce4fec19b7bd4", 0xbe}, {&(0x7f0000001f40)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000007c0)="2513004e1822432de2e77ff261304bd89ab754e736cf75445ccb076b9b9d3e48d18c85d7f31e6f3f30380111bb91016f2b33c88812cb9518c07d4fef91363f75bde96ab8022fd7e26ea186ecd5070b3a5c09d96e4cac28885d461d6ebb3e57f727f50065fb2f5704b043dd384db27ea24d8010406fbb73033133b8a02452eba910f754928e797246087fdc45b3dd60ccac2d2df6443e17ec3be844b43cc7b9", 0x9f}, {&(0x7f0000000880)="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", 0xff}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000980)="334fc6a8516011035b13a3944cf1f4e4f7ad2e89e8f18c6ac317dcd33882ff11fec6995f6a5ae59605cc1e6acab51ce25963af320ddede9778e0b744ade6d56fe7fbf9c9a100214a0dae72f62d8de8cfd79629a0495329c8bb792d56936dceec6cb47d3a218f0257ad754bea5ed883d2bbb425", 0x73}, {&(0x7f0000000a00)="50086958f28de68c94b8702d05f225e970be2b335cd09b890530a45a639bae4ff645b05ada046aca2a7a6eeb6b0671b0c5d698fa81b82b02a80d361edfa56faa715c5a18c9aa8796c3664d12826b34bf94281ac90fddce637a576504bcd6cad0fe7b3a430278b61f1ea058eef611cc8e7081b0c1e18d6b41aff873182622a458a6064dfdbec610ef4b0903d607474890f6ef7721caefe85fe1c3cb17a7173c34c55b03f524c5a6226f8a0073ff7a385f06852553a77c009f1d1319b67a482beabe885fb5cb538af84152c22854e2a8ad9cddc297efb1ffdad29213b36afccf1c46e4979d579c091e", 0xe8}, {&(0x7f0000001d40)="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", 0xfe}, {&(0x7f0000000c00)="5cbb5de020a1f73a31a38efe0331272d92790c86a74b2dd704e0b13139dfe79b2ac288a1ac622559b403e49c2ba5c81dfa26ff9690554bbb5230d5a7156e5c3965503adf6e3eecdfa8c54c089704d15b2e6c5f208500523ed8bb1acb6fc08f9f8150119fd7d748ae2b0b8c331b614f109b09d7afd37d22b945a295450c43b2853ad96061033376d2b1213331ce15a7084b15c630cfe20b21dc2b4d5cb09df9328f614397be464dd28026d3964af9074226c8208f7705ab5928bfe846d56c5a848bb1a10bec977a6c14d25cd44260dac9781ea01842cc59681bee", 0xda}, {&(0x7f0000002300)="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", 0x218}], 0x8, 0x0, 0x0, 0x4002800}], 0x2, 0x4040841) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x3}, 0x40000002) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$swradio(&(0x7f0000000640), 0x0, 0x2) sendmsg$nl_xfrm(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r6) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x78, r8, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9f}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x9}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc0b}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000800) fanotify_init(0x1, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e295f120460d780092820102030109021b00010200000009042d000145efe40009050103"], 0x0) 1.283425798s ago: executing program 3 (id=4618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x8001, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r2 = eventfd(0x79) r3 = eventfd2(0x3, 0x1) io_submit(0x0, 0x3, &(0x7f0000000a00)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000680)="31a836eaa8567952addda6524898f11efff475279128179ce564180dbd073009ecf73aafe7814f095158a26f209b2207ae2744281f45e0bee9c0322e922979f4fc08f2703a339b21e9a2c21f4ac151ccdaad9f4f00d053e05ac24c2eae85b1d8060fedd74c30ea0f284cee6e4c00e7d0ece47001b203a85c104eff59bfe2f75300d75c3e771cdf7532f7b299f20f367b5d2632b062afeb9a958b54055716712ccfc349466b27dc6d75ecc77e80bbb77e3f3c908f107c2b93bd9b4450b638b9c9a87aa572fef1ed8a062cca924163eb1907f34066c0d055f7aa47ddc099052b6212c3bc2888719d4b79e37b1b6283766f52", 0xf1, 0xdf61, 0x0, 0x0, r2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0xc, r0, &(0x7f00000007c0)="842cdcec335d8e6fcb7a38ace2294fd51146b6c4be3e327d54bbf3e6bf304923a437e66f60cf6bc1ff4f246b211fb5345092ebf6b45d634a4666f1a4f5edb2232a1a1e04dd59b50d0331f48e0c9ceb3d4058e8b033baed749ca6889235584bafe4d2be4752d9c42453848b9854d0f7693c7c72e82848b71e501c000dd7da9dc0a93531d817905e3ab22ad67f98e481cf4e4c45ed27fa92dfba488ae662078e2b1ecb9b9b0939280c385fb59f4cbc1ccaa6931765c6713bde4950e4c6e0bdda6522ffc0cf903a7597c59e0e4077a964", 0xcf, 0x8001, 0x0, 0x0, r3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000900)="1f692519e119deedc4d37c866833bae9e48bd9d4878c9a18e52c83931addaa8c18d3ebf65559ee7a4f65897375dc275d944ef29ce04451d294056cc30c3c04d2cedc9e2c49907370b4f8fb4888f19d2af59c5c1ef592e48dfbbacf80f5c6f57a1ded4498644a81140325fc66f667e5313a275884b721f67a9cbd0a6a86feb3c430ad3a82", 0x84, 0x6, 0x0, 0x2}]) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x9, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r5 = socket(0x9, 0x3, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x10bc, 0x40, 0x119, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x9c, 0x1, 0x0, 0x1, [@typed={0x6, 0x5, 0x0, 0x0, @str='\x80\n'}, @nested={0x8f, 0x1a, 0x0, 0x1, [@generic="6a659dcd7a55662f5af8d76f745832363b2cb76c25fa7589a9d503fe6a881a08aa1e0e7db306a25939e348234cbfd584094a8b088c96820c112e223acbbaa445bbec6264e524132e2e4c3ac26617457634bde5e671f1a3c989526157fb2bf699df76754047f296b72d92c268df36fffdd78552ae8fef69166435a280fb2a17118eb0bacc33f807011f3fcf"]}]}, @nested={0x1008, 0x2, 0x0, 0x1, [@nested={0x1004, 0x10d, 0x0, 0x1, [@generic="a6e5c730145c821de0dc9fcea75a34320d939ae2ae35271392c2f300ba9dd3c72dc484095a976d1d6e8e7b7fa4ae0a8ae36474362645706028c084fb07bd93b99058225bcd7d08a2064761f6ee152d5ac5fe5c806239579612965571e5cc015eea6557e5ee4414a34e776a81d153a2832f88bd11fd382da0ce87d07dbf065020b5ecfb668c1b1a222e2b9869376eec62cbc7f97ced9c587cf45cd2f48ac1786ae93d6faafaa395146663d2e65b9bf9179b1341bfda58772299a8ba4431211b759a5563f29095165f1cf8e75baeadc1572fca54d8580f6e377c7f08c0967b6191cdd9485bb10a0502a2cb994ad979bccdf1c21e8ce4974fb14f567cfb5a4cf488208e22d80500effe6c66847a825dccc34a7e6b19dfa44beb344412424fa2854c449c4455aee12d2f15b101c2a5a9107e7c85e0b2446cd3ef9df6a4b121bddf533a23fe0878c09c4739547a4742cdfc45c6d788f20317d558a7bc098fa78d08e34a1a94bebd7f76c09a98008dbb3984e8ba952aa0606fd35fcdfb87141f982bcaf393df26e331185cb159da9516300eb7a5e6c4db110f2cce9f971ff3c7113e24c9d10c458fea4aa44f503e7af882b475db9df08c66193aeb886d97697e74448321e9e0ccb1f8a84817bb3611167ed8e97dc9fa14e0c891a7e8d83959cff1c51cc8bd0dc77199fbb959d54d54ad77da339ada06709b5f400fdcb1b7c0ebbddf93e2f930510991a74f959089338eb6de9fcd04a205e8c1c3ad027ff1e57c04088dcd96ceeef19414b8c5d2a0c3e93b2aa2a73dea69359e55ca7c25c814672d249edf2283061052f2a01938f9f57ab4458eff9de8b705df74d538f16df8dd0519a32b8d079d4e8635b535468ab1eadbc01677e5fd42f4e49308828d98ba2a8e01b1ad3e9f8437cd8d42ed487b2cc229230f2f68ca066b5392401c3554e253aaea9e10c742925819b23316018d0d09f46c032226526f7fe7805c3aa5c22347fae09eda3382dfd07bbd8962f3ef69bd20f8740cdffadd04de9977d0e738f517679e8dd5782f8630faeabfd3814170c8bc5391e3c13afa63ca15ef162ccad81526e1c4700a8401133174a672af97125be4d57aa723b80aa981b340f750d4ba54a92c78f431f7329aff21e0a5eada9f923d5c3857226f27fd60cb9038ce92363f4accf87bf0999b733ba1f7951570a18d23fb1660fdaf689e600342f6953354426e3d651c2175edb7f4dde13bbc6cef55aac8632197a6e64199716afa4889d9546f2705b2bc3aac242113a9ba844f3e643b0c7d378df0e3f00abd2b3992f99ceaa17c5e332e7042c6079bcc95967c97af4ff0b17598b946aa2e7259ef2091359b11d8b71eb6e410eff6a81af53b327d5dcbe29a3405d3e34fa4da8a84ea070e02e9ebec08ec05de0f1c3a4ad0ab7d4f26261f44749a5441965dc98a56f274088206e11c62f007cae4ad6e654054a6c25aca9bbd626096eb1a4e1cfd140a191686a068f66487f06a0352c9cbfb2e61eb392c92a942ef45d7fb2ba709b8df43aa90585925f564e9e1c0f8192566862240ad1a7d67d2816134fbb34a7da84cd65b5f6cb7de0f904fb8fa46af99d37fc8c10a210e0a6abe265eaf7ba2e0602da2e9f45e3796faf085987b5552363c9a0b72157f12cf429c25704a79eb90ce8398b66c88d9eba0bb940136e3aad663328873502f307cfb1be576223bdcd4be038f5a9cc8f21b3f7d3507ccdfe4a7a07ad17c105c284f9c1bf9d8f483fe2ba88df65c0c5e7d90d9d3890ab1dce6c8d20017ca3825f81b54d2f27031a25d5780258dd1f911c52f0bb62dad5b4890df8ce4007dfdee0a0342b55f87b1650aa90a0278edbc3b6976f0e4406767d8d77ff10373d6377f1475d55f65f4489dca99b334247953d8ba6822727576d1e5eb7a8afa500b67e3e93de72f5f4dabd5e73051305e37668fdeed7157827465705abc2d405f324035e75e02c89bf93aad86a7e9a83a1d6b369a033b61f1c15ed05c48ca3bcc342650968fb86a1782f846e68a05ced14bbce2778dc0db3898aceb7081a63e2525d9689e3ae94f2433623926a16c9786cbe28d954c9e70099c6bff1c18902bf2e505652c14b3e56476a13d4adeef295426ec3861da0bd7c71dfa082cb9aff7cc5a9819dbb51dc9b77a156e071f5bcc9c016cb5832c49c515b978cc6ff2edfdbc3d21e9c33ac7c4fdd7dbcda180ff1d199c8fd5a529ba27c54f7d597fffe53c80d5b99fd59e7cc3c88f0b41625c69f91275c0236b1d61db3d741183e89a4431834b9f721c2e0376b40cd39a6f416dff03d21248004c2deefa44fb1a3a2784f8f3b902024d404e07439dc3816e6ec74656e6d2a82b4be6f2339f4b037982d64a93734afee0dcf28139eced05da15270de55d8c80758cf4a24bd77a126c4c10270f7f6539494a0e2110344bf66819cd7c9a85929046aecb38081e7912d3f921345991ecf098ff0bc5cfb9180de07d463214e7433cfb2604387edfccf3748679fb9b6aa5fe08a47730481197e699fb3c47ae39e371057c70b2cbed5ec0456b52e340ed309c327e472f3b37f455a02df57d575905130502b7fdcccab7bf7541fbd19a2af8b7254245b400bad27b84278ddb998d33372fae7205ce796bf10a355c80c44b9bb93ec0ef534b6e176eda68c0d2027d5d64a127e530231054647afb266e7d00c01c4c42018d75aba905c4452afde6b0f46b793d258e6eaa759a005f713b1d8e65e71d01ab4be77b3c159d2cb6fbc3e64c0467024f68f70ad2d880650f77194d4175bd5cbc53eff6ad6242be7d6f5f760e4427bba2919675a4a6b396592caedaba7aef4876673142cc00b9bda15c51c4c786f4d461fd862d897455aab812673a37daccb3901bba7726b27d79554a46574c1d8bc87fafc9f4fd08673f39616d88a181aceecb94e52d278461b102d8ae237bc6e9d0ef51cca737116e3158e8625dbe3228b8e81c746d08019e646a4ff787625a92301a0cd2fac3fe35331f5a3632a60fec4d782a80e4e873116501f98230011ee58885050cc33b8661c8657c0f2366209f69ece308ffddf6e479193f0a0dd66646066ac7dcf3052805a982abd3a050ca0af501ee1e7aecd8f66a5984b0ddb1d0047fdce8c0f8fe24b0e25e3a46635868336a790374cba5411aee6513492b9541c1eb4bb697eb11e889c7b6702861785b8575c3e62f59f712147addb0138183e6c5d53aa9067d464582900735cf9bc3a763e6559aea743264897db89e70f4bbad66c056dcf3358992fe8ea164caac9195689ae990e415ea662135bcd4e7ff19e72f7727d4b25f40fb7e82e65b699b1414c5f495bf0ae4b4178eb4646ccfa59ab9592cf166fb40607c87175f06b99d856bfe0961621e69e15cfa717bce9319a3ab8b5c004417dea42dde634942e6b3cc339d2db7c13c0118dcb35745bdd615376c225766b8adbfbf5238df4bb46903c5fba98bbb6a81af6f8a5092851c3807d780797cfbd067896cf70d53eb1dcf4b97ef90f4d32857d767d98d70b460b7a4c7fa8f199b9d13c92f1f3d405ce2130a47e184c378c16240f0d52db4c49d201ccdf299ab043190a5f3f87286b5fa3e7868a1e7712121254393e472388bcb1b1ba02aaab34e4da5bc4db3ca99f5d1ebb269790a231346d2a097cb507bfd00dad8f1b8510b2c7f0688bb9efc7a616aaea1790930a6de59177f5ffab81fde371f312208e827f11cec94580ac247c6cca70780666dea48abdd21f2def6dc62a65d05bb11337eb92a561b71489b33d3e857349b4f9a57f1e5723f6306dfe03cf8656279b5038d7e83687312860d0c3fa71a94475f250b73db26b5c15db7a32f433bcc5e572cc3988d6544aea4be70ecbc4edf16c3cdf1a67bb44ffd7d5c0f4c6d4dd06a7c7716f9e0ec925dc8a1f3edc3841ec466637cfca39df1c01499577f67efea718ee8ee8a55b46769f67fb060983d71e6d7e79b9922ac7d7dea63cc0a66d8ef496d20c459e11a246843c6d072d22f7484d39424b7c3184afe67a12fac3ffd80f32b6455d9ab31e488219307ec25615334762e14f15bd8fd9bcf19d92a75ec31873fde6b50e5d65dc4e18ac054aed3e2d886ee3ec2db901ff8e1887be537c063b5e626c3c63be067b4f16c97412c52ef9b24ac1d0e9d3f4182927d5707bae8701ccac7c12ba444b23ae189c53ba59379763eaa994c88681d8aa13b72790f4db44ea08c16716e1b8632497516a9e9e1c0375c618e26b6f746a0a815393e80d5f28aa220ce36be5a587ddbe0a65233201a0408a92fd836e1056e111fe6b1c3d9bb8be7bdca35aa635c44f9f3e40be96bb4e61a19a3590c0423f2ba8905cc989f14f15f54e26b00ac18748b3d4eead9b26fdfda61f3edb0b981fdf5b47b312a76f66f14ed2fc1cb8d486a3ba8fe12c049456278efdc173cec22b9b6d558a40d412e45ce2233468100ccf60e55cfd469ed54d26fb0ff8d76286942371a168b70ca730d83393d8b6798ded2c37a7d4cd0e92adcbf093a0999db7733046d69971b0543a7ed2fd89d1426fbe07e0ddfc2b65c62794c71a51a4223a4acf20068fd5bd7b6815e669cb6391cc0274de8023e2017cd1bbc8ad5c24f900e642826d8bc07ef9cd26bda1bb97dd2698f3cdce92296b4714224f911b3a8fdbe5e5cbc1c9eb79599d0079528b340a9f48c7c1d5f8ecb58201bb0f231a55b5f24b9fc9c232847b5c90c12deb131be51b2c7b02a76c11a77b5d8bf51fa5e1f50a995d09b89bc38aa1dec57f05bd3d943164a9fe9a13fb5483a5dd290ead35ebd4d5c0393286502aabad34b677a32cca35618396635f0e27e28062c69bb55f2fe7eb659da5f36ad5937c1f3340ae1a79a91ad08078de8bae54e47a2a7f001a4b1964674f327bc4951dd554015e3e63b7d6498c60b598ef96f3abad60120337512c1caf9583854aee8e4a258b7c28bf1a0e78536b25516d03eb03c6f9d2877475815a2afc8cd39fe84ccb342805010a2b74400d0c067050ff68ac07e89e9b9f9bf54fc0d93e3a40a06d13b09e625b6f85a389fe822f8c232300bd87aa1e2b01b5d3495c7ef966edb80a6c1a8c764a0c1e2926d2f13460c0907ed256ea104682905f25adde969f6970d0258f98d87b9b978cd857677edbcdd52ae259686c891b5deb1286a869a651870d3221b9dc59436bb014650e89f11d1b790d5eceec08636ef9510a13e33ce8ff76f885a0fd4bc020a730af4a8c439e81c381123e721ba9a299887618438b75fb1546334d269bc8eec1cd1ee7205e7058fb455451d2d1fd25d371b6e1eb067d028b409dc0948a2344208d020c92ca14203bb5453584438b35be21f9f4d3ec5e1444c3376ad28900f252bd91d2c159e2328608cbd7c8aeaec1aea496d3a58830a539e78ef5626fedff49fd30aed569a016c801dadaf0168d99c062ba0501f5499e9b26a3f16571bcddc85817ec92eb786a89c634c7d89b430d046ba9307cf4dfba5da5900895a823b93952e36c70bffab084f27520b4130b777d72a429316a5527723b6bbbe3a093aa96a2e46ca1466bd398c84144c4320f45b75fee37310e6c79ac4a3b39e207fd8e9b7463b18ff4e4645cf2fd9556ef40caca043a67e65fde306098f027ebbfafdb174387002c3eeff9a0f27f31ea5c879dc481f6516d80892c062ffbcbf4ff9c329757082a40f92e5f82ee172975f3aa1b3f962aa80ffd9fb79c4ae885d3aecd34408eb272c35f9ab308beeda67aecc42a66b9fcc44e95ff0007ea1a2a163c56751b3b155c7c851f2450d7579108a9c10a1be992b42410482e50fd9d56f3a"]}]}]}, 0x10bc}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000b00)={0x0, 0x9}, &(0x7f0000000b40)=0x8) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000b80)={'raw\x00', 0x0, [0x5, 0x0, 0x1, 0x5, 0x8]}, &(0x7f0000000640)=0x54) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) munmap(&(0x7f0000ff1000/0xe000)=nil, 0xe000) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x10, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f, {[@timestamp_addr={0x44, 0x24, 0x4b, 0x1, 0x8, [{@broadcast, 0x6}, {@rand_addr=0x64010100, 0xd}, {@private=0xa010101, 0x5}, {@private=0xa010101, 0x5}]}, @timestamp={0x44, 0x8, 0x93, 0x0, 0x9, [0x9]}]}}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000000000)) r10 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8916, &(0x7f0000000000)={r10}) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) syz_emit_ethernet(0x6b, &(0x7f00000005c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x3, 0x1, 0x5}}, {@ipv4={0x800, @generic={{0x14, 0x4, 0x3, 0x3, 0x59, 0x67, 0x0, 0x46, 0x8, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x1a, 0xffffffffffffffff, [{0x2, 0x5, "b47d68"}, {0x1, 0x7, "454c13fdad"}, {0x1, 0x2}, {0x1, 0x6, "1e975574"}]}, @timestamp_addr={0x44, 0x1c, 0x81, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x1}, {@private=0xa010101, 0x8000}, {@rand_addr=0x64010102, 0x3}]}, @generic={0x86, 0x3, "ae"}]}}, "d90feb27a0e465d714"}}}}, 0x0) 1.283101816s ago: executing program 2 (id=4619): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000050000000f0000000400000000100000", @ANYRES32, @ANYBLOB='|G\x00\x00\x00', @ANYRES32, @ANYRES32=r0, @ANYBLOB="0300000002000000030000000f00"/24], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003100)="3677e5d35df4eec44e17894410b35412f73cd2c6a5960d80a4c4de670dd12d835d419d617b827d6cd134f515e1667e8af6ed2fadc3b175bd1d2b39fa84bbf5b130f13d5351e3a379d4195c4ff7f265eefc0974788596b3e6958e108b553a2bf1adfa4f5c7a1442200fb04eb933cacb415c2fb6921e57eebf7004916d5a5828b240", 0x81}], 0x1}}], 0x2, 0x5c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.055720793s ago: executing program 2 (id=4620): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000005dc0)={r1}, &(0x7f0000003c80)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000000)={r1, 0x8, 0x23, "d6300488c69738c2dc841d2aa4f474da32cf650ad3b6c504847853e4154d181a6f1a14"}, 0x2b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) close_range(0xffffffffffffffff, r3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) socket$inet6(0xa, 0x1, 0xffffffff) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in6=@local, @in=@remote, 0x4e21, 0xe39c, 0xffff, 0x0, 0xa, 0x80, 0x40, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x200000000}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x34ff, 0x0, 0x2, 0x24, 0x8}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@empty, 0x2, 0x0, 0x0, 0x6, 0x800, 0x800, 0xfffffffc}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x1, 0x1, 0x9, 0xabf, 0x1000000}, {{@in6=@local, 0x4d4, 0x3c}, 0x0, @in6=@loopback, 0x3, 0x0, 0x1, 0x8, 0xb, 0x0, 0x404}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000030}, 0x4000) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) 446.965306ms ago: executing program 4 (id=4621): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6ae9d6d7aaf2849d00000ec320626799640315d2875841d26f9eed70000", 0x20) bind$rxrpc(r0, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 142.763564ms ago: executing program 0 (id=4622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000240)="af", 0x1}], 0x1, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7, 0x7, 0x4}}], 0x18, 0x20000001}, 0x20008000) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000)=0x8001, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r2 = eventfd(0x79) r3 = eventfd2(0x3, 0x1) io_submit(0x0, 0x3, &(0x7f0000000a00)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000680)="31a836eaa8567952addda6524898f11efff475279128179ce564180dbd073009ecf73aafe7814f095158a26f209b2207ae2744281f45e0bee9c0322e922979f4fc08f2703a339b21e9a2c21f4ac151ccdaad9f4f00d053e05ac24c2eae85b1d8060fedd74c30ea0f284cee6e4c00e7d0ece47001b203a85c104eff59bfe2f75300d75c3e771cdf7532f7b299f20f367b5d2632b062afeb9a958b54055716712ccfc349466b27dc6d75ecc77e80bbb77e3f3c908f107c2b93bd9b4450b638b9c9a87aa572fef1ed8a062cca924163eb1907f34066c0d055f7aa47ddc099052b6212c3bc2888719d4b79e37b1b6283766f52", 0xf1, 0xdf61, 0x0, 0x0, r2}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x2, 0xc, r0, &(0x7f00000007c0)="842cdcec335d8e6fcb7a38ace2294fd51146b6c4be3e327d54bbf3e6bf304923a437e66f60cf6bc1ff4f246b211fb5345092ebf6b45d634a4666f1a4f5edb2232a1a1e04dd59b50d0331f48e0c9ceb3d4058e8b033baed749ca6889235584bafe4d2be4752d9c42453848b9854d0f7693c7c72e82848b71e501c000dd7da9dc0a93531d817905e3ab22ad67f98e481cf4e4c45ed27fa92dfba488ae662078e2b1ecb9b9b0939280c385fb59f4cbc1ccaa6931765c6713bde4950e4c6e0bdda6522ffc0cf903a7597c59e0e4077a964", 0xcf, 0x8001, 0x0, 0x0, r3}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x2, 0x3, r0, &(0x7f0000000900)="1f692519e119deedc4d37c866833bae9e48bd9d4878c9a18e52c83931addaa8c18d3ebf65559ee7a4f65897375dc275d944ef29ce04451d294056cc30c3c04d2cedc9e2c49907370b4f8fb4888f19d2af59c5c1ef592e48dfbbacf80f5c6f57a1ded4498644a81140325fc66f667e5313a275884b721f67a9cbd0a6a86feb3c430ad3a82", 0x84, 0x6, 0x0, 0x2}]) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x9, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r5 = socket(0x9, 0x3, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d00)={0x10bc, 0x40, 0x119, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x9c, 0x1, 0x0, 0x1, [@typed={0x6, 0x5, 0x0, 0x0, @str='\x80\n'}, @nested={0x8f, 0x1a, 0x0, 0x1, [@generic="6a659dcd7a55662f5af8d76f745832363b2cb76c25fa7589a9d503fe6a881a08aa1e0e7db306a25939e348234cbfd584094a8b088c96820c112e223acbbaa445bbec6264e524132e2e4c3ac26617457634bde5e671f1a3c989526157fb2bf699df76754047f296b72d92c268df36fffdd78552ae8fef69166435a280fb2a17118eb0bacc33f807011f3fcf"]}]}, @nested={0x1008, 0x2, 0x0, 0x1, [@nested={0x1004, 0x10d, 0x0, 0x1, [@generic="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"]}]}]}, 0x10bc}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000b00)={0x0, 0x9}, &(0x7f0000000b40)=0x8) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000b80)={'raw\x00', 0x0, [0x5, 0x0, 0x1, 0x5, 0x8]}, &(0x7f0000000640)=0x54) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) munmap(&(0x7f0000ff1000/0xe000)=nil, 0xe000) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x10, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f, {[@timestamp_addr={0x44, 0x24, 0x4b, 0x1, 0x8, [{@broadcast, 0x6}, {@rand_addr=0x64010100, 0xd}, {@private=0xa010101, 0x5}, {@private=0xa010101, 0x5}]}, @timestamp={0x44, 0x8, 0x93, 0x0, 0x9, [0x9]}]}}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000000000)) r10 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x8916, &(0x7f0000000000)={r10}) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) syz_emit_ethernet(0x67, &(0x7f00000005c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x3, 0x1, 0x5}}, {@ipv4={0x800, @generic={{0x14, 0x4, 0x3, 0x3, 0x55, 0x67, 0x0, 0x46, 0x8, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0x6, "b47d68f3"}, {0x1, 0x7, "454c13fdad"}, {0x1, 0x2}, {0x1, 0x6, "1e975574"}]}, @timestamp_addr={0x44, 0x1c, 0x81, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x1}, {@private=0xa010101, 0x8000}, {@rand_addr=0x64010102, 0x3}]}, @generic={0x86, 0x3, "ae"}]}}, "d90feb27a0"}}}}, 0x0) 140.261363ms ago: executing program 3 (id=4623): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008040) 46.312201ms ago: executing program 3 (id=4624): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r7, &(0x7f00000002c0)=[{0x1}], 0xdeadbeef, 0x8, 0x2000000000000189}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_control_io(r8, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[], &(0x7f0000000340)=""/104, 0x196, 0x68, 0x1, 0x3, 0x10000}, 0x28) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x80, 0x80, 0x2, 0x3, {{0x18, 0x4, 0x2, 0x12, 0x60, 0x66, 0x0, 0x95, 0x4, 0x0, @remote, @broadcast, {[@generic={0x44, 0xc, "7404736b0e4ea5820db4"}, @cipso={0x86, 0x2e, 0x0, [{0x1, 0xb, "1ee5e26b159352d339"}, {0x0, 0x11, "adffa513edda7a8168c96ea9084288"}, {0x0, 0x4, '\rr'}, {0x5, 0x5, "332bbf"}, {0x0, 0x3, "ef"}]}, @end, @ssrr={0x89, 0xf, 0xf3, [@private=0xa010102, @multicast2, @broadcast]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f00000006c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r11, @fallback=0xb, r10}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4044045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) 0s ago: executing program 4 (id=4625): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fac0)=[@textreal={0x8, 0x0, 0x27}], 0x4b, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x2000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x0, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x20, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x82341) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r6, &(0x7f0000000100)=0xdf9f, 0x12) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000cc0)={0xa, {0x800, 0x7b, 0x1000}}) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000002c0)={0x6, 0x8, 0xfd5, 0x7fffffffffffffff, 0x4, 0x7ff}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x2, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40000040}, 0x24004004) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c8c442debccf89e001100040a0722e9ff8109fbffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x20000090) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) ioctl$TUNSETOWNER(r8, 0x400454cc, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x1f, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e54797"]}]}, 0x34}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb09e3c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x4, {0x20000, 0x5, 0x0, {0x5, 0xfffffffffffffffd, 0x48b, 0x7, 0x404000000000007, 0xd, 0xfff7ffff, 0x6, 0x4101, 0xc000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): sb 4-1: USB disconnect, device number 119 [ 841.606354][ T29] audit: type=1326 audit(1774890054.615:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 841.645380][ T10] usb 6-1: USB disconnect, device number 49 [ 842.133979][ T29] audit: type=1326 audit(1774890054.615:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 842.636889][ T29] audit: type=1326 audit(1774890054.615:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19754 comm="syz.2.4078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 842.977444][ T10] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 843.316755][T17532] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 843.486723][T17532] usb 5-1: Using ep0 maxpacket: 32 [ 843.494655][T17532] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.505233][T17532] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.723848][T17532] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.761272][T17532] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 843.819000][T17532] usb 5-1: config 0 interface 0 has no altsetting 0 [ 843.835757][T17532] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 843.856510][T17532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.873110][T17532] usb 5-1: config 0 descriptor?? [ 844.146810][T17540] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 844.322921][T17532] hid_parser_main: 28 callbacks suppressed [ 844.322945][T17532] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0 [ 844.340564][T17532] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0 [ 844.352348][T17532] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0 [ 844.368698][T17532] hid-thrustmaster 0003:044F:B65D.002B: unknown main item tag 0x0 [ 844.396797][T17540] usb 1-1: Using ep0 maxpacket: 16 [ 844.403825][T17540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.424950][T17532] hid-thrustmaster 0003:044F:B65D.002B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 844.448211][T17540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.463540][T17532] hid-thrustmaster 0003:044F:B65D.002B: Wrong number of endpoints? [ 844.474306][T17540] usb 1-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 844.499154][T17540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.532229][T17540] usb 1-1: config 0 descriptor?? [ 844.600855][ C1] hid-thrustmaster 0003:044F:B65D.002B: Unknown packet type 0x0, unable to proceed further with wheel init [ 845.219942][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 845.236576][T19785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.309795][T19785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.350960][ T10] usb 6-1: can't read configurations, error -71 [ 845.385841][T17540] usb 1-1: string descriptor 0 read error: -71 [ 845.394069][T17540] uclogic 0003:5543:0047.002C: failed retrieving string descriptor #200: -71 [ 845.466981][T17540] uclogic 0003:5543:0047.002C: failed retrieving pen parameters: -71 [ 845.485069][T17540] uclogic 0003:5543:0047.002C: failed probing pen v2 parameters: -71 [ 845.493475][T17540] uclogic 0003:5543:0047.002C: failed probing parameters: -71 [ 845.508105][T17540] uclogic 0003:5543:0047.002C: probe with driver uclogic failed with error -71 [ 845.700678][T17540] usb 1-1: USB disconnect, device number 3 [ 845.900584][T17532] usb 5-1: USB disconnect, device number 114 [ 846.557497][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 846.760895][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4097'. [ 846.772420][ T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 846.781978][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.793167][ T10] usb 1-1: Product: syz [ 846.797793][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4097'. [ 846.807115][ T10] usb 1-1: Manufacturer: syz [ 846.812343][ T10] usb 1-1: SerialNumber: syz [ 846.966736][T19830] netlink: 'syz.3.4097': attribute type 6 has an invalid length. [ 847.005485][ T10] usb 1-1: config 0 descriptor?? [ 847.149212][T19832] ip6tnl0: Caught tx_queue_len zero misconfig [ 847.231922][ T10] usb 1-1: USB disconnect, device number 4 [ 847.263209][T15490] udevd[15490]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.556756][T17540] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 847.719645][T17540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 847.729494][T17540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 847.742335][T17540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 847.756971][T17540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 847.771806][T17540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 847.782090][T17540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 847.869980][T17540] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 847.909817][T17540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.918297][T17540] usb 4-1: Product: syz [ 847.922677][T17540] usb 4-1: Manufacturer: syz [ 847.927643][T17540] usb 4-1: SerialNumber: syz [ 847.936437][T17540] usb 4-1: config 0 descriptor?? [ 847.958669][T17540] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 847.989745][T17540] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 848.106995][T19841] FAULT_INJECTION: forcing a failure. [ 848.106995][T19841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.120855][T19841] CPU: 0 UID: 0 PID: 19841 Comm: syz.0.4101 Tainted: G L syzkaller #0 PREEMPT(full) [ 848.120885][T19841] Tainted: [L]=SOFTLOCKUP [ 848.120892][T19841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 848.120903][T19841] Call Trace: [ 848.120912][T19841] [ 848.120920][T19841] dump_stack_lvl+0xe8/0x150 [ 848.120950][T19841] should_fail_ex+0x412/0x560 [ 848.120981][T19841] _copy_from_user+0x2d/0xb0 [ 848.121004][T19841] ___sys_sendmsg+0x1c6/0x360 [ 848.121034][T19841] ? __pfx____sys_sendmsg+0x10/0x10 [ 848.121088][T19841] ? __fget_files+0x2a/0x420 [ 848.121104][T19841] ? __fget_files+0x3a0/0x420 [ 848.121128][T19841] __x64_sys_sendmsg+0x1bd/0x2a0 [ 848.121154][T19841] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 848.121194][T19841] ? __pfx_ksys_write+0x10/0x10 [ 848.121225][T19841] do_syscall_64+0x14d/0xf80 [ 848.121247][T19841] ? trace_irq_disable+0x3b/0x150 [ 848.121264][T19841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.121283][T19841] ? clear_bhb_loop+0x40/0x90 [ 848.121305][T19841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.121324][T19841] RIP: 0033:0x7f4c8599c819 [ 848.121342][T19841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.121359][T19841] RSP: 002b:00007f4c86939028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 848.121378][T19841] RAX: ffffffffffffffda RBX: 00007f4c85c15fa0 RCX: 00007f4c8599c819 [ 848.121392][T19841] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 848.121403][T19841] RBP: 00007f4c86939090 R08: 0000000000000000 R09: 0000000000000000 [ 848.121413][T19841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.121424][T19841] R13: 00007f4c85c16038 R14: 00007f4c85c15fa0 R15: 00007f4c85d3fa48 [ 848.121452][T19841] [ 848.755832][T19845] ipvlan2: entered allmulticast mode [ 848.771400][T19845] dummy0: entered allmulticast mode [ 848.796764][T17540] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 849.603313][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4105'. [ 849.803109][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'. [ 849.812338][T19866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4108'. [ 850.081179][T19877] openvswitch: netlink: Key 26 has unexpected len 139 expected 16 [ 850.155535][T17532] usb 4-1: USB disconnect, device number 120 [ 850.271833][T19883] binder: 19882:19883 ioctl 4018620d 0 returned -22 [ 850.381338][T19885] syzkaller0: entered promiscuous mode [ 850.381354][T19885] syzkaller0: entered allmulticast mode [ 850.512611][T19890] fuse: Bad value for 'fd' [ 850.704243][T19894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 851.498168][T17540] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 851.688311][T17540] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.698722][T17540] usb 3-1: config 0 has no interfaces? [ 851.709986][T17540] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 851.726689][T17540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.739154][T17540] usb 3-1: config 0 descriptor?? [ 851.824614][T19911] netlink: 'syz.5.4124': attribute type 51 has an invalid length. [ 851.886758][T17532] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 851.976604][T17540] usb 3-1: USB disconnect, device number 108 [ 852.003218][T19916] syzkaller0: entered promiscuous mode [ 852.009059][T19916] syzkaller0: entered allmulticast mode [ 852.135471][T17532] usb 4-1: device descriptor read/64, error -71 [ 852.486945][T17532] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 852.666744][T17532] usb 4-1: device descriptor read/64, error -71 [ 852.787069][T17532] usb usb4-port1: attempt power cycle [ 853.022043][T19932] fuse: Bad value for 'fd' [ 853.037528][T19932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4130'. [ 853.136825][T17532] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 853.157210][T17532] usb 4-1: device descriptor read/8, error -71 [ 853.416733][T17532] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 853.447758][T17532] usb 4-1: device descriptor read/8, error -71 [ 853.575619][T17532] usb usb4-port1: unable to enumerate USB device [ 854.516731][T17532] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 854.667146][T17530] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 854.686829][T17532] usb 5-1: Using ep0 maxpacket: 8 [ 854.694670][T17532] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 854.726695][T17532] usb 5-1: config 179 has no interface number 0 [ 854.733044][T17532] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 854.777542][T17532] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 854.817283][T17532] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 854.844305][T17532] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 854.869802][T19953] syzkaller0: entered promiscuous mode [ 854.871265][T17532] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 854.875312][T19953] syzkaller0: entered allmulticast mode [ 854.914787][T17532] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 854.935777][T17532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.941378][T19956] ipvlan2: entered allmulticast mode [ 854.951270][T19956] dummy0: entered allmulticast mode [ 854.962321][T19946] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 855.264027][T17532] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input82 [ 855.385400][T19966] FAULT_INJECTION: forcing a failure. [ 855.385400][T19966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.432737][T19966] CPU: 0 UID: 0 PID: 19966 Comm: syz.5.4140 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.432767][T19966] Tainted: [L]=SOFTLOCKUP [ 855.432774][T19966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 855.432785][T19966] Call Trace: [ 855.432793][T19966] [ 855.432801][T19966] dump_stack_lvl+0xe8/0x150 [ 855.432830][T19966] should_fail_ex+0x412/0x560 [ 855.432859][T19966] _copy_from_user+0x2d/0xb0 [ 855.432887][T19966] ___sys_recvmsg+0x175/0x590 [ 855.432910][T19966] ? __lock_acquire+0x6b5/0x2cf0 [ 855.432936][T19966] ? __pfx____sys_recvmsg+0x10/0x10 [ 855.432991][T19966] do_recvmmsg+0x334/0x800 [ 855.433022][T19966] ? __pfx_do_recvmmsg+0x10/0x10 [ 855.433054][T19966] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 855.433093][T19966] __x64_sys_recvmmsg+0x198/0x250 [ 855.433119][T19966] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 855.433152][T19966] do_syscall_64+0x14d/0xf80 [ 855.433175][T19966] ? trace_irq_disable+0x3b/0x150 [ 855.433191][T19966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.433209][T19966] ? clear_bhb_loop+0x40/0x90 [ 855.433230][T19966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.433248][T19966] RIP: 0033:0x7f156e79c819 [ 855.433273][T19966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.433288][T19966] RSP: 002b:00007f156f6f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 855.433308][T19966] RAX: ffffffffffffffda RBX: 00007f156ea16090 RCX: 00007f156e79c819 [ 855.433322][T19966] RDX: 0400000000000300 RSI: 00002000000031c0 RDI: 0000000000000003 [ 855.433334][T19966] RBP: 00007f156f6f9090 R08: 0000000000000000 R09: 0000000000000000 [ 855.433345][T19966] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 855.433356][T19966] R13: 00007f156ea16128 R14: 00007f156ea16090 R15: 00007f156eb3fa48 [ 855.433385][T19966] [ 855.685649][T19946] netlink: 'syz.4.4134': attribute type 1 has an invalid length. [ 855.705044][T19946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 855.752108][ T7480] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.766006][ T7480] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.779008][ T7480] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.809048][ T7480] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.937951][T19946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.350802][T17530] usb 5-1: USB disconnect, device number 115 [ 857.356982][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 857.357014][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 857.770949][T20007] syzkaller0: entered promiscuous mode [ 857.819101][T20007] syzkaller0: entered allmulticast mode [ 858.130722][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4155'. [ 858.139873][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4155'. [ 858.706734][T17540] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 858.935551][T17540] usb 6-1: Using ep0 maxpacket: 32 [ 858.942735][T17540] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 858.953542][T17540] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 858.967661][T17540] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 859.014475][T17540] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 859.061143][T20029] usb usb8: usbfs: process 20029 (syz.4.4154) did not claim interface 0 before use [ 859.066768][T17540] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 859.090629][T17540] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 859.110530][T17540] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 859.120644][T17540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.141172][T17540] usb 6-1: config 0 descriptor?? [ 859.374130][T17540] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 859.447136][T17540] usb 6-1: USB disconnect, device number 53 [ 859.471801][T17540] usblp0: removed [ 859.896919][T17540] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 860.048188][T17540] usb 6-1: device descriptor read/64, error -71 [ 860.677444][T17540] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 860.936882][T17540] usb 6-1: device descriptor read/64, error -71 [ 861.217363][T17540] usb usb6-port1: attempt power cycle [ 861.696159][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 861.696177][ T29] audit: type=1326 audit(1774890075.295:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.5.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e79c819 code=0x7ffc0000 [ 861.794844][ T29] audit: type=1326 audit(1774890075.295:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.5.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e79c819 code=0x7ffc0000 [ 861.969698][T20074] netlink: 'syz.5.4171': attribute type 51 has an invalid length. [ 861.987301][ T29] audit: type=1326 audit(1774890075.295:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.5.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e79c819 code=0x7ffc0000 [ 862.110483][ T29] audit: type=1326 audit(1774890075.295:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.5.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f156e79c819 code=0x7ffc0000 [ 862.236741][ T29] audit: type=1326 audit(1774890075.295:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.5.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e79c819 code=0x7ffc0000 [ 862.360597][ T29] audit: type=1326 audit(1774890075.295:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.5.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e79c819 code=0x7ffc0000 [ 862.433366][ T29] audit: type=1326 audit(1774890075.295:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.5.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e79c819 code=0x7ffc0000 [ 862.532514][ T29] audit: type=1326 audit(1774890075.295:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.5.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e79c819 code=0x7ffc0000 [ 862.598663][ T29] audit: type=1326 audit(1774890075.295:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.5.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156e79c819 code=0x7ffc0000 [ 862.680920][T20084] bond0: entered promiscuous mode [ 862.686116][T20084] bond_slave_0: entered promiscuous mode [ 862.696760][ T29] audit: type=1326 audit(1774890075.295:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20068 comm="syz.5.4170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f156e79c819 code=0x7ffc0000 [ 862.878486][T20082] bond0: left promiscuous mode [ 862.883437][T20082] bond_slave_0: left promiscuous mode [ 863.026771][T17530] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 863.107978][T20098] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 863.150829][T20098] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 863.184026][T20098] syzkaller0: entered promiscuous mode [ 863.206792][T20098] syzkaller0: entered allmulticast mode [ 863.216884][T17530] usb 4-1: Using ep0 maxpacket: 32 [ 863.245553][T17530] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 863.262833][T20098] tipc: Enabled bearer , priority 0 [ 863.269810][T17530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.283803][T17530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.295260][T17530] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 863.326292][T20097] tipc: Resetting bearer [ 863.333584][T17530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.380681][T20097] tipc: Disabling bearer [ 863.417533][T20102] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 863.417533][T20102] program syz.4.4182 not setting count and/or reply_len properly [ 863.425755][T17530] usb 4-1: config 0 descriptor?? [ 863.806838][T17529] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 863.871379][T20118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4188'. [ 863.888153][T20118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4188'. [ 864.007077][T17529] usb 6-1: Using ep0 maxpacket: 32 [ 864.014814][T17529] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 864.023021][T17529] usb 6-1: config 0 has no interface number 0 [ 864.041563][T17529] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 864.053495][T17529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.081723][T17530] usbhid 4-1:0.0: can't add hid device: -71 [ 864.090361][T17530] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 864.117329][T17529] usb 6-1: Product: syz [ 864.121555][T17529] usb 6-1: Manufacturer: syz [ 864.126151][T17529] usb 6-1: SerialNumber: syz [ 864.139096][T17530] usb 4-1: USB disconnect, device number 125 [ 864.198185][T17529] usb 6-1: config 0 descriptor?? [ 864.212787][T17529] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 864.222259][T17529] usb 6-1: selecting invalid altsetting 1 [ 864.228766][T17529] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 864.278730][T17529] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 864.319863][T17529] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 864.329450][T17529] usb 6-1: media controller created [ 864.598938][T20109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.629621][T17529] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 864.712624][T20130] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4190'. [ 864.742506][T20109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.816603][T20109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.893106][T20109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.926088][T20109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.951013][T20109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.966557][T20109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.976852][T17540] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 864.979041][T20109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.078626][T20109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.101917][T20109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.111252][T20135] syzkaller0: entered promiscuous mode [ 865.128497][T20135] syzkaller0: entered allmulticast mode [ 865.129761][T20136] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 865.166918][T17540] usb 5-1: Using ep0 maxpacket: 8 [ 865.179107][T17540] usb 5-1: config 16 has an invalid descriptor of length 142, skipping remainder of the config [ 865.209081][T17540] usb 5-1: config 16 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 865.230403][T17540] usb 5-1: config 16 interface 0 has no altsetting 0 [ 865.237904][T20138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4191'. [ 865.239961][T17540] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 865.259317][T17540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.481466][T17529] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 866.137948][T17529] usb 6-1: USB disconnect, device number 57 [ 866.517989][T20158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4199'. [ 866.615054][ T7496] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.624725][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4199'. [ 866.634008][ T7496] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.661627][ T7496] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.782350][ T7496] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.893493][T20173] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4203'. [ 867.060952][T20176] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4204'. [ 867.378204][T20184] syzkaller0: entered promiscuous mode [ 867.384831][T20184] syzkaller0: entered allmulticast mode [ 867.516918][T20186] fuse: Unknown parameter '' [ 867.567762][ T5844] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 867.729893][ T5844] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 867.758605][ T5844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 867.779647][ T5844] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 867.808596][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 867.953823][ T5844] usb 4-1: Product: syz [ 867.958990][ T5844] usb 4-1: Manufacturer: syz [ 867.963761][ T5844] usb 4-1: SerialNumber: syz [ 867.973178][ T5844] usb 4-1: config 0 descriptor?? [ 868.059625][T17529] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 868.088135][ T5844] usb 4-1: selecting invalid altsetting 0 [ 868.416723][T20198] ipvlan3: entered allmulticast mode [ 868.432383][T20198] dummy0: entered allmulticast mode [ 868.612652][T17540] usb 5-1: string descriptor 0 read error: -71 [ 868.679039][T17540] usb 5-1: USB disconnect, device number 116 [ 868.782503][ T5844] usb 4-1: USB disconnect, device number 126 [ 868.897015][T17530] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 869.078404][T17530] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 869.089647][T17530] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.100330][T17530] usb 1-1: New USB device found, idVendor=04f3, idProduct=0001, bcdDevice= 0.00 [ 869.111426][T17530] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.126139][T17530] usb 1-1: config 0 descriptor?? [ 869.539007][T17530] hid (null): unknown global tag 0xe [ 869.546904][T17530] hid-generic 0003:04F3:0001.002D: unknown main item tag 0x0 [ 869.554334][T17530] hid-generic 0003:04F3:0001.002D: unknown global tag 0xe [ 869.561588][T17530] hid-generic 0003:04F3:0001.002D: item 0 0 1 14 parsing failed [ 869.571412][T17530] hid-generic 0003:04F3:0001.002D: probe with driver hid-generic failed with error -22 [ 869.745086][ T5844] usb 1-1: USB disconnect, device number 6 [ 870.101051][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.107461][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.195419][T20233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 870.537009][ T5844] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 870.705136][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 870.769983][ T5844] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 870.798157][ T5844] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 870.836560][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.873168][ T5844] usb 1-1: config 0 descriptor?? [ 870.970666][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 870.970724][ T29] audit: type=1804 audit(1774890084.575:1001): pid=20245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4227" name="/newroot/236/file0" dev="fuse" ino=1 res=1 errno=0 [ 871.815579][ T5844] Bluetooth: Can't get version to change to load ram patch err [ 871.825611][ T5844] Bluetooth: Loading patch file failed [ 871.838361][ T5844] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 872.085490][T20262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4231'. [ 872.122983][ T5844] usb 1-1: USB disconnect, device number 7 [ 872.230782][T20266] fuse: Bad value for 'fd' [ 872.472987][T20269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4234'. [ 872.554946][T20269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4234'. [ 872.572629][T20273] tipc: Cannot configure node identity twice [ 872.745491][T20278] FAULT_INJECTION: forcing a failure. [ 872.745491][T20278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.773737][T20278] CPU: 0 UID: 0 PID: 20278 Comm: syz.0.4238 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.773766][T20278] Tainted: [L]=SOFTLOCKUP [ 872.773773][T20278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 872.773783][T20278] Call Trace: [ 872.773791][T20278] [ 872.773798][T20278] dump_stack_lvl+0xe8/0x150 [ 872.773829][T20278] should_fail_ex+0x412/0x560 [ 872.773858][T20278] _copy_to_user+0x31/0xb0 [ 872.773881][T20278] simple_read_from_buffer+0xe1/0x170 [ 872.773911][T20278] proc_fail_nth_read+0x1bb/0x230 [ 872.773938][T20278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 872.773964][T20278] ? rw_verify_area+0x2a6/0x4d0 [ 872.773980][T20278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 872.774005][T20278] vfs_read+0x20c/0xa70 [ 872.774022][T20278] ? fdget_pos+0x246/0x320 [ 872.774042][T20278] ? __pfx___mutex_lock+0x10/0x10 [ 872.774064][T20278] ? __pfx_vfs_read+0x10/0x10 [ 872.774083][T20278] ? __fget_files+0x2a/0x420 [ 872.774100][T20278] ? __fget_files+0x3a0/0x420 [ 872.774113][T20278] ? __fget_files+0x2a/0x420 [ 872.774135][T20278] ksys_read+0x150/0x270 [ 872.774156][T20278] ? __pfx_ksys_read+0x10/0x10 [ 872.774171][T20278] ? __pfx_cec_ioctl+0x10/0x10 [ 872.774200][T20278] do_syscall_64+0x14d/0xf80 [ 872.774222][T20278] ? trace_irq_disable+0x3b/0x150 [ 872.774237][T20278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.774256][T20278] ? clear_bhb_loop+0x40/0x90 [ 872.774275][T20278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.774292][T20278] RIP: 0033:0x7f4c8595d04e [ 872.774309][T20278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 872.774324][T20278] RSP: 002b:00007f4c86938fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 872.774342][T20278] RAX: ffffffffffffffda RBX: 00007f4c869396c0 RCX: 00007f4c8595d04e [ 872.774355][T20278] RDX: 000000000000000f RSI: 00007f4c869390a0 RDI: 0000000000000004 [ 872.774366][T20278] RBP: 00007f4c86939090 R08: 0000000000000000 R09: 0000000000000000 [ 872.774376][T20278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.774387][T20278] R13: 00007f4c85c16038 R14: 00007f4c85c15fa0 R15: 00007f4c85d3fa48 [ 872.774414][T20278] [ 873.006405][T20280] tipc: Enabling of bearer rejected, failed to enable media [ 873.015833][T20280] syzkaller0: entered promiscuous mode [ 873.021358][T20280] syzkaller0: entered allmulticast mode [ 873.107179][ T5844] usb 5-1: new full-speed USB device number 117 using dummy_hcd [ 873.327964][ T5844] usb 5-1: device descriptor read/64, error -71 [ 873.576754][ T5844] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 873.658956][T17540] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 873.706813][ T5844] usb 5-1: device descriptor read/64, error -71 [ 873.733828][T20293] usb usb8: usbfs: process 20293 (syz.5.4237) did not claim interface 0 before use [ 873.838795][T17540] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.850003][T17540] usb 4-1: config 0 has no interfaces? [ 873.855602][T17540] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 873.867271][ T5844] usb usb5-port1: attempt power cycle [ 873.876022][T17540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.987374][T17540] usb 4-1: config 0 descriptor?? [ 874.208656][T17532] usb 4-1: USB disconnect, device number 127 [ 874.246802][ T5844] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 874.247035][T17529] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 874.292530][ T5844] usb 5-1: device descriptor read/8, error -71 [ 874.427377][T17529] usb 3-1: Using ep0 maxpacket: 8 [ 874.436988][T17529] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 874.448290][T17529] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 874.461931][T17529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.480757][T17529] usb 3-1: config 0 descriptor?? [ 874.536761][ T5844] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 874.567494][ T5844] usb 5-1: device descriptor read/8, error -71 [ 874.678213][ T5844] usb usb5-port1: unable to enumerate USB device [ 874.698796][T17529] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 874.903676][T17529] usb 3-1: USB disconnect, device number 110 [ 874.937113][ T5844] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 875.161292][ T5844] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 875.170606][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.184301][ T5844] usb 6-1: config 0 descriptor?? [ 875.402888][ T5844] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 875.619815][T20313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4249'. [ 875.641640][ T5844] [drm:udl_init] *ERROR* Selecting channel failed [ 875.772397][ T5844] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 875.777928][T20313] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4249'. [ 875.786696][ T5844] [drm] Initialized udl on minor 2 [ 875.876900][ T5844] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 875.901406][ T5844] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 875.923417][T17540] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 875.932378][T17540] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 875.947072][T17438] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 875.982705][T17438] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.021660][ T5844] usb 6-1: USB disconnect, device number 58 [ 876.030175][T17438] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.059572][T17438] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 876.388147][T20326] tipc: Enabling of bearer rejected, failed to enable media [ 876.417840][T20326] syzkaller0: entered promiscuous mode [ 876.433984][T20326] syzkaller0: entered allmulticast mode [ 876.603562][T20329] Cannot find set identified by id 0 to match [ 876.606823][ T5844] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 876.787037][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 876.795240][ T5844] usb 6-1: unable to get BOS descriptor or descriptor too short [ 876.806438][ T5844] usb 6-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 876.815995][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.824410][ T5844] usb 6-1: Product: syz [ 876.828763][ T5844] usb 6-1: Manufacturer: syz [ 876.833615][ T5844] usb 6-1: SerialNumber: syz [ 877.049008][T20323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.059865][T20323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.088299][ T5844] usb 6-1: cannot find UAC_HEADER [ 877.185202][ T5844] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 877.197927][ T5844] usb 6-1: USB disconnect, device number 59 [ 877.245522][ T9561] udevd[9561]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.425590][T20342] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 877.425590][T20342] program syz.2.4258 not setting count and/or reply_len properly [ 877.599264][T20351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4261'. [ 877.616099][ T7480] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.628442][T20351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4261'. [ 877.646840][ T7480] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.662791][ T7480] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 877.675356][T20353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.683410][ T7480] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.386764][ T5844] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 878.548659][T20379] usb usb8: usbfs: process 20379 (syz.4.4265) did not claim interface 0 before use [ 878.568521][T17540] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 878.596866][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 878.638949][ T5844] usb 4-1: config 6 has an invalid interface number: 132 but max is 0 [ 878.649459][ T5844] usb 4-1: config 6 has no interface number 0 [ 878.665127][ T5844] usb 4-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 248, changing to 7 [ 878.741928][ T5844] usb 4-1: config 6 interface 132 altsetting 6 endpoint 0x4 has invalid maxpacket 1040, setting to 64 [ 878.782851][ T5844] usb 4-1: config 6 interface 132 has no altsetting 0 [ 878.811491][ T5844] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 878.820787][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.840382][ T5844] usb 4-1: Product: syz [ 878.846760][T17540] usb 3-1: Using ep0 maxpacket: 8 [ 878.854229][ T5844] usb 4-1: Manufacturer: syz [ 878.859811][ T5844] usb 4-1: SerialNumber: syz [ 878.865481][T17540] usb 3-1: unable to get BOS descriptor or descriptor too short [ 878.884237][T17540] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 878.894262][T17540] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 878.932627][T17540] usb 3-1: config 4 has no interface number 0 [ 878.952621][T17540] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 878.977853][T17540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.040753][T17540] usb 3-1: Product: 븤뭖çŒá³¾æ¶˜ë…³å§‹ì¥æ‡¿ã‘¡åƒ®â¹¥éª¬é¶‹Ûšá™Šá«¢ì ¥é„뚥ã²ãš¬ë‡â­‡å¨šç··â—¡æ¶¬ä鮫ᕉ蓃㇫彗꒓縬ꭜâ‘⅛൴쒱綗ﮭæ½ê•§ç«ŽÂ‰ê®»è“ˆè³±ä‚­æ¬ªè ¢é£î¢¼á·’ǀ먟ሖ䞱 [ 879.066876][T17540] usb 3-1: Manufacturer: Ð… [ 879.071445][T17540] usb 3-1: SerialNumber: à  [ 879.141953][ T5844] usbtest 4-1:6.132: couldn't get endpoints, -22 [ 879.198086][ T5844] usbtest 4-1:6.132: probe with driver usbtest failed with error -22 [ 879.216121][ T5844] usb 4-1: USB disconnect, device number 2 [ 879.324966][T17540] uvcvideo 3-1:4.147: Found UVC 0.02 device 븤뭖çŒá³¾æ¶˜ë…³å§‹ì¥æ‡¿ã‘¡åƒ®â¹¥éª¬é¶‹Ûšá™Šá«¢ì ¥é„뚥ã²ãš¬ë‡â­‡å¨šç··â—¡æ¶¬ä鮫ᕉ蓃㇫彗꒓縬ꭜâ‘⅛൴쒱綗ﮭæ½ê•§ç«ŽÂ‰ê®»è“ˆè³±ä‚­æ¬ªè ¢é£î¢¼á·’ǀ먟ሖ䞱 (04f2:b746) [ 879.351165][T17540] uvcvideo 3-1:4.147: No valid video chain found. [ 879.369208][T17540] usb 3-1: USB disconnect, device number 111 [ 879.491461][T20390] syz_tun: entered allmulticast mode [ 879.860957][T17540] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 880.026743][T17540] usb 1-1: Using ep0 maxpacket: 8 [ 880.037176][T17540] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 880.049327][T17540] usb 1-1: config 0 has no interface number 0 [ 880.065401][T17540] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 880.077090][T17540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.087221][T17540] usb 1-1: Product: syz [ 880.093742][T17540] usb 1-1: Manufacturer: syz [ 880.107470][T17540] usb 1-1: SerialNumber: syz [ 880.127071][T20405] trusted_key: encrypted_key: insufficient parameters specified [ 880.136165][T17540] usb 1-1: config 0 descriptor?? [ 880.227439][ T5844] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 880.363584][T20390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4272'. [ 880.381758][T17540] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22 [ 880.393943][ T5844] usb 5-1: Using ep0 maxpacket: 16 [ 880.414487][ T5844] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 880.431770][T17540] usb 1-1: USB disconnect, device number 8 [ 880.442364][ T5844] usb 5-1: config 0 has no interface number 0 [ 880.461602][ T5844] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 880.485114][ T5844] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 880.522461][ T5844] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 880.542657][ T5844] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 880.568410][ T5844] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 880.584798][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.603390][ T5844] usb 5-1: Product: syz [ 880.611909][ T5844] usb 5-1: Manufacturer: syz [ 880.622225][ T5844] usb 5-1: SerialNumber: syz [ 880.635671][ T5844] usb 5-1: config 0 descriptor?? [ 880.649733][T20402] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 880.696780][T17529] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 880.846771][T17529] usb 6-1: Using ep0 maxpacket: 32 [ 880.855511][T17529] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 880.864788][T17529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.873193][T17529] usb 6-1: Product: syz [ 880.877887][T17529] usb 6-1: Manufacturer: syz [ 880.883270][T17529] usb 6-1: SerialNumber: syz [ 880.894739][T17529] usb 6-1: config 0 descriptor?? [ 880.907524][T17529] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 881.740638][T17529] gspca_ov534_9: reg_w failed -71 [ 882.047095][T17529] gspca_ov534_9: Unknown sensor 0000 [ 882.047193][T17529] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 882.105316][T17529] usb 6-1: USB disconnect, device number 60 [ 882.786081][T20466] snd_dummy snd_dummy.0: control 0:3:0:syz0:0 is already present [ 883.046742][T17529] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 883.221176][T17529] usb 1-1: unable to get BOS descriptor or descriptor too short [ 883.233257][T17529] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 883.243616][T17529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.423669][T17529] usb 1-1: Product: syz [ 883.431721][T17529] usb 1-1: Manufacturer: syz [ 883.436431][T17529] usb 1-1: SerialNumber: syz [ 883.476804][ T29] audit: type=1326 audit(1774890097.065:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20467 comm="syz.5.4292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f156e79c819 code=0x0 [ 883.575606][T20473] netem: incorrect gi model size [ 883.581158][T20473] netem: change failed [ 883.681774][ T5844] qcserial 5-1:0.49: Qualcomm USB modem converter detected [ 883.736884][ T5844] usb 5-1: USB disconnect, device number 121 [ 883.745828][ T5844] qcserial 5-1:0.49: device disconnected [ 883.756074][T17529] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 883.773376][T17529] usb 1-1: unit 13 not found! [ 883.881676][T17529] usb 1-1: USB disconnect, device number 9 [ 883.953384][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.121666][T20482] netlink: 'syz.3.4296': attribute type 1 has an invalid length. [ 884.163151][T20482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 884.185042][T20482] bond1: (slave geneve2): making interface the new active one [ 884.194414][T20482] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 884.212951][ T7492] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.240312][ T7492] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.264318][ T7492] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.278990][T20488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 884.299607][ T7492] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.412306][T20494] FAULT_INJECTION: forcing a failure. [ 884.412306][T20494] name failslab, interval 1, probability 0, space 0, times 0 [ 884.425238][T20494] CPU: 0 UID: 0 PID: 20494 Comm: syz.0.4299 Tainted: G L syzkaller #0 PREEMPT(full) [ 884.425268][T20494] Tainted: [L]=SOFTLOCKUP [ 884.425275][T20494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 884.425286][T20494] Call Trace: [ 884.425295][T20494] [ 884.425303][T20494] dump_stack_lvl+0xe8/0x150 [ 884.425333][T20494] should_fail_ex+0x412/0x560 [ 884.425365][T20494] should_failslab+0xa8/0x100 [ 884.425403][T20494] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 884.425426][T20494] ? kobject_set_name_vargs+0x61/0x110 [ 884.425456][T20494] kvasprintf+0xeb/0x1a0 [ 884.425481][T20494] ? __pfx_kvasprintf+0x10/0x10 [ 884.425500][T20494] ? rcu_is_watching+0x15/0xb0 [ 884.425525][T20494] ? kfree+0x4d/0x630 [ 884.425542][T20494] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 884.425567][T20494] ? kvasprintf_const+0xe1/0x240 [ 884.425591][T20494] kobject_set_name_vargs+0x61/0x110 [ 884.425618][T20494] kobject_init_and_add+0xee/0x1a0 [ 884.425647][T20494] ? __pfx_kobject_init_and_add+0x10/0x10 [ 884.425673][T20494] ? __kmalloc_cache_noprof+0x31c/0x660 [ 884.425697][T20494] ? __raw_spin_lock_init+0x45/0x100 [ 884.425718][T20494] swnode_register+0x369/0x510 [ 884.425747][T20494] fwnode_create_software_node+0x194/0x1f0 [ 884.425773][T20494] device_create_managed_software_node+0xe4/0x1f0 [ 884.425799][T20494] iommufd_test+0x3567/0x5d10 [ 884.425833][T20494] ? __pfx_iommufd_test+0x10/0x10 [ 884.425856][T20494] ? __lock_acquire+0x6b5/0x2cf0 [ 884.425886][T20494] ? tomoyo_path_number_perm+0x219/0x630 [ 884.425911][T20494] ? tomoyo_path_number_perm+0x219/0x630 [ 884.425938][T20494] ? do_vfs_ioctl+0x1166/0x1530 [ 884.425983][T20494] iommufd_fops_ioctl+0x4b5/0x5d0 [ 884.426007][T20494] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 884.426030][T20494] ? __fget_files+0x2a/0x420 [ 884.426051][T20494] ? __fget_files+0x2a/0x420 [ 884.426070][T20494] ? bpf_lsm_file_ioctl+0x9/0x20 [ 884.426094][T20494] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 884.426113][T20494] __se_sys_ioctl+0xfc/0x170 [ 884.426137][T20494] do_syscall_64+0x14d/0xf80 [ 884.426159][T20494] ? trace_irq_disable+0x3b/0x150 [ 884.426175][T20494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.426194][T20494] ? clear_bhb_loop+0x40/0x90 [ 884.426215][T20494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.426234][T20494] RIP: 0033:0x7f4c8599c819 [ 884.426251][T20494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.426267][T20494] RSP: 002b:00007f4c86939028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.426288][T20494] RAX: ffffffffffffffda RBX: 00007f4c85c15fa0 RCX: 00007f4c8599c819 [ 884.426302][T20494] RDX: 0000200000000d40 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 884.426315][T20494] RBP: 00007f4c86939090 R08: 0000000000000000 R09: 0000000000000000 [ 884.426327][T20494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.426338][T20494] R13: 00007f4c85c16038 R14: 00007f4c85c15fa0 R15: 00007f4c85d3fa48 [ 884.426366][T20494] [ 884.426381][T20494] kobject: can not set name properly! [ 885.018535][T20494] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12 [ 885.046793][T17529] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 885.236852][T20512] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 885.268724][T17529] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.383272][ T7494] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.402846][ T7494] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.417794][ T7494] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.465103][ T7494] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 885.497098][T17529] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 885.515116][T17529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.523641][T17529] usb 3-1: Product: syz [ 885.536216][T17529] usb 3-1: Manufacturer: syz [ 885.544060][T17529] usb 3-1: SerialNumber: syz [ 885.551381][T17529] usb 3-1: config 0 descriptor?? [ 885.558402][T17529] usb 3-1: bad CDC descriptors [ 885.563661][T17529] usb 3-1: unsupported MDLM descriptors [ 885.607949][T20520] tipc: Can't bind to reserved service type 0 [ 886.986794][T17529] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 887.078269][T20532] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4309'. [ 887.087560][T20532] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4309'. [ 887.099888][T20532] Cannot find del_set index 1 as target [ 887.148458][T17529] usb 5-1: config 0 has no interfaces? [ 887.156971][T17529] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 887.166077][T17529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.175990][T17529] usb 5-1: Product: syz [ 887.181003][T17529] usb 5-1: Manufacturer: syz [ 887.192077][T17529] usb 5-1: SerialNumber: syz [ 887.218564][T17529] usb 5-1: config 0 descriptor?? [ 887.230972][ T5844] usb 3-1: USB disconnect, device number 112 [ 887.502488][T20538] netlink: 'syz.2.4310': attribute type 1 has an invalid length. [ 888.255414][T20555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.292869][T20555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.796756][ T5844] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 888.981521][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 889.085996][ T5844] usb 3-1: config 0 has no interfaces? [ 889.116556][ T5844] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 889.266828][ T5844] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 889.274854][ T5844] usb 3-1: Manufacturer: syz [ 889.338939][T17447] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.356798][T17447] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.370390][T17447] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.381825][T17447] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 889.382819][ T5844] usb 3-1: config 0 descriptor?? [ 889.509209][T20582] vlan2: entered promiscuous mode [ 889.514549][T20582] batadv0: entered promiscuous mode [ 890.081716][T20588] syzkaller0: entered promiscuous mode [ 890.091147][T20588] syzkaller0: entered allmulticast mode [ 890.596444][T17529] usb 5-1: USB disconnect, device number 122 [ 891.509822][ T5844] usb 3-1: USB disconnect, device number 113 [ 891.734223][ T29] audit: type=1326 audit(1774890105.335:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 891.762484][ T29] audit: type=1326 audit(1774890105.365:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 891.786822][ T29] audit: type=1326 audit(1774890105.365:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 891.810184][ T29] audit: type=1326 audit(1774890105.365:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 891.841900][ T29] audit: type=1326 audit(1774890105.365:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 891.865437][ T29] audit: type=1326 audit(1774890105.365:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 891.888572][ T29] audit: type=1326 audit(1774890105.365:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 891.911662][ T29] audit: type=1326 audit(1774890105.365:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 891.946233][ T29] audit: type=1326 audit(1774890105.435:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 891.970242][ T29] audit: type=1326 audit(1774890105.435:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20605 comm="syz.2.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 892.575527][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4330'. [ 894.046927][T17532] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 894.210663][T17532] usb 6-1: unable to get BOS descriptor or descriptor too short [ 894.225164][T17532] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 894.234357][T17532] usb 6-1: can't read configurations, error -71 [ 894.685251][T20649] FAULT_INJECTION: forcing a failure. [ 894.685251][T20649] name failslab, interval 1, probability 0, space 0, times 0 [ 894.685318][T20649] CPU: 1 UID: 0 PID: 20649 Comm: syz.4.4340 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.685348][T20649] Tainted: [L]=SOFTLOCKUP [ 894.685355][T20649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 894.685368][T20649] Call Trace: [ 894.685377][T20649] [ 894.685386][T20649] dump_stack_lvl+0xe8/0x150 [ 894.685426][T20649] should_fail_ex+0x412/0x560 [ 894.685456][T20649] should_failslab+0xa8/0x100 [ 894.685480][T20649] __kmalloc_noprof+0xe8/0x760 [ 894.685497][T20649] ? io_complete_rw+0x299/0x370 [ 894.685519][T20649] ? io_cache_alloc_new+0x40/0x100 [ 894.685541][T20649] io_cache_alloc_new+0x40/0x100 [ 894.685560][T20649] __io_prep_rw+0x2bd/0xed0 [ 894.685587][T20649] ? __pfx___io_prep_rw+0x10/0x10 [ 894.685609][T20649] ? __pfx_io_write+0x10/0x10 [ 894.685635][T20649] io_prep_rwv+0x8e/0x440 [ 894.685654][T20649] ? __io_issue_sqe+0x1f7/0x4b0 [ 894.685674][T20649] ? __pfx_io_prep_rwv+0x10/0x10 [ 894.685696][T20649] ? io_issue_sqe+0x40f/0xf90 [ 894.685716][T20649] ? rcu_is_watching+0x15/0xb0 [ 894.685747][T20649] io_submit_sqes+0xb6d/0x2400 [ 894.685797][T20649] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 894.685821][T20649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 894.685851][T20649] ? __fget_files+0x3a0/0x420 [ 894.685872][T20649] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 894.685894][T20649] ? fput+0xa0/0xd0 [ 894.685920][T20649] ? ksys_write+0x242/0x270 [ 894.685944][T20649] ? __pfx_ksys_write+0x10/0x10 [ 894.685969][T20649] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 894.685993][T20649] do_syscall_64+0x14d/0xf80 [ 894.686015][T20649] ? trace_irq_disable+0x3b/0x150 [ 894.686031][T20649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.686050][T20649] ? clear_bhb_loop+0x40/0x90 [ 894.686072][T20649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.686090][T20649] RIP: 0033:0x7f938c99c819 [ 894.686108][T20649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.686125][T20649] RSP: 002b:00007f938d777028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 894.686145][T20649] RAX: ffffffffffffffda RBX: 00007f938cc15fa0 RCX: 00007f938c99c819 [ 894.686158][T20649] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 894.686170][T20649] RBP: 00007f938d777090 R08: 0000000000000000 R09: 0000000000000000 [ 894.686181][T20649] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 894.686192][T20649] R13: 00007f938cc16038 R14: 00007f938cc15fa0 R15: 00007f938cd3fa48 [ 894.686221][T20649] [ 895.526775][ T5844] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 895.679184][ T5844] usb 1-1: device descriptor read/64, error -71 [ 895.761404][T20668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 895.878159][T20672] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4346'. [ 895.916786][ T5844] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 895.953082][T20677] netlink: 324 bytes leftover after parsing attributes in process `syz.3.4346'. [ 896.041885][T20672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4346'. [ 896.056944][ T5844] usb 1-1: device descriptor read/64, error -71 [ 896.167225][ T5844] usb usb1-port1: attempt power cycle [ 896.256742][ T10] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 896.386904][ T10] usb 5-1: device descriptor read/64, error -71 [ 896.506777][ T5844] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 896.527232][ T5844] usb 1-1: device descriptor read/8, error -71 [ 896.628820][ T10] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 896.773222][ T5844] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 896.780961][ T10] usb 5-1: device descriptor read/64, error -71 [ 896.814327][ T5844] usb 1-1: device descriptor read/8, error -71 [ 896.897843][ T10] usb usb5-port1: attempt power cycle [ 896.937920][ T5844] usb usb1-port1: unable to enumerate USB device [ 897.136839][T20690] trusted_key: encrypted_key: insufficient parameters specified [ 897.491616][ T10] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 897.577830][ T10] usb 5-1: device descriptor read/8, error -71 [ 897.850190][ T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 897.887400][ T10] usb 5-1: device descriptor read/8, error -71 [ 897.998041][ T10] usb usb5-port1: unable to enumerate USB device [ 898.969182][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 898.969194][ T29] audit: type=1326 audit(1774890112.565:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 899.101737][ T29] audit: type=1326 audit(1774890112.565:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 899.162996][T20715] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4356'. [ 899.193297][ T29] audit: type=1326 audit(1774890112.565:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 899.242135][ T29] audit: type=1326 audit(1774890112.565:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 899.304942][ T29] audit: type=1326 audit(1774890112.565:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 899.402431][ T29] audit: type=1326 audit(1774890112.565:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 899.467679][ T29] audit: type=1326 audit(1774890112.565:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 899.509151][T20719] loop2: detected capacity change from 0 to 7 [ 899.524140][ T29] audit: type=1326 audit(1774890112.565:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 899.572812][ T29] audit: type=1326 audit(1774890112.565:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 899.596463][ T29] audit: type=1326 audit(1774890112.575:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20707 comm="syz.2.4355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc059c819 code=0x7ffc0000 [ 899.606790][T20719] Dev loop2: unable to read RDB block 7 [ 899.667675][T20719] loop2: AHDI p1 p2 p3 [ 899.671885][T20719] loop2: partition table partially beyond EOD, truncated [ 899.695889][T20719] loop2: p1 start 1818582900 is beyond EOD, truncated [ 899.715747][T20719] loop2: p3 start 335544320 is beyond EOD, truncated [ 899.789520][ T5193] Dev loop2: unable to read RDB block 7 [ 899.795881][ T5193] loop2: AHDI p1 p2 p3 [ 899.812104][ T5193] loop2: partition table partially beyond EOD, truncated [ 899.857769][ T5193] loop2: p1 start 1818582900 is beyond EOD, truncated [ 899.872683][ T5193] loop2: p3 start 335544320 is beyond EOD, truncated [ 900.458818][T20741] tipc: Failed to remove unknown binding: 66,1,1/0:941226964/941226966 [ 900.477318][T20741] tipc: Failed to remove unknown binding: 66,1,1/0:941226964/941226966 [ 900.627252][ T10] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 900.792599][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 900.811578][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 900.841749][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.866301][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.889158][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 900.973931][T17532] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 901.021745][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 901.031497][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 901.042697][ T10] usb 5-1: SerialNumber: syz [ 901.108167][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 901.117753][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 901.161277][T20752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4368'. [ 901.179354][ T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 901.179400][T20751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4369'. [ 901.205670][T17532] usb 3-1: Using ep0 maxpacket: 16 [ 901.220752][T17532] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 901.243887][T17532] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 901.262665][T17532] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 901.290652][T17532] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 901.342238][T17532] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 901.360158][T17532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.378439][T17532] usb 3-1: Product: syz [ 901.388536][T17532] usb 3-1: Manufacturer: syz [ 901.408764][T17532] usb 3-1: SerialNumber: syz [ 901.447088][T17529] usb 5-1: USB disconnect, device number 127 [ 901.640946][T17532] usb 3-1: 0:2 : does not exist [ 901.652547][T17532] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 901.716764][T17529] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 902.016733][T17529] usb 4-1: Using ep0 maxpacket: 8 [ 902.032589][T17529] usb 4-1: config 0 has an invalid interface number: 187 but max is 0 [ 902.053720][T17529] usb 4-1: config 0 has no interface number 0 [ 902.064948][T17532] usb 3-1: USB disconnect, device number 114 [ 902.081442][T17529] usb 4-1: config 0 interface 187 has no altsetting 0 [ 902.114307][T17529] usb 4-1: New USB device found, idVendor=c942, idProduct=2c0f, bcdDevice=47.09 [ 902.159998][T17529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.219769][T17529] usb 4-1: config 0 descriptor?? [ 902.336331][T20765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.352115][T20765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.429498][T17529] usb 4-1: string descriptor 0 read error: -71 [ 902.446624][T17529] usb-storage 4-1:0.187: USB Mass Storage device detected [ 902.521804][T20771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4375'. [ 902.542552][T17529] usb 4-1: USB disconnect, device number 3 [ 902.567444][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 902.658754][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4377'. [ 902.670473][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4377'. [ 902.769705][ T10] usb 1-1: config 0 has no interfaces? [ 902.775773][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 902.785854][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.819642][ T10] usb 1-1: config 0 descriptor?? [ 903.042897][T20765] kvm: kvm [20764]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 903.053465][T20765] kvm: kvm [20764]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 903.105814][T20781] syzkaller0: entered promiscuous mode [ 903.119112][T20781] syzkaller0: entered allmulticast mode [ 903.157251][ T10] usb 1-1: USB disconnect, device number 14 [ 903.663647][T20802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4385'. [ 903.849925][T20808] FAULT_INJECTION: forcing a failure. [ 903.849925][T20808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.869354][T20808] CPU: 1 UID: 0 PID: 20808 Comm: syz.2.4387 Tainted: G L syzkaller #0 PREEMPT(full) [ 903.869386][T20808] Tainted: [L]=SOFTLOCKUP [ 903.869392][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 903.869404][T20808] Call Trace: [ 903.869412][T20808] [ 903.869420][T20808] dump_stack_lvl+0xe8/0x150 [ 903.869447][T20808] should_fail_ex+0x412/0x560 [ 903.869471][T20808] _copy_from_user+0x2d/0xb0 [ 903.869489][T20808] kvm_vm_ioctl+0x348/0xd50 [ 903.869517][T20808] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 903.869548][T20808] ? kasan_quarantine_put+0xbb/0x1f0 [ 903.869570][T20808] ? tomoyo_path_number_perm+0x219/0x630 [ 903.869589][T20808] ? tomoyo_path_number_perm+0x219/0x630 [ 903.869610][T20808] ? do_vfs_ioctl+0x1166/0x1530 [ 903.869628][T20808] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 903.869646][T20808] ? __pfx___schedule+0x10/0x10 [ 903.869685][T20808] ? __se_sys_ioctl+0x2d/0x170 [ 903.869704][T20808] ? bpf_lsm_file_ioctl+0x9/0x20 [ 903.869722][T20808] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 903.869740][T20808] __se_sys_ioctl+0xfc/0x170 [ 903.869758][T20808] do_syscall_64+0x14d/0xf80 [ 903.869776][T20808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.869790][T20808] ? clear_bhb_loop+0x40/0x90 [ 903.869806][T20808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.869820][T20808] RIP: 0033:0x7fddc059c819 [ 903.869834][T20808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.869846][T20808] RSP: 002b:00007fddc137d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 903.869861][T20808] RAX: ffffffffffffffda RBX: 00007fddc0815fa0 RCX: 00007fddc059c819 [ 903.869871][T20808] RDX: 0000200000000300 RSI: 000000004008ae6a RDI: 000000000000000b [ 903.869881][T20808] RBP: 00007fddc137d090 R08: 0000000000000000 R09: 0000000000000000 [ 903.869889][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.869898][T20808] R13: 00007fddc0816038 R14: 00007fddc0815fa0 R15: 00007fddc093fa48 [ 903.869919][T20808] [ 904.297180][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 904.385451][ T5844] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 904.407825][T20818] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4391'. [ 904.434212][T20818] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4391'. [ 904.434232][ T7480] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.458677][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 904.467630][ T10] usb 3-1: config index 0 descriptor too short (expected 37359, got 202) [ 904.474201][ T7480] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.485126][ T10] usb 3-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 904.503834][ T10] usb 3-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 904.515213][ T7480] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.533446][ T7480] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.535094][ T10] usb 3-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 904.553217][ T5844] usb 1-1: config 6 has an invalid interface number: 49 but max is 0 [ 904.561652][ T5844] usb 1-1: config 6 has an invalid descriptor of length 101, skipping remainder of the config [ 904.582870][ T5844] usb 1-1: config 6 has no interface number 0 [ 904.644705][ T5844] usb 1-1: too many endpoints for config 6 interface 49 altsetting 50: 56, using maximum allowed: 30 [ 904.663223][ T5844] usb 1-1: config 6 interface 49 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 56 [ 904.679198][ T5844] usb 1-1: config 6 interface 49 has no altsetting 0 [ 904.690032][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 904.699719][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.708347][ T10] usb 3-1: Product: syz [ 904.712550][ T10] usb 3-1: Manufacturer: syz [ 904.717799][ T10] usb 3-1: SerialNumber: syz [ 904.838252][ T5844] usb 1-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 904.848143][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.962331][ T10] usb 3-1: 0:2 : does not exist [ 904.988356][ T10] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 905.012136][ T5844] usb 1-1: Product: syz [ 905.029879][ T5844] usb 1-1: Manufacturer: syz [ 905.056119][ T5844] usb 1-1: SerialNumber: syz [ 905.103358][ T10] usb 3-1: USB disconnect, device number 115 [ 905.164004][ T9561] udevd[9561]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.437073][T17539] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 905.587390][T17539] usb 6-1: Using ep0 maxpacket: 32 [ 905.606150][T17539] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 905.634976][T17539] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.661134][T17539] usb 6-1: config 0 has no interface number 0 [ 905.715171][T17539] usb 6-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 905.740774][T17539] usb 6-1: config 0 interface 196 has no altsetting 0 [ 905.770882][T17539] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 905.785052][T17539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.795386][T17539] usb 6-1: Product: syz [ 905.802889][T17539] usb 6-1: Manufacturer: syz [ 905.808812][T17539] usb 6-1: SerialNumber: syz [ 905.858364][T17539] usb 6-1: config 0 descriptor?? [ 905.997963][T20843] netlink: 'syz.2.4397': attribute type 8 has an invalid length. [ 906.008921][T20842] kvm: user requested TSC rate below hardware speed [ 906.284647][T20846] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 906.417331][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 906.627816][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 906.667643][T20852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4400'. [ 906.724802][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 906.790120][ T5844] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 906.799845][ T5844] command write [95] error -22 [ 906.840856][ T5844] usb 1-1: USB disconnect, device number 15 [ 906.899847][ T10] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 906.910782][ T10] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 906.934563][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 906.944328][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.953290][ T10] usb 3-1: Product: syz [ 906.958294][ T10] usb 3-1: Manufacturer: syz [ 906.963046][ T10] usb 3-1: SerialNumber: syz [ 907.200580][T20844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.212307][T20844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.905196][T20873] kvm: user requested TSC rate below hardware speed [ 908.281875][T17539] ipheth 6-1:0.196: Unable to find endpoints [ 908.288494][T20880] syzkaller0: entered promiscuous mode [ 908.295761][T20880] syzkaller0: entered allmulticast mode [ 908.339248][T17539] usb 6-1: USB disconnect, device number 63 [ 908.817271][T17539] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 908.987227][T17539] usb 6-1: Using ep0 maxpacket: 16 [ 908.994198][T17539] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.024650][T17539] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.068296][T17539] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 909.100568][T17539] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 909.128432][T17539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.155417][T17539] usb 6-1: config 0 descriptor?? [ 909.218441][ T10] usb 3-1: USB disconnect, device number 116 [ 909.291536][T20889] bond3 (unregistering): Released all slaves [ 909.361205][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4412'. [ 909.610205][T20884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.641622][T20884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.676323][T20906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4418'. [ 909.685713][T20906] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 909.704316][T20906] netlink: 'syz.3.4418': attribute type 1 has an invalid length. [ 909.719355][T20906] openvswitch: netlink: Missing valid actions attribute. [ 909.732040][T17539] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 909.748886][T17539] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 909.777452][T20906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 909.797528][T17539] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.002E/input/input83 [ 909.835990][T17539] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 909.981239][T17539] usb 6-1: USB disconnect, device number 64 [ 910.513869][T20921] usb usb8: usbfs: process 20921 (syz.4.4414) did not claim interface 0 before use [ 911.046782][T17529] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 911.200409][T17529] usb 6-1: Using ep0 maxpacket: 8 [ 911.214408][T17529] usb 6-1: config 1 has an invalid interface number: 59 but max is 0 [ 911.228831][T17529] usb 6-1: config 1 has no interface number 0 [ 911.243822][T17529] usb 6-1: config 1 interface 59 altsetting 5 endpoint 0x1 has invalid maxpacket 16895, setting to 1024 [ 911.262963][T17529] usb 6-1: config 1 interface 59 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 911.274541][T17529] usb 6-1: config 1 interface 59 has no altsetting 0 [ 911.284314][T17529] usb 6-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=65.ec [ 911.302265][T17529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.325950][T17529] usb 6-1: Product: syz [ 911.338493][T17529] usb 6-1: Manufacturer: syz [ 911.349038][T17529] usb 6-1: SerialNumber: syz [ 911.367638][T20923] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 911.468746][T20944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4430'. [ 911.480929][T17439] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.489964][T20944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4430'. [ 911.499681][T17439] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.519751][T17439] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.540512][T17439] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 911.584677][T17529] rndis_host 6-1:1.59: skipping garbage [ 911.604157][T17529] usb 6-1: bad CDC descriptors [ 911.628390][T17529] usb 6-1: USB disconnect, device number 65 [ 912.548904][T20968] netlink: 'syz.3.4434': attribute type 4 has an invalid length. [ 912.615191][T20969] netlink: 'syz.3.4434': attribute type 4 has an invalid length. [ 913.303410][T20971] FAULT_INJECTION: forcing a failure. [ 913.303410][T20971] name (null), interval 1, probability 0, space 0, times 1 [ 913.324913][T20971] CPU: 1 UID: 0 PID: 20971 Comm: syz.0.4437 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.324941][T20971] Tainted: [L]=SOFTLOCKUP [ 913.324945][T20971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.324952][T20971] Call Trace: [ 913.324959][T20971] [ 913.324965][T20971] dump_stack_lvl+0xe8/0x150 [ 913.324984][T20971] should_fail_ex+0x412/0x560 [ 913.325002][T20971] null_queue_rq+0x34c/0xe30 [ 913.325021][T20971] null_queue_rqs+0x123/0x270 [ 913.325034][T20971] ? blk_mq_dispatch_queue_requests+0x11a/0x800 [ 913.325049][T20971] blk_mq_dispatch_queue_requests+0x417/0x800 [ 913.325063][T20971] ? rcu_is_watching+0x15/0xb0 [ 913.325079][T20971] blk_mq_flush_plug_list+0x456/0x570 [ 913.325092][T20971] ? blk_add_rq_to_plug+0x300/0x450 [ 913.325105][T20971] ? blk_mq_submit_bio+0xef8/0x2810 [ 913.325117][T20971] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 913.325135][T20971] __blk_flush_plug+0x3ed/0x4d0 [ 913.325151][T20971] ? __pfx___blk_flush_plug+0x10/0x10 [ 913.325162][T20971] ? stack_trace_save+0xa9/0x100 [ 913.325173][T20971] ? __pfx_stack_trace_save+0x10/0x10 [ 913.325187][T20971] __submit_bio+0x28d/0x580 [ 913.325201][T20971] ? __pfx___submit_bio+0x10/0x10 [ 913.325221][T20971] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 913.325237][T20971] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 913.325258][T20971] submit_bio_wait+0x12a/0x260 [ 913.325269][T20971] ? __pfx_submit_bio_wait+0x10/0x10 [ 913.325285][T20971] ? bio_init+0x160/0x2e0 [ 913.325301][T20971] blkdev_direct_IO+0x10f6/0x1790 [ 913.325332][T20971] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 913.325359][T20971] ? current_time+0x22a/0x370 [ 913.325380][T20971] ? __pfx_submit_bio_wait_endio+0x10/0x10 [ 913.325402][T20971] ? touch_atime+0x379/0x6b0 [ 913.325419][T20971] ? blkdev_read_iter+0x210/0x440 [ 913.325445][T20971] blkdev_read_iter+0x23d/0x440 [ 913.325472][T20971] copy_splice_read+0x5ff/0xaa0 [ 913.325501][T20971] ? __pfx_copy_splice_read+0x10/0x10 [ 913.325517][T20971] ? look_up_lock_class+0x57/0x110 [ 913.325530][T20971] ? register_lock_class+0x31/0x2e0 [ 913.325547][T20971] ? alloc_pipe_info+0x373/0x4d0 [ 913.325559][T20971] ? __pfx_filemap_splice_read+0x10/0x10 [ 913.325572][T20971] splice_direct_to_actor+0x4a0/0xc70 [ 913.325593][T20971] ? __pfx_direct_splice_actor+0x10/0x10 [ 913.325611][T20971] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 913.325625][T20971] ? get_pid_task+0x20/0x1f0 [ 913.325639][T20971] do_splice_direct+0x195/0x290 [ 913.325655][T20971] ? __pfx_do_splice_direct+0x10/0x10 [ 913.325670][T20971] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 913.325681][T20971] ? bpf_lsm_file_permission+0x9/0x20 [ 913.325694][T20971] ? security_file_permission+0x75/0x260 [ 913.325707][T20971] ? rw_verify_area+0x255/0x4d0 [ 913.325720][T20971] do_sendfile+0x535/0x7d0 [ 913.325734][T20971] ? __pfx_vfs_write+0x10/0x10 [ 913.325747][T20971] ? __pfx_do_sendfile+0x10/0x10 [ 913.325767][T20971] __se_sys_sendfile64+0x144/0x1a0 [ 913.325781][T20971] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 913.325800][T20971] do_syscall_64+0x14d/0xf80 [ 913.325812][T20971] ? trace_irq_disable+0x3b/0x150 [ 913.325828][T20971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.325838][T20971] ? clear_bhb_loop+0x40/0x90 [ 913.325850][T20971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.325861][T20971] RIP: 0033:0x7f4c8599c819 [ 913.325872][T20971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.325881][T20971] RSP: 002b:00007f4c86939028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 913.325893][T20971] RAX: ffffffffffffffda RBX: 00007f4c85c15fa0 RCX: 00007f4c8599c819 [ 913.325900][T20971] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 913.325906][T20971] RBP: 00007f4c86939090 R08: 0000000000000000 R09: 0000000000000000 [ 913.325912][T20971] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 913.325918][T20971] R13: 00007f4c85c16038 R14: 00007f4c85c15fa0 R15: 00007f4c85d3fa48 [ 913.325934][T20971] [ 915.620949][T20940] gtp0: entered promiscuous mode [ 915.625936][T20940] gtp0: entered allmulticast mode [ 916.247239][T21008] fuse: Bad value for 'fd' [ 917.911984][T21011] vlan0: entered allmulticast mode [ 917.946186][T21011] bridge0: port 3(vlan0) entered blocking state [ 917.954694][T21011] bridge0: port 3(vlan0) entered disabled state [ 917.964113][T21011] vlan0: entered promiscuous mode [ 918.072581][T21016] FAULT_INJECTION: forcing a failure. [ 918.072581][T21016] name failslab, interval 1, probability 0, space 0, times 0 [ 918.116795][T21016] CPU: 1 UID: 0 PID: 21016 Comm: syz.4.4448 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.116825][T21016] Tainted: [L]=SOFTLOCKUP [ 918.116833][T21016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 918.116845][T21016] Call Trace: [ 918.116853][T21016] [ 918.116861][T21016] dump_stack_lvl+0xe8/0x150 [ 918.116892][T21016] should_fail_ex+0x412/0x560 [ 918.116925][T21016] should_failslab+0xa8/0x100 [ 918.116951][T21016] __kmalloc_cache_noprof+0x88/0x660 [ 918.116974][T21016] ? vlan_vid_add+0x135/0x750 [ 918.117000][T21016] vlan_vid_add+0x135/0x750 [ 918.117018][T21016] ? dev_addr_check+0x20/0x230 [ 918.117047][T21016] register_vlan_dev+0x9c/0x800 [ 918.117069][T21016] ? vlan_changelink+0x4ac/0x560 [ 918.117092][T21016] ? vlan_check_real_dev+0x148/0x380 [ 918.117126][T21016] vlan_newlink+0x4b2/0x610 [ 918.117153][T21016] ? __pfx_vlan_newlink+0x10/0x10 [ 918.117181][T21016] rtnl_newlink_create+0x329/0xb70 [ 918.117203][T21016] ? __pfx___nla_validate_parse+0x10/0x10 [ 918.117230][T21016] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 918.117253][T21016] ? __pfx___mutex_lock+0x10/0x10 [ 918.117285][T21016] ? ns_capable+0x89/0xe0 [ 918.117312][T21016] rtnl_newlink+0x1666/0x1be0 [ 918.117347][T21016] ? __pfx_rtnl_newlink+0x10/0x10 [ 918.117375][T21016] ? __lock_acquire+0x6b5/0x2cf0 [ 918.117405][T21016] ? __lock_acquire+0x6b5/0x2cf0 [ 918.117430][T21016] ? __lock_acquire+0x6b5/0x2cf0 [ 918.117463][T21016] ? unwind_next_frame+0xa5/0x23c0 [ 918.117512][T21016] ? __lock_acquire+0x6b5/0x2cf0 [ 918.117538][T21016] ? is_bpf_text_address+0x26/0x2b0 [ 918.117561][T21016] ? kernel_text_address+0xa5/0xe0 [ 918.117608][T21016] ? __pfx_rtnl_newlink+0x10/0x10 [ 918.117627][T21016] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 918.117650][T21016] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 918.117669][T21016] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 918.117692][T21016] ? __lock_acquire+0x6b5/0x2cf0 [ 918.117725][T21016] netlink_rcv_skb+0x232/0x4b0 [ 918.117746][T21016] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 918.117768][T21016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 918.117798][T21016] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.117825][T21016] netlink_unicast+0x80f/0x9b0 [ 918.117860][T21016] ? __pfx_netlink_unicast+0x10/0x10 [ 918.117888][T21016] ? netlink_sendmsg+0x650/0xb40 [ 918.117906][T21016] ? skb_put+0x11b/0x210 [ 918.117931][T21016] netlink_sendmsg+0x813/0xb40 [ 918.117960][T21016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.117983][T21016] ? aa_sock_msg_perm+0xf1/0x1b0 [ 918.118009][T21016] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 918.118034][T21016] ____sys_sendmsg+0x972/0x9f0 [ 918.118065][T21016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 918.118094][T21016] ? import_iovec+0x73/0xa0 [ 918.118124][T21016] ___sys_sendmsg+0x2a5/0x360 [ 918.118151][T21016] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.118205][T21016] ? __fget_files+0x2a/0x420 [ 918.118222][T21016] ? __fget_files+0x3a0/0x420 [ 918.118249][T21016] __x64_sys_sendmsg+0x1bd/0x2a0 [ 918.118275][T21016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.118306][T21016] ? __pfx_ksys_write+0x10/0x10 [ 918.118336][T21016] do_syscall_64+0x14d/0xf80 [ 918.118357][T21016] ? trace_irq_disable+0x3b/0x150 [ 918.118372][T21016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.118390][T21016] ? clear_bhb_loop+0x40/0x90 [ 918.118409][T21016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.118428][T21016] RIP: 0033:0x7f938c99c819 [ 918.118446][T21016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.118462][T21016] RSP: 002b:00007f938d777028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.118482][T21016] RAX: ffffffffffffffda RBX: 00007f938cc15fa0 RCX: 00007f938c99c819 [ 918.118496][T21016] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 000000000000000d [ 918.118508][T21016] RBP: 00007f938d777090 R08: 0000000000000000 R09: 0000000000000000 [ 918.118520][T21016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.118531][T21016] R13: 00007f938cc16038 R14: 00007f938cc15fa0 R15: 00007f938cd3fa48 [ 918.118562][T21016] [ 918.877077][T17539] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 919.328000][T17539] usb 5-1: Using ep0 maxpacket: 16 [ 919.363800][T17539] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.380617][T17539] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 919.405187][T17539] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 919.415340][T17539] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 919.436007][T17539] usb 5-1: Manufacturer: syz [ 919.456379][T17539] usb 5-1: config 0 descriptor?? [ 919.899806][T21043] FAULT_INJECTION: forcing a failure. [ 919.899806][T21043] name failslab, interval 1, probability 0, space 0, times 0 [ 919.912791][T21043] CPU: 0 UID: 0 PID: 21043 Comm: syz.3.4457 Tainted: G L syzkaller #0 PREEMPT(full) [ 919.912819][T21043] Tainted: [L]=SOFTLOCKUP [ 919.912825][T21043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 919.912836][T21043] Call Trace: [ 919.912846][T21043] [ 919.912855][T21043] dump_stack_lvl+0xe8/0x150 [ 919.912884][T21043] should_fail_ex+0x412/0x560 [ 919.912914][T21043] should_failslab+0xa8/0x100 [ 919.912938][T21043] __kmalloc_cache_noprof+0x88/0x660 [ 919.912960][T21043] ? crypto_larval_alloc+0x59/0x290 [ 919.912987][T21043] crypto_larval_alloc+0x59/0x290 [ 919.913018][T21043] crypto_alg_mod_lookup+0x1a4/0x5f0 [ 919.913041][T21043] crypto_alloc_tfm_node+0x13e/0x3f0 [ 919.913061][T21043] ? rng_bind+0x57/0xd0 [ 919.913080][T21043] rng_bind+0x6c/0xd0 [ 919.913097][T21043] alg_bind+0x2fa/0x570 [ 919.913115][T21043] __sys_bind+0x2e3/0x410 [ 919.913132][T21043] ? __pfx___sys_bind+0x10/0x10 [ 919.913155][T21043] ? __pfx_ksys_write+0x10/0x10 [ 919.913176][T21043] __x64_sys_bind+0x7a/0x90 [ 919.913192][T21043] do_syscall_64+0x14d/0xf80 [ 919.913210][T21043] ? trace_irq_disable+0x3b/0x150 [ 919.913223][T21043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.913238][T21043] ? clear_bhb_loop+0x40/0x90 [ 919.913255][T21043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.913270][T21043] RIP: 0033:0x7f6caf59c819 [ 919.913285][T21043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 919.913297][T21043] RSP: 002b:00007f6cb044d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 919.913314][T21043] RAX: ffffffffffffffda RBX: 00007f6caf815fa0 RCX: 00007f6caf59c819 [ 919.913325][T21043] RDX: 000000000000005f RSI: 0000200000000600 RDI: 0000000000000003 [ 919.913334][T21043] RBP: 00007f6cb044d090 R08: 0000000000000000 R09: 0000000000000000 [ 919.913343][T21043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.913352][T21043] R13: 00007f6caf816038 R14: 00007f6caf815fa0 R15: 00007f6caf93fa48 [ 919.913374][T21043] [ 920.298998][T21052] syzkaller0: entered promiscuous mode [ 920.304496][T21052] syzkaller0: entered allmulticast mode [ 920.562066][T21067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4465'. [ 920.669703][T21071] fuse: Bad value for 'fd' [ 920.788906][T21067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 920.840802][T21071] macvtap1: entered promiscuous mode [ 920.854881][T21071] bond0: entered promiscuous mode [ 920.900742][T21071] macvtap1: entered allmulticast mode [ 920.918049][T21071] bond0: entered allmulticast mode [ 920.931903][T21071] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 920.940389][T21071] bond0: left allmulticast mode [ 920.945306][T21071] bond0: left promiscuous mode [ 921.277482][T21082] fuse: Bad value for 'fd' [ 921.666783][T17529] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 921.850300][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 921.850317][ T29] audit: type=1326 audit(1774890135.455:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21085 comm="syz.0.4468" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c8599c819 code=0x0 [ 921.884388][T17529] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 921.901791][T17529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.919774][T17529] usb 6-1: Product: syz [ 922.401935][T17530] usb 5-1: USB disconnect, device number 2 [ 922.427080][T17529] usb 6-1: Manufacturer: syz [ 922.445896][T17529] usb 6-1: SerialNumber: syz [ 922.473736][T17529] usb 6-1: config 0 descriptor?? [ 922.487659][T17529] hub 6-1:0.0: bad descriptor, ignoring hub [ 922.493606][T17529] hub 6-1:0.0: probe with driver hub failed with error -5 [ 922.704975][T17529] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 922.796795][T17529] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 922.837956][T21109] netlink: 'syz.0.4473': attribute type 4 has an invalid length. [ 922.848785][T21109] netlink: 'syz.0.4473': attribute type 4 has an invalid length. [ 922.907501][T17529] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 922.939106][T17529] usb 6-1: media controller created [ 923.003506][T17529] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 923.377076][T21113] syzkaller0: entered promiscuous mode [ 923.392909][T21113] syzkaller0: entered allmulticast mode [ 923.521872][T17529] DVB: Unable to find symbol dib7000p_attach() [ 923.528474][T17529] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 923.626836][T17529] rc_core: IR keymap rc-dib0700-rc5 not found [ 923.645430][T17529] Registered IR keymap rc-empty [ 923.678880][T17529] dvb-usb: could not initialize remote control. [ 923.696433][T17529] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 924.345190][T21082] i2c i2c-1: Invalid block size returned: 58 [ 925.219430][T21142] fuse: Bad value for 'fd' [ 925.454969][T21147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4484'. [ 925.468147][T17529] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 925.626744][T17529] usb 1-1: Using ep0 maxpacket: 16 [ 925.642782][T17529] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 925.695420][T17529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.703980][T17530] usb 6-1: USB disconnect, device number 66 [ 925.836590][T17529] usb 1-1: Product: syz [ 925.886553][T17529] usb 1-1: Manufacturer: syz [ 925.908997][T17529] usb 1-1: SerialNumber: syz [ 925.914199][T17530] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 925.947544][T17529] usb 1-1: config 0 descriptor?? [ 926.039168][T17529] as10x_usb: device has been detected [ 926.248221][T17529] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 926.311996][T17529] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 926.350649][T17529] as10x_usb: error during firmware upload part1 [ 926.421807][T17529] Registered device Sky IT Digital Key (green led) [ 926.452317][T21164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4482'. [ 926.475420][T21164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4482'. [ 926.562951][T21142] random: crng reseeded on system resumption [ 926.653216][T21165] usb usb8: usbfs: process 21165 (syz.4.4483) did not claim interface 0 before use [ 927.720276][T21172] FAULT_INJECTION: forcing a failure. [ 927.720276][T21172] name failslab, interval 1, probability 0, space 0, times 0 [ 927.733203][T21172] CPU: 1 UID: 0 PID: 21172 Comm: syz.3.4489 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.733234][T21172] Tainted: [L]=SOFTLOCKUP [ 927.733241][T21172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 927.733252][T21172] Call Trace: [ 927.733258][T21172] [ 927.733262][T21172] dump_stack_lvl+0xe8/0x150 [ 927.733282][T21172] should_fail_ex+0x412/0x560 [ 927.733300][T21172] should_failslab+0xa8/0x100 [ 927.733315][T21172] __kmalloc_noprof+0xe8/0x760 [ 927.733327][T21172] ? do_sys_poll+0x313/0x1120 [ 927.733343][T21172] do_sys_poll+0x313/0x1120 [ 927.733362][T21172] ? __lock_acquire+0x6b5/0x2cf0 [ 927.733376][T21172] ? __pfx_do_sys_poll+0x10/0x10 [ 927.733388][T21172] ? is_bpf_text_address+0x26/0x2b0 [ 927.733446][T21172] ? __pfx_timespec64_add_safe+0x10/0x10 [ 927.733471][T21172] __x64_sys_poll+0x190/0x350 [ 927.733486][T21172] ? __pfx___x64_sys_poll+0x10/0x10 [ 927.733504][T21172] do_syscall_64+0x14d/0xf80 [ 927.733516][T21172] ? trace_irq_disable+0x3b/0x150 [ 927.733525][T21172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.733535][T21172] ? clear_bhb_loop+0x40/0x90 [ 927.733548][T21172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.733558][T21172] RIP: 0033:0x7f6caf59c819 [ 927.733569][T21172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.733578][T21172] RSP: 002b:00007f6cb044d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 927.733590][T21172] RAX: ffffffffffffffda RBX: 00007f6caf815fa0 RCX: 00007f6caf59c819 [ 927.733598][T21172] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 927.733605][T21172] RBP: 00007f6cb044d090 R08: 0000000000000000 R09: 0000000000000000 [ 927.733611][T21172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.733617][T21172] R13: 00007f6caf816038 R14: 00007f6caf815fa0 R15: 00007f6caf93fa48 [ 927.733632][T21172] [ 928.272836][T21181] openvswitch: netlink: Key 26 has unexpected len 139 expected 16 [ 928.309764][T21179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 928.679108][T17539] usb 1-1: USB disconnect, device number 16 [ 928.701183][T17539] Unregistered device Sky IT Digital Key (green led) [ 928.764080][T17539] as10x_usb: device has been disconnected [ 929.776733][T17529] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 930.258929][T17529] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 930.302302][T17529] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 930.316905][T17529] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 930.329888][T17529] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 930.358320][T17529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.450599][T21203] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 930.677701][T17529] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 930.713811][T17529] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input85 [ 930.788942][T17529] usb 5-1: USB disconnect, device number 3 [ 930.794858][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 930.987565][T17539] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 931.147199][T17539] usb 3-1: Using ep0 maxpacket: 8 [ 931.159382][T17539] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 931.166263][ T29] audit: type=1326 audit(1774890144.765:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.0.4507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c8599c819 code=0x0 [ 931.177282][T17539] usb 3-1: config 179 has no interface number 0 [ 931.267929][T17539] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 931.287331][T17539] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 931.324746][T17539] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 931.337076][ T5844] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 931.362575][T17539] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 931.380745][T17539] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 931.400991][T17539] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 931.411108][T17539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.430119][T21222] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 931.515394][ T5844] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 931.526605][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.537368][ T5844] usb 6-1: Product: syz [ 931.541508][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.541643][ T5844] usb 6-1: Manufacturer: syz [ 931.547936][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.566866][ T5844] usb 6-1: SerialNumber: syz [ 931.587873][ T5844] usb 6-1: config 0 descriptor?? [ 931.617347][T17539] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 931.708245][T17540] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input86 [ 931.777685][T17539] usb 5-1: Using ep0 maxpacket: 16 [ 931.804802][T17539] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 931.897569][T17539] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 931.919308][T21222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.932938][T21222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.945009][T17539] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 39329, setting to 1024 [ 932.000983][T17539] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 932.041332][T17539] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 932.059085][T17539] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 932.067821][T17539] usb 5-1: SerialNumber: syz [ 932.238971][T21236] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 932.279627][T17539] cdc_acm 5-1:1.0: skipping garbage [ 932.279922][T17530] usb 3-1: USB disconnect, device number 117 [ 932.285083][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 932.301558][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 932.369821][T17539] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 932.429235][ T5844] usb 6-1: Firmware version (0.0) predates our first public release. [ 932.447238][ T5844] usb 6-1: Please update to version 0.2 or newer [ 932.898032][ T5844] usb 6-1: USB disconnect, device number 67 [ 933.182690][T21263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4514'. [ 933.773783][T21270] syzkaller0: entered promiscuous mode [ 933.779952][T21270] syzkaller0: entered allmulticast mode [ 934.347499][T17539] usb 5-1: USB disconnect, device number 4 [ 935.990763][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4523'. [ 936.436800][T17530] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 936.566767][T17530] usb 1-1: device descriptor read/64, error -71 [ 936.896841][T17530] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 937.048118][T17530] usb 1-1: device descriptor read/64, error -71 [ 937.161887][T17530] usb usb1-port1: attempt power cycle [ 937.507880][T17530] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 937.543412][T17530] usb 1-1: device descriptor read/8, error -71 [ 937.798072][T17530] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 937.829839][T17530] usb 1-1: device descriptor read/8, error -71 [ 937.949636][T17530] usb usb1-port1: unable to enumerate USB device [ 938.893382][T21326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.949386][ T29] audit: type=1326 audit(1774890152.555:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf59c819 code=0x7ffc0000 [ 939.034049][ T29] audit: type=1326 audit(1774890152.555:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf59c819 code=0x7ffc0000 [ 939.057757][ T29] audit: type=1326 audit(1774890152.555:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf59c819 code=0x7ffc0000 [ 939.201119][ T29] audit: type=1326 audit(1774890152.555:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f6caf59c819 code=0x7ffc0000 [ 939.230450][ T29] audit: type=1326 audit(1774890152.555:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf59c819 code=0x7ffc0000 [ 939.260850][T17439] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.270062][T17439] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.298612][T17439] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.307721][ T29] audit: type=1326 audit(1774890152.555:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf59c819 code=0x7ffc0000 [ 939.359473][T17439] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.372807][ T29] audit: type=1326 audit(1774890152.555:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf59c819 code=0x7ffc0000 [ 939.402027][ T29] audit: type=1326 audit(1774890152.555:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf59c819 code=0x7ffc0000 [ 939.516716][ T29] audit: type=1326 audit(1774890152.555:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6caf59c819 code=0x7ffc0000 [ 939.539759][ T29] audit: type=1326 audit(1774890152.555:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21322 comm="syz.3.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6caf59c819 code=0x7ffc0000 [ 939.881349][T21343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4532'. [ 939.891091][T21343] bridge_slave_1: left allmulticast mode [ 939.897361][T21343] bridge_slave_1: left promiscuous mode [ 939.903385][T21343] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.040961][T21343] bridge_slave_0: left allmulticast mode [ 940.049326][T21343] bridge_slave_0: left promiscuous mode [ 940.057316][T21343] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.726776][T17530] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 940.887535][T17530] usb 4-1: unable to get BOS descriptor or descriptor too short [ 940.902895][T17530] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 940.912186][T17530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.941874][T17530] usb 4-1: Product: syz [ 941.174009][T17530] usb 4-1: Manufacturer: syz [ 941.195829][T17530] usb 4-1: SerialNumber: syz [ 941.426078][T21354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.458167][T21354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.919630][T21354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.928931][T21354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.980748][T17530] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 942.082301][T17530] usb 4-1: USB disconnect, device number 4 [ 942.183245][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 942.395641][T21378] overlayfs: missing 'lowerdir' [ 942.907767][T21396] fuse: Bad value for 'fd' [ 942.915171][T21396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4545'. [ 943.227287][ T5844] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 943.236754][T17530] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 943.453730][T17530] usb 4-1: Using ep0 maxpacket: 8 [ 943.494193][T17530] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.517359][ T5844] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 943.527242][T17530] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 943.549715][T17530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.551947][ T5844] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 943.599582][T17530] usb 4-1: config 0 descriptor?? [ 943.623074][T17530] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 943.630723][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 943.691673][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.790160][ T5844] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 943.821105][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 943.825819][T17530] usb 4-1: USB disconnect, device number 5 [ 943.848777][ T5844] usb 5-1: Product: syz [ 943.865216][ T5844] usb 5-1: Manufacturer: syz [ 943.914492][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 943.925585][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 943.983772][ T5844] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 944.024711][ T5844] cdc_wdm 5-1:1.0: Unknown control protocol [ 944.129262][ T5844] usb 5-1: USB disconnect, device number 5 [ 944.241222][T21416] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 944.647153][ T5844] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 944.858901][ T5844] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 944.868486][ T5844] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.879329][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 944.889672][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.958969][ T5844] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 944.968756][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 944.977483][ T5844] usb 5-1: Product: syz [ 944.981917][ T5844] usb 5-1: Manufacturer: syz [ 945.018131][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 945.029505][ T5844] cdc_wdm 5-1:1.0: skipping garbage [ 945.052622][ T5844] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 945.094832][ T5844] cdc_wdm 5-1:1.0: Unknown control protocol [ 945.151961][T21424] xt_hashlimit: size too large, truncated to 1048576 [ 945.380199][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4558'. [ 945.787661][ T5844] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 945.797141][T17530] usb 5-1: USB disconnect, device number 6 [ 945.951370][ T5844] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 945.974440][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.983029][T17539] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 946.001974][ T5844] usb 3-1: Product: syz [ 946.010593][ T5844] usb 3-1: Manufacturer: syz [ 946.022897][ T5844] usb 3-1: SerialNumber: syz [ 946.036124][ T5844] usb 3-1: config 0 descriptor?? [ 946.166554][ T5844] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 946.194915][T17539] usb 6-1: Using ep0 maxpacket: 32 [ 946.204577][T17539] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.229790][T17539] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 946.247426][T17539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.255718][T17539] usb 6-1: Product: syz [ 946.260921][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 946.271623][T17539] usb 6-1: Manufacturer: syz [ 946.277027][ T5844] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 946.287588][ T5844] usb 3-1: media controller created [ 946.299360][T17539] usb 6-1: SerialNumber: syz [ 946.330921][T17539] usb 6-1: config 0 descriptor?? [ 946.370552][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.382125][T17539] snd_usb_variax 6-1:0.0: Line 6 Variax Workbench found [ 946.400335][T21437] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4559'. [ 946.533075][T17539] usb 6-1: selecting invalid altsetting 1 [ 946.608315][T17539] snd_usb_variax 6-1:0.0: set_interface failed [ 946.633528][T17539] snd_usb_variax 6-1:0.0: Line 6 Variax Workbench now disconnected [ 946.652015][T17539] snd_usb_variax 6-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 946.753683][T21449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.760789][T17540] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 946.777011][ T5844] DVB: Unable to find symbol mt352_attach() [ 946.804482][T21449] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.891033][T21449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 946.939972][T17540] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 946.949508][T17540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.959433][ T5844] DVB: Unable to find symbol nxt6000_attach() [ 946.965506][ T5844] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 946.987771][T17540] usb 5-1: config 0 descriptor?? [ 946.999403][T17540] cp210x 5-1:0.0: cp210x converter detected [ 947.008288][ T5844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input87 [ 947.034876][ T5844] dvb-usb: schedule remote query interval to 1000 msecs. [ 947.043019][ T5844] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 947.085374][ T5844] dvb-usb: bulk message failed: -22 (7/0) [ 947.096097][T21459] tipc: Enabled bearer , priority 0 [ 947.130883][T21460] syzkaller0: entered promiscuous mode [ 947.139537][ T5844] dvb-usb: bulk message failed: -22 (7/0) [ 947.153558][T21460] syzkaller0: entered allmulticast mode [ 947.249229][T21459] tipc: Resetting bearer [ 947.392746][T21453] tipc: Resetting bearer [ 947.428361][T21453] tipc: Disabling bearer [ 948.102818][ T5844] dvb-usb: bulk message failed: -22 (7/0) [ 948.118387][ T5844] dvb-usb: error while querying for an remote control event. [ 948.480187][T17529] usb 3-1: USB disconnect, device number 118 [ 948.587284][ T5844] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 948.592441][T17529] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 948.810346][T21477] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 948.920612][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 949.088306][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.114152][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 949.147719][T17539] usb 6-1: USB disconnect, device number 68 [ 949.154601][ T5844] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 949.191027][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 949.209330][ T5844] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 949.219002][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.228211][ T5844] usb 4-1: Product: syz [ 949.232458][ T5844] usb 4-1: Manufacturer: syz [ 949.237724][ T5844] usb 4-1: SerialNumber: syz [ 949.271279][ T5844] usb 4-1: config 0 descriptor?? [ 949.293851][ T5844] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 949.642594][T21484] netlink: 'syz.0.4569': attribute type 7 has an invalid length. [ 949.688189][T17540] usb 5-1: cp210x converter now attached to ttyUSB0 [ 949.864947][T17540] usb 5-1: USB disconnect, device number 7 [ 949.928416][T17540] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 949.962724][T17540] cp210x 5-1:0.0: device disconnected [ 950.081694][T21492] fuse: Unknown parameter 'ÿd' [ 950.310014][T17529] usb 4-1: USB disconnect, device number 6 [ 950.551598][T17540] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 950.717314][T17540] usb 5-1: Using ep0 maxpacket: 32 [ 950.789923][T17540] usb 5-1: unable to get BOS descriptor or descriptor too short [ 950.812828][T17540] usb 5-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 950.835934][T17540] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.854849][T17540] usb 5-1: Product: syz [ 950.871933][T17540] usb 5-1: Manufacturer: syz [ 950.943384][T21516] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4579'. [ 951.114711][T17540] usb 5-1: SerialNumber: syz [ 951.394793][T17540] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 951.465416][T17540] usb 5-1: MIDIStreaming interface descriptor not found [ 951.795815][T17540] usb 5-1: USB disconnect, device number 8 [ 951.863992][T21521] usb usb8: usbfs: process 21521 (syz.2.4580) did not claim interface 0 before use [ 952.118543][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.627917][T17529] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 952.777998][T17529] usb 5-1: device descriptor read/64, error -71 [ 953.046775][T17529] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 953.086797][T17530] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 953.206767][T17529] usb 5-1: device descriptor read/64, error -71 [ 953.246730][T17530] usb 4-1: Using ep0 maxpacket: 16 [ 953.258525][T17530] usb 4-1: config 0 has no interfaces? [ 953.269142][T17530] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 953.285604][T17530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.320675][T17530] usb 4-1: config 0 descriptor?? [ 953.335577][T17529] usb usb5-port1: attempt power cycle [ 953.649002][T17530] usb 4-1: USB disconnect, device number 7 [ 953.706765][T17529] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 953.727990][T17529] usb 5-1: device descriptor read/8, error -71 [ 953.908224][T21565] sctp: [Deprecated]: syz.0.4595 (pid 21565) Use of int in maxseg socket option. [ 953.908224][T21565] Use struct sctp_assoc_value instead [ 953.996745][T17529] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 954.027584][T17529] usb 5-1: device descriptor read/8, error -71 [ 954.137162][T17529] usb usb5-port1: unable to enumerate USB device [ 954.301188][T21579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4598'. [ 954.579901][T17529] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 954.746797][T17529] usb 6-1: device descriptor read/64, error -71 [ 955.000723][T17529] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 955.198538][T17529] usb 6-1: device descriptor read/64, error -71 [ 955.307059][T17529] usb usb6-port1: attempt power cycle [ 955.666821][T17529] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 955.712456][T17529] usb 6-1: device descriptor read/8, error -71 [ 955.976799][T17529] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 956.007774][T17529] usb 6-1: device descriptor read/8, error -71 [ 956.347677][T17529] usb usb6-port1: unable to enumerate USB device [ 957.527324][T17540] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 957.677386][T17540] usb 3-1: Using ep0 maxpacket: 16 [ 957.684536][T17540] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 957.695475][T17540] usb 3-1: config 0 has no interface number 0 [ 957.712126][T17540] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 957.738763][T17540] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 957.748753][T17540] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 957.758067][T17540] usb 3-1: Product: syz [ 957.765725][T17540] usb 3-1: SerialNumber: syz [ 957.779838][T17540] usb 3-1: config 0 descriptor?? [ 957.792524][T17540] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 957.992548][T17540] usb 3-1: USB disconnect, device number 119 [ 958.246806][ T5844] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 958.427854][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 958.438055][ T5844] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 958.448787][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 958.467949][ T5844] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 958.527415][ T5844] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 958.547346][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.570400][ T5844] usb 5-1: config 0 descriptor?? [ 958.720893][T21630] program syz.2.4615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 958.838661][T21631] program syz.2.4615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 958.901082][ T5844] hdpvr 5-1:0.0: firmware version 0x1e dated [ 959.200676][ T5844] hdpvr 5-1:0.0: device init failed [ 959.230563][ T5844] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 959.251685][ T5844] usb 5-1: USB disconnect, device number 13 [ 959.344992][T21644] openvswitch: netlink: Key 26 has unexpected len 139 expected 16 [ 959.527360][T17539] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 959.687084][T17539] usb 6-1: Using ep0 maxpacket: 32 [ 959.696245][T17539] usb 6-1: config 2 has an invalid interface number: 45 but max is 0 [ 959.705075][T17539] usb 6-1: config 2 has no interface number 0 [ 959.717662][T17539] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 959.745392][T17539] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 959.769559][T17539] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 959.779278][T17539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.971865][T17539] usb 6-1: Product: syz [ 959.978439][T17539] usb 6-1: Manufacturer: syz [ 959.986406][T17539] usb 6-1: SerialNumber: syz [ 960.005713][T17539] kobil_sct 6-1:2.45: KOBIL USB smart card terminal converter detected [ 960.079776][T17539] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 960.226731][T17529] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 960.386746][T17529] usb 3-1: Using ep0 maxpacket: 16 [ 960.412125][T17529] usb 3-1: config 0 has no interfaces? [ 960.426267][T17529] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 960.448170][T17529] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 960.477493][T17529] usb 3-1: Manufacturer: syz [ 960.504590][T17529] usb 3-1: config 0 descriptor?? [ 960.590871][T21665] openvswitch: netlink: Key 26 has unexpected len 139 expected 16 [ 960.650231][T21663] [ 960.650246][T21663] ===================================================== [ 960.650257][T21663] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 960.650280][T21663] syzkaller #0 Tainted: G L [ 960.650292][T21663] ----------------------------------------------------- [ 960.650301][T21663] syz.4.4625/21663 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 960.650324][T21663] ffff8880588db468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 960.650375][T21663] [ 960.650375][T21663] and this task is already holding: [ 960.650383][T21663] ffffffff8effe078 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 960.650431][T21663] which would create a new lock dependency: [ 960.650439][T21663] (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 960.650487][T21663] [ 960.650487][T21663] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 960.650497][T21663] (kbd_event_lock){..-.}-{3:3} [ 960.650517][T21663] [ 960.650517][T21663] ... which became SOFTIRQ-irq-safe at: [ 960.650527][T21663] lock_acquire+0xf0/0x2e0 [ 960.650552][T21663] _raw_spin_lock+0x2e/0x40 [ 960.650573][T21663] kbd_event+0xd6/0x40d0 [ 960.650594][T21663] input_handle_events_default+0xd4/0x1a0 [ 960.650617][T21663] input_pass_values+0x288/0x890 [ 960.650634][T21663] input_event_dispose+0x3e5/0x6b0 [ 960.650661][T21663] input_event+0x89/0xe0 [ 960.650687][T21663] hidinput_hid_event+0x14cb/0x1ed0 [ 960.650708][T21663] hid_process_event+0x4be/0x620 [ 960.650728][T21663] hid_report_raw_event+0xec2/0x1730 [ 960.650757][T21663] hid_input_report+0x44b/0x580 [ 960.650786][T21663] hid_irq_in+0x47e/0x6d0 [ 960.650810][T21663] __usb_hcd_giveback_urb+0x376/0x540 [ 960.650842][T21663] dummy_timer+0xbbd/0x45d0 [ 960.650871][T21663] __hrtimer_run_queues+0x53a/0xcc0 [ 960.650900][T21663] hrtimer_run_softirq+0x182/0x5a0 [ 960.650929][T21663] handle_softirqs+0x22a/0x870 [ 960.650955][T21663] __irq_exit_rcu+0x5f/0x150 [ 960.650981][T21663] irq_exit_rcu+0x9/0x30 [ 960.651005][T21663] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 960.651039][T21663] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 960.651061][T21663] unwind_next_frame+0xcf9/0x23c0 [ 960.651091][T21663] arch_stack_walk+0x11b/0x150 [ 960.651119][T21663] stack_trace_save+0xa9/0x100 [ 960.651140][T21663] kasan_save_track+0x3e/0x80 [ 960.651161][T21663] kasan_save_free_info+0x46/0x50 [ 960.651191][T21663] __kasan_slab_free+0x5c/0x80 [ 960.651209][T21663] kmem_cache_free+0x187/0x630 [ 960.651227][T21663] skb_release_data+0x6c3/0x940 [ 960.651248][T21663] __kfree_skb+0x5d/0x210 [ 960.651269][T21663] netlink_recvmsg+0x5d6/0xa50 [ 960.651289][T21663] sock_recvmsg+0x172/0x1b0 [ 960.651318][T21663] ____sys_recvmsg+0x1e6/0x4a0 [ 960.651342][T21663] ___sys_recvmsg+0x215/0x590 [ 960.651367][T21663] __x64_sys_recvmsg+0x1ba/0x2a0 [ 960.651392][T21663] do_syscall_64+0x14d/0xf80 [ 960.651417][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.651437][T21663] [ 960.651437][T21663] to a SOFTIRQ-irq-unsafe lock: [ 960.651446][T21663] (tasklist_lock){.+.+}-{3:3} [ 960.651467][T21663] [ 960.651467][T21663] ... which became SOFTIRQ-irq-unsafe at: [ 960.651478][T21663] ... [ 960.651483][T21663] lock_acquire+0xf0/0x2e0 [ 960.651509][T21663] _raw_read_lock+0x36/0x50 [ 960.651530][T21663] __do_wait+0xde/0x740 [ 960.651550][T21663] do_wait+0x1e7/0x540 [ 960.651569][T21663] kernel_wait+0xd6/0x1c0 [ 960.651589][T21663] call_usermodehelper_exec_work+0xbe/0x230 [ 960.651615][T21663] process_scheduled_works+0xb6e/0x18c0 [ 960.651640][T21663] worker_thread+0xa53/0xfc0 [ 960.651666][T21663] kthread+0x388/0x470 [ 960.651682][T21663] ret_from_fork+0x51e/0xb90 [ 960.651708][T21663] ret_from_fork_asm+0x1a/0x30 [ 960.651737][T21663] [ 960.651737][T21663] other info that might help us debug this: [ 960.651737][T21663] [ 960.651746][T21663] Chain exists of: [ 960.651746][T21663] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 960.651746][T21663] [ 960.651784][T21663] Possible interrupt unsafe locking scenario: [ 960.651784][T21663] [ 960.651792][T21663] CPU0 CPU1 [ 960.651800][T21663] ---- ---- [ 960.651808][T21663] lock(tasklist_lock); [ 960.651824][T21663] local_irq_disable(); [ 960.651832][T21663] lock(kbd_event_lock); [ 960.651850][T21663] lock(&tty->flow.lock); [ 960.651867][T21663] [ 960.651875][T21663] lock(kbd_event_lock); [ 960.651890][T21663] [ 960.651890][T21663] *** DEADLOCK *** [ 960.651890][T21663] [ 960.651898][T21663] 5 locks held by syz.4.4625/21663: [ 960.651911][T21663] #0: ffff88802b99c118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 960.651962][T21663] #1: ffff88802b8f4230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 960.652036][T21663] #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 960.652098][T21663] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 960.652146][T21663] #4: ffffffff8effe078 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0 [ 960.652198][T21663] [ 960.652198][T21663] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 960.652209][T21663] -> (kbd_event_lock){..-.}-{3:3} { [ 960.652239][T21663] IN-SOFTIRQ-W at: [ 960.652252][T21663] lock_acquire+0xf0/0x2e0 [ 960.652277][T21663] _raw_spin_lock+0x2e/0x40 [ 960.652298][T21663] kbd_event+0xd6/0x40d0 [ 960.652318][T21663] input_handle_events_default+0xd4/0x1a0 [ 960.652340][T21663] input_pass_values+0x288/0x890 [ 960.652359][T21663] input_event_dispose+0x3e5/0x6b0 [ 960.652386][T21663] input_event+0x89/0xe0 [ 960.652412][T21663] hidinput_hid_event+0x14cb/0x1ed0 [ 960.652434][T21663] hid_process_event+0x4be/0x620 [ 960.652454][T21663] hid_report_raw_event+0xec2/0x1730 [ 960.652484][T21663] hid_input_report+0x44b/0x580 [ 960.652514][T21663] hid_irq_in+0x47e/0x6d0 [ 960.652539][T21663] __usb_hcd_giveback_urb+0x376/0x540 [ 960.652571][T21663] dummy_timer+0xbbd/0x45d0 [ 960.652602][T21663] __hrtimer_run_queues+0x53a/0xcc0 [ 960.652631][T21663] hrtimer_run_softirq+0x182/0x5a0 [ 960.652662][T21663] handle_softirqs+0x22a/0x870 [ 960.652688][T21663] __irq_exit_rcu+0x5f/0x150 [ 960.652715][T21663] irq_exit_rcu+0x9/0x30 [ 960.652740][T21663] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 960.652763][T21663] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 960.652784][T21663] unwind_next_frame+0xcf9/0x23c0 [ 960.652810][T21663] arch_stack_walk+0x11b/0x150 [ 960.652835][T21663] stack_trace_save+0xa9/0x100 [ 960.652853][T21663] kasan_save_track+0x3e/0x80 [ 960.652873][T21663] kasan_save_free_info+0x46/0x50 [ 960.652899][T21663] __kasan_slab_free+0x5c/0x80 [ 960.652918][T21663] kmem_cache_free+0x187/0x630 [ 960.652936][T21663] skb_release_data+0x6c3/0x940 [ 960.652953][T21663] __kfree_skb+0x5d/0x210 [ 960.652965][T21663] netlink_recvmsg+0x5d6/0xa50 [ 960.652976][T21663] sock_recvmsg+0x172/0x1b0 [ 960.652993][T21663] ____sys_recvmsg+0x1e6/0x4a0 [ 960.653006][T21663] ___sys_recvmsg+0x215/0x590 [ 960.653027][T21663] __x64_sys_recvmsg+0x1ba/0x2a0 [ 960.653041][T21663] do_syscall_64+0x14d/0xf80 [ 960.653055][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.653066][T21663] INITIAL USE at: [ 960.653073][T21663] lock_acquire+0xf0/0x2e0 [ 960.653086][T21663] _raw_spin_lock_irqsave+0x40/0x60 [ 960.653097][T21663] vt_reset_unicode+0x2b/0x1a0 [ 960.653109][T21663] reset_vc+0x68/0x1b0 [ 960.653123][T21663] vc_init+0x70/0x4a0 [ 960.653138][T21663] con_init+0x377/0x6a0 [ 960.653150][T21663] console_init+0x10b/0x4d0 [ 960.653161][T21663] start_kernel+0x22b/0x3d0 [ 960.653176][T21663] x86_64_start_reservations+0x24/0x30 [ 960.653189][T21663] x86_64_start_kernel+0x143/0x1c0 [ 960.653201][T21663] common_startup_64+0x13e/0x147 [ 960.653212][T21663] } [ 960.653216][T21663] ... key at: [] kbd_event_lock+0x18/0xa0 [ 960.653228][T21663] [ 960.653228][T21663] the dependencies between the lock to be acquired [ 960.653232][T21663] and SOFTIRQ-irq-unsafe lock: [ 960.653248][T21663] -> (tasklist_lock){.+.+}-{3:3} { [ 960.653267][T21663] HARDIRQ-ON-R at: [ 960.653274][T21663] lock_acquire+0xf0/0x2e0 [ 960.653286][T21663] _raw_read_lock+0x36/0x50 [ 960.653297][T21663] __do_wait+0xde/0x740 [ 960.653308][T21663] do_wait+0x1e7/0x540 [ 960.653319][T21663] kernel_wait+0xd6/0x1c0 [ 960.653330][T21663] call_usermodehelper_exec_work+0xbe/0x230 [ 960.653344][T21663] process_scheduled_works+0xb6e/0x18c0 [ 960.653358][T21663] worker_thread+0xa53/0xfc0 [ 960.653372][T21663] kthread+0x388/0x470 [ 960.653382][T21663] ret_from_fork+0x51e/0xb90 [ 960.653396][T21663] ret_from_fork_asm+0x1a/0x30 [ 960.653411][T21663] SOFTIRQ-ON-R at: [ 960.653418][T21663] lock_acquire+0xf0/0x2e0 [ 960.653430][T21663] _raw_read_lock+0x36/0x50 [ 960.653441][T21663] __do_wait+0xde/0x740 [ 960.653451][T21663] do_wait+0x1e7/0x540 [ 960.653461][T21663] kernel_wait+0xd6/0x1c0 [ 960.653472][T21663] call_usermodehelper_exec_work+0xbe/0x230 [ 960.653485][T21663] process_scheduled_works+0xb6e/0x18c0 [ 960.653498][T21663] worker_thread+0xa53/0xfc0 [ 960.653511][T21663] kthread+0x388/0x470 [ 960.653521][T21663] ret_from_fork+0x51e/0xb90 [ 960.653534][T21663] ret_from_fork_asm+0x1a/0x30 [ 960.653549][T21663] INITIAL USE at: [ 960.653555][T21663] lock_acquire+0xf0/0x2e0 [ 960.653568][T21663] _raw_write_lock_irq+0x3d/0x50 [ 960.653580][T21663] copy_process+0x247a/0x3cd0 [ 960.653594][T21663] kernel_clone+0x248/0x8e0 [ 960.653608][T21663] user_mode_thread+0x110/0x180 [ 960.653623][T21663] rest_init+0x23/0x300 [ 960.653632][T21663] start_kernel+0x385/0x3d0 [ 960.653646][T21663] x86_64_start_reservations+0x24/0x30 [ 960.653658][T21663] x86_64_start_kernel+0x143/0x1c0 [ 960.653669][T21663] common_startup_64+0x13e/0x147 [ 960.653679][T21663] INITIAL READ USE at: [ 960.653686][T21663] lock_acquire+0xf0/0x2e0 [ 960.653698][T21663] _raw_read_lock+0x36/0x50 [ 960.653709][T21663] __do_wait+0xde/0x740 [ 960.653719][T21663] do_wait+0x1e7/0x540 [ 960.653729][T21663] kernel_wait+0xd6/0x1c0 [ 960.653739][T21663] call_usermodehelper_exec_work+0xbe/0x230 [ 960.653753][T21663] process_scheduled_works+0xb6e/0x18c0 [ 960.653766][T21663] worker_thread+0xa53/0xfc0 [ 960.653779][T21663] kthread+0x388/0x470 [ 960.653788][T21663] ret_from_fork+0x51e/0xb90 [ 960.653801][T21663] ret_from_fork_asm+0x1a/0x30 [ 960.653816][T21663] } [ 960.653819][T21663] ... key at: [] tasklist_lock+0x18/0x40 [ 960.653835][T21663] ... acquired at: [ 960.653839][T21663] _raw_read_lock+0x36/0x50 [ 960.653849][T21663] send_sigio+0x101/0x370 [ 960.653860][T21663] kill_fasync+0x24d/0x4d0 [ 960.653870][T21663] lease_break_callback+0x26/0x30 [ 960.653885][T21663] __break_lease+0x81c/0x1e80 [ 960.653909][T21663] vfs_truncate+0x449/0x540 [ 960.653928][T21663] do_sys_truncate+0xf3/0x1c0 [ 960.653947][T21663] __x64_sys_truncate+0x5b/0x70 [ 960.653967][T21663] do_syscall_64+0x14d/0xf80 [ 960.653983][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.653993][T21663] [ 960.653996][T21663] -> (&f_owner->lock){....}-{3:3} { [ 960.654020][T21663] INITIAL USE at: [ 960.654026][T21663] lock_acquire+0xf0/0x2e0 [ 960.654040][T21663] _raw_write_lock_irq+0x3d/0x50 [ 960.654051][T21663] __f_setown+0x67/0x370 [ 960.654062][T21663] generic_setlease+0xacf/0xff0 [ 960.654071][T21663] do_fcntl_add_lease+0x35e/0x470 [ 960.654082][T21663] fcntl_setlease+0x123/0x180 [ 960.654092][T21663] do_fcntl+0x8b3/0x1a20 [ 960.654103][T21663] __se_sys_fcntl+0xc8/0x150 [ 960.654114][T21663] do_syscall_64+0x14d/0xf80 [ 960.654126][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.654137][T21663] INITIAL READ USE at: [ 960.654144][T21663] lock_acquire+0xf0/0x2e0 [ 960.654156][T21663] _raw_read_lock_irq+0x45/0x60 [ 960.654168][T21663] f_getown+0x54/0x2a0 [ 960.654177][T21663] sock_ioctl+0x586/0x7f0 [ 960.654192][T21663] __se_sys_ioctl+0xfc/0x170 [ 960.654204][T21663] do_syscall_64+0x14d/0xf80 [ 960.654216][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.654227][T21663] } [ 960.654231][T21663] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 960.654249][T21663] ... acquired at: [ 960.654252][T21663] _raw_read_lock_irqsave+0x48/0x60 [ 960.654267][T21663] send_sigio+0x38/0x370 [ 960.654277][T21663] kill_fasync+0x24d/0x4d0 [ 960.654288][T21663] lease_break_callback+0x26/0x30 [ 960.654298][T21663] __break_lease+0x81c/0x1e80 [ 960.654313][T21663] vfs_truncate+0x449/0x540 [ 960.654324][T21663] do_sys_truncate+0xf3/0x1c0 [ 960.654335][T21663] __x64_sys_truncate+0x5b/0x70 [ 960.654346][T21663] do_syscall_64+0x14d/0xf80 [ 960.654358][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.654368][T21663] [ 960.654371][T21663] -> (&new->fa_lock){...-}-{3:3} { [ 960.654386][T21663] IN-SOFTIRQ-R at: [ 960.654392][T21663] lock_acquire+0xf0/0x2e0 [ 960.654405][T21663] _raw_read_lock_irqsave+0x48/0x60 [ 960.654416][T21663] kill_fasync+0x199/0x4d0 [ 960.654427][T21663] sock_wake_async+0x137/0x160 [ 960.654436][T21663] sock_def_readable+0x3c1/0x580 [ 960.654451][T21663] tcp_data_queue+0x1e2e/0x5e50 [ 960.654465][T21663] tcp_rcv_established+0xf45/0x2740 [ 960.654478][T21663] tcp_v4_do_rcv+0xa90/0x1430 [ 960.654494][T21663] tcp_v4_rcv+0x2825/0x31f0 [ 960.654503][T21663] ip_protocol_deliver_rcu+0x221/0x440 [ 960.654518][T21663] ip_local_deliver_finish+0x3bb/0x6f0 [ 960.654534][T21663] NF_HOOK+0x336/0x3c0 [ 960.654548][T21663] NF_HOOK+0x336/0x3c0 [ 960.654563][T21663] process_backlog+0xaa3/0x1950 [ 960.654574][T21663] __napi_poll+0xae/0x340 [ 960.654583][T21663] net_rx_action+0x627/0xf70 [ 960.654593][T21663] handle_softirqs+0x22a/0x870 [ 960.654607][T21663] do_softirq+0x76/0xd0 [ 960.654620][T21663] __local_bh_enable_ip+0xf8/0x130 [ 960.654632][T21663] sk_stream_wait_memory+0x72b/0xf80 [ 960.654647][T21663] tcp_sendmsg_locked+0x23ba/0x5490 [ 960.654662][T21663] tcp_sendmsg+0x2f/0x50 [ 960.654674][T21663] __sys_sendto+0x5de/0x710 [ 960.654685][T21663] __x64_sys_sendto+0xde/0x100 [ 960.654697][T21663] do_syscall_64+0x14d/0xf80 [ 960.654709][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.654719][T21663] INITIAL USE at: [ 960.654726][T21663] lock_acquire+0xf0/0x2e0 [ 960.654738][T21663] _raw_write_lock_irq+0x3d/0x50 [ 960.654750][T21663] fasync_remove_entry+0xf1/0x1c0 [ 960.654761][T21663] lease_modify+0x4f7/0x6c0 [ 960.654776][T21663] locks_remove_file+0x5f0/0xf70 [ 960.654787][T21663] __fput+0x3ae/0xa70 [ 960.654801][T21663] task_work_run+0x1d9/0x270 [ 960.654811][T21663] exit_to_user_mode_loop+0xed/0x480 [ 960.654824][T21663] do_syscall_64+0x32d/0xf80 [ 960.654837][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.654847][T21663] INITIAL READ USE at: [ 960.654854][T21663] lock_acquire+0xf0/0x2e0 [ 960.654866][T21663] _raw_read_lock_irqsave+0x48/0x60 [ 960.654878][T21663] kill_fasync+0x199/0x4d0 [ 960.654889][T21663] sock_wake_async+0x137/0x160 [ 960.654899][T21663] sk_wake_async+0x189/0x280 [ 960.654911][T21663] tcp_rcv_state_process+0x1e6a/0x4810 [ 960.654926][T21663] tcp_v4_do_rcv+0x6bb/0x1430 [ 960.654941][T21663] __release_sock+0x265/0x3a0 [ 960.654955][T21663] release_sock+0x5f/0x1f0 [ 960.654965][T21663] __inet_stream_connect+0x85d/0xdd0 [ 960.654978][T21663] inet_stream_connect+0x66/0xa0 [ 960.654991][T21663] __sys_connect+0x312/0x450 [ 960.655001][T21663] __x64_sys_connect+0x7a/0x90 [ 960.655018][T21663] do_syscall_64+0x14d/0xf80 [ 960.655031][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.655042][T21663] } [ 960.655046][T21663] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 960.655064][T21663] ... acquired at: [ 960.655068][T21663] _raw_read_lock_irqsave+0x48/0x60 [ 960.655079][T21663] kill_fasync+0x199/0x4d0 [ 960.655090][T21663] __start_tty+0x18c/0x220 [ 960.655099][T21663] tty_send_xchar+0x1d2/0x4d0 [ 960.655108][T21663] tty_ioctl+0x9c5/0xde0 [ 960.655117][T21663] __se_sys_ioctl+0xfc/0x170 [ 960.655129][T21663] do_syscall_64+0x14d/0xf80 [ 960.655141][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.655151][T21663] [ 960.655154][T21663] -> (&tty->flow.lock){....}-{3:3} { [ 960.655169][T21663] INITIAL USE at: [ 960.655176][T21663] lock_acquire+0xf0/0x2e0 [ 960.655188][T21663] _raw_spin_lock_irqsave+0x40/0x60 [ 960.655199][T21663] start_tty+0x20/0x70 [ 960.655208][T21663] n_tty_set_termios+0xa7c/0x10c0 [ 960.655221][T21663] tty_set_termios+0xdb3/0x1800 [ 960.655236][T21663] set_termios+0x566/0x710 [ 960.655250][T21663] tty_mode_ioctl+0x4a6/0x7d0 [ 960.655265][T21663] tty_ioctl+0x9c5/0xde0 [ 960.655275][T21663] __se_sys_ioctl+0xfc/0x170 [ 960.655287][T21663] do_syscall_64+0x14d/0xf80 [ 960.655300][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.655310][T21663] } [ 960.655313][T21663] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 960.655325][T21663] ... acquired at: [ 960.655329][T21663] _raw_spin_lock_irqsave+0x40/0x60 [ 960.655340][T21663] stop_tty+0x2f/0x150 [ 960.655348][T21663] kbd_event+0x2ec1/0x40d0 [ 960.655358][T21663] input_handle_events_default+0xd4/0x1a0 [ 960.655370][T21663] input_pass_values+0x288/0x890 [ 960.655378][T21663] input_event_dispose+0x330/0x6b0 [ 960.655392][T21663] input_inject_event+0x1dd/0x340 [ 960.655405][T21663] evdev_write+0x325/0x4c0 [ 960.655414][T21663] vfs_write+0x29a/0xb90 [ 960.655424][T21663] ksys_write+0x150/0x270 [ 960.655435][T21663] do_syscall_64+0x14d/0xf80 [ 960.655447][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.655457][T21663] [ 960.655459][T21663] [ 960.655459][T21663] stack backtrace: [ 960.655471][T21663] CPU: 1 UID: 0 PID: 21663 Comm: syz.4.4625 Tainted: G L syzkaller #0 PREEMPT(full) [ 960.655486][T21663] Tainted: [L]=SOFTLOCKUP [ 960.655490][T21663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 960.655498][T21663] Call Trace: [ 960.655502][T21663] [ 960.655508][T21663] dump_stack_lvl+0xe8/0x150 [ 960.655524][T21663] __lock_acquire+0x2a94/0x2cf0 [ 960.655541][T21663] lock_acquire+0xf0/0x2e0 [ 960.655555][T21663] ? stop_tty+0x2f/0x150 [ 960.655566][T21663] _raw_spin_lock_irqsave+0x40/0x60 [ 960.655577][T21663] ? stop_tty+0x2f/0x150 [ 960.655586][T21663] stop_tty+0x2f/0x150 [ 960.655595][T21663] kbd_event+0x2ec1/0x40d0 [ 960.655607][T21663] ? __pfx_kbd_event+0x10/0x10 [ 960.655618][T21663] ? trace_sched_exit_tp+0x3a/0x150 [ 960.655631][T21663] ? __schedule+0x15f3/0x52d0 [ 960.655643][T21663] ? __lock_acquire+0x6b5/0x2cf0 [ 960.655659][T21663] ? __lock_acquire+0x6b5/0x2cf0 [ 960.655672][T21663] ? __lock_acquire+0x6b5/0x2cf0 [ 960.655687][T21663] ? __lock_acquire+0x6b5/0x2cf0 [ 960.655699][T21663] ? lock_acquire+0xf0/0x2e0 [ 960.655713][T21663] input_handle_events_default+0xd4/0x1a0 [ 960.655726][T21663] ? input_pass_values+0x8d/0x890 [ 960.655735][T21663] input_pass_values+0x288/0x890 [ 960.655746][T21663] ? input_handle_event+0x70c/0xf30 [ 960.655760][T21663] input_event_dispose+0x330/0x6b0 [ 960.655775][T21663] input_inject_event+0x1dd/0x340 [ 960.655789][T21663] ? input_inject_event+0xb6/0x340 [ 960.655803][T21663] evdev_write+0x325/0x4c0 [ 960.655814][T21663] ? __pfx_evdev_write+0x10/0x10 [ 960.655825][T21663] ? bpf_lsm_file_permission+0x9/0x20 [ 960.655838][T21663] ? security_file_permission+0x75/0x260 [ 960.655852][T21663] ? rw_verify_area+0x255/0x4d0 [ 960.655863][T21663] ? __pfx_evdev_write+0x10/0x10 [ 960.655874][T21663] vfs_write+0x29a/0xb90 [ 960.655886][T21663] ? __pfx_vfs_write+0x10/0x10 [ 960.655897][T21663] ? __fget_files+0x2a/0x420 [ 960.655907][T21663] ? __fget_files+0x2a/0x420 [ 960.655915][T21663] ? __fget_files+0x3a0/0x420 [ 960.655924][T21663] ? __fget_files+0x2a/0x420 [ 960.655934][T21663] ksys_write+0x150/0x270 [ 960.655945][T21663] ? __pfx_ksys_write+0x10/0x10 [ 960.655958][T21663] do_syscall_64+0x14d/0xf80 [ 960.655971][T21663] ? trace_irq_disable+0x3b/0x150 [ 960.655980][T21663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.655990][T21663] ? clear_bhb_loop+0x40/0x90 [ 960.656002][T21663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.656019][T21663] RIP: 0033:0x7f938c99c819 [ 960.656030][T21663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.656040][T21663] RSP: 002b:00007f938d777028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 960.656052][T21663] RAX: ffffffffffffffda RBX: 00007f938cc15fa0 RCX: 00007f938c99c819 [ 960.656060][T21663] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006 [ 960.656067][T21663] RBP: 00007f938ca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 960.656074][T21663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.656081][T21663] R13: 00007f938cc16038 R14: 00007f938cc15fa0 R15: 00007f938cd3fa48 [ 960.656092][T21663] [ 960.739173][T21667] ieee80211 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—: Selected rate control algorithm 'minstrel_ht' [ 960.770355][T21669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 961.318616][T17530] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 961.520899][T17530] usb 4-1: Using ep0 maxpacket: 8 [ 961.522776][T17530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 961.522808][T17530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 961.522829][T17530] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 961.522851][T17530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 961.522877][T17530] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 961.522911][T17530] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 961.522926][T17530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.523979][T17530] usb 4-1: config 0 descriptor?? [ 961.524449][T21660] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 961.943197][T21660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.943368][T21660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.949843][T17530] usb 4-1: USB disconnect, device number 8 [ 961.953132][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 962.145476][T17530] usb 6-1: USB disconnect, device number 73 [ 962.155403][T17530] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 962.155583][T17530] kobil_sct 6-1:2.45: device disconnected [ 962.489416][T17530] usb 3-1: USB disconnect, device number 120