last executing test programs: 9.553298358s ago: executing program 4 (id=619): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r4 = dup2(r3, r1) fdatasync(r4) r5 = syz_io_uring_setup(0x478e, &(0x7f0000000400)={0x0, 0xc593, 0x8, 0x1, 0x309}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_RING_FDS(r5, 0x14, &(0x7f0000000540), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001c00010029bd7000fedb8c1f07000000", @ANYRES32=r7, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0c"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) syz_open_dev$I2C(&(0x7f0000000000), 0x7f, 0x404002) syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904d4b65158747273dc173857e8b7e8460c05803da772595265856d646e00000000bf197bec61de9f9813c8"], 0x0) r8 = socket(0x10, 0x2, 0x0) sendto$inet6(r8, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006160a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0xc020, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x400, 0x48940) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x3}}]}, 0x24}}, 0x20004980) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000735500000000000000000000feff000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000005b00"/144]}, 0x108) r10 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r10, 0x4014563c, &(0x7f0000000100)={0x9, {0xab, 0x829, 0xfc8, 0xb}}) 8.998363613s ago: executing program 3 (id=622): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000001180)={0x18, 0x0, {0x2, @local, 'veth1_to_bridge\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'geneve1\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x452, 0x9}}) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) openat$dsp1(0xffffffffffffff9c, 0x0, 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x80201, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) 8.587014409s ago: executing program 3 (id=624): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="060000ed03010000ff0f000005930f548a522f2e9b4e81f95da8d32aa4e9c28cad21683ae234074601372995317c292ba0ea8a6f46e618850aab007ac9c806638c834579006033e6c21b4bb66e9c666b6081f2999ce63e01e4444ee4c18e9af300"/110], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x9c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010100000000130000000000000005000100070000"], 0x1c}}, 0x0) syz_open_dev$swradio(&(0x7f0000000540), 0x0, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x8, 0x0) writev(r6, &(0x7f0000000500)=[{&(0x7f0000000040)='{O', 0x2}], 0x1) 8.523936831s ago: executing program 2 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) close_range(r2, r2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c6ce00256e0cba44474b11d1f3e37f5031465a0bebbd1682734985847e6deca2562ce808c40199ba1aacbd16fb0c8cdaba306958df0149d2533a38d0e155aee13fb8b8413d42231fd"], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x20040, 0x3, 0x100007, 0x16, "0500"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000540)=@ethtool_sset_info={0x37, 0x3cd}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_vlan\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @loopback, [0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'bond_slave_1\x00', {0x3, 0x1, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4c03}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x520) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x4000010) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x40b, 0x70bd2b, 0x500, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0xffffff63}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5, 0x8, 0x1}, @IFLA_BRPORT_BCAST_FLOOD={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0xffffffc0}]}}}]}, 0x5c}}, 0x40000) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000400)={{0x3, 0x2, 0x0, 0x3, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r8, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x5422) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001f40)=""/4068, 0xfe4}], 0x1}, 0x10002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000540)={0x40, 0x5, 0x2, "5603"}, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x24044000) 7.41920475s ago: executing program 4 (id=628): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x627, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x4010) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)=0x8001) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1fffffff, 0x0, 0x1, 0x1}}], 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r2 = openat(r1, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) read(r2, &(0x7f0000000300), 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8000000000fb, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x10000, 0xfffffffc, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) r4 = socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0xcd, 0x0, 0xf}, {0x4b564d02, 0x0, 0x2006}]}) syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000c0) 6.974241764s ago: executing program 4 (id=630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="50000000130001002abd7000f8dbdf2504004f8008003300", @ANYRES32, @ANYBLOB="1800258014001c0020010000000000000000000000000001080013"], 0x50}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, 0x0) (async) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r7 = dup3(r6, r5, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) (async) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r9, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) (async) syz_clone(0xb00040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x400000b6, 0x0, 0x7f}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x30, 0x66, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0x46a5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc, 0x9}}}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x1, 0x145, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2b73, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x133, 0x3, 0x1, 0x6, 0xc0, 0x5, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x66, 0x5}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x200, 0x4, 0x9, 0x3, 0x200, 0x200, 0xd0, 0x9}, @input_terminal={0x14, 0x24, 0x2, 0x3, 0x204, 0x6, 0x6, 0x4, 0x4, 0x8, 0x2, 0xc2}, @power_domain={0x11, 0x24, 0x10, 0x24, 0x9, 0x0, 0xd, "9238a69d2f04b96a"}, @selector_unit={0xb, 0x24, 0xc, 0x9, 0x6, "3614c2667dfe"}, @multiply_unit={0xb, 0x24, 0xd, 0x10, 0xfe, 0x2, 0x2}, @feature_unit={0xd, 0x24, 0x7, 0x1, 0x2, [0x5, 0xb]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x0, 0xb, 0xa, "c3e70335"}, @as_header={0x17, 0x24, 0x1, 0x6, 0x1, 0x7, 0x1001, 0x40, 0x3, 0x9}, @as_header={0x17, 0x24, 0x1, 0xa0, 0x8, 0x8, 0x4, 0xfa, 0xe, 0x8, 0xf9}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x9, 0x3, {0xa, 0x25, 0x25, 0x504e, 0x0, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0xd, 0x20, 0x9, 0xe}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x2, 0x7, 0x9, "4124a323"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x191, 0x0, 0x3e}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x9, 0x81, 0x0, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2c, 0x2, 0x4, {0xa, 0x25, 0x25, 0xfffffff8, 0x5, 0x8}}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x9, 0x5, 0x9, 0x10, 0x7f}, 0x20, &(0x7f0000000240)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0xb0, "900ebd761e04f1eb9b0949ff64358184"}]}, 0x6, [{0x33, &(0x7f0000000280)=@string={0x33, 0x3, "6ef314bc0afedc9e21bd695965679a7f815e12c9b5015b574d77a6dbe4c454d6674a4f1134efb29356c2e93b9388e41d19"}}, {0xaa, &(0x7f00000002c0)=@string={0xaa, 0x3, "1ac27d2f7de1724246f2321d6da68909be29cb2a77d20df529235535f07530a67419135dfb723f974aed27dafdddfaf6756187ce287d5b739b18bf5abe93a58f8b322122b71c17885b599bf4349f3e1e3ff2a5e9d98ccadd4ca55be0d991de6dc22e5cd4bc8d3bd1d05c0589f7a77c08e0249b47b2fbf4e6481a33b07187c998c540669d39540f2314061bed3b38e306c6b06e5226cfc7bc9ee7df4b826cbbe200ca451f558b8f57"}}, {0xd1, &(0x7f0000000380)=@string={0xd1, 0x3, "20d20926375c95f3fb73436eb5ccbe71bb0b47a03a9102eb3fce2f7ab6c7aad1a8f6e455e1fc46221a89f496e16bf680a3675e30f4dd0e452e10bec3b791edcf4507fd32e95478e404ebf70020c48b15a88906901c87515b26be3d630e76ee585b483a4c6661c5f32e4dcd12f5e4def55109a14689046e100a4d2e7b326fbcf40de57db0b87c60c6b47f5725fcfc25ea03c5d7e14c3a8bcb097aaf2b48b3d36185abe33b37fe86b0c2bf58adff7d627f4c0e627c53dd7ec0f804c42bfb4d181b796d8fd1ce187d1857b804e27ae69f"}}, {0x18, &(0x7f0000000480)=@string={0x18, 0x3, "9e6a8a2e945d670874d50deb3e94981356ac41aed8ad"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40d}}, {0x65, &(0x7f0000000500)=@string={0x65, 0x3, "0f1ae975b3fe5aa24d9bceaafd1282034f2d88d82fb6598aa34f98ff3d39d3bbf21a4c1037231a66b4fd337d356bc656810b9a3b40026d8d5c8d500e49395cdce32d8e3edad8dfa357c10d8adf4aa11a0b8ffa28dbc3fbc6d21696a09ea76a1add2f70"}}]}) 6.918220673s ago: executing program 1 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7a9}}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f023}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x330, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000b80)) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4212, r7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001000)) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x60, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}, @TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x81}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0xf703}]}}]}, 0x60}}, 0x0) 6.519656778s ago: executing program 3 (id=633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd2(0x4, 0x80000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x5, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x0, 0x2}, {0x0, 0x6, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0x3ff, 0x7, 0x1008, 0x5, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0xffffffff}]}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x2, 0x3ff, 0x9, 0x4, 0xe, 0x4, 0x0, 0x9}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x8000000000000001}, {0x9, 0x0, 0x0, 0x8000}, 0x2}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x42b9}]}, 0xc0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) eventfd2(0x4, 0x80000) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000240)={0x5, 0x0, [{0x2, 0x0, 0x0, 0x8, 0x0, 0x2}, {0x0, 0x6, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0x3ff, 0x7, 0x1008, 0x5, 0x110, 0x3}, {0x80000000, 0x5dd3, 0x6, 0x6, 0xe231, 0x1, 0xffffffff}]}) (async) socket$inet6(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000100)=@ethtool_channels={0x1, 0x2, 0x3ff, 0x9, 0x4, 0xe, 0x4, 0x0, 0x9}}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc0, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x8000000000000001}, {0x9, 0x0, 0x0, 0x8000}, 0x2}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x42b9}]}, 0xc0}}, 0x0) (async) 6.373033759s ago: executing program 1 (id=634): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000009f40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @remote, 0x6}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="b1", 0x1}], 0x1}}], 0x1, 0x4000054) r3 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x17, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/140, 0x8c}], 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x1c, "f4d16a694850f6c3eea03b53e7356a2eb747e8c5aaf5961ed559af66"}, &(0x7f0000000200)=0x24) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 5.449530381s ago: executing program 3 (id=635): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x207, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000100)={0x7, '\x00', {0xc}, 0x9}) syz_usb_connect(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504", @ANYBLOB="031c"], 0x0) r3 = memfd_secret(0x80000) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000000)={0x8000000000000000, 0x1, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote, @remote, @remote}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r7, r6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/236, 0xec, 0x1, 0x26}, @fda={0x66646185, 0xc, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r4}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r4}) 5.369516269s ago: executing program 2 (id=636): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109", @ANYBLOB="a31b33"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40c, 0x11) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.945952686s ago: executing program 0 (id=637): socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netstat\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/164, 0xa4}], 0x1000000000000108, 0x182, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc0106442, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={r7}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000280)={r8, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x61, 0x4]}}) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r10, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x306, @local}, 0x0, {0x2, 0x4e20, @local}, 'batadv_slave_0\x00'}) ioctl$LOOP_SET_BLOCK_SIZE(r9, 0x4c06, 0x4) 4.670799059s ago: executing program 0 (id=638): socket$nl_generic(0x10, 0x3, 0x10) 4.450055979s ago: executing program 0 (id=639): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x5, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x80000006) madvise(&(0x7f000025a000/0x4000)=nil, 0x4000, 0x19) r3 = socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0xb) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB="08001f0006000000181bdcd3b9f9ec9a4b7b54c004e8d6bce8e7aec5516aa262d129b7269403410cb64bb04b924e1b7257e7fc56a9e40570bb24c3b0559a8d4e9f31083a6e98ddde5823058606ddfa9c0f662b90819578427be3bed92593bd18013bc1caa1439a11685a9383"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000070000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], &(0x7f0000000500)='syzkaller\x00', 0xcd, 0x76, &(0x7f0000000540)=""/118, 0x41000, 0x0, '\x00', r4, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x3, 0xb89, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000880)={r5, &(0x7f0000000780)='ipvlan\x00', 0x10000, &(0x7f00000007c0)={@align=0x2a, {0x1, 0x7, 0xb410, 0xfffffffffffffffc}}, 0x50, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0x229f}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20004845}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r9, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void, @void}}}, 0x14}}, 0x50) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0xa) 4.203465542s ago: executing program 1 (id=640): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x627, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x4010) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)=0x8001) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1fffffff, 0x0, 0x1, 0x1}}], 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r2 = openat(r1, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) read(r2, &(0x7f0000000300), 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8000000000fb, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x10000, 0xfffffffc, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) r4 = socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0xcd, 0x0, 0xf}, {0x4b564d02, 0x0, 0x2006}]}) syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000c0) 3.919719522s ago: executing program 3 (id=641): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000380)=0xfffffffc) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, 0x0, &(0x7f00000000c0)) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB="cc549d27"], 0x0, 0x0, 0x0}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffe, 0x63, 0x6, @buffer={0x0, 0x8c, &(0x7f0000000040)=""/140}, &(0x7f0000000100)="c3d8e5c3fb6591909e87df1cf023104aff98faa0f1b87a94dbfb26b7e87d2ead3afa3294f88490827673205ee7d433a1e572295c2a60ca2799ad62e82cd37efee5a4acceada5d3551b338bee5f060406fb2f2e2c69e51d28c12f786cbd157259d9fd39", &(0x7f0000000180)=""/226, 0x2, 0x10030, 0x3, &(0x7f0000000280)}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 3.764344088s ago: executing program 1 (id=642): syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaaaa86dd66c2eeed0018110000000000000000000000000000000000fe8000000000000000000000000000aa4e204e2200"], 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000380)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002dbd70e8fddbdf25090000000c009900040000003f0000000a000600ffffffffffff000004000a0011000a00d304000000000000001ce910a50000000c000a00a72ad198c74fbb6c13000a00b2ed52303ca94b67cc0f0851d03dfc001400508008000700010000000800030005ac0f00"], 0x78}, 0x1, 0x0, 0x0, 0x4044840}, 0x44000) syz_create_resource$binfmt(0x0) sendfile(r0, r1, &(0x7f0000000280)=0xfffffffffffff926, 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f705d, 0xb}, {0x6, 0x2007f}]}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0xffffe000) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x34324948, [], [0x8200], 0x1}}}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002500), 0x2443, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r9, 0x3ba0, &(0x7f0000001000)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000000000)="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", 0x466f}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) close(r3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x119, 0x71, 0x0, &(0x7f0000000180)) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000001c0)={0x8e, 0x3, 0x2}) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) 3.457680551s ago: executing program 4 (id=643): r0 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x502) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000003c0)) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000240)={0x6, "155b1d1ebe62a0e07aad4002f33f111a9fab2e1bae0b3dfe5bfd078534b09c0f", 0x100, 0xffffffff, 0x7, 0x1, 0x5}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r1, 0x1, 0xf, &(0x7f0000000b40)=""/4096, &(0x7f0000000040)=0x1000) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b00"], 0x10b8}, 0xff4c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x1405, 0x300, 0x70bd28, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040881}, 0x4000040) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000340)=@fd={0xc, 0x7, 0x4, 0x800000, 0xb, {0x77359400}, {0x2, 0x0, 0x7f, 0x7, 0x8, 0x4, "9ac1b642"}, 0x5, 0x4, {}, 0xa6a, 0x0, r4}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) 3.352855118s ago: executing program 4 (id=644): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0xd3, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x499, 0x1005, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x67, 0x80, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x49}, [@feature_unit={0x13, 0x24, 0x6, 0x3, 0x2, 0x6, [0x5, 0x6, 0x9, 0x9, 0x3, 0x8], 0x6}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x6, 0x9}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x5, 0x8f, "801c28451163"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x6, 0x4, 0x9, 0x8f, 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x2, 0x4, "cec53a80e1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x2, 0xff, "096130c0edfcd13f86"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x7, 0x4, {0x7, 0x25, 0x1, 0x0, 0x2, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xc0, 0x1, 0x7, 0x3, "b190607e0bfdb8b5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x5, 0x9, 0x40, {0x7, 0x25, 0x1, 0x8, 0x4, 0xa5}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xf, 0xa, 0x5, 0x10, 0x5}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x2, [{0xf5, &(0x7f00000001c0)=@string={0xf5, 0x3, "f6573f0db6900862f5fc5e4b5e68ebb52a89500dadef899604a3522e7b3b60ac7f0108361ac32c7b618b9ffbdae6d8ecc26db5dd0c58bd59c3316553e312267982d94c8a762f10ea809603cde2299e1f6d33ca150d9f6c3216a0fca5d82492ae2501ccfd18fe41d839584d1a93f6bd04196e9fb583975b19a30759398dd897b56b91badd68c1e82a2e57bd725cd23dcd6cd364b40a8f9bccc9a5d5733f764713a7b6eacdbda87e782f71d2e87138c22b2b02359ba7c46ed0552477a6cc32956d02c72bee9fb937076a4a2285a2b917b15d7af6efd0f583195312366517c245a3bad114965941639c5e73fe438b62369e8e234d"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x4001}}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = fsopen(0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) recvmmsg(r1, &(0x7f0000001640)=[{{&(0x7f0000000280)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003d80)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003dc0)={0x0, 0x0, 0x0}, &(0x7f0000003e00)=0xc) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003840), 0x0, &(0x7f00000004c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9}}}, @cred={{0x1c, 0x1, 0x2, {r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r1, r6, r2, r2, r1, r1, r2]}}, @rights={{0x28, 0x1, 0x1, [r1, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0xc8, 0x20040000}}, {{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000640)}, {&(0x7f0000000680)="5ce8c4785c02f51617a210519e3cb816d74897e3b96e882bf86bb7713b37140c30f5eb39ed0002100b3d1fe9d5451ed23ee256115eefe7ed0c0450853615ef6d5b4e3f9966f982fd57f55673d8655514e01fca25e0099c2da29e4cfb14e937b0159e82dae2e628a268b1af2446bb534206a288b3b5451ce83b48612d4f3276431e1b178ee98115797beaa39a268f8385a7abd91b11333bb9aef02d7f1ed9fda4a0f0", 0xa2}, {&(0x7f0000000900)="cd9c89917541877be456b374dceb4e7922272003aa235b1f90816140fdfa097395bf677ee0793b0052914548dce584270d99736625f8d254cedc6084b7d749950a531b44589e6a50082e5542c736d3da5e589f3ea7a3ecd286dcd3874e191a59e289728d83e8360412ff807ee54948fde4613a526a9d277eaddaa3b8549579ba12a853d7d8bdb60499500982b601efde6e7eb21f67f84c78021647ebb767fe7a5aceb97e9ac11e46639fb037cccaee58164c08ef2115305c8fab82ec5a2343b3bffe0c0362e5f2ed", 0xc8}, {&(0x7f0000000a00)="47a6eebf0a9d7a76f2d1da", 0xb}], 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="00000000300000000000000001000300010000008b7dabfb4b1018fdf0017fb2ff539aa530c19c9b93da09696395dc8141c1011c695b8ed02bc4ab89a38c6871b5ed6f1853eb76af165ae6ed102f3cecb9c97d3e3be6011c8e5d364fabd9dae528cfa18c44ce726bddba6d33d3e15bb9613a3b76f859ceb0352b75a737f2b67b9b14c609", @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x80, 0x4000000}}, {{&(0x7f0000000cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000d40)="af985380308dd04af3381b00cb39367053815a6aeb5d1d9e671ee36f6fbdf18caccdaa439dc94bad59c1966eff76da8506b45ac9ad6dc968a0456224bbcf3b18757de6f442d368bd8f750354f2ce401ae8b7f48168", 0x55}, {&(0x7f0000000dc0)="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", 0xff}, {&(0x7f0000000f80)="00c1f1d5e34496c127f78a4af685df2293ea1f992cb41f973374375fdeb4a61db00f33520702aeeff6c11076cb988c9b6171f53a0dc82e8c220dce0797735c8b6facdffd08cd3ada9136c7e83057653c298008d265406f9010ea1c88b3ace38e8d048c67b7bbd323b62c9eda4b352745e14f0f624043c544e1fa573114fd7e75f53a0d6e6a435ea0c77e5da135f6bdcfcec3041c02b6", 0x96}, {&(0x7f0000001040)="3b863d21ab1b4681d8d3d744b9f5b66270afbabe938bca70fb63fc52d17aa8dcb7abe702cb42acf1", 0x28}], 0x4, &(0x7f00000010c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r5, 0xffffffffffffffff, r3, 0xffffffffffffffff, r5, r3]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r10}}}], 0x88}}, {{&(0x7f0000001240)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f00000012c0)="681fc86a33fcee08ecfc015f837ac7d9916707e641594f0ade94e2cdf1e524c6ca095949ac85253223bf21bbffdedb564e332ba062159bc36eb39d77fcabaa4f2dee772dece97511", 0x48}, {&(0x7f0000001340)="c6bcfe045bb228914cf2b28a", 0xc}, {&(0x7f0000001380)="a406b0", 0x3}, {&(0x7f00000013c0)="baac6ab64e9f9e3359a2068e1b96e2ee57378cc26cc0cd1617bbf9f0ccff0b145412f2aeb057d7f227daa55bb2440a385ec45d3bde842937a34f47de5ea9af26", 0x40}, {&(0x7f0000000a80)="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", 0x138}, {&(0x7f0000001480)="befe7fb7958efae4ebbc139e2f357263671d1175083f59609204c3d2d694243ebbec1b531687f7285e", 0x29}, {&(0x7f00000014c0)="739a307300b74b216080058aaf37b6e5a94b51a21613ec5af5330c9e4d14bdf36c5690d4ace190d801227ca624bdae25efc857151efbd48e99c45dea59e70a59ee953694fb5353396614364ed7deeb98cce76412c787ace56e312522406d34b196d7e3bb3cd41fa51b898a4f93f28df6455076d3d3528dd6538b89601d7b6a4bccb54a73694b26adc783cf614e5c9de595b051961e2cd0b71c31032f036bd301f0475d9cb1e9bb19a17eeaa610196cfe236fe4", 0xb3}], 0x7, 0x0, 0x0, 0x20004000}}], 0x4, 0x4008048) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', r4}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x1b, 0x0, 0x0) write(r11, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000d00", 0x29) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r13, 0x803) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 2.913727806s ago: executing program 0 (id=645): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.152470081s ago: executing program 2 (id=646): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202400, 0xac) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x2, 0x1) r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$khugepaged_scan(r1, &(0x7f0000000100), 0x8) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000180)) write$khugepaged_scan(r2, &(0x7f00000001c0), 0x8) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000200)={0x0, r2}) write$khugepaged_scan(r2, &(0x7f0000000240), 0x8) r3 = socket$inet6(0xa, 0x800, 0x80) ioctl$NILFS_IOCTL_GET_SUSTAT(r3, 0x80306e85, &(0x7f0000000280)) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000300)={0x3, 0x1}) pwritev(r4, &(0x7f0000000780)=[{&(0x7f0000000340)="1de2f7152fda5d3451bc8c916934b7304aab", 0x12}, {&(0x7f0000000380)="b533c5480a5d4a167b2a24b1a895b08707c6474fb07b5e6497a4502b245ad7c2802b0e8d1d3d67950c7dc46cc1898c836a76884088200f7fd31fa5cab15514ca59fcdcfba49d7a1baaf7ef635169bc27a495887e16f631fd2fa70753baf088e3d3c8f136ac5d6826d8f39565bce6c693eb4ffbf66c64ebcff233aa3f311f135a4a53eaa02652ef0b5fcc0446a7c98759fd19bd9f0b04bb63a2206b79c76eabf7aa85c53574c69fe3bcaaa0d32673637c57e9f7a48a84adfe1cdf91228dd78b9682ed3f72cd85d5ec468522cb65dde3c2cd3dd89df3c25185183ba880bcabe0780e2e56c2b9c8cf99a78ba33a99d635d7567ab516e7c018f6a5487c1836", 0xfd}, {&(0x7f0000000480)="3cd4fc31f8867b3bb9ce5ecc98f44a71e114b5e9c3e939836a73c61a5a99d40aa698e3f14660d44be90d0a97f9887f5f918f48e7529d8eb19f0d2411adc3d9883fedc73ec4753e50d87adc562cb2f7996a06c3a32be285c2a9dcdbe6dbb244e620d92ea41342b4e0eb0752a9f02b3d87f72ecb0d83e8f4436e7f8926ec9b3a06", 0x80}, {&(0x7f0000000500)="435d54d5ed78b8e54ae591ad9bcf9f536bf1c2c3470f4904e764f3973920e25d1c8b90656260be918fd2", 0x2a}, {&(0x7f0000000540)="886c32da58873f99d204c439eb2b31a22bf3ea5665f53ea74fa4ed0983a318a3aef9d78115802bcf24b193661df288268afadddfbcb2d3ee1d799c4c5d178460c07f5e90059cc6a419c0b53beaa16ebb1b9e1588e47a6de7f29208b49e1f56430fa826a5dcc488eb4b4d94a941e578eaa2cc76d1f5cd71fbda87b9a59e0faf5a2979adc7a9b99c153524fa12e6ac145c7eea0b34e79d189e1db22b0709c2f2b4e6743f83cb55df730708c48756e4b0adcd2f4fcd0076f801ecce8d837b8b3a4cad6829df1f72a64c853b337703c8edbeb205bbe94aea7e01c132ec4aaf781fa57ddfb0b2646cd4a80c1e8396a0", 0xed}, {&(0x7f0000000640)="97ab9bf7096cde", 0x7}, {&(0x7f0000000680)="ad5650211a3ccfa9617412bd8e950967114c805a61a0b57aa3de37c0ae188c68698020b1bf1cf127ea57bb50c531dbf9e41e2896fe63f6989afdd3058b8a9b28f73b2fa54b86404899e9e37715760f89f363ba090e2ee685b4d356a47f824fb994dcaf4d1ec5a512429f0c92788ac684b4968b2ab6d9304e1bf42bb2b0ce706d19f98724a746287a696a9346528a37830776517e88be887f3c6690785343a0d85f94e91b836ad63300f2f50093bee699cb62ffe1432e88e2a6380a4690984166d55c7ca05691c1821812b73af96274b3e8e81c4f95e1e4915a6f3ff4bd905990d32cff82287f4efbed0e86d89c1e0ee643990d89015f92441d7528a2bcac", 0xfe}], 0x7, 0x8001, 0x1) write$khugepaged_scan(r1, &(0x7f0000000800), 0x8) r5 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x3eb, 0x2118, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x80, 0x5, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0x4, {0x9, 0x21, 0x6, 0x5, 0x1, {0x22, 0xeb3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0x6, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x9, 0x5a, 0x7f}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x5, 0x9, 0x6c, 0x40, 0x7}, 0x7c, &(0x7f00000008c0)={0x5, 0xf, 0x7c, 0x1, [@generic={0x77, 0x10, 0xb, "38530ddf2835d4ea2e5886f7cca9bf5b91580329db09f2b553a3b9d813dfa669592fd5ac9f76b9d139ed4c5cff3de7d4d1c7e8ca0716c3b5e871cc94f84561f55c274f3cd3901b56d89d601443e1b6a43fdd6ce75d1324b4cfd314ca657c945e8b6ad211462dc44f83603ecf3bff35f53dcecfb4"}]}, 0x4, [{0x66, &(0x7f0000000940)=@string={0x66, 0x3, "57e5c30cddc9799e410df79e058b9a81f6607e4a03ae15cb1376e308dee4dd47ed9a204228ab113ef798cc09aecabaf1941332c6fde171a4e623f85b7c15c113d2b6ce3807c3fd6c05a33600e11cfd774003dc37968b79daee3d9e32de44faf7378a6e9b"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000cc0)={0x24, &(0x7f0000000b00)={0x40, 0x6, 0x32, {0x32, 0x10, "382e54a0f2a3b336ae61a14affcf973ae93bb373c8a2e75432b36d57f2a4a905808a323f97f8e97c7d1fa9cb14e88cd5"}}, &(0x7f0000000b40)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "4c25d53f5d5d539c9bec2d9f2ec6ca7a0ad12e5ba0572a8a44ee6dea8a06e30e6fdf89363605ce3ec0b9b0aa25c647feaf1c60a5ed6cb488fcd397f2e5ca8f4c99f1aaad643caa921c6dc7d19a917912b3f671702b5c35d31ca07d57d2eb23c7641c9c26264fa47f0bfff5868619ac6340c93e81817b41ee496558029bf82c9965bec4cf2545e04848b06eeadc8afddcec92b4379a66d606dd828d00060b0d01f8c53a839bb5bc0dd470cabba3ff2ade00688779a814e413bd18126432a0de2efe16fc24d460811a1839a5889dd60c19f22013b2ae1d62983dbe7d619d015b7024180ab783e1a61e36bba6851a7cb8cdeebf4f89a2b74127"}}, &(0x7f0000000c40)={0x0, 0x22, 0x19, {[@main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x2, 0x0, 0xb, "fa86"}, @local=@item_4={0x3, 0x2, 0x2, "a1061d42"}, @main=@item_012={0x1, 0x0, 0x8, '7'}, @local=@item_012={0x1, 0x2, 0x8, '\n'}, @local=@item_012={0x1, 0x2, 0x9, 'W'}, @global=@item_012={0x1, 0x1, 0x0, 'A'}, @global=@item_012={0x1, 0x1, 0x0, "90"}, @local=@item_4={0x3, 0x2, 0x3, "b96e6340"}, @main=@item_012={0x0, 0x0, 0x5}]}}, &(0x7f0000000c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa9, 0x7c, 0x1, {0x22, 0x5c0}}}}, &(0x7f0000000f40)={0x2c, &(0x7f0000000d00)={0x40, 0x16, 0x85, "c9408617ec6d1fd1c8cbaba012ed82f7d32deca18e6bc97fa94f0ef0633f0e3637b26e52bacd69b9ca3d55e370655e865bd2aedd5b3b1044dfd5c6cb1fabee8e52162e4affa36a0e7af33deb7c90c76f30344f0cf685259a6e60135a18ecd48159e62113f33d119457a70b8cf22ecd9cae78b2c6cd84aa97bad5b5bf7d180811bc32a4f672"}, &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0xd9}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000e40)={0x20, 0x1, 0xba, "190634b5c5018286fed0da701fab56b1e11f7081ba2c6212d8d1ca38118da81850897f56181363b7a9e41731642c73b970e5f685ed7fbbd211850d189bcb83e96e1229d99ddf5e6b89950c9b24c99cd5b82aa1d7253311bbe8fc90ca689d852807a530cd14be5abf47e79a07b0a027461d881624692e3e07e6ae4de987ff99e37cc11d113e4ab7caf0ce69f86056ed470e6bab17898fb3b543b163d940e7151c0b079365f2e19f75a43706e0f6343ddd44948b9b45f1ced69ac7"}, &(0x7f0000000f00)={0x20, 0x3, 0x1, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'syztnl2\x00', &(0x7f0000000fc0)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x1, 0x9, 0xc1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7800, 0x8, 0x400}}) sendmsg$nl_route_sched(r2, &(0x7f0000003c80)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000001080)=@newtfilter={0x2ba0, 0x2c, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x9, 0x10}, {0x1, 0xfff2}, {0x5}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0x2b60, 0x2, [@TCA_CGROUP_EMATCHES={0x1d4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc9a4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1b0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x524, 0x2, 0x8}, {0x80, 0x6, 0x2, "9eec332fe50c"}}}, @TCF_EM_CONTAINER={0xbc, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xcf0c}, "f633960797dfa50ecbcb63af4647d67c3a83aa57898deceada43fc8110b93850077ac73b80f863219d845e49ed013c44045f8c850b5dd2dfcc9f5a206bede91f522801afc90142bdc401b9fe867e218ee06217774afdc0ba008dc1d1adb4711ef20b2f2c939dc7c021e63c30d7d65998937cadb1c8e22251f946e80c39c9edd5bbfa66d3c8e41d1d509cd7738638069e9959dc1d2a3b8a93ab0c69e58097b0d4beeaf36188ed8d44583f0a4bd8"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x4}, {0x7f7, 0x1fc, 0xe4, 0xc, 0xe}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x400, 0x3, 0x4}, {0xfffffd44, 0xc9b9, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x3, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x8d, 0x7, 0xa28}, {{0x4, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x68, 0x3, 0x0, 0x0, {{0x4000}, "fad96d1ed3f49179c477f2c20e84ef60dc791d0b1dc45e3a1135a282a44be5225582575dfcc8466291e580923d95296b7bbb99fd21ef5f956068c673a4423f74106047cdc2be28e3b767fb221ae9916a2561b340859e3975966ca3"}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}]}, @TCA_CGROUP_POLICE={0x410, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xdca7, 0x2, 0x0, 0x261, 0xfffffffe, 0x5, 0x80000001, 0x9, 0x85cf, 0x1ff, 0x6, 0xe, 0x5, 0x3ff, 0xc, 0x8001, 0xbfc, 0x200, 0xd50, 0x3c03c153, 0x7, 0x7fff, 0xf55b, 0x7, 0x9a9b, 0x80000001, 0x3, 0x38b1, 0x0, 0x5, 0x0, 0x4, 0x7, 0x3, 0x4, 0x70, 0x80000001, 0x4, 0x8, 0xd, 0xa, 0x81, 0x2, 0x7fff, 0x0, 0xd, 0x7fff, 0x6, 0x4, 0x1, 0x0, 0x81, 0x2, 0x40, 0x8, 0xc6, 0x3, 0xfffffff7, 0x80000001, 0x24, 0x1000, 0x1, 0x7, 0x3, 0xb, 0x6, 0x0, 0xa, 0x8, 0x5, 0x679, 0xfffffffb, 0x6, 0x8000, 0xd, 0xfffffff9, 0x101, 0x7, 0x3, 0x5, 0x9, 0xfff, 0x0, 0x6, 0x5, 0x40000, 0x5, 0xffff9a66, 0xfffffffa, 0xfc, 0x4, 0x10000, 0x4, 0x0, 0x1ff, 0x8, 0x5, 0x1, 0x9, 0x2, 0x5, 0x0, 0x8, 0x1df2, 0xa9, 0x2, 0x5, 0x1, 0x64d9, 0x6, 0x6, 0x9, 0xd8da, 0x2, 0x7, 0x7, 0x9, 0x7fff, 0x5, 0x8, 0xfffffff1, 0x6, 0x8, 0x63000000, 0x2, 0x0, 0x5, 0x2, 0x9, 0x5, 0x3, 0x8000, 0x4, 0x9, 0x6, 0xa, 0x64a0, 0x1, 0x5, 0x3, 0x7fff, 0x6, 0x6, 0x2, 0x5, 0x3, 0x4, 0x1, 0x0, 0x8, 0x58, 0xb, 0x4, 0x3ff, 0x4, 0x2, 0x40100000, 0x9, 0x1, 0x0, 0x4, 0x8, 0x3, 0x6, 0x7, 0x6, 0x789, 0x6b, 0xd, 0x10, 0x2, 0xc5, 0xb, 0x6, 0x23, 0x8, 0x3, 0x0, 0x8, 0x5, 0x6, 0x6, 0xacc, 0xfff, 0x7, 0x0, 0x6, 0x40, 0xa, 0x80, 0x5, 0x6, 0x8, 0x7fff, 0x7, 0x2b, 0x6, 0xd, 0x9, 0x3, 0x9, 0x6, 0xffff, 0x6, 0x3, 0x5, 0x4, 0x3, 0x4, 0x2, 0x0, 0x9, 0x4, 0x7, 0x65f3, 0x9, 0x9, 0x1ff, 0x8, 0x5, 0x34000000, 0xfff, 0x2, 0xef, 0x1, 0x2, 0xffff, 0x8, 0x9, 0x8, 0xd, 0x5, 0x200, 0x3, 0x1, 0x9, 0x8, 0x0, 0x0, 0x7, 0x2, 0x8, 0x7fffffff, 0xfa, 0x3, 0x5, 0x8, 0x8, 0x3ff, 0x4, 0x8, 0x5, 0x77, 0xd, 0x2]}]}, @TCA_CGROUP_POLICE={0xcb0, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x1000, 0x2, 0x80000000, 0x7, 0x7, 0x6, 0x10001, 0x5, 0x5, 0x4, 0x0, 0x8f7, 0x5, 0xb28, 0x2, 0xfffffffe, 0x800, 0xf0000000, 0x3, 0x1, 0x6, 0x3, 0x9, 0x9, 0x5, 0xec, 0x0, 0x9, 0x286, 0x5, 0x3, 0x7, 0x8, 0x1, 0x4, 0xebe8, 0x5, 0x7ff, 0x5, 0x5, 0x1, 0x400, 0x5, 0x23fa, 0x8, 0x3, 0x1, 0xe44, 0x1ff, 0xfffffffd, 0x8, 0x4, 0x6dab, 0x7, 0x2, 0x3, 0x6, 0x4, 0x2b68, 0xc, 0x7fff, 0x1000, 0x5, 0x57, 0x8, 0x8, 0x2c7, 0x6, 0x40, 0x8, 0x6, 0x7, 0x4, 0x300, 0x8, 0x13a33dba, 0x7, 0xcc, 0x0, 0x1, 0xff, 0x101, 0x0, 0x800, 0x100, 0x7fffffff, 0x5, 0x3ff, 0x40, 0x8, 0x8, 0x7, 0x8, 0x6, 0x0, 0xd, 0xa50f, 0x8001, 0x1, 0x2, 0x36, 0x3, 0x800, 0x8, 0x6, 0x5, 0x7, 0x2, 0x4, 0x3, 0xf4, 0x10001, 0x7, 0x2, 0x3, 0x1000, 0x5, 0x3, 0xe, 0xc, 0xffffa7ed, 0x100, 0x400, 0x6, 0x1, 0x4, 0x1966400, 0x2, 0x5, 0x9, 0x7, 0x7, 0xfffffff7, 0x6, 0x6, 0x9, 0x6, 0xe, 0x3fb, 0xfff, 0xfffffff7, 0x7, 0x0, 0xfffffffb, 0x96df, 0x8000, 0x4, 0x5, 0x8, 0x1, 0x9, 0x6, 0x98, 0x7, 0x1, 0x7fffffff, 0xffffff7f, 0x9, 0x2, 0x10, 0x3, 0x76, 0x7, 0x3, 0x8, 0x0, 0xe, 0x8, 0x8, 0x0, 0x6, 0x98c7d53, 0x7, 0x2, 0x316, 0x1, 0x0, 0x9, 0x77, 0x7, 0x100, 0x3, 0x5, 0x1, 0xf28c, 0x1ff, 0xf9b, 0x2, 0x6, 0x6, 0x9, 0x9, 0x9, 0x0, 0x4, 0x5, 0x10001, 0x9, 0xaef, 0x8, 0x9, 0xfffffff9, 0x8, 0x401, 0x64b1f955, 0xa, 0x8d, 0x9, 0x1, 0x1, 0xd77, 0x1016, 0xffff, 0x2, 0x261, 0xffffff7f, 0x100, 0x10001, 0x1, 0xd13, 0xbf3, 0x3, 0xfffffff7, 0x101, 0x54f, 0x3, 0x0, 0x7ff, 0x7, 0x26bc, 0x5, 0xfffffffd, 0x9, 0x401, 0x7, 0x8, 0x7, 0x1, 0xa79b, 0xfff, 0x177, 0x1, 0x3, 0x5, 0x1a6b3b4e, 0x3, 0x5fa1, 0x1000, 0x4, 0x7fff, 0x1f, 0x0, 0xd858, 0x1ff, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0xffffffff, 0xc504, 0x6, {0x0, 0x2, 0x24b, 0x6, 0x9, 0x5}, {0x7, 0x0, 0x101, 0x3, 0x5, 0xffff0000}, 0x200, 0xc67, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0xfda0, 0x7, 0x7, 0x58000000, 0x200, 0x489, 0x8, 0xd, 0xf, 0x4, 0x10001, 0x4, 0x8001, 0x82c3, 0x4, 0x7ea, 0x2f1, 0x0, 0x3, 0x10000, 0x1000, 0x7fffffff, 0x4, 0x0, 0x9, 0xfffffffd, 0x1, 0xa1e4, 0x4, 0x5, 0x80, 0x2, 0x7, 0x6, 0x2, 0x40, 0x4, 0x40, 0xab, 0x3, 0x8, 0x6, 0x0, 0x1, 0x4, 0xa11, 0x1, 0x100, 0x400, 0x101, 0x5, 0x200, 0x9, 0x0, 0x2, 0x8, 0xf, 0x0, 0x10001, 0xfffffff9, 0x4, 0x5, 0xffffffff, 0xa0, 0x6, 0x1, 0x0, 0xffffffe3, 0x80000001, 0xa1, 0xe8, 0x6, 0x1e, 0x800, 0xbdad, 0xe698, 0x2, 0x10001, 0x40, 0x6, 0x6, 0x6, 0x7, 0xc3f, 0x2, 0x3, 0x10001, 0x8, 0x7, 0x1, 0xb543, 0x8, 0x4, 0x1, 0xe73, 0x7, 0xd8, 0x9, 0x2, 0x8001, 0x7, 0x200, 0x3, 0x8, 0x35f32f40, 0x6, 0x2, 0x5, 0x8000, 0x3, 0x2, 0xf42, 0x6, 0x2, 0x5, 0x6, 0x4, 0x7, 0x4, 0x7, 0x4, 0x3, 0x1, 0x4818, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x60b, 0x200, 0x5, 0x7, 0xeb69, 0x8, 0x1, 0x4, 0x1, 0x0, 0x1, 0x6, 0x5ad8, 0x81, 0x9, 0x6, 0x7, 0xfffffffa, 0x8, 0x9, 0x0, 0x8, 0x4, 0x10, 0x7, 0x8, 0x0, 0x7, 0x8000, 0x0, 0x0, 0x8, 0x7, 0x2, 0x7, 0x8, 0x145, 0x10001, 0x5, 0x400, 0xfffffffc, 0x1, 0x5, 0x5, 0x7b2f, 0x5, 0x900, 0x9, 0x0, 0x5, 0x100, 0x4, 0x3ff, 0x400, 0xffffffff, 0x5, 0x5, 0x3, 0x3, 0xb6b, 0x7fffffff, 0x8000, 0x0, 0xf83, 0x5, 0x7fffffff, 0x6, 0x6d03, 0x7, 0x1, 0xe000, 0x941, 0x758, 0x7fffffff, 0x5, 0x5, 0xd, 0x5, 0x7, 0x2, 0x0, 0x9, 0x0, 0x7, 0x6f, 0x5, 0xb8, 0x838, 0x7eb, 0x3, 0x8, 0x116, 0x5, 0x3, 0xd, 0x3, 0x2, 0x7f9, 0x9a800000, 0x4, 0x4, 0x5, 0x7ff, 0x7, 0x2, 0x4, 0x0, 0x5, 0xffffffda, 0xc, 0x4, 0xffff, 0x7, 0x7, 0x6, 0xc2, 0xff, 0x3, 0x4c7, 0x2, 0x2, 0x2, 0xc191, 0xbc1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x0, 0xb493, 0x8, 0x7db, {0xf, 0x1, 0x0, 0x7, 0x1, 0xfffff000}, {0x4, 0x0, 0x0, 0x1ff, 0xc, 0x7f}, 0x6, 0x3524, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8619, 0x7, 0x4, 0x100, 0x6, 0x6, 0xfffffffd, 0xb, 0xb0, 0x9, 0x3, 0x1ff, 0xae, 0x9, 0x32, 0x0, 0x8, 0x9, 0xa718, 0x10000, 0xfffeffff, 0x0, 0x1, 0x4, 0xfff, 0xb, 0x4, 0x5, 0x6, 0x8, 0x93, 0x0, 0x6, 0x0, 0x7ff, 0x4a, 0x3ff, 0x2, 0x81, 0xf, 0xa, 0x1, 0x9, 0x4, 0x6, 0x1, 0x1, 0x81ba, 0x3300862d, 0x7fffffff, 0x2, 0x40, 0x8, 0x2, 0x0, 0x7, 0xd6, 0x80000000, 0x1, 0x6, 0x0, 0x2, 0x4, 0x5c, 0x8001, 0x6, 0x4, 0x8c, 0x4, 0xe68d, 0x9, 0x7, 0x6, 0xab63, 0x200, 0x1000, 0x200, 0x8cc, 0x9, 0x1, 0x1, 0x0, 0x8, 0x3c5, 0x7fffffff, 0x81, 0x200000, 0xffff, 0x7f, 0x6f, 0x1, 0x5e6b, 0x1, 0x3b9, 0x7, 0x9414, 0xaa0, 0x7, 0xca9a, 0x3, 0x4, 0x3, 0x2, 0xf, 0x6, 0x10f4, 0x0, 0x3, 0x2, 0x5, 0xa8, 0x0, 0x2, 0x7, 0x1e, 0x0, 0x7, 0x5, 0x7, 0x0, 0x6, 0x1, 0x0, 0x2, 0x8, 0x0, 0x2, 0x30000000, 0x7, 0x0, 0xc3f, 0x9, 0x0, 0x80000000, 0x3, 0xa, 0xa6, 0x5, 0xfffffc00, 0x8, 0xfffffff9, 0x5, 0x8, 0xfa2, 0x5b54, 0x9, 0x5, 0x3082, 0x8001, 0x3, 0x2, 0x81, 0x8001, 0x8, 0x400, 0x4, 0x9, 0x5, 0x6, 0x80000001, 0x3, 0x8, 0xfffffffe, 0x2, 0x2, 0x9, 0x9, 0x3, 0xc4, 0x0, 0x5, 0x5, 0x0, 0x1000, 0x7f, 0x3b8, 0x2cff, 0x9, 0xf2e9, 0x2, 0x2, 0x80000000, 0x3d, 0x6, 0x3, 0x0, 0x6, 0x7, 0x10000, 0x8, 0x7, 0xe, 0x6, 0x2, 0x1, 0x4, 0x7e, 0x6, 0x1, 0x7, 0xe891, 0x4, 0x8, 0x3, 0x3, 0x7, 0xe1c8, 0xa152, 0x0, 0x485, 0x9, 0x9, 0x9, 0x3, 0x1, 0x6, 0xd, 0xc, 0xd67, 0x369fb449, 0x6, 0xa34d, 0xa75f, 0x4, 0x5, 0x80000001, 0xbc, 0x1a0, 0x9, 0x5c6f, 0x2, 0x5, 0x2, 0x3, 0xffffff7f, 0xfffffff7, 0x1, 0x5, 0x3, 0x2, 0xa, 0x3, 0x7fff, 0x5, 0xaaef, 0x6, 0x63, 0x9, 0x10000, 0x9, 0x3, 0x1ff, 0x0, 0x0, 0x10001]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8001}]}, @TCA_CGROUP_POLICE={0x83c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x10001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x8, 0xc043, 0x7fffffff, 0x11, 0x5, 0x1c000, 0x6, 0x400, 0x0, 0x6d71, 0x8, 0x10, 0x1, 0x0, 0x729, 0x9a, 0x1, 0x401, 0x1, 0x3ff, 0x2, 0x4, 0x6, 0x10001, 0x5, 0x6, 0x6, 0xc, 0x5, 0x0, 0x8, 0x9, 0x4, 0x2, 0xdd, 0x101, 0xffff, 0x8, 0x1, 0x10001, 0x7, 0x5, 0x7, 0x5, 0x8, 0xd56, 0x0, 0x42, 0x8, 0xc0000000, 0xb8, 0x2b, 0x200, 0x0, 0x3, 0x9, 0xa90a, 0x2, 0x9, 0x7, 0xfb, 0xfffffff9, 0x8, 0x1, 0x500000, 0x1, 0x0, 0x7, 0x8, 0x7, 0xfffffeff, 0xf0, 0xb59, 0x6, 0x7, 0x9, 0xa, 0x1, 0x4, 0x4, 0x9, 0x5, 0x800, 0x8, 0x6, 0x5b, 0x0, 0x2, 0x7, 0xffffffff, 0x14, 0x40000000, 0x9d3a, 0x38000000, 0x3, 0x9, 0x2, 0x2, 0x2, 0x0, 0x5e0, 0x8, 0x6, 0xa54f, 0x3, 0xff, 0x0, 0x2, 0x982d, 0x1, 0x9, 0x9, 0xf3dc93c, 0x10000, 0x400, 0x2, 0x1ff, 0xb, 0x3ff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x3, 0xfffff001, 0x4, 0x2, 0x8, 0x6, 0xc7e, 0x9368, 0x3, 0x4, 0x2, 0x6, 0x1, 0x46, 0x938b, 0x2, 0x5, 0xfff, 0x9b, 0x7, 0x9, 0x4, 0x918c, 0x70e4, 0x7, 0x7, 0x33, 0x0, 0x2, 0x8, 0x4, 0x7, 0x3, 0x400, 0x6, 0xb, 0x80, 0xee0, 0x2, 0x5, 0x1, 0x4, 0x2, 0x9, 0x800, 0xd, 0x9, 0xa, 0xfffffff7, 0x9, 0x101, 0x0, 0xfffffffe, 0x7, 0x5, 0x5, 0x8, 0x1ff, 0xffff, 0x47, 0x4ba, 0x1ff, 0x7ea1, 0xc, 0xa, 0x8, 0x9, 0x0, 0x285809b7, 0x49, 0x0, 0xfffffff8, 0x200000, 0x800, 0x81, 0x8000, 0x8d8b, 0x2000000, 0x0, 0x1, 0x0, 0x4, 0x2, 0x7fff, 0x5, 0x4, 0xfffffff8, 0x8aa, 0x4, 0x3, 0x3, 0x1, 0xffffffff, 0x7, 0x800000, 0x21, 0x4, 0x8000, 0xda, 0x4, 0x97, 0x4, 0x8, 0x5, 0x401, 0x2, 0x0, 0xf, 0xf46, 0x8, 0x1, 0x0, 0x0, 0x3d9073c8, 0x1, 0x0, 0x4, 0x422e, 0xd9f, 0x8, 0x6, 0x930, 0x6bdb, 0x4, 0x3, 0x5, 0x6, 0xe, 0xbd, 0x0, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1ce, 0x9, 0xffffffff, 0x7fff, 0x7, 0xffffffff, 0x7fff, 0x800000, 0x7, 0x7, 0x3, 0x3, 0xc, 0x8be, 0x7057, 0x5, 0x8, 0x3, 0x5, 0x8, 0x5000, 0xffffff0c, 0x2, 0x93, 0xffffd79b, 0x2, 0x8, 0x800, 0x2, 0x10000, 0xb, 0xffffffff, 0x2, 0x4, 0x2, 0x80000000, 0x7, 0xffff, 0x0, 0x1, 0x5, 0x4, 0x13, 0x5, 0x1, 0xa, 0xfffffffe, 0x0, 0x7ff, 0x1000, 0x200, 0x0, 0xfff, 0xf6ac, 0x1, 0x6000000, 0x3, 0x4, 0x9, 0x68, 0x3, 0xa0af, 0xeb, 0x0, 0x9, 0x5, 0x0, 0x2, 0x56, 0x0, 0x8001, 0x0, 0x52fe, 0x5, 0x5, 0x8, 0x877, 0x9, 0x0, 0x40, 0x4307, 0x5, 0x5, 0x661, 0xfffffffd, 0xb76d, 0x4, 0x3, 0x5, 0xfea8, 0x20000000, 0x8001, 0x800, 0x80000001, 0x1ff, 0x101, 0x3, 0x1, 0xc755, 0x4, 0xac9, 0x50, 0x4, 0x2, 0xb1a0, 0x6, 0x6b, 0x3f9, 0x10000, 0xa62b, 0x9, 0x687, 0xfffffff9, 0x5, 0x7, 0xe25, 0x1, 0xffffff9d, 0xfffffffa, 0x81, 0x7, 0x8001, 0x9, 0x0, 0x4, 0x8, 0x9, 0xd9, 0x2, 0x200, 0x8, 0x1, 0x7, 0xfffffff7, 0x7fff, 0x4, 0xf, 0x0, 0x1, 0x9, 0x2, 0x6, 0x5, 0x6, 0x2, 0x2, 0x95e00000, 0x4, 0x3e9b1e1f, 0x5, 0x1, 0x2, 0x6, 0xe61, 0x8, 0x40, 0x80000000, 0x6, 0x8b, 0x6, 0xffe6, 0x9, 0x1122, 0x4, 0x8, 0x5, 0xb8b, 0x85, 0x0, 0x7, 0xec7, 0x1, 0xecfe, 0xb, 0x6, 0x9, 0x939, 0x4, 0x100, 0xcb, 0x9, 0x5, 0xa, 0xf4a5, 0x2, 0x3, 0x7, 0x41f, 0x7, 0x1, 0x9, 0x2, 0x8, 0x2, 0x8, 0x2, 0x9, 0xfffffff7, 0x5, 0x400, 0x7, 0x8000, 0x2, 0x7, 0x3e39, 0x1ff, 0x2f76aecf, 0xfffffffb, 0x4, 0x1, 0x2, 0xffffff4c, 0x9, 0x5, 0x3ff, 0x1, 0xff, 0x0, 0xff, 0x5, 0x8, 0x965, 0x0, 0x3, 0x9, 0x9, 0xa, 0x5, 0x0, 0x7, 0x2, 0x8, 0x200, 0x9, 0x400, 0x2d, 0x1, 0x1, 0x5a8, 0x1, 0x8, 0x1, 0x6, 0xe, 0x5, 0x6c462d00, 0x0, 0x7, 0x6, 0x40, 0x6, 0x8, 0x1000, 0x7, 0xfada, 0x8]}]}, @TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x38, 0x1, 0x3}, {0x4, 0x1, 0x8001, 0x5, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}, @TCA_CGROUP_ACT={0x1064, 0x1, [@m_gact={0x1060, 0x16, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x21fd, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x200, 0x8, 0x5c, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x795}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x2ba0}, 0x1, 0x0, 0x0, 0x20000814}, 0x10) r7 = syz_open_dev$audion(&(0x7f0000003e40), 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003e00)={&(0x7f0000003cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0xa, [@fwd={0xf}, @enum={0x4, 0x7, 0x0, 0x6, 0x4, [{0xd, 0x5}, {0x4, 0xefa}, {0x5, 0xffffffff}, {0x5, 0x200}, {0x6, 0x9}, {0x4c3, 0x2}, {0xa}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x800}}, @union={0xb, 0x5, 0x0, 0x5, 0x1, 0x5, [{0x3, 0x3, 0x6}, {0xa, 0x2, 0x6}, {0x1, 0x0, 0x7}, {0x6, 0x4, 0x9db8}, {0x8001, 0x2, 0x702ab118}]}]}, {0x0, [0x30, 0x30, 0x30, 0x61, 0x61, 0x2e, 0x2e, 0x5f]}}, &(0x7f0000003dc0)=""/25, 0xd2, 0x19, 0x1, 0x8c43, 0x10000, @value=r7}, 0x28) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003e80)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) pipe(&(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000004080)={0x0}, &(0x7f00000040c0)=0xc) r11 = gettid() ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000004100)={'\x00', 0x8, 0xfffff800, 0x5, 0x2, 0x1, 0x0}) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000004180)=0x0) syz_clone3(&(0x7f0000004200)={0x1200, &(0x7f0000003f00), &(0x7f0000003f40), &(0x7f0000003f80), {0x30}, &(0x7f0000003fc0)=""/37, 0x25, &(0x7f0000004000)=""/78, &(0x7f00000041c0)=[r10, r11, r12, r13], 0x4, {r9}}, 0x58) fsetxattr$security_ima(r7, &(0x7f0000004280), &(0x7f00000042c0)=@ng={0x4, 0xc, "c204967b19"}, 0x7, 0x3) write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000004300), 0x8) 2.134123307s ago: executing program 0 (id=647): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) r1 = io_uring_setup(0x215e, &(0x7f0000000040)={0x0, 0x73c1, 0x10000, 0x2, 0x2e1}) io_uring_enter(r1, 0x7132, 0x759c, 0x10, &(0x7f0000000140)={[0x5]}, 0x8) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x4, 0x102) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) open(&(0x7f0000000000)='.\x00', 0x84400, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 1.137573725s ago: executing program 2 (id=648): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 969.322245ms ago: executing program 2 (id=649): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x100}}, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x14) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0xe, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x0, 0x2, 0x6, 0xc834a56972a799fc}, {0x2, 0x0, 0xffffeffc, 0xc}, {0x5, 0x3, 0xf, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r6, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@flushsa={0x12c, 0x1c, 0x800, 0x70bd26, 0x25dfdbfd, {0x33}, [@user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in=@remote}}, @tfcpad={0x8, 0x16, 0xff}, @tmpl={0xc4, 0x5, [{{@in=@remote, 0x4d2, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3504, 0x4, 0x0, 0x9, 0x7, 0x8, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x17}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3505, 0x4, 0x1, 0x36, 0x92400, 0xb1, 0xff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x3501, 0x1, 0x0, 0xcd, 0x0, 0x400, 0x7}]}, @policy_type={0xa, 0x10, {0x1}}, @coaddr={0x14, 0xe, @in=@private=0xa010100}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24000814}, 0x40) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet(0x2, 0x4, 0x3) fcntl$getownex(r8, 0x10, 0xfffffffffffffffe) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000a40)={r7, 0x3, 0x80000001, 0x1}) 639.762727ms ago: executing program 2 (id=650): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x47425247, 0x2, @stepwise={0x8, 0x4, 0x3, 0x5, 0x401, 0xfd}}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@echo=0x1ff) (async) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000001300)={{0x12, 0x1, 0x310, 0x14, 0x4a, 0x4a, 0x8, 0x1943, 0x2250, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x80, 0xa2, "", [{{0x9, 0x4, 0x4c, 0xf8, 0x0, 0x6a, 0x6, 0x17, 0x4c}}]}}]}}, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0}) 590.271163ms ago: executing program 1 (id=651): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffe00}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x74}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000700000409"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 367.698469ms ago: executing program 0 (id=652): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x627, 0x7ffffd, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x4010) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)=0x8001) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x1fffffff, 0x0, 0x1, 0x1}}], 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r2 = openat(r1, &(0x7f0000000080)='can/rcvlist_eff\x00', 0x0, 0x0) read(r2, &(0x7f0000000300), 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8000000000fb, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x10000, 0xfffffffc, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'BRTI'}, 0x0, 0x1, {}, 0xc93}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) r4 = socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0xcd, 0x0, 0xf}, {0x4b564d02, 0x0, 0x2006}]}) syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x40000c0) 121.236883ms ago: executing program 3 (id=653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x1c, 0x14, 0x10, 0x8, 0x0, 0x3, 0x0, 0x9, 0xa00}}, 0x1c}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') utimensat(r2, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000580)={0x6, 0x0, @ioapic={0xe000, 0x3, 0xfa2, 0x1, 0x0, [{0x2a, 0x4, 0x3}, {0x86, 0x5, 0x2, '\x00', 0x1}, {0x13, 0x5, 0x3, '\x00', 0x8c}, {0x6, 0xff, 0x3, '\x00', 0x8}, {0xf8, 0x7, 0xf9, '\x00', 0x7}, {0x63, 0xb, 0x6, '\x00', 0xd8}, {0x0, 0x5, 0x6, '\x00', 0x1b}, {0x9, 0x3, 0xe}, {0x4, 0x9, 0x0, '\x00', 0x5}, {0x9, 0x5, 0xd, '\x00', 0xb4}, {0x6, 0xc, 0x1, '\x00', 0xb3}, {0x7, 0xd, 0x1, '\x00', 0x2}, {0x5, 0x3c, 0xc8, '\x00', 0x80}, {0x0, 0x81, 0x4}, {0x5, 0xf7, 0x7a, '\x00', 0x1a}, {0x3, 0x7, 0x5, '\x00', 0x8}, {0x2, 0xfd, 0x4, '\x00', 0x9}, {0xff, 0xb, 0x1, '\x00', 0x5}, {0x2, 0x3, 0x5, '\x00', 0x9}, {0x6, 0x2, 0x6, '\x00', 0x3}, {0xc4, 0x9, 0x5, '\x00', 0x3}, {0x0, 0x3, 0x5, '\x00', 0x8}, {0xfd, 0xae, 0xf, '\x00', 0xfb}, {0xc0, 0xd, 0x2, '\x00', 0x7}]}}) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f00000001c0)={0x8, {0x1, 0x5, 0x64f, 0x4}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000001600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x64}}, @ip_retopts={{0xac, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x37, [@loopback, @private=0xa010102, @rand_addr=0x64010101, @empty]}, @timestamp_prespec={0x44, 0x3c, 0x19, 0x3, 0x2, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x6b7}, {@rand_addr=0x64010102, 0xffff}, {@local, 0x8}, {@rand_addr=0x64010100, 0x2}, {@loopback}, {@broadcast, 0x8}]}, @lsrr={0x83, 0x23, 0x66, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @broadcast]}, @timestamp={0x44, 0x24, 0xc3, 0x0, 0x1, [0xf, 0x3, 0x69, 0x8, 0x6, 0x200, 0x0, 0x3]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x138}}, {{&(0x7f0000001740)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000001780)="e86fff3c89e1590d6cdbe150cee977975324c9d8986c42533006bfe7df77324ec78ed43248bf02ba", 0x28}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="b790c9e61e20b57b8ef58deb2e776b0a1b4c66547ab960151b8777299ec20d1c2ba1d2889c2618ae9ddc74b6e4ddb9aeba2ea067ae1e28b6956909899cb9b05dd9fbc3c9b709ab5c77e913a01ae16ce9cce865374580142e7bfed0817632080230da1321724216af33d6141c3c73567f3942a9aa64533b23593582b7febb8485c40cec2da095b5b2b4a166c708388ee9522aa3e3d44d931d1203c24c1a32eed588ee7603be8e6db09994456ee6", 0xad}, {&(0x7f0000002880)="d65f3d5971a955680954cf20625416cab89dac1c8ce16ba41c2c59d540b5f5ab97e00a00d0ad032b6d632dbb868f57134f542a2d9d23344c0a4b91b72fe39b", 0x3f}], 0x4, &(0x7f0000002900)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}, {{&(0x7f0000002940)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000029c0)=[{&(0x7f0000002980)}], 0x1}}], 0x3, 0x4000040) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) recvmsg(r6, &(0x7f00000015c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000380)=""/5, 0x5}], 0x2, &(0x7f00000005c0)=""/4096, 0x1000}, 0x31122) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000400)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x4000000, 0x0, 0x80000000, 0x0, 0x200, 0x0, 0xc}) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) 25.204766ms ago: executing program 4 (id=654): syz_usb_connect(0x5, 0x24, &(0x7f0000003700)={{0x12, 0x1, 0x250, 0x64, 0xbc, 0x28, 0x20, 0x5ac, 0x273, 0xa4be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x56, 0x7, 0x0, 0x6, "", [{{0x9, 0x4, 0xaf, 0x5, 0x0, 0x3, 0xef, 0x2, 0x8c}}]}}]}}, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x6, 0x74, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x4c, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x9, 0x24, 0x6, 0x0, 0x0, "27e3ec75"}, {0x5, 0x24, 0x0, 0x671a}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x7f, 0x4}, [@mbim_extended={0x8, 0x24, 0x1c, 0xd88, 0x1b, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x23d9, 0x80, 0x3, 0xff, 0xfff, 0x9}, @ncm={0x6, 0x24, 0x1a, 0xffff, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x9, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x5d, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9b, 0x5, 0x2}}}}}]}}]}}, &(0x7f0000002800)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x1, 0x4, 0x4, 0x8, 0xc}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x8, [{0xe9, &(0x7f0000002880)=ANY=[@ANYBLOB="e903a4098cbc8d845e18c45ff526c0f9cdc57de181d0f1a0d6f3916b2425490822ab7f3c5332f15eb58eeaf97553f9aad8a606eb69b2d1ab64725336d90077a5cf45a2a0c3c6ed5240a7a1e3737ebd7f3f2d8aaefa8f33c25f7847779985b49d647768d8b13c0bd1ae8afc0a7ee2696a6f270eaba85f390645f57962d240a8475a3fda8e5e19a3302ffa4a37683f4d9561bc94f775678ab02495db9f185498fb9a38c4f0069558f3c21151324d871dcd33302028962d1ac93c7863cad7390bc6c7f739be49b7aea522b4b0d6e285c875668a2ccbdccb2309f285730dd08f1f1d522fb3a3b281851fe0a08f28a001b645c2ca8a7b5cafacbc82a96d4611a83b75bd78759f78b636c61de1b617ef16805a21cbc286b67743929f3602a2cb10ddf016f9465b1a6cd0c494452bf549514d"]}, {0x4, &(0x7f0000002540)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000025c0)=@lang_id={0x4}}, {0xe7, &(0x7f0000002600)=@string={0xe7, 0x3, "ad75c4f57af4f0bf26d0451509fea9cdd1670b17dd103854b476f1c31163762208c3b010ecd1104cb11f7325554f9063060ef7372e440fc2ac4484407102d54e6218932d0b4ce3804c69f714ec28f6c13223e9767afee6a0da1816319206e0965ada84d4c3f2d8eaa5681d41975d6064236528ff228a8617eaeacc3c50c9e70c3e490f94f16ff9172144240cb89ebe5cd3856e3d2c4f0bf41b73cbec511588abb51cc69ff2bc644406cdd2c0b9d94f3f5164b36ccda339cf737d9048561de19a7677583021f1307996274bcb77de392adfec26a0bec94aa44c5001a3851b2a081ecd1b4e16"}}, {0x4, &(0x7f0000002700)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x1007}}, {0x0, 0x0}]}) r0 = syz_usb_connect(0x4, 0x16c4, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x1d, 0xce, 0x73, 0x10, 0x2770, 0x930c, 0xc9c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x16b2, 0x4, 0x3, 0x7f, 0x10, 0x90, "", [{{0x9, 0x4, 0x2d, 0x9, 0xf, 0x80, 0xce, 0x9c, 0x6, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x41, 0x4, 0xc, 0x5, 0x80}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x4, 0x4, ';E('}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0xb5, 0x5, '$'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x8, 0xc, "5b3654d88b79800c"}]}, @generic={0xad, 0xb, "4c0f35a8b8d19980bf86aa16f97703ccd4d5d714489d6a2e4410f245610abe2c33c63bed50080264bcbbc0258803a231d093efe9bf4da56e99052569c41117a802899c9f79bbb95110248192f9d50d5dc2fc8676b4a17e875ff3ee42e490c2cfe22f1d9da8be7189847a0b68e6f85123a65194556a32d5cfd157cc73b06b33e6295988cdcfe18f0da9ff3a809c23813e0a9b28e54f50bb94b17bfcc9334fdd14444e8eb99e1a445d657c8e"}], [{{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x7, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7ff}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x9, 0x74, 0x8, [@generic={0xe4, 0x5, "4b61415d9556088aa45992091ebd766a107edd0f898c0055239c82c2f48c066382d0a5248bdb2b17d76b65737502701cb4390ed8519b5060c0333df21fc07c675e78c42240aa1c962ff7f69dbff54cc1619365488c0b6ae11e42247029ba9a132552ad40edeba7c403b26a17906e9c9b22d824d0e9fe3e26378577bd9dc72a3d547bf86e62a001aa87af8934d0e2677b7fa5dd31f672662f4cbf19b630c757dd6afe68b6d18db471967cb8f9f80fdab66e4a09ff04d55d47259c6946834058bdb44c1794e96ac80b70bf64423d1a859114bda73c9de9986620b4c9933937e2e00c8a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xdb, 0x4, 0xfb, [@generic={0xd2, 0x0, "a2655806907c9ad668ec7de1f1ae79d8c0b21aa8b239469386b2dd2ffcd5e2cfaeea5bda115da7b45aa9f48a9cd20f8020b370510947faf1a974ab42ab97140cc96b9fcd112b62a4b078d1fe68a564a0ae6e58750b480ba95ec08fd83eb6f6576d0e93e8df2418970f4aac18db8a3f9fba1f92d25857e2feadd38b300fb9266f360a4336c3437ae4bc7f7a490434234f03ef8933779f0137d70604cf292cd236ce57af4eb6d059404c46945c96a1b41960b769985f307ab3eff755f80499b9f1d378580f291581c0c7ff1d51f164f88c"}, @generic={0x15, 0xf, "445f1f28a302499919e3f5cb945b0854698029"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x9, 0xd9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xe9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x3, 0x4a, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x10, 0x8}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x8, 0x5, 0x8, [@generic={0x6f, 0x11, "8689251b32eac0e4fbdb38b84bf914f66bafca3c22eb75c3f046efb215bd90af869265bb4f4823ecf042f7198ef787ab943c079d25679b1078fb2ac00ef83b4a940b044ac3e371e5ee6c50436088f2c374087e992e38ed5860490bcbaacf5405ba37554a9ced367b308910768f"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0xe0, 0x3e, [@generic={0x6, 0x10, "25f6359b"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0x7f, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8001}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x7, 0x81, 0x4, [@generic={0x101, 0x3, "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"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x5, 0x5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa0, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x3, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xc8b0}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x6, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7}, @generic={0xaf, 0x10, "f3cf29f71f745ccb8bfa72493da3fa22290148f312b31548981c94285f628c4f930472b6d9d1336938d22dbfcf055bd315fa06c0ac2444defa28b3ab78685259f6cd68f5ddd5e0fba6cef9f14a18c01c70019c64075aa3fe7cdd408c371c0b95652768253026587f09641c4f326b232b2947ff7032ae2c60993fd0c8dac2cc450ef2d0ed005108a91ce790483a1f98db28032df149f6c7b9b3c381bd79537bf788e58a3b02ce33198acf039e12"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0xc3, 0x5, 0x5, [@generic={0x23, 0x1, "f66788f29537bc40b68b8d3eefe5d6afdaef6c3441d5e4b8839215e3a9c2d28981"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x400, 0xf9, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb, 0x69d}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x0, 0x2b, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x1ff}, @generic={0x92, 0x22, "7ae4fe4828e3eea7932c76bbef30442815c45037e8e13165721ae6840ace89e89b12269ebe05f890fac9e82c4c14227cf8fdb96f9247c53965f83c80306ae0f70cc2d25f737592d17481576e6f3de356b4ea4a30ce1479309bb70856a843c334b7a44d51caaa67c422fa96c060e3144bb653b5939bd5ef4713ee2c87c743b2a888da96aba76a4aa0815be6e6af381228"}]}}]}}, {{0x9, 0x4, 0xe, 0x1, 0xb, 0xa2, 0xff, 0xb, 0x3, [@generic={0x74, 0x11, "d55ab14ef777296c527bfa12e0ad98159e5727fb9ed55255f544ff8f4a6f7c3ba99cca5b9b338ff62e4044d8bf9cd8f95c29687bdbcbcaa5fc92ff465f157f59489df3429f833b99b3efc22464c98b5f94cf8f45e2c5cfdd33b86e40dcbd4d042dc77426634124a774574885ccdd10d09575"}], [{{0x9, 0x5, 0x8, 0x10, 0x40, 0x2, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7ff}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0xeb, 0x0, 0x7, [@generic={0x25, 0x9, "1f0f95c31f2d87ce9c433e1cc09c8435cd93ed6af907f20f0f75e4f6247d6e5ea13555"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x5, 0x7, 0x0, [@generic={0x7d, 0xe, "486e2e68b95203df47ff3891bfb65d50cefdd194667e54df121b7003b07971fd305ac33539c3279dabb60a5de0c59f03524d316b4b37e4ccd116ae81aea93618d5af1ca0ae5d8025142908d852e2c97303dcb25a288e68f26379c24d25f03c669ea9ea61cec8980f0d045b7f9c0350ac1be1bd60ad84623a63abfd"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x81, 0xb6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7ff}]}}, {{0x9, 0x5, 0xe, 0x6, 0x10, 0xf4, 0xf9, 0x5, [@generic={0x9a, 0xc, "581e97cfde54799977a620f3f81514fcb3b626f31d5f393802461f17663e0ba3e50c07a4cd8aafc45a8b5576bd33e34988e81c12f0b5016384f2dd003841e3034c0fd06ecf08f5578cb9c6ac4f3c65753037d97d9ab769a589b66eefd71324df9ea0ef9123b9ae10a5aeac94186b7b061fada4897bd21112d7ec7c17370573fb3f5612c828597d81962939cdab484f71b38feec83afa0083"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0xf8, 0x7, 0x3, [@generic={0x101, 0x1, "d36934506ec188fc708bd1961226852061b457daca3a17e4a8b185a8035f5022feb13346b328009c5f5d261a4a08b519a506fd02d8a6944b284302496cbe2c7f6fb67416032823044eb25f52c7398ec4e3f5d042ae33db5b78698b28dcecc4dd6ac1f6f6cf45e1fe5b087f48cec6654c9e35da4fe102cda429035742b2c5855c68cc43592d7e0d9a804e5736b88ab0f888518d3fc7bc7baf55960b1b2011429edcf53b3251f385243da31ef8bc4975683746418c99f1a4cfd923f140cf5b0bfd63153d106c9d01839b964314c2505e794792c8a935027db073df64db615bc93d1ff879babdea74ba9a51a88132a00b041c9d05913df8c05259faf73d258741"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xaf}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x30, 0x3, 0x80, [@generic={0x23, 0xb, "e1f8b490ebb3a856eef5abd3b2120c2ba5b4bad35940eb47b3974cb4eef04802e7"}, @uac_iso={0x7, 0x25, 0x1, 0xe, 0x0, 0x9471}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0xa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6f, 0xdc4d}]}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x6, 0xfd, 0x7, [@generic={0x77, 0xe, "95725988e74ccc25d2c930475ec6f889aff1399df9c8069f5197ba2a9514b906714cb86936f19427071879856ea9f296680e7203f63238a08fe217407ca4322d8ae40c080b9decd21c5a501dc78e2473b5c65613c43c11450e4ea6cc7894eb31ff83f188f67c7a6ce222798bb425487617d74b48d8"}, @generic={0xe6, 0x10, "43b80f3d857f50874dce5f93908fceb9aa0d3652f37630e4f222ec51201e2341b6c4708ec85dea2ed27d9494d5923373e1d01a2ffe7287baa0b454b81b83fe6b67159e906e50dd0fa31a2764b49645b1c4b83992e69049f037dfcc08ca82ec955c73efd13377be06ad98f210f5954e320f1939ba04c38ff60c70861e6ffcaae7c134ca7641ab04bfabe7a428ff118192ca2a6644be76b1ca9a1152813b9674a08c440523304090d3b252b798d9e848695dd134b6c6e3c3845602d6c6e40db4b7c09c78baa5b291fcb37cad09c72859cd1595d7fc6307fd48daf9f7cf7f708e2d342c25f7"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x2, 0x5, 0x81, [@generic={0x81, 0x23, "db59455c4ecb8f3c78619680778eacd410443552ff4589d758ba55a5db55ade9388da99d73b860ee1e08993d433b61e7f4c6d11803ebfb306d6c77522184248286b401df2b764d5fc92e7b22f933fe98c6fb16c6a3705678730cec277b91a3ce2b81f7bbcaee7cedcbc1eacb371616210cd1eb8eade4355a6ef9bc1560e4fa"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x610, 0x7, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8}]}}]}}, {{0x9, 0x4, 0xcc, 0x3, 0xe, 0x9e, 0x84, 0x64, 0x1, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0xe, 0xe, 0x20}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7f, 0x4, 0xdc, 0x6, "d8f3febc"}]}, @hid_hid={0x9, 0x21, 0x8, 0x3c, 0x1, {0x22, 0xa84}}], [{{0x9, 0x5, 0xb, 0x10, 0x3bf, 0xe2, 0x2, 0x6, [@generic={0x90, 0xf, "cb66821c0b6db3901f4c9f1bfd81b2ec7b941ed4f90994abb5e1641e028eb450896d6c44cf00994f5ba9dce7fe17ae2345b10e0a46a730595aaacbb55fc24c70a4cd43d45577b1372c379fe64f4b325b2a5d4141ebd2862b0e59ec64fc5948017661514a8c20b7ccb6760d25bcc1d86aaec5c642dc3a9ae0b6dc9b319edcabccfaeabf06b6895c6681065674675c"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x1c, 0x2}]}}, {{0x9, 0x5, 0xa239414a087468f5, 0x2, 0x200, 0x7, 0x1, 0x21, [@generic={0x67, 0xc, "814fb990f4de7bab91f0a5d5b14d68a2ebc59e0e73610450858b99f977cc3233a33e39f0a2fb6dac89360e31d2f1a14c07c1aca7be32cf265a551a12a262a98a2b0925d647200c5e71b856eb1dc8ea13d45e6fd1f414d262105af0887187f9680afebf21bc"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf8, 0x9}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x0, 0x4, 0x5, [@generic={0x8b, 0xf, "5801f392fcf9e89a4832b3b7fa3377b12f87c245249f09bdbd42761b28dbfbca590d309114268a99c5d5ee9280864f00d721adc9847ac04633d3b5c3f764f07daffa08193ed48138f1b291b1f02564aca4a78851dfbf9a687bdf83bccb013b0de7ee61803966a8f74bb9a4b51f0e1754b6fb65da324f37aa78a80d95a825ccd20ec01783dc2bcdde26"}, @generic={0x100, 0xe, "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"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x4, 0x80, 0xb, [@generic={0xa6, 0x9, "82d50eca69c9db379f6998b7c04b46247b585b3613d126fb9070041b661bae5c9adaf32ac6b88764be773fbb91bcbf9f86d2e58704ca2f1203d4204b21634f4020074d9f7b233367469627e8d2685244cef86983fae2798928325e1fb98104a72d136b124e5a59adc8649efa7d72751e316ec923e8e81d3e3fe4f4413a35e9db7a7708e5544ce3b77d9f3e2486b281bbfdac4f019f97d1c3235582bf9ebd6610fcf48d35"}, @generic={0xe8, 0x9, "a198ddd1a9a299a06f730d7d5c9d257813e33fe76e5d1cc2880625efdeecef8bdce661a1cff872bcd5cb53927d9689e4dde5abbd04df6b442d6d0ada09104616332a0fd827ee738ac6580b0b466353c1f676fe2bcd59830d7efb45b6be4fb325257974b202d4df2066ce205d4212db7d9f8b8768b919443f5e4b71fc15d8389b36153ada8fb5634b7ceb59b561f4d703483e8398828da5fa98379317f163bda773d07c84bc801901946ee2b2a8d4f764cf77f86c14858b3fb7cc9cff6ac2c0a52c14d015345a6158f183b200cf495fa8644edd12318071fd60aab80b1c8d64281fcf9a549d0c"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0xf, 0x3, 0x1e, [@generic={0x77, 0x24, "a4694fad8f9965da7e0efe5c3caaf3c0cf278c044fc41bd0ca6f6355e9ca7f9556754765dd0ac2b0615ea19cf604fa6ececcaefa5111e43c96181e4c40af7bcbd76cba54fb16f42f5142bebc48ea4f238ee621da524b9772a14f0aac1eda59849d62150c0603395109e6b40f08ce06ec1ed68354db"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0xb, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x8}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x4d, 0x4, 0x5, [@generic={0x62, 0x7, "b69c3925906bf558d34bf1adaee885562ab1ada4a464a641e0f4eef5b76ceec703d798ee1f6bc72b21ef0f2fddcf50a3d44e34d21741475a26d9eaa45fa81fab4c4b2fd79b71c2f909f50cda522b2707a24a2fcbf1b6dadce9174681a84701fc"}]}}, {{0x9, 0x5, 0xe, 0xb, 0x200, 0xa1, 0x2, 0x3d, [@generic={0x4, 0x11, "cac6"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x7, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0xafa}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x7f, 0x8, 0x10, [@generic={0x8a, 0x11, "5f7c82d7d47e41a12bac9af1b80d1c8221f9a98d8e3049d20c06da1a9d5e157158b4f298b595808d766b0084a17bc4aab9c722f4f5ed6b1dd8b856a73cdcf8be3343b2966987e9728484f099838e4d79d4f5e774ff54c8bdb85ada7389e3dd46c5e99a8fd0747935e0a6ad87c81e24c2c95354b43ea108393922bc2c2b9c6ee6f8767c6ea178e255"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x0, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x6a}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0xd, 0x8, 0xd9, [@generic={0xa6, 0x9, "5833906562b3845d091b6924fd0679e3d5f26dabfc02ddab7b89599c0eeac4f07b4cdd9fdecd32af7bfa1e8f5db3d53168833af1a5f456d073fcde98e4db817af334934e01c0dc236e40d02ce16987bef3789b9c3f7206f20dfc6f768329682cfb0c2aefd8eea099c47b323690c002fd80c310d8d8737d248ee5f2b66259b0c12e54d63095a86d3447e3e58c3668a6b5539398ed17fe27ba00c2681ad5835b2fd219cb3d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x7, 0x7f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x1, 0x1, 0x1, [@generic={0x6b, 0x4, "ef40b78587443d8fd0a893799cc401189477ed8f26f7e7130278020f15e7261c94528454acb7fa4fce645a28c0e4438595e103e31380295dca6f21b8e0efb55e247e7563c7db2eaf3738470cd132ff93c02bb5e4e867bce6544f62dca011bdc735a3fadb6ec8468f3d"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x9}]}}]}}, {{0x9, 0x4, 0x99, 0x3, 0x7, 0xff, 0xfc, 0x6, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x4, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0x9, 0x16}, [@acm={0x4, 0x24, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0xf8, 0x8, 0x3, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x4f, 0x1, 0x9, 0xae}, @network_terminal={0x7, 0x24, 0xa, 0x46, 0x4, 0xff, 0x7f}, @obex={0x5, 0x24, 0x15, 0x9}]}], [{{0x9, 0x5, 0x80, 0x0, 0x8, 0x2, 0xe, 0x1, [@generic={0xb6, 0x24, "b4379a83dc883c1d5d0252c264432908418b0ec4d8d5802b2660a81b9c423a8cc348e96ef1afa47a0c7c6ae7c206f0c15d46965d1d67235862daab1fd5d97fa9a1a3b61eee100116474f1ad59acffe1d53dd453e2e2b56caeda8521f7e7cde69dd4618830cdec6c2765c5a512dacf26840b6f2056293fc1a6777baad1ff68543e02f6c863019414e623bdc3f8a1de6ac5093f0a9975a88b5766ad8f7379bee00fde01429287712699c2113adf49c4089f92470fa"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x2, 0x36, 0x9, [@generic={0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x2}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x6, 0x4, 0x2, [@generic={0x93, 0xa, "fb158023548a436d254b377a010640e7a3527d3c1b9a22cd76287e42dbcc3b4faee0a26595f27e11d4557ae95225d75942f0fb5fa02ff8ed99600836a5a8ae2ee671154428389086786f499edab6861e5a3a06f775c30dad8e2162a6b47a883a1240e010054d6c2a06ae9d688a33c9e68dc4ef9a3bba98ac53e6a2f94686e474377cd58dff6b98f02faf36a658dd603323"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x20, 0x58, 0x8, 0x70, [@generic={0xb8, 0x30, "0fc1f8b9fed1db7a143e79664d3afaf58477cbad2bef631af26496666d132108ccbfc88a3e1122b3bd1ad6ae70cdda55f02fa21859f610a620a6ea013a6c97e138af0efdcebb91f66753c359d54494d352c7d6fdc48bbd8cdc7da6b7ef5f8e8bed6c0769d4e3beb9f4f6c8ba1852b909adaf62fd5491fc42dd42d47c9bf881a60ddafcbd31e2f8666638986694db995de94aced12641500e3757d62c2cc601686e0fd5184a9859cd0f08afadb85515382c1d990a9b49"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x420, 0x5, 0x80, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0x9a24}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x10, 0x2, 0x7, [@generic={0xc9, 0x24, "23aecf02481bec751b77dd01e44c9f8e477c8e99d60b6a6f68184a183a6cbd6448f553cbe9807f4df04a1519d75fac23702653315ec3c8078122300f4321e6d101b73b80e4c9179be4b7f75a44f53225c52d70ce8d17ebcc9f328dd7f756f6b462885745ad42f72a52eb76db7d618339a1f90a4291ff908ae749b1da3093cc3bc17363c19b435278fe7b6a744fbcbc9d1595e9a92a7c23e1d45814f958e9b87beb6d6083d325d6fdf48f5fa3504ef04a729bc717b28f07316107379cf75d261d3a241860ccccd5"}, @generic={0x1a, 0x5, "d109df40f20916e730004c8aa7992a92e2115005104c6907"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x3ff, 0x8, 0x4, 0x8, [@generic={0x21, 0x0, "e518e52592d6a6ec2bbc510c89852b5f2e1c5b9d7d53b4331bb112c9243bf1"}]}}]}}]}}]}}, &(0x7f0000001fc0)={0xa, &(0x7f0000001c40)={0xa, 0x6, 0x300, 0xaf, 0x7, 0x74, 0x0, 0x5}, 0xf7, &(0x7f0000001c80)={0x5, 0xf, 0xf7, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x6, 0xf000, 0x4, [0xff3f90, 0x0, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "ad7ab5bec9b034006e1d57a301695b61"}, @generic={0xc3, 0x10, 0xa, "466ba18f4a52056e1e9f772c717bee8df893d78290027246207c4c9f18e7f09fc26cfd692c6923b235749aada2a51912f4e3aeb83a50943a1c6df0b051ea11e4b4c8ad418f2afa65ddb91cbfa192c5ef8530e0342dd1956f7c1bccf0c1d20f453a59f7e1b6971bded04d9b9e4033f33519d080de7d3302eae24809b38ae7f049a368268c414d2b13267afa07c4c7cb285a2bda3af68b7fbda08734f7bbf664edd2c8f8af82b15a0c84104fd1671c1f52e76d4cde6da99d9cadb695fbae4e18c3"}]}, 0x5, [{0x4, &(0x7f0000001d80)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x416}}, {0xcd, &(0x7f0000001e00)=@string={0xcd, 0x3, "91646ec5478e4954a8bec61f41031ed6d390268897fa462c67104966a8c6d819c94f106e0f7759ffcdec61dd3e160e5d77f79870431adde7bde4bad2e2bb1a655f0ed053eb402482993a5a60ea8f321732e0719152ec05522f02be92e188c2126dc3a440567e25c10d6bb060080d25783fe8f1d73d17dda0e32b66df8b78689da0ece529b5782c22588cfbf340d7015e92c49f53d3d15ba779614e25ab31b4dc262c6b59436b5e314571b25feba350805c3cc48b577e09f5f99e6cb23a2200ca612552040757667fbf50f6"}}, {0x52, &(0x7f0000001f00)=@string={0x52, 0x3, "a123b4cce15c0acd7097a2c61a0a9ea722203fde517ddae1e07767228ea2869b38d065b19188d031c66b0f2d84312970298802cdd89fe5307649150e0d11a050d15790276bcbe18906c3b908b2135dd6"}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x44e}}]}) syz_usb_control_io$lan78xx(r0, &(0x7f0000002140)={0x14, &(0x7f0000002040)={0x40, 0x2c, 0xb1, {0xb1, 0x20, "33daf9eadb2f89b7cda3332e8dfcc7fd77b7c522fedc99aba2d5c1757d3a5ee376cf7d149c6e3a26563ca08ec25df51c6e87206e2ab84225e65d3f95d9a7733f21151417b85fd9e6e30c8e7473077e9a40f7032764bcc68f57269c22e4d644a2c8f5aded3e9321549e922ad486ad8f1066ba0b600190bd627540ea7dc5a7134311668e1d042433e57e29d293933252cb5d786db594e34c44265495000e2e9f3cedb36fb7dbddaded5d7936c00815f6"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x6c28}}}, &(0x7f0000002400)={0x34, &(0x7f0000002180)={0x0, 0x17, 0x100, "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"}, &(0x7f00000022c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002340)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000002380)={0x40, 0xa0, 0x4, 0x5}, &(0x7f00000023c0)={0xc0, 0xa2, 0x2f, "2fc8f8e96d64f99e162ce203b64326532ecbe02ed24f61bd243ee0c5ef1582c4d26e7a52258ae217dcd90f1ee95565"}}) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x100000, 0x2000, 0x1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000180)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a000d000000000000000000040000800800", @ANYRES64=r1], 0x1c}], 0x1, 0x0, 0x0, 0x40804}, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r2, &(0x7f00000002c0)=""/153, 0x99) r3 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=Ñà– ) failed (rc=-5) [ 145.010089][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 145.025811][ T9] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 145.054813][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.091669][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.114635][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.136633][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.167414][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.232258][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.282781][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.338484][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.384863][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 145.419205][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 145.452460][ T9] usb 2-1: SerialNumber: syz [ 145.462053][ T6691] netlink: 'syz.2.256': attribute type 61 has an invalid length. [ 145.480598][ T9] usb 2-1: config 0 descriptor?? [ 145.517389][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 145.543607][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 145.606485][ T6692] netlink: 'syz.2.256': attribute type 61 has an invalid length. [ 145.707434][ T4977] bcm5974 2-1:0.0: could not read from device [ 145.757208][ T4977] bcm5974 2-1:0.0: could not read from device [ 145.770423][ T9] usb 2-1: USB disconnect, device number 13 [ 146.227863][ T6699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.723432][ T809] usb 1-1: usb_control_msg returned -71 [ 147.747947][ T809] usbtmc 1-1:16.0: can't read capabilities [ 147.798473][ T809] usb 1-1: USB disconnect, device number 18 [ 147.899550][ T5724] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 148.070253][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 148.090663][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.138865][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.168543][ T5724] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.195134][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.204826][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 148.220000][ T5724] usb 2-1: config 0 descriptor?? [ 148.255427][ T5724] hub 2-1:0.0: USB hub found [ 148.329610][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 148.340019][ T6733] 8021q: adding VLAN 0 to HW filter on device team1 [ 148.455034][ T5724] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 148.499484][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 148.504780][ T5695] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.515682][ T5724] usbhid 2-1:0.0: can't add hid device: -71 [ 148.523249][ T9] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 148.547828][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.550504][ T5724] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 148.567824][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 148.586364][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.622946][ T5724] usb 2-1: USB disconnect, device number 14 [ 148.640771][ T9] usb 1-1: config 0 descriptor?? [ 148.689307][ T5695] usb 5-1: Using ep0 maxpacket: 16 [ 148.699406][ T5695] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 148.720503][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.739335][ T5358] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 148.748284][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.771830][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.800706][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.816487][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.840486][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.859526][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.880902][ T5695] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.900850][ T5695] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 148.921032][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 148.938463][ T5695] usb 5-1: SerialNumber: syz [ 148.945560][ T5358] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 148.960237][ T5358] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 148.974607][ T5695] usb 5-1: config 0 descriptor?? [ 148.981749][ T5358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.998605][ T5695] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 149.032985][ T5358] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 149.077552][ T9] hid_parser_main: 39 callbacks suppressed [ 149.077575][ T9] lenovo 0003:17EF:61AE.0008: unknown main item tag 0x0 [ 149.104470][ T9] lenovo 0003:17EF:61AE.0008: unknown main item tag 0x4 [ 149.139618][ T9] lenovo 0003:17EF:61AE.0008: hidraw0: USB HID v0.04 Device [HID 17ef:61ae] on usb-dummy_hcd.0-1/input0 [ 149.194502][ T4977] bcm5974 5-1:0.0: could not read from device [ 149.223477][ T4977] bcm5974 5-1:0.0: could not read from device [ 149.247544][ T5695] usb 5-1: USB disconnect, device number 9 [ 149.314179][ T9] usb 1-1: USB disconnect, device number 19 [ 149.387333][ T6742] syzkaller0: entered promiscuous mode [ 149.394307][ T6742] syzkaller0: entered allmulticast mode [ 149.549677][ T5748] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 149.713145][ T5748] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 149.722564][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.730684][ T5748] usb 3-1: Product: syz [ 149.734936][ T5748] usb 3-1: Manufacturer: syz [ 149.739851][ T5748] usb 3-1: SerialNumber: syz [ 149.753053][ T5748] etas_es58x 3-1:1.0: Starting syz syz (Serial Number syz) [ 149.883552][ T5686] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 150.039422][ T5686] usb 2-1: Using ep0 maxpacket: 8 [ 150.055280][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.067260][ T5686] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.080431][ T5686] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 150.089998][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.107013][ T5358] stv0680 4-1:4.0: Could not get descriptor 0200 [ 150.107378][ T5686] usb 2-1: config 0 descriptor?? [ 150.224064][ T6770] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 150.309967][ T5358] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 150.333076][ T5358] stv0680 4-1:4.0: last error: 34, command = 0x4 [ 150.349021][ T5358] usb 4-1: USB disconnect, device number 10 [ 150.434491][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 150.547194][ T5686] ryos 0003:1E7D:3138.0009: unknown main item tag 0x2 [ 150.554405][ T5686] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 150.562211][ T5686] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 150.569168][ T5686] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 150.576793][ T5686] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 150.583797][ T5686] ryos 0003:1E7D:3138.0009: unknown main item tag 0x0 [ 150.590807][ T5686] ryos 0003:1E7D:3138.0009: unexpected long global item [ 150.598561][ T5686] ryos 0003:1E7D:3138.0009: parse failed [ 150.605323][ T5686] ryos 0003:1E7D:3138.0009: probe with driver ryos failed with error -22 [ 150.613956][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 150.613982][ T9] usb 5-1: config 0 has no interface number 0 [ 150.614024][ T9] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 150.614051][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 150.614078][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 150.622228][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 150.622283][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 150.622304][ T9] usb 5-1: Product: syz [ 150.622318][ T9] usb 5-1: SerialNumber: syz [ 150.635844][ T9] usb 5-1: config 0 descriptor?? [ 150.752141][ T5358] usb 2-1: USB disconnect, device number 15 [ 150.763222][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 150.838587][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input11 [ 150.848891][ T6779] kAFS: unable to lookup cell '' [ 151.088036][ T6784] FAULT_INJECTION: forcing a failure. [ 151.088036][ T6784] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 151.102717][ T6784] CPU: 0 UID: 0 PID: 6784 Comm: syz.3.284 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.102753][ T6784] Tainted: [L]=SOFTLOCKUP [ 151.102760][ T6784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.102771][ T6784] Call Trace: [ 151.102779][ T6784] [ 151.102787][ T6784] dump_stack_lvl+0xe8/0x150 [ 151.102824][ T6784] should_fail_ex+0x40c/0x560 [ 151.102865][ T6784] prepare_alloc_pages+0x230/0x650 [ 151.102906][ T6784] __alloc_frozen_pages_noprof+0x12f/0x380 [ 151.102941][ T6784] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 151.102977][ T6784] ? __pfx_policy_nodemask+0x10/0x10 [ 151.103015][ T6784] ? __lock_acquire+0x683/0x2cf0 [ 151.103048][ T6784] alloc_pages_mpol+0x212/0x380 [ 151.103089][ T6784] folio_alloc_mpol_noprof+0x39/0x160 [ 151.103125][ T6784] vma_alloc_folio_noprof+0xe1/0x1e0 [ 151.103162][ T6784] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 151.103197][ T6784] ? __pte_offset_map+0x29/0x240 [ 151.103224][ T6784] ? __pte_offset_map+0x29/0x240 [ 151.103252][ T6784] do_pte_missing+0x173a/0x34b0 [ 151.103301][ T6784] handle_mm_fault+0x1b36/0x3080 [ 151.103342][ T6784] ? handle_mm_fault+0xec/0x3080 [ 151.103376][ T6784] ? __pfx_handle_mm_fault+0x10/0x10 [ 151.103415][ T6784] ? __pfx___up_read+0x10/0x10 [ 151.103444][ T6784] ? lock_mm_and_find_vma+0xa7/0x340 [ 151.103476][ T6784] do_user_addr_fault+0x744/0x1340 [ 151.103526][ T6784] exc_page_fault+0x6a/0xc0 [ 151.103553][ T6784] asm_exc_page_fault+0x26/0x30 [ 151.103575][ T6784] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 151.103608][ T6784] Code: 63 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 151.103625][ T6784] RSP: 0018:ffffc900024ef4f8 EFLAGS: 00050206 [ 151.103640][ T6784] RAX: ffffffff84d16401 RBX: ffff88807acdc000 RCX: 000000000000092c [ 151.103652][ T6784] RDX: 0000000000000000 RSI: ffff88807acdc580 RDI: 0000200000002000 [ 151.103664][ T6784] RBP: ffffc900024ef670 R08: ffff88807acdceab R09: 1ffff1100f59b9d5 [ 151.103675][ T6784] R10: dffffc0000000000 R11: ffffed100f59b9d6 R12: dffffc0000000000 [ 151.103687][ T6784] R13: 0000000000000000 R14: ffffc900024efd10 R15: 0000000000000eac [ 151.103706][ T6784] ? _copy_to_iter+0x3e1/0x1810 [ 151.103737][ T6784] _copy_to_iter+0x49d/0x1810 [ 151.103777][ T6784] ? __pfx__copy_to_iter+0x10/0x10 [ 151.103806][ T6784] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 151.103829][ T6784] ? lockdep_hardirqs_on+0x7a/0x110 [ 151.103864][ T6784] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 151.103885][ T6784] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 151.103916][ T6784] __skb_datagram_iter+0xf8/0x980 [ 151.103944][ T6784] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 151.103978][ T6784] skb_copy_datagram_iter+0xb5/0x240 [ 151.104008][ T6784] netlink_recvmsg+0x2b9/0xa50 [ 151.104032][ T6784] ? trace_irq_disable+0x3b/0x140 [ 151.104067][ T6784] ? __pfx_netlink_recvmsg+0x10/0x10 [ 151.104096][ T6784] ? __lock_acquire+0x683/0x2cf0 [ 151.104131][ T6784] ? __pfx_netlink_recvmsg+0x10/0x10 [ 151.104157][ T6784] sock_recvmsg_nosec+0x130/0x170 [ 151.104191][ T6784] ____sys_recvmsg+0x3e3/0x4a0 [ 151.104224][ T6784] ? __pfx_____sys_recvmsg+0x10/0x10 [ 151.104264][ T6784] ? import_iovec+0x73/0xa0 [ 151.104289][ T6784] ___sys_recvmsg+0x213/0x5a0 [ 151.104319][ T6784] ? __pfx____sys_recvmsg+0x10/0x10 [ 151.104348][ T6784] ? __fget_files+0x2a/0x420 [ 151.104410][ T6784] do_recvmmsg+0x31a/0x7f0 [ 151.104444][ T6784] ? __pfx_do_recvmmsg+0x10/0x10 [ 151.104483][ T6784] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.104511][ T6784] ? __fget_files+0x3a2/0x420 [ 151.104543][ T6784] __x64_sys_recvmmsg+0x198/0x250 [ 151.104565][ T6784] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 151.104594][ T6784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.104615][ T6784] do_syscall_64+0x174/0x580 [ 151.104636][ T6784] ? clear_bhb_loop+0x40/0x90 [ 151.104659][ T6784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.104678][ T6784] RIP: 0033:0x7fdfea99e019 [ 151.104697][ T6784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.104713][ T6784] RSP: 002b:00007fdfeb911028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 151.104732][ T6784] RAX: ffffffffffffffda RBX: 00007fdfeac25fa0 RCX: 00007fdfea99e019 [ 151.104744][ T6784] RDX: 0000000000000004 RSI: 0000200000004ac0 RDI: 0000000000000003 [ 151.104756][ T6784] RBP: 00007fdfeb911090 R08: 0000000000000000 R09: 0000000000000000 [ 151.104767][ T6784] R10: 0000000040010000 R11: 0000000000000246 R12: 0000000000000002 [ 151.104778][ T6784] R13: 00007fdfeac26038 R14: 00007fdfeac25fa0 R15: 00007fdfead4fa48 [ 151.104807][ T6784] [ 151.465157][ T6792] netlink: 48 bytes leftover after parsing attributes in process `syz.0.287'. [ 151.494849][ T6797] netlink: 'syz.3.289': attribute type 12 has an invalid length. [ 151.494873][ T6797] netlink: 'syz.3.289': attribute type 29 has an invalid length. [ 151.494888][ T6797] netlink: 148 bytes leftover after parsing attributes in process `syz.3.289'. [ 151.494908][ T6797] netlink: 59 bytes leftover after parsing attributes in process `syz.3.289'. [ 151.782816][ T6804] syzkaller0: entered promiscuous mode [ 151.782842][ T6804] syzkaller0: entered allmulticast mode [ 151.969855][ T5724] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 152.200192][ T5686] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 152.297493][ T5748] etas_es58x 3-1:1.0: could not retrieve the product info string [ 152.335495][ T6808] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 152.351184][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 152.367603][ T5724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.381846][ T5686] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.395292][ T5686] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.404034][ T5724] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53 [ 152.419081][ T5686] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 152.435085][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.445851][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.462971][ T5724] usb 4-1: config 0 descriptor?? [ 152.471430][ T5686] usb 1-1: config 0 descriptor?? [ 152.519948][ T5724] option 4-1:0.0: GSM modem (1-port) converter detected [ 152.536379][ T6812] FAULT_INJECTION: forcing a failure. [ 152.536379][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 152.550383][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.2.294 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.550419][ T6812] Tainted: [L]=SOFTLOCKUP [ 152.550427][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.550439][ T6812] Call Trace: [ 152.550447][ T6812] [ 152.550456][ T6812] dump_stack_lvl+0xe8/0x150 [ 152.550493][ T6812] should_fail_ex+0x40c/0x560 [ 152.550525][ T6812] should_failslab+0xa8/0x100 [ 152.550560][ T6812] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 152.550588][ T6812] ? skb_clone+0x212/0x3a0 [ 152.550612][ T6812] ? skb_clone+0x212/0x3a0 [ 152.550643][ T6812] skb_clone+0x212/0x3a0 [ 152.550680][ T6812] __netlink_deliver_tap+0x413/0x860 [ 152.550719][ T6812] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.550746][ T6812] netlink_deliver_tap+0x19c/0x1b0 [ 152.550772][ T6812] netlink_sendskb+0x68/0x140 [ 152.550797][ T6812] netlink_rcv_skb+0x2a4/0x4a0 [ 152.550823][ T6812] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.550848][ T6812] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.550870][ T6812] ? lockdep_hardirqs_on+0x7a/0x110 [ 152.550933][ T6812] netlink_unicast+0x7bb/0x940 [ 152.550967][ T6812] netlink_sendmsg+0x813/0xb40 [ 152.551000][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.551028][ T6812] ? aa_sock_msg_perm+0xf1/0x1b0 [ 152.551056][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.551079][ T6812] sock_sendmsg_nosec+0x13a/0x180 [ 152.551134][ T6812] ____sys_sendmsg+0x54e/0x850 [ 152.551182][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.551216][ T6812] ? import_iovec+0x73/0xa0 [ 152.551240][ T6812] ___sys_sendmsg+0x2a5/0x360 [ 152.551264][ T6812] ? __lock_acquire+0x683/0x2cf0 [ 152.551297][ T6812] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.551354][ T6812] ? __fget_files+0x2a/0x420 [ 152.551382][ T6812] ? __fget_files+0x3a2/0x420 [ 152.551422][ T6812] __x64_sys_sendmsg+0x1b1/0x290 [ 152.551451][ T6812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 152.551492][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.551514][ T6812] do_syscall_64+0x174/0x580 [ 152.551539][ T6812] ? clear_bhb_loop+0x40/0x90 [ 152.551566][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.551586][ T6812] RIP: 0033:0x7f6d1f59e019 [ 152.551606][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.551622][ T6812] RSP: 002b:00007f6d203bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.551644][ T6812] RAX: ffffffffffffffda RBX: 00007f6d1f825fa0 RCX: 00007f6d1f59e019 [ 152.551658][ T6812] RDX: 000000000000c800 RSI: 00002000000001c0 RDI: 0000000000000006 [ 152.551670][ T6812] RBP: 00007f6d203bb090 R08: 0000000000000000 R09: 0000000000000000 [ 152.551691][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.551704][ T6812] R13: 00007f6d1f826038 R14: 00007f6d1f825fa0 R15: 00007f6d1f94fa48 [ 152.551735][ T6812] [ 152.556553][ T5748] usb 3-1: USB disconnect, device number 21 [ 152.573192][ T6808] usb usb8: usbfs: process 6808 (syz.1.293) did not claim interface 0 before use [ 152.638868][ T5748] etas_es58x 3-1:1.0: Disconnecting syz syz [ 153.086411][ T5686] mcp2221 0003:04D8:00DD.000A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 153.237880][ T5695] usb 4-1: USB disconnect, device number 11 [ 153.286477][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.326452][ T5695] option 4-1:0.0: device disconnected [ 153.380975][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.511226][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.520930][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.528146][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.535375][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.544047][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.554292][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.561995][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.570048][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.577528][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.585388][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 153.603729][ T9] usb 5-1: USB disconnect, device number 10 [ 153.609766][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 153.694340][ T5358] usb 1-1: USB disconnect, device number 20 [ 153.778259][ T6823] netlink: 164 bytes leftover after parsing attributes in process `syz.1.297'. [ 153.850627][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 153.867414][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.299'. [ 154.644760][ T6849] netlink: 'syz.2.300': attribute type 12 has an invalid length. [ 154.689488][ T6849] netlink: 'syz.2.300': attribute type 29 has an invalid length. [ 154.726170][ T6849] netlink: 148 bytes leftover after parsing attributes in process `syz.2.300'. [ 154.757489][ T6849] netlink: 59 bytes leftover after parsing attributes in process `syz.2.300'. [ 155.199829][ T6865] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6866] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6865] [ 155.589297][ T30] audit: type=1326 audit(1785520977.227:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea99e019 code=0x7ffc0000 [ 155.682795][ T30] audit: type=1326 audit(1785520977.227:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea99e019 code=0x7ffc0000 [ 155.773791][ T30] audit: type=1326 audit(1785520977.277:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fdfea99e019 code=0x7ffc0000 [ 155.819513][ T6879] sctp: [Deprecated]: syz.4.307 (pid 6879) Use of int in max_burst socket option. [ 155.819513][ T6879] Use struct sctp_assoc_value instead [ 155.854643][ T30] audit: type=1326 audit(1785520977.287:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea99e019 code=0x7ffc0000 [ 155.895650][ T6882] netlink: 60 bytes leftover after parsing attributes in process `syz.4.307'. [ 155.966854][ T30] audit: type=1326 audit(1785520977.307:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea99e019 code=0x7ffc0000 [ 156.003543][ T6879] netlink: 604 bytes leftover after parsing attributes in process `syz.4.307'. [ 156.095604][ T30] audit: type=1326 audit(1785520977.307:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fdfea99e019 code=0x7ffc0000 [ 156.175786][ T30] audit: type=1326 audit(1785520977.317:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea99e019 code=0x7ffc0000 [ 156.265455][ T30] audit: type=1326 audit(1785520977.327:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea99e019 code=0x7ffc0000 [ 156.331830][ T6896] netlink: 'syz.1.314': attribute type 12 has an invalid length. [ 156.369636][ T30] audit: type=1326 audit(1785520977.327:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfea99e019 code=0x7ffc0000 [ 156.375166][ T6896] netlink: 'syz.1.314': attribute type 29 has an invalid length. [ 156.401754][ T5686] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 156.452542][ T30] audit: type=1326 audit(1785520977.327:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfea99e019 code=0x7ffc0000 [ 156.496053][ T6896] netlink: 148 bytes leftover after parsing attributes in process `syz.1.314'. [ 156.549418][ T6896] netlink: 59 bytes leftover after parsing attributes in process `syz.1.314'. [ 156.595075][ T5686] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.618083][ T5686] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 156.642574][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.709946][ T5686] usb 1-1: config 0 descriptor?? [ 157.145236][ T6916] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6917] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6916] [ 157.665844][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 157.685189][ T5686] ath6kl: Failed to submit usb control message: -71 [ 157.704749][ T5686] ath6kl: unable to send the bmi data to the device: -71 [ 157.714759][ T5686] ath6kl: Unable to send get target info: -71 [ 157.723305][ T5686] ath6kl: Failed to init ath6kl core: -71 [ 157.743350][ T5686] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 157.778928][ T5686] usb 1-1: USB disconnect, device number 21 [ 158.007689][ T6932] ip6erspan0: entered allmulticast mode [ 158.447122][ T6942] process 'syz.0.323' launched './file1' with NULL argv: empty string added [ 158.992862][ T5748] IPVS: starting estimator thread 0... [ 159.120147][ T6951] IPVS: using max 30 ests per chain, 72000 per kthread [ 160.322981][ T5695] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 160.508492][ T5695] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 160.521217][ T5695] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 160.531202][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.551575][ T5695] usb 1-1: config 0 descriptor?? [ 161.067105][ T5695] ath6kl: Failed to submit usb control message: -71 [ 161.074209][ T5695] ath6kl: unable to send the bmi data to the device: -71 [ 161.090452][ T5695] ath6kl: Unable to send get target info: -71 [ 161.099153][ T5695] ath6kl: Failed to init ath6kl core: -71 [ 161.105901][ T5695] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 161.176225][ T5695] usb 1-1: USB disconnect, device number 22 [ 161.474171][ T7000] netlink: 104 bytes leftover after parsing attributes in process `syz.1.341'. [ 162.195506][ T7017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.389652][ T7029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.509706][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 162.518098][ T5695] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 162.596595][ T7029] loop8: detected capacity change from 0 to 7 [ 162.711927][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 162.729886][ T5695] usb 4-1: Using ep0 maxpacket: 32 [ 162.747373][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 162.778262][ T5695] usb 4-1: unable to get BOS descriptor or descriptor too short [ 162.792013][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.814681][ T5695] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 17955, setting to 1024 [ 162.838119][ T7029] Dev loop8: unable to read RDB block 7 [ 162.849402][ T9] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 162.860888][ T5695] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 28, changing to 7 [ 162.878435][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.899715][ T7029] loop8: unable to read partition table [ 162.924113][ T7029] loop8: partition table beyond EOD, truncated [ 162.935668][ T9] usb 2-1: Product: syz [ 162.943249][ T9] usb 2-1: Manufacturer: syz [ 162.950131][ T5695] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 162.961227][ T9] usb 2-1: SerialNumber: syz [ 162.967098][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.978268][ T7029] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 163.011716][ T5695] usb 4-1: Product: syz [ 163.016097][ T5695] usb 4-1: Manufacturer: syz [ 163.023223][ T5695] usb 4-1: SerialNumber: syz [ 163.501791][ T5695] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 163.513730][ T9] usb 2-1: USB disconnect, device number 16 [ 163.523915][ T5695] usb 4-1: 2:1 : unsupported sample bitwidth 10 in 255 bytes [ 163.669999][ T5695] usb 4-1: USB disconnect, device number 12 [ 164.067884][ T6526] udevd[6526]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.148659][ T5685] udevd[5685]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 164.351476][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 164.500695][ T9] usb 3-1: device descriptor read/64, error -71 [ 164.591850][ T7052] fuse: root generation should be zero [ 164.795358][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 164.949697][ T9] usb 3-1: device descriptor read/64, error -71 [ 165.083000][ T9] usb usb3-port1: attempt power cycle [ 165.129558][ T7064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.160778][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 165.456403][ T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 165.512502][ T9] usb 3-1: device descriptor read/8, error -71 [ 165.779587][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 165.830539][ T9] usb 3-1: device descriptor read/8, error -71 [ 165.961100][ T9] usb usb3-port1: unable to enumerate USB device [ 166.303267][ T7072] 0: reclassify loop, rule prio 0, protocol 03 [ 166.507481][ T7077] FAULT_INJECTION: forcing a failure. [ 166.507481][ T7077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.539406][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.4.367 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.539435][ T7077] Tainted: [L]=SOFTLOCKUP [ 166.539442][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.539453][ T7077] Call Trace: [ 166.539462][ T7077] [ 166.539471][ T7077] dump_stack_lvl+0xe8/0x150 [ 166.539505][ T7077] should_fail_ex+0x40c/0x560 [ 166.539538][ T7077] _copy_from_user+0x2d/0xb0 [ 166.539559][ T7077] sctp_getsockopt_peer_addr_params+0x12f/0xd60 [ 166.539589][ T7077] ? __pfx_sctp_getsockopt_peer_addr_params+0x10/0x10 [ 166.539629][ T7077] ? sctp_getsockopt+0x12f/0xb90 [ 166.539657][ T7077] ? __local_bh_enable_ip+0xd0/0x130 [ 166.539688][ T7077] sctp_getsockopt+0x7e7/0xb90 [ 166.539714][ T7077] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 166.539746][ T7077] do_sock_getsockopt+0x51d/0x7e0 [ 166.539777][ T7077] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 166.539829][ T7077] ? __fget_files+0x3a2/0x420 [ 166.539857][ T7077] ? __fget_files+0x2a/0x420 [ 166.539892][ T7077] __x64_sys_getsockopt+0x1a4/0x240 [ 166.539922][ T7077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.539945][ T7077] do_syscall_64+0x174/0x580 [ 166.539969][ T7077] ? trace_irq_disable+0x3b/0x140 [ 166.539996][ T7077] ? clear_bhb_loop+0x40/0x90 [ 166.540021][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.540041][ T7077] RIP: 0033:0x7fec6b59e019 [ 166.540060][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.540076][ T7077] RSP: 002b:00007fec6c52a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 166.540097][ T7077] RAX: ffffffffffffffda RBX: 00007fec6b825fa0 RCX: 00007fec6b59e019 [ 166.540111][ T7077] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 166.540130][ T7077] RBP: 00007fec6c52a090 R08: 0000200000000080 R09: 0000000000000000 [ 166.540143][ T7077] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 166.540155][ T7077] R13: 00007fec6b826038 R14: 00007fec6b825fa0 R15: 00007fec6b94fa48 [ 166.540205][ T7077] [ 167.159375][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 167.179602][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 167.309386][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 167.317122][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.328421][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 167.341594][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 167.351726][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.360822][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.372274][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.382561][ T10] usb 5-1: config 0 descriptor?? [ 167.391913][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.402659][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 167.411138][ T9] usb 2-1: SerialNumber: syz [ 167.641939][ T7074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.669848][ T7074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.699962][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 167.699989][ T30] audit: type=1326 audit(1785520989.347:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7073 comm="syz.1.366" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a80b9e019 code=0x0 [ 167.802286][ T10] ryos 0003:1E7D:3138.000B: unknown main item tag 0x2 [ 167.833040][ T10] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 167.864373][ T10] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 167.886432][ T10] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 167.908005][ T10] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 167.927791][ T10] ryos 0003:1E7D:3138.000B: unknown main item tag 0x0 [ 167.949541][ T10] ryos 0003:1E7D:3138.000B: unexpected long global item [ 167.965065][ T10] ryos 0003:1E7D:3138.000B: parse failed [ 167.987536][ T10] ryos 0003:1E7D:3138.000B: probe with driver ryos failed with error -22 [ 168.024966][ T10] usb 5-1: USB disconnect, device number 11 [ 168.288719][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 168.559662][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 168.744205][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.770928][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.795599][ T10] usb 1-1: config 0 has no interface number 0 [ 168.808860][ T10] usb 1-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 168.825626][ T10] usb 1-1: config 0 interface 1 has no altsetting 0 [ 168.836317][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 168.847416][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.864377][ T10] usb 1-1: config 0 descriptor?? [ 168.882460][ T7110] netlink: 'syz.3.377': attribute type 12 has an invalid length. [ 168.890853][ T7110] netlink: 'syz.3.377': attribute type 29 has an invalid length. [ 168.898918][ T7110] netlink: 148 bytes leftover after parsing attributes in process `syz.3.377'. [ 168.908327][ T7110] netlink: 59 bytes leftover after parsing attributes in process `syz.3.377'. [ 169.107753][ T7115] loop7: detected capacity change from 0 to 16384 [ 169.565945][ T9] usb 2-1: 0:2 : does not exist [ 169.745623][ T9] usb 2-1: USB disconnect, device number 17 [ 170.084326][ T5685] udevd[5685]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.709337][ T5686] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 170.910641][ T5686] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 170.939874][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.969458][ T5686] usb 5-1: Product: syz [ 170.982824][ T5686] usb 5-1: Manufacturer: syz [ 170.994559][ T5686] usb 5-1: SerialNumber: syz [ 171.024403][ T5686] usb 5-1: config 0 descriptor?? [ 171.055908][ T5686] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 171.115454][ T5686] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.153126][ T5686] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 171.194335][ T5686] usb 5-1: media controller created [ 171.310200][ T5686] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.448676][ T5716] usb 1-1: USB disconnect, device number 23 [ 171.527041][ T7141] FAULT_INJECTION: forcing a failure. [ 171.527041][ T7141] name failslab, interval 1, probability 0, space 0, times 0 [ 171.600169][ T5686] DVB: Unable to find symbol mt352_attach() [ 171.609258][ T7141] CPU: 1 UID: 0 PID: 7141 Comm: syz.2.385 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.609290][ T7141] Tainted: [L]=SOFTLOCKUP [ 171.609298][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.609310][ T7141] Call Trace: [ 171.609318][ T7141] [ 171.609326][ T7141] dump_stack_lvl+0xe8/0x150 [ 171.609362][ T7141] should_fail_ex+0x40c/0x560 [ 171.609393][ T7141] should_failslab+0xa8/0x100 [ 171.609426][ T7141] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 171.609453][ T7141] ? skb_clone+0x212/0x3a0 [ 171.609475][ T7141] ? skb_clone+0x212/0x3a0 [ 171.609506][ T7141] skb_clone+0x212/0x3a0 [ 171.609534][ T7141] __netlink_deliver_tap+0x413/0x860 [ 171.609572][ T7141] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.609610][ T7141] netlink_deliver_tap+0x19c/0x1b0 [ 171.609637][ T7141] netlink_unicast+0x77f/0x940 [ 171.609695][ T7141] netlink_sendmsg+0x813/0xb40 [ 171.609732][ T7141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.609762][ T7141] ? aa_sock_msg_perm+0xf1/0x1b0 [ 171.609792][ T7141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.609817][ T7141] sock_sendmsg_nosec+0x13a/0x180 [ 171.609851][ T7141] ____sys_sendmsg+0x54e/0x850 [ 171.609882][ T7141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.609917][ T7141] ? import_iovec+0x73/0xa0 [ 171.609942][ T7141] ___sys_sendmsg+0x2a5/0x360 [ 171.609965][ T7141] ? __lock_acquire+0x683/0x2cf0 [ 171.610001][ T7141] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.610063][ T7141] ? __fget_files+0x2a/0x420 [ 171.610092][ T7141] ? __fget_files+0x3a2/0x420 [ 171.610133][ T7141] __x64_sys_sendmsg+0x1b1/0x290 [ 171.610161][ T7141] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 171.610206][ T7141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.610229][ T7141] do_syscall_64+0x174/0x580 [ 171.610254][ T7141] ? trace_irq_disable+0x3b/0x140 [ 171.610282][ T7141] ? clear_bhb_loop+0x40/0x90 [ 171.610309][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.610330][ T7141] RIP: 0033:0x7f6d1f59e019 [ 171.610349][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.610368][ T7141] RSP: 002b:00007f6d203bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.610390][ T7141] RAX: ffffffffffffffda RBX: 00007f6d1f825fa0 RCX: 00007f6d1f59e019 [ 171.610406][ T7141] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 171.610419][ T7141] RBP: 00007f6d203bb090 R08: 0000000000000000 R09: 0000000000000000 [ 171.610432][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.610445][ T7141] R13: 00007f6d1f826038 R14: 00007f6d1f825fa0 R15: 00007f6d1f94fa48 [ 171.610479][ T7141] [ 172.026657][ T7151] netlink: 'syz.2.389': attribute type 12 has an invalid length. [ 172.036572][ T5686] DVB: Unable to find symbol nxt6000_attach() [ 172.043907][ T5686] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 172.056553][ T5686] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 172.067927][ T7151] netlink: 'syz.2.389': attribute type 29 has an invalid length. [ 172.081529][ T7151] netlink: 148 bytes leftover after parsing attributes in process `syz.2.389'. [ 172.093115][ T5686] dvb-usb: schedule remote query interval to 1000 msecs. [ 172.100589][ T5686] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 172.111111][ T5686] dvb-usb: bulk message failed: -22 (7/0) [ 172.117171][ T5686] dvb-usb: bulk message failed: -22 (7/0) [ 172.125599][ T5686] usb 5-1: USB disconnect, device number 12 [ 172.133797][ T7151] netlink: 59 bytes leftover after parsing attributes in process `syz.2.389'. [ 172.189627][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 172.248442][ T7154] lo: entered allmulticast mode [ 172.308355][ T7152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.388'. [ 172.361632][ T5686] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 172.366499][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 172.386571][ T7153] usb usb7: usbfs: process 7153 (syz.3.387) did not claim interface 0 before use [ 172.454308][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.466254][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.484253][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 172.494553][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.564633][ T9] usb 1-1: config 0 descriptor?? [ 173.024612][ T9] ryos 0003:1E7D:3138.000C: unknown main item tag 0x2 [ 173.044433][ T9] ryos 0003:1E7D:3138.000C: unknown main item tag 0x0 [ 173.064665][ T9] ryos 0003:1E7D:3138.000C: unknown main item tag 0x0 [ 173.081611][ T9] ryos 0003:1E7D:3138.000C: unknown main item tag 0x0 [ 173.098896][ T9] ryos 0003:1E7D:3138.000C: unknown main item tag 0x0 [ 173.118245][ T9] ryos 0003:1E7D:3138.000C: unknown main item tag 0x0 [ 173.136004][ T9] ryos 0003:1E7D:3138.000C: unexpected long global item [ 173.164845][ T9] ryos 0003:1E7D:3138.000C: parse failed [ 173.181463][ T9] ryos 0003:1E7D:3138.000C: probe with driver ryos failed with error -22 [ 173.328253][ T5686] usb 1-1: USB disconnect, device number 24 [ 173.417626][ T7175] syzkaller0: entered promiscuous mode [ 173.432607][ T7175] syzkaller0: entered allmulticast mode [ 173.465540][ T7175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.499898][ T5695] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 173.668486][ T5695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.696970][ T5695] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.719183][ T5695] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.738701][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 173.765406][ T5695] usb 3-1: SerialNumber: syz [ 173.877839][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.918617][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.029781][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.053301][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.100361][ T5716] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 174.255744][ T5695] usb 3-1: 0:2 : does not exist [ 174.261075][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 174.275118][ T5716] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 131, changing to 7 [ 174.311314][ T5716] usb 2-1: New USB device found, idVendor=249c, idProduct=931c, bcdDevice= 0.40 [ 174.334826][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.363549][ T5716] usb 2-1: Product: 盰놛ꃦ竛槂횠벱쩪ꡠ鹦ឮê˜áž í›’薀膬섄ڦ迤䤱ෛ᷈陴钎ì½à¼¼æ˜‡ë´£çš™å—꼘홷éºè½“￀צּ劽錷뜨䟼á’ᕢ⅑뤔栻校倮뵣縟㓖㊦咂耨æŠê€žå–焨沯ꦿê­å¡¡é¹ì‹å™ë¡­à¥ çµ®é¼±è¢‘á§ä’žÓ¡æ°’廡ᙽ眚Ẏ䯩▒膅é®å“僱囹购ຘçƒá€´å¯«ã…ªã·Ô‹â¶¯ã¯µâ‡”峫把 [ 174.407013][ T5695] usb 3-1: USB disconnect, device number 26 [ 174.458066][ T5716] usb 2-1: Manufacturer: 泩コ賙掦릟å½ë±¿ê´ƒìŽíž¯ä…™éšè¥è³Žî‰‘왹씄â·ì¾Šâ—£á’Žä»‚ï‡¬â¸¶æ«›èº®îž¼î„„ã¼‰çž·ä®‰ç¹½ä¬¹á†½ë¨¼î™”á€´ï¿€ê²€î…§î¼•í“™â¡¸ì¦ [ 174.477324][ T5716] usb 2-1: SerialNumber: à ¾ [ 174.506227][ T5685] udevd[5685]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.754477][ T5716] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 174.775783][ T5716] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 174.801329][ T5716] usb 2-1: found format II with max.bitrate = 7, frame size=3 [ 174.823487][ T5716] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 175.047162][ T5716] usb 2-1: USB disconnect, device number 18 [ 175.117394][ T7193] bond1: Unable to set up delay as MII monitoring is disabled [ 175.174034][ T7193] bond1 (unregistering): Released all slaves [ 175.180905][ T5685] udevd[5685]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.849674][ T5716] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 176.011752][ T5716] usb 5-1: config 0 has an invalid interface number: 147 but max is 0 [ 176.029587][ T5716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.047917][ T5716] usb 5-1: config 0 has no interface number 0 [ 176.069651][ T5716] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 176.082718][ T5716] usb 5-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 176.123917][ T5716] usb 5-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.170005][ T5716] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 176.192566][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.211978][ T5716] usb 5-1: Product: syz [ 176.216284][ T5716] usb 5-1: Manufacturer: syz [ 176.221330][ T5716] usb 5-1: SerialNumber: syz [ 176.255255][ T5716] usb 5-1: config 0 descriptor?? [ 176.267514][ T7216] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.343295][ T5716] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 176.515986][ T7216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.541711][ T7216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.584397][ T133] usb 5-1: Failed to submit usb control message: -71 [ 176.592265][ T5716] usb 5-1: USB disconnect, device number 13 [ 176.614808][ T133] usb 5-1: unable to send the bmi data to the device: -71 [ 176.640363][ T133] usb 5-1: unable to get target info from device [ 176.666969][ T133] usb 5-1: could not get target info (-71) [ 176.674443][ T5695] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 176.696333][ T133] usb 5-1: could not probe fw (-71) [ 176.849575][ T5695] usb 4-1: Using ep0 maxpacket: 8 [ 176.866562][ T5695] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.890761][ T5695] usb 4-1: config 8 has an invalid interface number: 45 but max is 0 [ 176.907825][ T5695] usb 4-1: config 8 has no interface number 0 [ 176.927221][ T5695] usb 4-1: config 8 interface 45 has no altsetting 0 [ 176.949072][ T5695] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=51.e7 [ 176.970708][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.000658][ T5695] usb 4-1: Product: syz [ 177.013413][ T5695] usb 4-1: Manufacturer: syz [ 177.043576][ T5695] usb 4-1: SerialNumber: syz [ 177.431333][ T5686] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 177.483430][ T5695] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 177.512314][ T5695] gspca_sn9c2028: read1 error -71 [ 177.526299][ T5695] gspca_sn9c2028: read1 error -71 [ 177.544515][ T5695] gspca_sn9c2028: read1 error -71 [ 177.558049][ T5695] sn9c2028 4-1:8.45: probe with driver sn9c2028 failed with error -71 [ 177.570671][ T5748] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 177.592485][ T5695] usb 4-1: USB disconnect, device number 13 [ 177.620839][ T5686] usb 3-1: not running at top speed; connect to a high speed hub [ 177.642745][ T5686] usb 3-1: config 127 has an invalid interface number: 136 but max is 0 [ 177.661487][ T5686] usb 3-1: config 127 has no interface number 0 [ 177.671582][ T5686] usb 3-1: config 127 interface 136 altsetting 0 endpoint 0x5 has an invalid bInterval 127, changing to 4 [ 177.684048][ T5686] usb 3-1: config 127 interface 136 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 177.705555][ T5686] usb 3-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice=a3.4c [ 177.715223][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.725541][ T5686] usb 3-1: Product: syz [ 177.730331][ T5748] usb 5-1: device descriptor read/64, error -71 [ 177.737491][ T5686] usb 3-1: Manufacturer: syz [ 177.742481][ T5686] usb 3-1: SerialNumber: syz [ 177.920250][ T809] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 177.961466][ T7239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.974529][ T7239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.987683][ T5686] kaweth 3-1:127.136: couldn't find required endpoints [ 177.995573][ T5748] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 178.017435][ T5686] usb 3-1: USB disconnect, device number 27 [ 178.080477][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 178.093955][ T809] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 178.106322][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.124950][ T809] usb 1-1: Product: syz [ 178.139470][ T5748] usb 5-1: device descriptor read/64, error -71 [ 178.147611][ T809] usb 1-1: Manufacturer: syz [ 178.154042][ T809] usb 1-1: SerialNumber: syz [ 178.178422][ T809] usb 1-1: config 0 descriptor?? [ 178.211995][ T809] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 178.259856][ T5748] usb usb5-port1: attempt power cycle [ 178.485673][ T809] usb 1-1: clie_3_5_startup: get config number failed: -71 [ 178.505590][ T809] visor 1-1:0.0: probe with driver visor failed with error -71 [ 178.551693][ T809] usb 1-1: USB disconnect, device number 25 [ 178.601379][ T5748] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 178.640875][ T5748] usb 5-1: device descriptor read/8, error -71 [ 178.879718][ T5748] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 178.910065][ T5748] usb 5-1: device descriptor read/8, error -71 [ 179.030620][ T5748] usb usb5-port1: unable to enumerate USB device [ 179.213441][ T7281] sctp: [Deprecated]: syz.0.428 (pid 7281) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.213441][ T7281] Use struct sctp_sack_info instead [ 180.179513][ T809] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 180.242383][ T5716] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 180.349392][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 180.364327][ T809] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 180.384449][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.409622][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 180.421786][ T809] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 180.427354][ T5716] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 180.466837][ T5716] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 180.496886][ T7303] team0: Port device vxlan0 added [ 180.502186][ T5716] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 180.513952][ T5716] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 180.519808][ T3310] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.536011][ T5716] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 180.555300][ T3310] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.558110][ T5716] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.577279][ T133] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.577359][ T133] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.638190][ T5716] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.675409][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.911377][ T5716] usb 4-1: GET_CAPABILITIES returned 0 [ 180.931480][ T5716] usbtmc 4-1:16.0: can't read capabilities [ 180.939709][ T5695] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 181.024420][ T809] gspca_nw80x: reg_w err -71 [ 181.033619][ T809] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 181.071287][ T809] usb 1-1: USB disconnect, device number 26 [ 181.112009][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 181.133680][ T5695] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.180822][ T5695] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 181.180856][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.180878][ T5695] usb 3-1: Product: syz [ 181.180894][ T5695] usb 3-1: Manufacturer: syz [ 181.180910][ T5695] usb 3-1: SerialNumber: syz [ 181.195587][ T5695] usb 3-1: config 0 descriptor?? [ 181.196639][ T7306] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 181.207458][ T5695] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 181.421840][ T809] usb 3-1: USB disconnect, device number 28 [ 181.428963][ T5695] usb 4-1: USB disconnect, device number 14 [ 181.638281][ T7323] netlink: 104 bytes leftover after parsing attributes in process `syz.1.440'. [ 181.864161][ T7329] netlink: 'syz.0.444': attribute type 12 has an invalid length. [ 181.889577][ T7329] netlink: 'syz.0.444': attribute type 29 has an invalid length. [ 181.909460][ T7329] netlink: 148 bytes leftover after parsing attributes in process `syz.0.444'. [ 182.217877][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.255966][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.390331][ T809] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.467075][ T7341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.681640][ T7341] loop8: detected capacity change from 0 to 7 [ 182.712900][ T7341] Dev loop8: unable to read RDB block 7 [ 182.720922][ T7341] loop8: unable to read partition table [ 182.732414][ T7341] loop8: partition table beyond EOD, truncated [ 182.777456][ T7341] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 182.850776][ T7350] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 182.929646][ T5716] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 183.090278][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 183.104985][ T5716] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.120368][ T5716] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.131069][ T5716] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.137769][ T5716] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 183.147803][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.178956][ T5716] usb 2-1: config 0 descriptor?? [ 183.250210][ T7350] bridge1: entered promiscuous mode [ 183.306255][ T7350] bond2: (slave bridge1): making interface the new active one [ 183.350432][ T7350] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 183.460158][ T5724] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 183.629393][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 183.657010][ T5724] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 183.672952][ T7366] syzkaller0: entered promiscuous mode [ 183.686007][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.708717][ T7366] syzkaller0: entered allmulticast mode [ 183.720576][ T5724] usb 1-1: Product: syz [ 183.724483][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.742978][ T5724] usb 1-1: Manufacturer: syz [ 183.764801][ T5724] usb 1-1: SerialNumber: syz [ 183.780922][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.797322][ T5724] usb 1-1: config 0 descriptor?? [ 184.038954][ T5716] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 184.086749][ T5716] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 184.119538][ T5716] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 184.146773][ T5716] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 184.162150][ T5716] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 184.200058][ T5716] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 184.233916][ T5724] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 184.252642][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.308998][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.327937][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.400390][ T5716] usb 2-1: USB disconnect, device number 19 [ 184.423088][ T5724] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 184.466188][ T5724] usb 1-1: media controller created [ 184.540795][ T7361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.585374][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.738290][ T7378] netlink: 'syz.4.456': attribute type 12 has an invalid length. [ 184.748624][ T5724] zl10353_read_register: readreg error (reg=127, ret==0) [ 184.756178][ T7378] netlink: 'syz.4.456': attribute type 29 has an invalid length. [ 184.764112][ T5724] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 184.786027][ T7378] netlink: 148 bytes leftover after parsing attributes in process `syz.4.456'. [ 184.796426][ T5724] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 184.840569][ T5724] usb 1-1: USB disconnect, device number 27 [ 185.001273][ T5724] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 185.110925][ T7386] capability: warning: `syz.1.461' uses deprecated v2 capabilities in a way that may be insecure [ 185.180435][ T5716] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 185.219467][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 185.363812][ T7394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.392007][ T5716] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 185.401426][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 185.413203][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 185.425758][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.448062][ T5716] usb 4-1: Product: syz [ 185.455485][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 185.471169][ T5716] usb 4-1: Manufacturer: syz [ 185.482652][ T5716] usb 4-1: SerialNumber: syz [ 185.494063][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 185.512772][ T5716] usb 4-1: config 0 descriptor?? [ 185.525028][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.563920][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.584076][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.751846][ T5716] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.896494][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 185.913574][ T9] usbtmc 5-1:16.0: can't read capabilities [ 186.131640][ T9] usb 5-1: USB disconnect, device number 18 [ 186.163312][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.181624][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.535574][ T7420] netlink: 200 bytes leftover after parsing attributes in process `syz.2.464'. [ 186.617305][ T7420] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 186.923994][ T7431] dlm: no locking on control device [ 187.259818][ T5716] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 187.418403][ T7437] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 187.504414][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 187.581434][ T7437] bond1: option mode: invalid value (9) [ 187.635923][ T7446] netlink: 'syz.4.471': attribute type 10 has an invalid length. [ 187.646005][ T7446] netlink: 40 bytes leftover after parsing attributes in process `syz.4.471'. [ 187.665038][ T7437] bond1 (unregistering): Released all slaves [ 187.717362][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.471'. [ 187.790260][ T7456] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 187.806540][ T7446] dummy0: entered promiscuous mode [ 187.886569][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 187.955702][ T7458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.978609][ T7462] syzkaller0: entered promiscuous mode [ 187.984510][ T7462] syzkaller0: entered allmulticast mode [ 187.990612][ T5716] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 188.016397][ T7462] tipc: Enabled bearer , priority 0 [ 188.037615][ T7462] tipc: Resetting bearer [ 188.064272][ T7461] tipc: Resetting bearer [ 188.087261][ T7461] tipc: Disabling bearer [ 188.152235][ T5716] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 188.163083][ T5716] usb 3-1: config 0 interface 0 has no altsetting 0 [ 188.173503][ T5716] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 188.183296][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 188.193143][ T5716] usb 3-1: Product: syz [ 188.197918][ T5716] usb 3-1: Manufacturer: syz [ 188.203831][ T5716] usb 3-1: SerialNumber: syz [ 188.217465][ T5716] usb 3-1: config 0 descriptor?? [ 188.238479][ T5716] usb 3-1: selecting invalid altsetting 0 [ 188.313400][ T10] usb 4-1: USB disconnect, device number 16 [ 188.345799][ T5724] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 188.447166][ T5748] usb 3-1: USB disconnect, device number 29 [ 188.521921][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 188.544980][ T5724] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 188.553647][ T5724] usb 5-1: config 1 has no interface number 0 [ 188.597223][ T5724] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 188.637195][ T5724] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 188.671031][ T5724] usb 5-1: config 1 interface 105 has no altsetting 0 [ 188.693573][ T5724] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 188.717396][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 188.740980][ T5724] usb 5-1: Product: syz [ 188.750095][ T5724] usb 5-1: Manufacturer: syz [ 188.757817][ T5724] usb 5-1: SerialNumber: syz [ 188.776669][ T7465] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 188.792229][ T7465] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 189.131560][ T7489] binder: BINDER_SET_CONTEXT_MGR already set [ 189.138766][ T7489] binder: 7488:7489 ioctl 4018620d 200000004a80 returned -16 [ 189.147902][ T7489] binder: BINDER_SET_CONTEXT_MGR already set [ 189.155886][ T7489] binder: 7488:7489 ioctl 40046207 0 returned -16 [ 189.163975][ T7489] binder: 7488:7489 ioctl c0306201 2000000004c0 returned -22 [ 189.202033][ T7489] binder: 7488:7489 ioctl 80089418 200000000200 returned -22 [ 189.452876][ T7498] trusted_key: syz.0.487 sent an empty control message without MSG_MORE. [ 189.484460][ T7499] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 189.492614][ T7499] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 189.687486][ T7503] syzkaller0: entered promiscuous mode [ 189.700382][ T7503] syzkaller0: entered allmulticast mode [ 189.773038][ T7503] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.999433][ T5724] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 190.053856][ T5724] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 190.267933][ T7519] PKCS7: Unknown OID: [4] 2.19.16263.96.12508(bad) [ 190.319508][ T7519] PKCS7: Only support pkcs7_signedData type [ 190.483800][ T7525] capability: warning: `syz.3.497' uses 32-bit capabilities (legacy support in use) [ 190.508008][ T7525] program syz.3.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.645489][ T7525] bridge_slave_0: left allmulticast mode [ 190.676440][ T7525] bridge_slave_0: left promiscuous mode [ 190.696791][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.755708][ T7525] bridge_slave_1: left allmulticast mode [ 190.774680][ T7525] bridge_slave_1: left promiscuous mode [ 190.798728][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.872106][ T5724] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 190.926494][ T7525] bond0: (slave bond_slave_0): Releasing backup interface [ 190.958970][ T7525] bond0: (slave bond_slave_1): Releasing backup interface [ 190.990090][ T7525] team0: Port device team_slave_0 removed [ 191.010661][ T7525] team0: Port device team_slave_1 removed [ 191.036548][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.059722][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.087695][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.105237][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.131973][ T7525] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.279557][ T809] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 191.291036][ T5724] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2e:4d:f2:3c:bc:1e [ 191.336344][ T5724] usb 5-1: USB disconnect, device number 19 [ 191.389145][ T5724] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 191.543299][ T7536] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 191.603805][ T5724] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 191.650424][ T5724] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 191.688457][ T5724] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 191.878197][ T7540] ptrace attach of ""[7544] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[7540] [ 192.929408][ T809] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 193.100413][ T809] usb 2-1: Using ep0 maxpacket: 16 [ 193.120090][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.152003][ T809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.186924][ T809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.223454][ T809] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 193.257245][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.311292][ T809] usb 2-1: config 0 descriptor?? [ 193.556660][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.594264][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.750070][ T7583] IPv6: NLM_F_CREATE should be specified when creating new route [ 193.856198][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.876690][ T7588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.519'. [ 193.890675][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.933761][ T809] usbhid 2-1:0.0: can't add hid device: -71 [ 193.956504][ T809] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.994904][ T809] usb 2-1: USB disconnect, device number 20 [ 194.241082][ T7594] tipc: Started in network mode [ 194.250921][ T7594] tipc: Node identity 5eca3fee41e3, cluster identity 4711 [ 194.271312][ T7594] tipc: Enabled bearer , priority 10 [ 194.300143][ T7593] tipc: Resetting bearer [ 194.332298][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338992][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.404411][ T7593] tipc: Disabling bearer [ 194.647072][ T7599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.663396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 194.787288][ T7599] loop8: detected capacity change from 0 to 7 [ 194.972372][ T7599] Dev loop8: unable to read RDB block 7 [ 194.979392][ T809] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 194.988683][ T7599] loop8: unable to read partition table [ 195.134491][ T7608] openvswitch: netlink: Actions may not be safe on all matching packets [ 195.145310][ T7599] loop8: partition table beyond EOD, truncated [ 195.153279][ T7599] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 195.164258][ T809] usb 3-1: device descriptor read/64, error -71 [ 195.429356][ T809] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 195.610931][ T809] usb 3-1: device descriptor read/64, error -71 [ 195.742761][ T809] usb usb3-port1: attempt power cycle [ 196.139358][ T809] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 196.190698][ T809] usb 3-1: device descriptor read/8, error -71 [ 196.268615][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'. [ 196.281503][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 196.307576][ T7621] netlink: 'syz.1.532': attribute type 4 has an invalid length. [ 196.316897][ T7621] netlink: 152 bytes leftover after parsing attributes in process `syz.1.532'. [ 196.386183][ T7621] .`: renamed from bond0 [ 196.459546][ T809] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 196.523279][ T809] usb 3-1: device descriptor read/8, error -71 [ 196.661519][ T809] usb usb3-port1: unable to enumerate USB device [ 197.313002][ T809] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 197.469370][ T809] usb 2-1: Using ep0 maxpacket: 8 [ 197.492505][ T809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 197.501916][ T5748] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 197.523559][ T809] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 197.533197][ T809] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 197.549608][ T809] usb 2-1: Product: syz [ 197.559280][ T809] usb 2-1: Manufacturer: syz [ 197.565441][ T809] usb 2-1: SerialNumber: syz [ 197.679428][ T5748] usb 4-1: Using ep0 maxpacket: 32 [ 197.693812][ T5748] usb 4-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config [ 197.726098][ T5748] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 197.745435][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.756246][ T5748] usb 4-1: Product: syz [ 197.762271][ T5748] usb 4-1: Manufacturer: syz [ 197.767935][ T5748] usb 4-1: SerialNumber: syz [ 197.781582][ T809] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 197.791225][ T5748] usb 4-1: config 0 descriptor?? [ 197.807588][ T809] usb 2-1: Handspring Visor / Palm OS: port 6, is for Remote File System use [ 197.819551][ T5748] cdc_ether 4-1:0.0: missing cdc header descriptor [ 197.826528][ T809] usb 2-1: Handspring Visor / Palm OS: port 217, is for unknown use [ 197.836357][ T5748] usb 4-1: unsupported MDLM descriptors [ 197.842698][ T809] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 197.995278][ T809] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 198.045509][ T5716] usb 4-1: USB disconnect, device number 17 [ 198.051988][ T809] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 198.102050][ T809] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 198.140686][ T809] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 198.177599][ T809] usb 2-1: USB disconnect, device number 21 [ 198.207537][ T809] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 198.232479][ T809] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 198.259824][ T809] visor 2-1:1.0: device disconnected [ 198.321646][ T7666] FAULT_INJECTION: forcing a failure. [ 198.321646][ T7666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.336367][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.0.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.336400][ T7666] Tainted: [L]=SOFTLOCKUP [ 198.336408][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.336421][ T7666] Call Trace: [ 198.336429][ T7666] [ 198.336437][ T7666] dump_stack_lvl+0xe8/0x150 [ 198.336474][ T7666] should_fail_ex+0x40c/0x560 [ 198.336507][ T7666] prepare_alloc_pages+0x230/0x650 [ 198.336542][ T7666] __alloc_frozen_pages_noprof+0x12f/0x380 [ 198.336585][ T7666] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 198.336621][ T7666] ? __pfx_policy_nodemask+0x10/0x10 [ 198.336652][ T7666] ? rcuref_put+0x13f/0x170 [ 198.336689][ T7666] alloc_pages_mpol+0x212/0x380 [ 198.336728][ T7666] folio_alloc_mpol_noprof+0x39/0x160 [ 198.336764][ T7666] vma_alloc_folio_noprof+0xe1/0x1e0 [ 198.336800][ T7666] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 198.336840][ T7666] do_wp_page+0x1163/0x4c70 [ 198.336876][ T7666] ? __pfx_do_wp_page+0x10/0x10 [ 198.336896][ T7666] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.336924][ T7666] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.336954][ T7666] handle_mm_fault+0x1490/0x3080 [ 198.336987][ T7666] ? handle_mm_fault+0xec/0x3080 [ 198.337015][ T7666] ? __pfx_handle_mm_fault+0x10/0x10 [ 198.337048][ T7666] ? __lock_acquire+0x683/0x2cf0 [ 198.337081][ T7666] ? lock_mm_and_find_vma+0xa7/0x340 [ 198.337112][ T7666] do_user_addr_fault+0x744/0x1340 [ 198.337160][ T7666] exc_page_fault+0x6a/0xc0 [ 198.337187][ T7666] asm_exc_page_fault+0x26/0x30 [ 198.337211][ T7666] RIP: 0010:__put_user_4+0xd/0x30 [ 198.337236][ T7666] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 198.337254][ T7666] RSP: 0018:ffffc90003a97c98 EFLAGS: 00050202 [ 198.337272][ T7666] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000092f8 [ 198.337286][ T7666] RDX: 0000000000000000 RSI: ffffffff8e4b347b RDI: ffffffff8c4bdd80 [ 198.337301][ T7666] RBP: ffffc90003a97eb0 R08: ffffffff821bf1bf R09: 0000000000000000 [ 198.337315][ T7666] R10: 0000000000000000 R11: ffff88807b83b6b8 R12: 1ffff92000752f9c [ 198.337329][ T7666] R13: 000000000004fdff R14: 00002000000092c0 R15: 00000000000003ff [ 198.337351][ T7666] ? __might_fault+0xaf/0x130 [ 198.337384][ T7666] __sys_sendmmsg+0x2a7/0x4d0 [ 198.337416][ T7666] ? __pfx___sys_sendmmsg+0x10/0x10 [ 198.337452][ T7666] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.337494][ T7666] ? ksys_write+0x242/0x270 [ 198.337519][ T7666] ? __pfx_ksys_write+0x10/0x10 [ 198.337548][ T7666] __x64_sys_sendmmsg+0xa0/0xc0 [ 198.337581][ T7666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.337604][ T7666] do_syscall_64+0x174/0x580 [ 198.337629][ T7666] ? trace_irq_disable+0x3b/0x140 [ 198.337657][ T7666] ? clear_bhb_loop+0x40/0x90 [ 198.337683][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.337705][ T7666] RIP: 0033:0x7f211319e019 [ 198.337724][ T7666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.337741][ T7666] RSP: 002b:00007f211408e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 198.337761][ T7666] RAX: ffffffffffffffda RBX: 00007f2113425fa0 RCX: 00007f211319e019 [ 198.337776][ T7666] RDX: 00000000000004ff RSI: 00002000000092c0 RDI: 0000000000000003 [ 198.337789][ T7666] RBP: 00007f211408e090 R08: 0000000000000000 R09: 0000000000000000 [ 198.337802][ T7666] R10: 000000000000fdff R11: 0000000000000246 R12: 0000000000000001 [ 198.337816][ T7666] R13: 00007f2113426038 R14: 00007f2113425fa0 R15: 00007f211354fa48 [ 198.337849][ T7666] [ 199.059344][ T5716] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 199.189055][ T7687] netlink: 'syz.4.555': attribute type 1 has an invalid length. [ 199.202995][ T7688] netlink: 'syz.1.554': attribute type 12 has an invalid length. [ 199.229338][ T7688] netlink: 'syz.1.554': attribute type 29 has an invalid length. [ 199.229940][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 199.241382][ T7688] netlink: 148 bytes leftover after parsing attributes in process `syz.1.554'. [ 199.250861][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 199.271675][ T5716] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 199.281150][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.303135][ T5716] usb 3-1: config 0 descriptor?? [ 199.389814][ T9] usb 4-1: device descriptor read/64, error -71 [ 199.493355][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.558'. [ 199.502728][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.558'. [ 199.515666][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.558'. [ 199.530059][ T5716] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 199.541225][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.558'. [ 199.551693][ T5716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 199.565077][ T5716] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 199.583062][ T5716] usb 3-1: media controller created [ 199.628008][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.644542][ T9] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 199.738179][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.549'. [ 199.753924][ T5716] az6027: usb out operation failed. (-71) [ 199.762612][ T5716] az6027: usb out operation failed. (-71) [ 199.772779][ T5716] stb0899_attach: Driver disabled by Kconfig [ 199.778843][ T5716] az6027: no front-end attached [ 199.778843][ T5716] [ 199.786313][ T9] usb 4-1: device descriptor read/64, error -71 [ 199.793629][ T5716] az6027: usb out operation failed. (-71) [ 199.800730][ T5716] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 199.816447][ T5716] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 199.831967][ T5716] dvb-usb: schedule remote query interval to 400 msecs. [ 199.839614][ T5716] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 199.852425][ T5716] usb 3-1: USB disconnect, device number 35 [ 199.900299][ T9] usb usb4-port1: attempt power cycle [ 199.936580][ T5716] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 199.960016][ T809] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 200.120886][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 200.142817][ T809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.155973][ T809] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.190944][ T809] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 200.201007][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.226452][ T809] usb 1-1: config 0 descriptor?? [ 200.261325][ T9] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 200.300138][ T9] usb 4-1: device descriptor read/8, error -71 [ 200.513595][ T7719] veth2: entered allmulticast mode [ 200.550478][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 200.572573][ T7722] fuse: Bad value for 'user_id' [ 200.594440][ T7722] fuse: Bad value for 'user_id' [ 200.600244][ T9] usb 4-1: device descriptor read/8, error -71 [ 200.653886][ T809] ryos 0003:1E7D:3138.000E: unknown main item tag 0x2 [ 200.679660][ T809] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 200.694821][ T809] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 200.715511][ T809] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 200.720684][ T9] usb usb4-port1: unable to enumerate USB device [ 200.744983][ T809] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 200.752573][ T809] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 200.759865][ T809] ryos 0003:1E7D:3138.000E: unexpected long global item [ 200.767976][ T809] ryos 0003:1E7D:3138.000E: parse failed [ 200.775609][ T809] ryos 0003:1E7D:3138.000E: probe with driver ryos failed with error -22 [ 200.848689][ T809] usb 1-1: USB disconnect, device number 28 [ 202.165714][ T7751] netlink: 'syz.3.573': attribute type 61 has an invalid length. [ 202.496036][ T7760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.613774][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.575'. [ 202.864885][ T7768] FAULT_INJECTION: forcing a failure. [ 202.864885][ T7768] name failslab, interval 1, probability 0, space 0, times 0 [ 202.883728][ T7768] CPU: 0 UID: 0 PID: 7768 Comm: syz.1.579 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.883761][ T7768] Tainted: [L]=SOFTLOCKUP [ 202.883769][ T7768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.883781][ T7768] Call Trace: [ 202.883788][ T7768] [ 202.883797][ T7768] dump_stack_lvl+0xe8/0x150 [ 202.883833][ T7768] should_fail_ex+0x40c/0x560 [ 202.883865][ T7768] should_failslab+0xa8/0x100 [ 202.883897][ T7768] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 202.883923][ T7768] ? local_lock_release+0x9c/0x160 [ 202.883945][ T7768] ? __alloc_skb+0x1d7/0x7a0 [ 202.883963][ T7768] ? __alloc_skb+0x1d7/0x7a0 [ 202.883989][ T7768] __alloc_skb+0x1d7/0x7a0 [ 202.884014][ T7768] netlink_ack+0x136/0xb30 [ 202.884036][ T7768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.884070][ T7768] ? __pfx_ref_tracker_free+0x10/0x10 [ 202.884097][ T7768] ? __asan_memcpy+0x40/0x70 [ 202.884130][ T7768] netlink_rcv_skb+0x2a4/0x4a0 [ 202.884155][ T7768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.884187][ T7768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.884225][ T7768] ? down_read+0x2be/0x330 [ 202.884256][ T7768] genl_rcv+0x28/0x40 [ 202.884284][ T7768] netlink_unicast+0x7bb/0x940 [ 202.884318][ T7768] netlink_sendmsg+0x813/0xb40 [ 202.884352][ T7768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.884381][ T7768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 202.884420][ T7768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.884444][ T7768] sock_sendmsg_nosec+0x13a/0x180 [ 202.884477][ T7768] ____sys_sendmsg+0x54e/0x850 [ 202.884507][ T7768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.884540][ T7768] ? import_iovec+0x73/0xa0 [ 202.884564][ T7768] ___sys_sendmsg+0x2a5/0x360 [ 202.884587][ T7768] ? __lock_acquire+0x683/0x2cf0 [ 202.884626][ T7768] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.884685][ T7768] ? __fget_files+0x2a/0x420 [ 202.884720][ T7768] ? __fget_files+0x3a2/0x420 [ 202.884760][ T7768] __x64_sys_sendmsg+0x1b1/0x290 [ 202.884787][ T7768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.884830][ T7768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.884853][ T7768] do_syscall_64+0x174/0x580 [ 202.884877][ T7768] ? trace_irq_disable+0x3b/0x140 [ 202.884904][ T7768] ? clear_bhb_loop+0x40/0x90 [ 202.884930][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.884951][ T7768] RIP: 0033:0x7f9a80b9e019 [ 202.884970][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.884988][ T7768] RSP: 002b:00007f9a819f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.885010][ T7768] RAX: ffffffffffffffda RBX: 00007f9a80e25fa0 RCX: 00007f9a80b9e019 [ 202.885025][ T7768] RDX: 0000000004008804 RSI: 0000200000000d00 RDI: 0000000000000007 [ 202.885038][ T7768] RBP: 00007f9a819f2090 R08: 0000000000000000 R09: 0000000000000000 [ 202.885051][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.885063][ T7768] R13: 00007f9a80e26038 R14: 00007f9a80e25fa0 R15: 00007f9a80f4fa48 [ 202.885097][ T7768] [ 203.430724][ T7778] syz_tun: entered promiscuous mode [ 203.472202][ T7778] syz_tun: left promiscuous mode [ 203.559976][ T5358] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 203.649684][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 203.708070][ T5358] usb 2-1: device descriptor read/64, error -71 [ 203.809375][ T9] usb 5-1: device descriptor read/64, error -71 [ 203.959639][ T5358] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 204.049299][ T9] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 204.089545][ T5358] usb 2-1: device descriptor read/64, error -71 [ 204.179577][ T9] usb 5-1: device descriptor read/64, error -71 [ 204.200131][ T5358] usb usb2-port1: attempt power cycle [ 204.291916][ T9] usb usb5-port1: attempt power cycle [ 204.553652][ T5358] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 204.591762][ T5358] usb 2-1: device descriptor read/8, error -71 [ 204.649478][ T9] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 204.680374][ T9] usb 5-1: device descriptor read/8, error -71 [ 204.840220][ T5358] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 204.871236][ T5358] usb 2-1: device descriptor read/8, error -71 [ 204.929986][ T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 204.971874][ T9] usb 5-1: device descriptor read/8, error -71 [ 205.000206][ T5358] usb usb2-port1: unable to enumerate USB device [ 205.090574][ T9] usb usb5-port1: unable to enumerate USB device [ 205.159346][ T5748] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 205.211683][ T7807] netlink: 52 bytes leftover after parsing attributes in process `syz.2.593'. [ 205.221156][ T5686] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 205.231256][ T7807] netlink: 'syz.2.593': attribute type 39 has an invalid length. [ 205.239786][ T7807] macvlan1: entered promiscuous mode [ 205.245116][ T7807] macvlan1: entered allmulticast mode [ 205.311864][ T5748] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.320636][ T5748] usb 4-1: config 0 has no interface number 0 [ 205.330627][ T5748] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 205.339885][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.349406][ T5748] usb 4-1: Product: syz [ 205.354739][ T5748] usb 4-1: Manufacturer: syz [ 205.359685][ T5748] usb 4-1: SerialNumber: syz [ 205.371262][ T5748] usb 4-1: config 0 descriptor?? [ 205.392428][ T5686] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.403727][ T5686] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 205.413292][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.428952][ T5686] usb 1-1: config 0 descriptor?? [ 205.447532][ T5686] pwc: Askey VC010 type 2 USB webcam detected. [ 205.594300][ T5748] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 205.608763][ T5748] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 205.619863][ T5748] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 205.627984][ T5748] usb 4-1: media controller created [ 205.653637][ T5686] pwc: send_video_command error -71 [ 205.659732][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.671736][ T5686] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 205.680615][ T5748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.690014][ T5686] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 205.702951][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.727910][ T5686] usb 1-1: USB disconnect, device number 29 [ 206.169412][ T5686] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 206.323139][ T5686] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.343721][ T5686] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 206.365117][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.431302][ T5686] usb 1-1: config 0 descriptor?? [ 206.463367][ T5686] pwc: Askey VC010 type 2 USB webcam detected. [ 206.649748][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 206.656135][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 206.667942][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 206.675958][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 206.685965][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 206.812687][ T5748] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 206.907877][ T5686] pwc: recv_control_msg error -32 req 02 val 2b00 [ 206.919149][ T5748] usb 4-1: USB disconnect, device number 22 [ 206.926470][ T5686] pwc: recv_control_msg error -32 req 02 val 2700 [ 206.948704][ T5686] pwc: recv_control_msg error -32 req 02 val 2c00 [ 206.963743][ T5686] pwc: recv_control_msg error -32 req 04 val 1000 [ 206.990720][ T5686] pwc: recv_control_msg error -32 req 04 val 1300 [ 207.015378][ T5686] pwc: recv_control_msg error -32 req 04 val 1400 [ 207.023156][ T7828] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 3692 out of range (51000000..2150000000) [ 207.038573][ T5686] pwc: recv_control_msg error -32 req 02 val 2000 [ 207.055103][ T5686] pwc: recv_control_msg error -32 req 02 val 2100 [ 207.069687][ T5686] pwc: recv_control_msg error -32 req 04 val 1500 [ 207.082721][ T5686] pwc: recv_control_msg error -32 req 02 val 2500 [ 207.095990][ T5686] pwc: recv_control_msg error -32 req 02 val 2400 [ 207.112167][ T5686] pwc: recv_control_msg error -32 req 02 val 2600 [ 207.119930][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.145290][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.169689][ T5686] pwc: recv_control_msg error -71 req 02 val 2900 [ 207.199479][ T5686] pwc: recv_control_msg error -71 req 02 val 2800 [ 207.214103][ T5686] pwc: recv_control_msg error -71 req 04 val 1100 [ 207.227452][ T5686] pwc: recv_control_msg error -71 req 04 val 1200 [ 207.265116][ T5686] pwc: Registered as video103. [ 207.284346][ T5686] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 207.357692][ T5686] usb 1-1: USB disconnect, device number 30 [ 207.781798][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 208.359981][ T7828] netlink: 44 bytes leftover after parsing attributes in process `syz.4.600'. [ 208.403717][ T7828] netlink: 43 bytes leftover after parsing attributes in process `syz.4.600'. [ 208.413268][ T7857] veth2: entered allmulticast mode [ 208.426456][ T7828] netlink: 'syz.4.600': attribute type 6 has an invalid length. [ 208.436474][ T7828] netlink: 'syz.4.600': attribute type 5 has an invalid length. [ 208.447153][ T7828] netlink: 43 bytes leftover after parsing attributes in process `syz.4.600'. [ 208.452353][ T5686] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 208.609333][ T5686] usb 1-1: device descriptor read/64, error -71 [ 208.859364][ T5686] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 208.867807][ T5358] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 208.995721][ T5686] usb 1-1: device descriptor read/64, error -71 [ 209.030004][ T5358] usb 2-1: Using ep0 maxpacket: 32 [ 209.064347][ T5358] usb 2-1: config index 0 descriptor too short (expected 3659, got 75) [ 209.080116][ T5358] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.105460][ T5358] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 209.121790][ T5358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.138992][ T5358] usb 2-1: Product: syz [ 209.144504][ T5686] usb usb1-port1: attempt power cycle [ 209.156996][ T5358] usb 2-1: Manufacturer: syz [ 209.173222][ T5358] usb 2-1: SerialNumber: syz [ 209.204827][ T5358] usb 2-1: config 0 descriptor?? [ 209.243166][ T5358] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 209.523333][ T5686] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 209.583753][ T5686] usb 1-1: device descriptor read/8, error -71 [ 209.859510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 209.867896][ T5686] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 209.912662][ T5686] usb 1-1: device descriptor read/8, error -71 [ 209.919627][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 210.049818][ T5686] usb usb1-port1: unable to enumerate USB device [ 210.089397][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 210.118927][ T9] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 210.139041][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.163289][ T9] usb 5-1: Product: syz [ 210.174255][ T9] usb 5-1: Manufacturer: syz [ 210.187694][ T9] usb 5-1: SerialNumber: syz [ 210.210121][ T9] usb 5-1: config 0 descriptor?? [ 210.228884][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 210.255981][ T7885] kAFS: unable to lookup cell 'ÿ' [ 210.293351][ T7885] kAFS: unable to lookup cell '(,c¾Ì' [ 210.718921][ T7894] netlink: 56 bytes leftover after parsing attributes in process `syz.2.625'. [ 210.925217][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 210.934381][ T7879] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 210.948873][ T7879] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 210.966410][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.979965][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.001486][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.018228][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.035102][ T9] gspca_ov534_9: reg_w failed -71 [ 211.069407][ T5695] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 211.232385][ T5695] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 211.245191][ T5695] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 211.255080][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.280364][ T5695] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 211.339606][ T9] gspca_ov534_9: Unknown sensor 0000 [ 211.339704][ T9] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 211.362277][ T9] usb 5-1: USB disconnect, device number 24 [ 211.364549][ T7861] loop8: detected capacity change from 0 to 8 [ 211.421433][ T7861] Dev loop8: unable to read RDB block 8 [ 211.440134][ T7861] loop8: unable to read partition table [ 211.462347][ T7861] loop8: partition table beyond EOD, truncated [ 211.489887][ T7861] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 211.524281][ T5358] usb 2-1: USB disconnect, device number 26 [ 211.560555][ T7905] loop4: detected capacity change from 0 to 2640 [ 211.579968][ T7905] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.618303][ T7905] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.661264][ T7905] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.687503][ T7904] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.698346][ T7904] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.714061][ T7905] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.725240][ T7905] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.749759][ T7904] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.765796][ T7904] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.784224][ T7904] Buffer I/O error on dev loop4, logical block 0, async page read [ 211.812750][ T7905] ldm_validate_partition_table(): Disk read failed. [ 211.822182][ T7905] Dev loop4: unable to read RDB block 0 [ 211.844228][ T7905] loop4: unable to read partition table [ 211.865923][ T7905] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 211.952783][ T4992] ldm_validate_partition_table(): Disk read failed. [ 211.960214][ T4992] Dev loop4: unable to read RDB block 0 [ 211.968115][ T4992] loop4: unable to read partition table [ 212.132606][ T7911] qrtr: Invalid version 0 [ 212.164076][ T30] audit: type=1326 audit(1785521033.807:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.0.629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211319e019 code=0x7ffc0000 [ 212.252833][ T30] audit: type=1326 audit(1785521033.837:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.0.629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211319e019 code=0x7ffc0000 [ 212.325943][ T30] audit: type=1326 audit(1785521033.837:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.0.629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211319e019 code=0x7ffc0000 [ 212.342819][ T5695] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 212.438254][ T30] audit: type=1326 audit(1785521033.837:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.0.629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f211319e019 code=0x7ffc0000 [ 212.508239][ T30] audit: type=1326 audit(1785521033.837:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.0.629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211319e019 code=0x7ffc0000 [ 212.581762][ T30] audit: type=1326 audit(1785521033.837:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.0.629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211319e019 code=0x7ffc0000 [ 212.638296][ T30] audit: type=1326 audit(1785521033.837:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.0.629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211319e019 code=0x7ffc0000 [ 212.669378][ T809] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 212.713150][ T30] audit: type=1326 audit(1785521033.837:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.0.629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f211319e019 code=0x7ffc0000 [ 212.791900][ T30] audit: type=1326 audit(1785521033.837:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.0.629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211319e019 code=0x7ffc0000 [ 212.830030][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 212.851736][ T809] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 212.860664][ T809] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 212.881665][ T30] audit: type=1326 audit(1785521033.837:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7910 comm="syz.0.629" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f211319e019 code=0x7ffc0000 [ 212.918102][ T809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.938828][ T809] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 212.940790][ T5695] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 212.953216][ T809] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 212.981367][ T809] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.999616][ T5695] stv0680 3-1:4.0: last error: 86, command = 0x3 [ 213.006584][ T809] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.031660][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.209346][ T5358] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 213.273165][ T809] usb 1-1: GET_CAPABILITIES returned 0 [ 213.283643][ T809] usbtmc 1-1:16.0: can't read capabilities [ 213.373602][ T5358] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 213.389711][ T5358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.415101][ T5358] usb 2-1: config 0 descriptor?? [ 213.431180][ T5358] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 213.573004][ T809] usb 1-1: USB disconnect, device number 35 [ 213.702844][ T5686] usb 3-1: USB disconnect, device number 36 [ 213.712099][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.635'. [ 213.989307][ T5748] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 214.120121][ T5686] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 214.141953][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.159316][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 214.179325][ T5748] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 214.205116][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.232460][ T5748] usb 4-1: config 0 descriptor?? [ 214.248322][ T7926] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 214.255855][ T7926] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 214.265958][ T7936] loop9: detected capacity change from 0 to 255852544 [ 214.285953][ T5358] gspca_sunplus: reg_w_riv err -71 [ 214.292629][ T5358] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 214.296893][ T5686] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 214.313112][ T5686] usb 3-1: can't read configurations, error -61 [ 214.353083][ T5358] usb 2-1: USB disconnect, device number 27 [ 214.449365][ T5686] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 214.466791][ T7932] binder: 7931:7932 ioctl c0306201 200000000080 returned -14 [ 214.491393][ T7938] binder_alloc: binder_alloc_mmap_handler: 7931 200000ffd000-200001000000 already mapped failed -16 [ 214.525325][ T7932] binder: 7931:7932 ioctl c0306201 2000000003c0 returned -14 [ 214.547160][ T7938] binder_alloc: 7931: binder_alloc_buf, no vma [ 214.564036][ T7932] binder_alloc: 7931: binder_alloc_buf, no vma [ 214.589775][ T5748] ath6kl: Failed to submit usb control message: -71 [ 214.617398][ T5748] ath6kl: unable to send the bmi data to the device: -71 [ 214.635378][ T5686] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 214.644403][ T5748] ath6kl: Unable to send get target info: -71 [ 214.652003][ T5686] usb 3-1: can't read configurations, error -61 [ 214.662898][ T5686] usb usb3-port1: attempt power cycle [ 214.668609][ T5748] ath6kl: Failed to init ath6kl core: -71 [ 214.698027][ T5748] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 214.731761][ T5748] usb 4-1: USB disconnect, device number 23 [ 215.029874][ T5686] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 215.064617][ T5686] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 215.064656][ T5686] usb 3-1: can't read configurations, error -61 [ 215.131691][ T7945] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 215.189329][ T5686] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 215.225250][ T7953] program syz.3.641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.227707][ T5686] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 215.242351][ T7953] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 215.273801][ T5686] usb 3-1: can't read configurations, error -61 [ 215.292500][ T5686] usb usb3-port1: unable to enumerate USB device [ 215.512225][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 215.679856][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 215.690469][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.714856][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.741842][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 215.756464][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 215.767422][ T10] usb 4-1: Product: syz [ 215.776304][ T10] usb 4-1: Manufacturer: syz [ 215.802742][ T10] hub 4-1:4.0: USB hub found [ 216.002901][ T10] hub 4-1:4.0: 2 ports detected [ 216.069304][ T5686] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 216.229345][ T5686] usb 5-1: Using ep0 maxpacket: 16 [ 216.239973][ T5686] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 216.253229][ T5686] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 216.262992][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.277648][ T5686] usb 5-1: Product: syz [ 216.286220][ T5686] usb 5-1: Manufacturer: syz [ 216.295181][ T5686] usb 5-1: SerialNumber: syz [ 216.312119][ T5686] usb 5-1: config 0 descriptor?? [ 216.330278][ T5686] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 216.367281][ T5686] usb 5-1: Detected FT232R [ 216.460588][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 216.539946][ T5686] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 217.077875][ T10] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 217.103576][ T10] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 217.329980][ T5724] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 217.519361][ T5724] usb 1-1: Using ep0 maxpacket: 8 [ 217.528967][ T5724] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 217.538378][ T5724] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 217.550587][ T5724] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 217.564800][ T5724] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 217.582352][ T5724] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 217.595596][ T5724] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.609454][ T5724] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.619974][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.850927][ T5724] usb 1-1: GET_CAPABILITIES returned 0 [ 217.857339][ T5724] usbtmc 1-1:16.0: can't read capabilities [ 218.108337][ T5358] usb 1-1: USB disconnect, device number 36 [ 218.176246][ T7984] netlink: 92 bytes leftover after parsing attributes in process `syz.2.649'. [ 218.754078][ T7992] netlink: 'syz.1.651': attribute type 12 has an invalid length. [ 218.761072][ T5358] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 218.778237][ T7992] netlink: 'syz.1.651': attribute type 29 has an invalid length. [ 218.812102][ T7992] netlink: 148 bytes leftover after parsing attributes in process `syz.1.651'. [ 218.858831][ T7992] netlink: 59 bytes leftover after parsing attributes in process `syz.1.651'. [ 218.952197][ T5724] usb 4-1: USB disconnect, device number 24 [ 218.970025][ T5358] usb 3-1: Using ep0 maxpacket: 8 [ 218.974160][ T5358] usb 3-1: unable to get BOS descriptor or descriptor too short [ 218.975365][ T5358] usb 3-1: config 2 has an invalid interface number: 76 but max is 0 [ 218.975393][ T5358] usb 3-1: config 2 has no interface number 0 [ 218.975425][ T5358] usb 3-1: config 2 interface 76 has no altsetting 0 [ 218.981019][ T5358] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 218.981050][ T5358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.981072][ T5358] usb 3-1: Product: syz [ 218.981088][ T5358] usb 3-1: Manufacturer: syz [ 218.981104][ T5358] usb 3-1: SerialNumber: syz [ 219.022652][ T5686] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 219.023128][ T5686] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 219.033173][ T5686] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 219.092286][ T5686] usb 5-1: USB disconnect, device number 25 [ 219.125511][ T5686] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 219.136224][ T5686] ftdi_sio 5-1:0.0: device disconnected [ 219.273789][ T8005] ================================================================== [ 219.273805][ T8005] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 219.273834][ T8005] Write of size 720 at addr ffffc90002f87e00 by task vivid-000-vid-c/8005 [ 219.273850][ T8005] [ 219.273862][ T8005] CPU: 1 UID: 0 PID: 8005 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 219.273890][ T8005] Tainted: [L]=SOFTLOCKUP [ 219.273898][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.273910][ T8005] Call Trace: [ 219.273917][ T8005] [ 219.273924][ T8005] dump_stack_lvl+0xe8/0x150 [ 219.273952][ T8005] print_address_description+0x55/0x1e0 [ 219.273977][ T8005] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 219.273996][ T8005] print_report+0x58/0x70 [ 219.274019][ T8005] kasan_report+0x117/0x150 [ 219.274050][ T8005] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 219.274074][ T8005] kasan_check_range+0x264/0x2c0 [ 219.274101][ T8005] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 219.274125][ T8005] __asan_memcpy+0x40/0x70 [ 219.274147][ T8005] tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 219.274203][ T8005] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 219.274237][ T8005] ? vivid_thread_vid_cap_tick+0xe61/0x6340 [ 219.274268][ T8005] ? rcu_is_watching+0x15/0xb0 [ 219.274289][ T8005] ? __lock_acquire+0x683/0x2cf0 [ 219.274320][ T8005] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.274344][ T8005] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 219.274369][ T8005] ? irqentry_exit+0x218/0x8f0 [ 219.274401][ T8005] ? vivid_thread_vid_cap+0x491/0x11e0 [ 219.274435][ T8005] vivid_thread_vid_cap+0x927/0x11e0 [ 219.274464][ T8005] ? __lock_acquire+0x683/0x2cf0 [ 219.274500][ T8005] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 219.274525][ T8005] ? do_raw_spin_lock+0x12b/0x2f0 [ 219.274550][ T8005] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.274568][ T8005] ? __kthread_parkme+0x71/0x1f0 [ 219.274594][ T8005] ? __kthread_parkme+0x196/0x1f0 [ 219.274621][ T8005] kthread+0x388/0x470 [ 219.274646][ T8005] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 219.274670][ T8005] ? __pfx_kthread+0x10/0x10 [ 219.274696][ T8005] ret_from_fork+0x514/0xb70 [ 219.274724][ T8005] ? __pfx_ret_from_fork+0x10/0x10 [ 219.274752][ T8005] ? __switch_to+0xc89/0x1420 [ 219.274775][ T8005] ? __pfx_kthread+0x10/0x10 [ 219.274806][ T8005] ret_from_fork_asm+0x1a/0x30 [ 219.274832][ T8005] [ 219.274839][ T8005] [ 219.274846][ T8005] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc90002f80000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 219.274892][ T8005] The buggy address belongs to the physical page: [ 219.274912][ T8005] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7aacf [ 219.583566][ T8005] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 219.590706][ T8005] raw: 00fff00000000000 0000000000000000 ffffea0001eab388 0000000000000000 [ 219.599330][ T8005] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 219.607935][ T8005] page dumped because: kasan: bad access detected [ 219.614346][ T8005] page_owner tracks the page as allocated [ 219.620063][ T8005] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 7999, tgid 7998 (syz.1.655), ts 219253017162, free_ts 219016271014 [ 219.639600][ T8005] post_alloc_hook+0x1f9/0x250 [ 219.644396][ T8005] get_page_from_freelist+0x21fa/0x2270 [ 219.649949][ T8005] __alloc_frozen_pages_noprof+0x18d/0x380 [ 219.655779][ T8005] alloc_pages_mpol+0x212/0x380 [ 219.660673][ T8005] alloc_pages_noprof+0xac/0x2a0 [ 219.665610][ T8005] __vmalloc_node_range_noprof+0x795/0x1730 [ 219.671511][ T8005] vmalloc_user_noprof+0xad/0xe0 [ 219.676472][ T8005] vb2_vmalloc_alloc+0xef/0x360 [ 219.681332][ T8005] __vb2_queue_alloc+0xa0b/0x1660 [ 219.686371][ T8005] vb2_core_reqbufs+0xc3f/0x1470 [ 219.691309][ T8005] __vb2_init_fileio+0x310/0x1040 [ 219.696339][ T8005] vb2_core_poll+0x4b0/0x830 [ 219.700934][ T8005] vb2_fop_poll+0x196/0x310 [ 219.705442][ T8005] v4l2_poll+0x147/0x2c0 [ 219.709689][ T8005] ep_insert+0x11d8/0x1ae0 [ 219.714102][ T8005] do_epoll_ctl_file+0x8c2/0xee0 [ 219.719050][ T8005] page last free pid 5823 tgid 5823 stack trace: [ 219.725372][ T8005] __free_frozen_pages+0xc1e/0xd10 [ 219.730494][ T8005] __slab_free+0x274/0x2c0 [ 219.734918][ T8005] qlist_free_all+0x99/0x100 [ 219.739521][ T8005] kasan_quarantine_reduce+0x148/0x160 [ 219.745002][ T8005] __kasan_slab_alloc+0x22/0x80 [ 219.749888][ T8005] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 219.755349][ T8005] do_getname+0x2e/0x250 [ 219.759611][ T8005] vfs_fstatat+0x45/0x170 [ 219.763963][ T8005] __x64_sys_newfstatat+0x151/0x200 [ 219.769172][ T8005] do_syscall_64+0x174/0x580 [ 219.773802][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.779709][ T8005] [ 219.782048][ T8005] Memory state around the buggy address: [ 219.787677][ T8005] ffffc90002f87f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.795737][ T8005] ffffc90002f87f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 219.803800][ T8005] >ffffc90002f88000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 219.811865][ T8005] ^ [ 219.815929][ T8005] ffffc90002f88080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 219.823995][ T8005] ffffc90002f88100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 219.832054][ T8005] ================================================================== [ 219.877607][ T8005] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 219.884869][ T8005] CPU: 1 UID: 0 PID: 8005 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 219.896201][ T8005] Tainted: [L]=SOFTLOCKUP [ 219.900565][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.910650][ T8005] Call Trace: [ 219.913936][ T8005] [ 219.916871][ T8005] vpanic+0x56c/0xa60 [ 219.920870][ T8005] ? __pfx_vpanic+0x10/0x10 [ 219.925407][ T8005] ? __pfx___schedule+0x10/0x10 [ 219.930281][ T8005] panic+0xc5/0xd0 [ 219.934047][ T8005] ? __pfx_panic+0x10/0x10 [ 219.938514][ T8005] ? preempt_schedule_common+0x82/0xd0 [ 219.944025][ T8005] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 219.949694][ T8005] check_panic_on_warn+0x89/0xb0 [ 219.954667][ T8005] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 219.960319][ T8005] end_report+0x73/0x170 [ 219.964598][ T8005] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 219.970238][ T8005] kasan_report+0x128/0x150 [ 219.974755][ T8005] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 219.980395][ T8005] kasan_check_range+0x264/0x2c0 [ 219.985342][ T8005] ? tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 219.990978][ T8005] __asan_memcpy+0x40/0x70 [ 219.995400][ T8005] tpg_fill_plane_buffer+0x1b20/0x5ea0 [ 220.000895][ T8005] vivid_thread_vid_cap_tick+0x115c/0x6340 [ 220.006724][ T8005] ? vivid_thread_vid_cap_tick+0xe61/0x6340 [ 220.012632][ T8005] ? rcu_is_watching+0x15/0xb0 [ 220.017400][ T8005] ? __lock_acquire+0x683/0x2cf0 [ 220.022351][ T8005] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 220.028162][ T8005] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 220.034323][ T8005] ? irqentry_exit+0x218/0x8f0 [ 220.039098][ T8005] ? vivid_thread_vid_cap+0x491/0x11e0 [ 220.044584][ T8005] vivid_thread_vid_cap+0x927/0x11e0 [ 220.049887][ T8005] ? __lock_acquire+0x683/0x2cf0 [ 220.054860][ T8005] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 220.060589][ T8005] ? do_raw_spin_lock+0x12b/0x2f0 [ 220.065633][ T8005] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 220.071439][ T8005] ? __kthread_parkme+0x71/0x1f0 [ 220.076383][ T8005] ? __kthread_parkme+0x196/0x1f0 [ 220.081446][ T8005] kthread+0x388/0x470 [ 220.085532][ T8005] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 220.091279][ T8005] ? __pfx_kthread+0x10/0x10 [ 220.095883][ T8005] ret_from_fork+0x514/0xb70 [ 220.100480][ T8005] ? __pfx_ret_from_fork+0x10/0x10 [ 220.105600][ T8005] ? __switch_to+0xc89/0x1420 [ 220.110292][ T8005] ? __pfx_kthread+0x10/0x10 [ 220.114909][ T8005] ret_from_fork_asm+0x1a/0x30 [ 220.119710][ T8005] [ 220.123388][ T8005] Kernel Offset: disabled [ 220.127746][ T8005] Rebooting in 86400 seconds..