last executing test programs: 10m36.175076356s ago: executing program 3 (id=244): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060108000200000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001400078008000640fffffffc08"], 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6400000002060108000200000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001400078008000640fffffffc08"], 0x64}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x13e9, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x0) (async) syz_emit_ethernet(0x13e9, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000240)=""/255}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) close(r9) r10 = socket$unix(0x1, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xb}, {0xfff3, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0xffffffe7, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xb, 0xa}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 10m34.393749287s ago: executing program 3 (id=252): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002d3cbef201e040500c358010203010902120001000110010904010d00a060aa3f32889bd7dc7fe82417c78de3708e3556f7d335c533f932a145111daa74d5128ba6a047dd1ea51c873dd2dcc1f8c0b5414d1ed63710ee7d6f86dcdee4e3f4c9e625a30a69505e310fce491d0ff6c3b7a823097e875b2bc8957d0f82f467198f61386b3f48dbfd1851898d9c8fe740f35b6896c649f756f7eb595bbaf6a5a96d404044343b970bedf93a813e7b52c60dc943ec9d765fb78731c96846fbd08cf0972f49b012c7463eb7a5ecee748edf7bcc1f7fbd711c91d4781a5d6597ef5a3c54683aef0061c9f57e91e1aecf82845e5c0d05d7e1afece96d02392bb63fc5804e"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 10m32.965530135s ago: executing program 3 (id=261): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r6, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000875000/0x2000)=nil, &(0x7f00005ce000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000ea000/0x2000)=nil, &(0x7f0000050000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002be000/0x2000)=nil, &(0x7f0000019000/0x2000)=nil, &(0x7f0000653000/0x2000)=nil, &(0x7f000059e000/0x2000)=nil, &(0x7f0000000380)="29763312337e96b9c18b70bad7547451cef229f3986984f8a5bb65707a69332538c0af6e829ad775ff35be464f4e7f759bbb2913fa90ff8ed646fb0d362ee20d3a5125bbdddbcad4037a743de8a66dd4667366f5d34de7126b", 0x59, r1}, 0x68) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x18, 0x1, 0xffffffffffffffff, 0x0}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0x7fffffff, 0xc77f, 0x7, 0x72bb7b6e, 0xffff]}, &(0x7f0000000240)=0x78) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 10m31.652889158s ago: executing program 3 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x3, 0x0, 0x1, [@generic="cff80291"]}]}, 0x1c}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xe, 0x84, 0x0, 0xff, 0x2, 0x4, 0x6}}, {0x0, 0x2, [0x1, 0xfff6, 0x8, 0x800, 0x2, 0x4, 0x5, 0x7fff, 0x8]}}]}, @TCA_STAB={0xfffffffffffffed8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, {0x4}}]}]}, 0x6c}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2000400, 0x1000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008140)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x200000, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[]) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 10m30.989194077s ago: executing program 3 (id=269): syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x200400) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private=0xa010102, 0x0, 0xffffffff, 'ip6_vti0\x00', 'caif0\x00', {}, {}, 0x2, 0x1, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4000, 0x6, 0x2, 'pptp\x00', 'syz1\x00', {0x7fff}}}}, {{@ip={@multicast1, @broadcast, 0xffffffff, 0xffffffff, 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x32, 0x1, 0x36}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fb51f0f52069d37c378114554bc1e3e5a78752f61e0d49d5eddd143e2044"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r3 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x800, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440)=r0, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getpeername(r0, &(0x7f0000000280)=@tipc=@id, &(0x7f0000000040)=0x80) sendmmsg$inet6(r4, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)="5f03", 0x2}], 0x1}}], 0x2, 0x20040140) listen(r4, 0xfff) accept(r4, 0xfffffffffffffffd, &(0x7f0000000680)) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x80000001, 0x4) 10m30.512920016s ago: executing program 3 (id=271): sendmsg$key(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0xffffffffffffff59) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10m30.275717548s ago: executing program 32 (id=271): sendmsg$key(0xffffffffffffffff, 0x0, 0x44040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0xffffffffffffff59) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4m28.961359762s ago: executing program 4 (id=1601): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x18, r1, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x44000) socket$inet6(0xa, 0x2, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delchain={0x24, 0x65, 0x10, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0x1}, {0xffff, 0x3}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xffffffffffffff5f}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000600), 0x12) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m28.799114179s ago: executing program 4 (id=1603): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r1, 0xf7ffffff}}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0xffffffffd9100f4f, 0xd, 0xffff, 0xf, 0xffeffffa, 0x0, 0x0, 0x10, 0xffff}}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x34d}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r8 = userfaultfd(0x80801) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) r10 = dup(r9) fallocate(r10, 0x3, 0x0, 0x180000000004) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) remap_file_pages(&(0x7f0000207000/0x4000)=nil, 0x4000, 0x47b8cbccaa40f838, 0x1, 0x2) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) fchdir(r3) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000000)={"ccb22dca", 0x9, 0x8, 0x6, 0xe8b0, 0x4, "5b34a289b49bdd2200b303ad1288ec", "d47e14d0", "f6cff519", "848ddab3", ["a6c8744924b6353565062b4d", "9f97d4e95461577d654436a8", "e2a19379908b0679332bd722", "57ea0f00fa5d37b39349001f"]}) 4m27.199216687s ago: executing program 4 (id=1606): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x80}) (async) memfd_create(&(0x7f0000000680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xf2w\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa5?\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xb3\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0', 0x0) (async) splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) (async) shutdown(r0, 0x1) (async) socket$packet(0x11, 0x3, 0x300) (async) mq_open(0x0, 0x42, 0x1f0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_unlink(0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000100)={0x84, @multicast1, 0x4e22, 0x3, 'lblc\x00', 0x23, 0x1, 0x17}, 0x2c) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_eee={0x1f, 0x0, 0xfffffffc, 0xfffffffe, 0x9, 0x0, 0x0, 0xe6, [0x0, 0x4]}}) 4m27.029753651s ago: executing program 4 (id=1608): io_setup(0x401, &(0x7f0000000040)=0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48c5}, 0x800) io_submit(r0, 0x1, &(0x7f0000000040)) unshare(0x8000280) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff07) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200)=@int=0x71, 0x4) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000080)={0x80000000, 0x23ffffff, 0x97dd, 0x12}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="1a00000007000000000000000700000004040000de762c75656e66b555de761e5536917cc8015e5e7c029d63134febb5c4ad630fe7a50ab5b6a85075318abcd33e64266d5dd206a3c7e61eb5c8da5d4331adaa21379acda9b514dea80c01a685d1d2a547ed767abab17856d2d8a048df00000000", @ANYRES32=0x1, @ANYBLOB="03000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f00000000c0), &(0x7f0000000380)=""/4096}, 0x20) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4900, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'gre0\x00', 0x2000}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x234) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x26}}, 0x4c8d1) 4m26.765417484s ago: executing program 4 (id=1610): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@known='trusted.overlay.impure\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7050000000000007910a8000000000087000000000000009500000000000000469dff8f5780c4eb544f834d9403edc35244ab5eae0e689df82d50fd73fbcf6a210d3925de1340f5abbaef8924113a60bdc816e0219cee3d0d437f5e3e1d6c2fd5cd"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x1, r1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'veth0_to_team\x00', 0x1000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'macvtap0\x00', @broadcast}) pselect6(0x40, &(0x7f0000000280)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000003c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x7, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) fchown(r3, 0x0, 0x0) 4m26.427354652s ago: executing program 4 (id=1613): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0/file0\x00', 0x40a002, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000000050001000700000000000400000000000900020073797a310000000014000300686173683a69"], 0x58}}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) read$FUSE(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000380)=[{0x7, 0x7, 0x5, 0x401}, {0xaace, 0x8, 0x3, 0x1ff}, {0x3, 0x4, 0x7, 0xfff}, {0x0, 0x5, 0xc, 0x9}, {0x9, 0x9, 0x94, 0x80000001}]}) cachestat(r2, 0x0, &(0x7f0000000340), 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r5) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r0], 0xd4}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{}, {0x94, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8}, {0xffe0, 0x4}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x220440a8}, 0x20004000) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60002080}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4100}, 0x0) r12 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r12}) 4m26.031191314s ago: executing program 33 (id=1613): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0/file0\x00', 0x40a002, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000000050001000700000000000400000000000900020073797a310000000014000300686173683a69"], 0x58}}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) read$FUSE(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000380)=[{0x7, 0x7, 0x5, 0x401}, {0xaace, 0x8, 0x3, 0x1ff}, {0x3, 0x4, 0x7, 0xfff}, {0x0, 0x5, 0xc, 0x9}, {0x9, 0x9, 0x94, 0x80000001}]}) cachestat(r2, 0x0, &(0x7f0000000340), 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r5) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r0], 0xd4}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{}, {0x94, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x8}, {0xffe0, 0x4}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x220440a8}, 0x20004000) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60002080}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4100}, 0x0) r12 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r12}) 2m29.637436126s ago: executing program 0 (id=2010): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x2}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f00000001c0)=0x6a, 0x4) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000180)=0xd13, 0x4) recvmmsg(r3, &(0x7f0000006580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/17, 0x11}, 0x5}], 0x1, 0x45833af92e4a39ff, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000340)={'IDLETIMER\x00'}, &(0x7f0000000380)=0x1e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000050a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a31000000"], 0xc8}}, 0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) 2m28.539633485s ago: executing program 0 (id=2014): socket$nl_generic(0x11, 0x3, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f00000000c0)) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x38, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @multicast, 'team_slave_1\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}}, 0x0) 2m28.452509722s ago: executing program 0 (id=2015): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001440)={'bond0\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4d, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [0x1000, 0x0, 0x0, 0x0, 0x8, 0xa7aa, 0x4, 0x4]}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r2 = io_uring_setup(0x2e01, &(0x7f0000000700)={0x0, 0xafd3, 0x1000, 0x2, 0x2d2}) recvmsg(r1, &(0x7f00000001c0)={&(0x7f0000000280)=@isdn, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/248, 0xf8}], 0x1}, 0x180) r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) 2m27.439110285s ago: executing program 0 (id=2019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m27.186182507s ago: executing program 0 (id=2022): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000a0000000000000a002e000008001700670100"/33], 0x24}, 0x1, 0x0, 0x0, 0x1880}, 0x4000050) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x11, 0x0, &(0x7f00007d0000)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000140)) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e21, 0xffff90a0, @empty, 0xff}}, 0x6, 0x1}, 0x90) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) (async, rerun: 32) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) (async, rerun: 32) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000280)=0x2) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x161b41, 0x1a1) fallocate(r3, 0x0, 0x1000000, 0x3) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x2000000) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x50) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[], 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) 2m26.816939302s ago: executing program 0 (id=2025): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0x40) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) 2m11.577463551s ago: executing program 34 (id=2025): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0x40) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) 32.197594313s ago: executing program 7 (id=2423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc010000190001002abd700000000000e0000002000000000000000000000000e000000100000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000040105"], 0x1bc}}, 0x4000) 32.197151483s ago: executing program 7 (id=2424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="03471b00003fba10e4000700000030000280080002"], 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @local}, 0x14) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0xf5) r9 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_ttl={{0x14, 0x110, 0x2, 0x4}}, @ip_ttl={{0x14, 0x110, 0x2, 0x400}}], 0x30, 0x4c00}, 0x810) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r10 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f00000002c0)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) r11 = fanotify_init(0x200, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r11, 0x161, 0x40000867, r12, 0x0) 32.039397461s ago: executing program 7 (id=2428): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918", 0x5e}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 31.861259166s ago: executing program 7 (id=2430): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0xaaaaaaaaaaaaabf, 0x3c, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) mmap$snddsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000f, 0x8010, r0, 0xf000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000200)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host64=0x2c04, 0x401, 0x7ff, 0xf4b}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x5, 0x2f55, 0x3, 0x5}}, @cpuid={0x64, 0x18, {0x1214, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x3d, 0x4, 0x7}}, @in_dx={0x69, 0x20, {0xfa61, 0x6}}, @nested_amd_vmsave={0x183, 0x18}, @enable_nested={0x12c, 0x18}, @rdmsr={0x66, 0x18, {0xb41}}, @nested_load_code={0x12e, 0x93, {0x2, "f3410fa7e8c744240065a33093c744240284000000c7442406000000000f011424440fe25900c422790f4b61c74424006c000000c74424020001c0feff1c24450f01cbc74424001a6b0000c74424027f000000c7442406000000000f011c24f3420fc7b200000000b8010000000f01d90f20e035040000000f22e0"}}, @rdmsr={0x66, 0x18, {0x877}}, @nested_create_vm={0x12d, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x3, 0x93}}, @wr_crn={0x67, 0x20, {0x4, 0x2}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xf5b, 0x1}}, @nested_vmresume={0x130, 0x18, 0x2}, @wr_drn={0x68, 0x20, {0x4, 0x9}}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x0, 0x4}}, @enable_nested={0x12c, 0x18}, @code={0xa, 0x46, {"0f005eae66b84e008ed0b91e0900000f32660f38822ec421cc595c30760fc772028fa860ecda08d9ddb9060800000f32c481fd11f9"}}, @set_irq_handler={0xc8, 0x20, {0x40, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0xb20, 0x8000}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x7, 0xb8a8}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x98, 0x6, 0x130, 0x3}}], 0x409}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 31.06720234s ago: executing program 7 (id=2432): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000180)) close_range(r2, 0xffffffffffffffff, 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000) recvmmsg(r2, 0x0, 0x0, 0x100, 0x0) eventfd(0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) r5 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, 0x1, r10}) r11 = accept4(r1, &(0x7f0000000440)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000001ac0)=0x80, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000002380)=0x0) sendmmsg(r11, &(0x7f0000004b40)=[{{&(0x7f0000001b00)=@in6={0xa, 0x4e24, 0x6, @remote, 0x3}, 0x80, &(0x7f0000001b80)}}, {{&(0x7f0000001bc0)=@rc={0x1f, @none, 0x9}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001c40)="c66e0f8ec0d1806c48f47a244218ec58db1575d7973fba458561b5bab1def125afe3ca00d7bfe811cd4aec5b24381b22162fe8aa6f688d9c3e0dea5dc7a001d5105b81b2f460a2bed71bd696df5515ab1df7d7e05ffe93a586b2e063b8a8e63d1ecc652d54fb337b6b752ab8cdbffd40b210e0a48e51125419ee55bf0416ef9760a50c341bf423030bf1091b12f14ac5de5ca3f59bab8040768dce9f13c7fe2d6c220777c59f1a23a0fef0eac81bb0e1e729251a846588d9e08b8862ee10ace0e4dd6731648744f268f5d268b6f234f6", 0xd0}, {&(0x7f0000001d40)="f8616b91ea36fc91b962b698d8ea8f3f38d3be4bba7d6435d8a75cc7ca1ee7b5f3e7328c288af020dac6b943f6bfdd08f008f92d05e4e7e2902530e248c1baf34471faa58c96304be306a8", 0x4b}, {&(0x7f0000001dc0)="9eda95360ba1c5d5d7e17b51120edc29d24782e49d8e9fa1482943d13bcfbc848156bec2d4e6ce3bb192a998be8fd34f0be1d5931200def5fc61bdae631461278a1d05abf23f95b8cbefd71b2715b0c8c62da2a91298c93a1ba935cd5f47410140c2faff0dd3ff9561241aaddae823e9b76b4250a8537fe145ed8fde5ca45cdc8614faaa3b3e70550cd277a90ba7f140e6f9c44ff8328c1fc84679ba31b76c721643eb69f8b472da693d98345c76c0304a2e1ee0e360bea34b68b2d61c259ec6c96913972a2def9e7fb868f12d1802dfacf6b6ab05a019f1179b6be304f05611d6e7fc961dde86", 0xe7}, {&(0x7f0000001ec0)="a7f406efc6fadcc95de7e66cb69384d5b01c89a0e306d08c8502d4171d481071c63dfc8afe0b8ec7454bf178ade4d02685cc970c07f8ece06343714a78cfa9859a0d5fb9c99e07d701cffe3987ef6e19341e998e55425e9aa2a7137f48d37021a4d69bbcef779c62b4446538c4f66d86a1b60c", 0x73}, {&(0x7f0000001f40)="93c60561922365132676cd6ee8815e70e9eb32638daa120c80bfebbaafaff87e6b6960a3f2662a9bb8dccce4f307c154b36674f93ee0c522366f8b208f49c5bda6134ebf82739d0149801439b771697c53bbd23c7c4ccd602f2942af24f3d6653c7e4a1304e76bafad677aa421e103fa6abe05be186aa47c6c1ecb30f05a8425e623bc56c5284018e201638694e5d77f37f16c61", 0x94}, {&(0x7f0000002000)="11b47762b7a1e7d3a4620e2ee42cd9d4ac66ed8ca250807cef51c8eef093bf4e1adac9d47cd5d5758d4bc69b0497abf5111aa9cee293612befaddfc896d099d568ef834c54515578a7a6f7e0fafd031e6fd1fe3e6401e24f1036a20b9c4ca015791e53274cd43aa48e513298c0e52b0d9bd7e8d7b3c4e87697db15aaa2f032c5ad3c6947093ea506dfc6a8ad064a5be6c49f2958a94983fe046040fc73a3d15c27fc768b30f9552f4b71b9126638d39891110e8bb33640128beb49bd6057", 0xbe}, {&(0x7f00000020c0)="aa7f4d7381f872aa3f4ebae0107be12f8449d71c9748dd8dd17fcff26683c8b19d3c45d7487dbd890f656940fd88bfb04fe4c7d7d7e29b6a1faa73b4885148085e5bbb943e0158edc3225b641590d1284e4dacbf2e61171ed380ee1145ea7c201419c3a8c7ef4646596560181e825dcdd242bb0295d8b421840172a0a4b09c0cad858dd2d2e97202d6a976e67456c5eadc977753431750557104dfc667b397a345811ac805e4e9209cbca5e0b469e825eae49023d7d2463356", 0xb9}, {&(0x7f0000002180)="389310ddc25db46ec0cbe162783f591cec68016e33d677a7c307430db7c878ab40d14a54ded448f2379fc55d9e03e80ff2eca4cc48a14c26ede9ccccad26fd789efcca0617b2c49800fbd4a652f0aa4f84bd5fd42f77ee36f5df695c9671b1478a238862ef700486cc90c748f73123c259911e818d6a2138de0ad271f0835ea821c3abf620db045721", 0x89}], 0x8, &(0x7f00000022c0)=[{0x88, 0x6, 0xa, "06a87daca9965fd7b1e3f1015290fcd1b305c6549c1d93f2f8b19a2a878fbde58acaeab1055f247883c2ffc9ec9e73ac5d19fd9b44405738c9e5c97e0e100c21b8a969aaf3420a94dd32677a623f4f193a17bcb2639fe80ba03b60fd90d2246b4882d43be98bac389f0284c2efbe6166f94d60"}], 0x88}}, {{&(0x7f00000023c0)=@nfc={0x27, r12, 0x0, 0x5}, 0x80, &(0x7f0000003480)=[{&(0x7f0000002440)="17ec6a71a3391d1d4e271dc4465f68aea83c", 0x12}, {&(0x7f0000002480)="a465726b055fec25009eed2f982a908e116c57642c111a57130320dafbfd2a5e46f5cf68612086c6793b9bde6d819a33226026dc2e955fbe4ed9562f0686caaa602b40571478394c08e1527c8a62ad455f0e904f0e2d14698c6008f7d4493b151b0464c9dd9d3e3b9338b1463ec6afb5fd255547e4f265ed4700be19128db6d741a0b9ddd6abd5bdc47d50f3485721b3c59ec166c2f49769b03adf19d4da29e11e9e20a33d49993fb156bf783669bc898cbc21e6ea6cf27024df3018702e6d086eeb8a97ed20e16b0bdab78b80e1799535b5b9770f760e879c266c56834a95e2fa8fbb990eb4e4427ddc11154692a57fce5d0f432e65bfac21370878eb662053f867e92a3d00ad8b9013e9a19f2d0f91a18263731a553a4ac171f48c94d3342ed07a3fa46d2fedd5ce9978aa63e92dffdb374515569897d47e1d17f769ed53378f23b6d5d54645a0e7b7c12f3fa3ca2c7575b47eff818c50ee8e54745de4b25c42409282c993003f1887a104bf7cf89cab21fd4abd88e470ee09d699691dbe5dc8d328ff78b5c07848a67adf0ac59d741f603c1d242847f8803ab9cfd5baf24143d6c6eb399d14f235ed5263f96470aec6c743e943a8cd40ac57e4facc14b16c5444053419e11b35393e8846a711b8da6135d503735aeac1e875db2bd9bb789b2530e346022b4767cec718820e47cac280f2f2367fb670c5d75dc02c3c3a794c95e566b7d854393a1a2a7a183c95eddd6c8fd35680ff9423d92f5395b29e2e86a5c14503c805caa2e447b82653e052741a37d519e827ffb995bdd734f3e94e2aee65cef56cb8e632fa91350461db918d55ad71ddf39a8da509965ffd43bed36e91e8e0b9ddeca78deedcbeec9eee73c3c89aa4bf93e4ea144239629d02e9da3e927a895e6b434e5eab89e7431b0450e0beeeb05795d8730f519fd58166d56ffda05fb751955d744fd9d3b6433182ff5150d425d4194e07a0533de426ac357a8cb32b91208681e361795d9e22c17bc9af91a98be9267ecf6336f8579ad35ee8f97a1a13abae4818af3f38682482fa6e3e3ae797a63b9a94f7a1ade1ec5d3728e861a096307f18f6211c97d6f695f9c30608b7cc5023cbc45e194b43ea46aa9e5cc9f727c177626ba0fd91bad4772c34643c5f38557ad68c66c9519d3c71e9c34c03d6d0e3cdcd697c96a6d21dc798691d88fda9fd5a2b64086a030a206b822f89f43ed7aedea0251db8f337ff2b535075f1f55cfb0e183769ffe36852bfd31c433d073e12ee81b9b8adbbe3c58730e8b676d78fdff60218cd7bc38151306f3be00474c4859dda785bc613ce14243102e57354ddb7d222ae63de2d481428e3de4292e256ef67198d2028f542a3a2a5d225adb0764ea96bf2d26b4ff707407fd99283baa8049fe7f61709b0d7626071d20859b63737d4f64198e9f8073dde753cb11400d2d043508cc9e4f310db50cde6efb0a489d9d84d58a2790092a20b4765174a0dece5323f00fe9da192eafcfe84ff929efb9a1b62235315d9bd9390f0c75a9420a63b80c13d5a2ee1d3ac833cab433ef60c509a3d9240da57d20f5741e4ff02eeb5815194667f32e51b47b6585f9b18c89558ad73c3ff4c0c89e99d59daf63637f82400d9ba1cb0b70abc331147377a12202739ee3a4e7684efd6afd55ad71b45ccfc98dc35125fb0c8e22cc2fc908d7652b7202a7f82f1261112d3f89f94ce540dbba479af9c3f9c19e6039ba7a7dc37a1ead3522dcf598a92448d7ce364a0370ee192f8ca9e5b5293130b9160978033113ddc13f647b6de323e38cf6f72681107cd9548451a6ca03c39c0dec68c863ad5eb1f4bf0df07c91abd10ca5a9a1b42c5105bbcafd2001723531ed4f6f7c1d6f7136301a236f6f53c6548e5f8ff19a54aa9e23311628b7efe408efe2e02412cc6e1d515b8df080fcd31e3ac250ce3d5268b68905fafd8b04e68081b47ecb6cf3fd94c16f37fca75d061f254b528923f890cba1913c19007e10115d1bd17566e8c73fa8d3f846d4ef37ba5f65e4b0d4bf6eef5a36ad1f548a2b76f19f3e2d4c4422728fce49f166ad133655c4bf0cf652431584548387529253c66236d91892a4f1cd3dbe3ae7fa8efd9ba1fdee5ae1b49906b8c0bdb8a3d501a7576325a3c2f1605e3aac64562dca4c3824772650b45b9ae18556ebd5a85f2566f3ab5e3c645c8daf043ac2347b4b5641d9f21586edc2a3c05ac6b19d4496dbc62e3f0074a91906e7b4e8e1a21f81f64d3f76779b16ada97fb5a19abe7ce589cd71bed51b651dd1ea023ccfa5b93bbddb5cab0430214fd0a3162de9dd219eb1effca9cd6b16dafffd9c133d9af6a5359af6e3392faa3b471184c1491205c60cc60765347c68dd9a46ede6c289b4d9b71f1dd2b5237fcaa0c3437e86e6541fa77b850399d41199c902c88e44428c857faf85318f5d18a4594bc8e7c168531b2888cc4f764b864bed2a41b449545ff13c395411aa3c8824e50f58ef893668a6422eb025659f7cf43827ea6db81607a1400f0d04d4ea0092caee118bd26f62abfd1867ed700db5efdd9d997d760e46b98c54f0fce8338d3016c549fe0ebc0619bb8ffc446fe8f10c7fd8f337cc5a3678efb394648903e5972236745edea6db40b2bf6348ee8adc3a7b6aaf1a1cf89190c906c478d5562be1f7367e53e389a97cc7cbc7b56367dd7001c552241e667ecd6fce95964b718777d0bbb889334f1d2bd712ea666f468f2b61873ba830a865dc2a9b158766ded1037bcd87f41f8a6998d29701fdf6d7efede7f22ed16f07d3373de24dd5d1d7268a504218c37bcf5763060154040cfc4106392aaaf0d478b5593a4dc41ec8aa3417078ebb7ddd49c270028955358701255f549de351265e15a060918494d64a5edbe3926e878d0c902318319e3b22212e23154abc6b8d390c85d242dd16fa665008f551e22d04d890aa7fee9bca157ad87f0d448374e6093af3b55d7dea9f41ad8a1338a9a0f0702f38103716ca185c0555e56ce2d8b4fc611788d7268999a2d6672c00b19affc557c707cca222a549b2b990fb7130986ec4ffce91bddd3c513a71406c8c03b162fd4a939dfd961af48a9e5f9594aa2b52c113690689520175e4289b1728d666bd8dff99ac49fa92dbfcb2fd7e0a57a9c8b627642f32162e1817b0810e1008be90a695272a8c0b40f8a21677ec55465e72648cfe0ce49d23b7279827bdfbe412ea4eb22f31b3089b3187de6df5758e078223898f106c0a5906cbc622a81c6a378a7dcd1be5a52e68f7d417eeac10a2da19821fd2ad731d883ac5877ede327dc3e054350eae92435270b23d3337163b7154c9ccd3d40036069dafcd8e56240cab5eaf7d126572e37a1c45e5b1fda651b6f8117f371d3bfba418eec04406e8b53827a85e2ff0c4a6874f82a3f4c58e3799468ed41bf8c99a563289c98edaf97ffc9e88707fcae61dc63d6dba5a33a4486df7ebed0e27f276a9f08bacd4d3f46340f6a373c2dc5f77dcddb06f934a3145cef84e46f66e251f40cecde3e96bd1edd153458de32bd4a58e0b982985e3323e7f2d6e0653ccc0d77cd86082d2306598857b9e3bafd87343e3a2d2891f53662c8c78b6794d34c929e76c4503abf5f98508612af610911e62e248f4b3c841797b721ac1abaf59cb76f59f722459f76f9c62218c982136a17009d9410ea219df06f689399e72d2bd6afd9697b9cbeeb4e38543c4dc56291987372bfcf45b61a75a6ac0ff000ea70a492dd8f829781085236e572b39a0c5586e1cc24c041b006275fe44bd8aa0fd07bf1ce7488805e6e2830039e10eb2b7c2df153ea1871e024fef7927923dddfda5856f73c770e2f3d494b89d3ffc2414e20ac2af567109b7acb96fa21e3c5ae955e92aa334dc7054d5210b16cf5613a880ca6903885edf5a9c7a5ca643041f91091106c88cd88601f6e3a17c77f1944152dbcbf776c02866da90fb568f0742393a74c9c7cb7d904839ccea1a785015972f6bf5d41f3281a64d934dce988f1552a74c8afa0975b1e85a381c18afe8d62b650c7fa7b5ea00bf4dce0ec6be7aa515c3c537217168ccae0de1f1354b68d025db489c757505af317cbc75a8cd53ecc233629e02f21f9c67dbeed4d88e1ae5b3c5733101e0d6d598c35f3cf076fde713e2d0a8e259bad24d8e36564279bc2933406a2fcf147bbf1c2263e7d9f6c4d2b2edc97cb50c3fed320efb3e28a4a49340e12f91a559796e89559b8cda0c671960109623b17faa77f27ce4d108003e2d1f8fed28bd573991fe8c7e6799faeb5edd42e6fce2cd0729c8da8918d526c2cf05aedf4e6472d70c2a5a54eb8d59762996c80cdc47a44b942cda2b979eda41d391b107428a376eb7c18df8c538617ebe3ab6703ab3b8089e53942ee6934c7bbafa08354813138f68e426c9558a2ef3a59702d1e4d03a882a7657c349ad026e532869a76809ba80cc22da9a6aa7ae98ad994fb2a4d18910fb98b6751d909eedf50b2515bb82b6ba5115e35df996843d74b12acb02b3264ade45252580b99898248893ecb9e9f10bd4b15474bf9fe0ec8ed6ae3e00c778e06a63ffa7a7bca65cedec4a24f569a967a1949c69cc3d28b35bad9a0ef899ded199f3bcb3e2a813bd3c61de3d686fb59aaada786b298e82b13b34ce9cc471355d2074719ca85898ad9311bc5815ae79db0979a853b0ab02f4c0748b1e4305e555dae0bf12e21b898d9b0ba19aac22b8be0340d649cda5db253b398adbba8756a7b39cf2991f848e75174f051f73b31297633adde0c539a76c1cb40b0efdd4eba9815fd7c835dd7bc3450862ced95ba052ff05174329d8b454979d9d337f33874ac8f5efb4a4d2f7c42fccf54586c4140ac7393c0443a62fb430ac47b01fb50868a2bb4e0f76a98f5a68d9cdaa62c8ad36fa1c1323fc4f343dbdf85dcb1e2b52bda9d2a345a9faf8b1126a2f3ab375cd2811e72065407510832f215ee827f77945df8d7361425a481e671110db00d970a46a5d52e9a46995fad12f42771fb22a97e82910debd934aabf48b9efe6be8fcf46942e86966af1d7b6070eb290d21ee571d1874e67c655fa645a1942cb3ac8f53ef207c4bfcfe82a2edaba1c55c2bcd30b07025b741dde3f834cb26a38901c0e8a6300b6a231a6fdd525a26020240ba4c603dc3e6b5fc0c7661cb93597360bbf7c3eba4b3559f53a55a1d054f067da7348fd920aed1f42a97f64894efbdb6924f1c56fea4ed0641b60ed64d20094eccb26e6b5822a78021daae38d19fc33334615cc974a389a5ad24e16baba27a9d40c7bd41df5cc0fead9756179fc5d4c8bc1ed0846d0dfd5883964a521cd41c3c96b8c0d86c3e05ef53059e44470a6aeeb1da5bb2db7d07c687bcdf91dc238e37244ee98f82d3a34d01ca83651c0c6110bdff593c9dc06e9e8fd98292c9afc5e4d9676868fa90160d0c0b57baa5e082b6898feba9823113a518ab43efa09cc6927e29479be46ee400abcf14bbd90a3511b6780b38eb4f45d49f2f2d0367eb24be6ee16d27dcb3b2bbb7f2ff0eb24bb07c1bc3c618818491c8f0cceafcd9d66f58c686d882fe96dedf1ceeb10ba7b161cf3baa755612fe54ad1955c171144f77046e45dc1ee01e297b8b68f513e5b0e31bd62fed3c4c2d5c4eec3e9eb947cf74beecc5b12481ba710568e23d542a750e1af03fccc485092585433524f34b1ef96c138514b03911e0f52ca3634fa7a39820476de20cecafe4359393a1d60466cf7357548599c252168710e0869d3c4eec2b6e1e5b0cb37f22e77abfb2d1302a37c", 0x1000}], 0x2, &(0x7f00000034c0)=[{0xa0, 0x116, 0x10, "e4b0526902b2cb692cdd80bfc590d5f1ac48b5bb38fcc64bab1663736e8869a8598c88a0b7cee6732f8bc5fa99e911c07a8e2808083aacc01c3d421b2d83445813352d0272873ea37bf6daec338ec3aff0de9f16f366e8f198d82feaca5b754deeb855181fa9a52c103dd3efffc1aab0d64cc48a55e20e824ad5137fd0485e78903288958ddc32b15e7f19d684"}, {0xb8, 0x6, 0x9, "202bb2020b6b0b165e7e749c4aac2ff429330f2a55f7018ed7366fd401d398dc9d2f8c59bab3fec0365262832ab2b89b06fa0f264d2a5c94a2f8420061041dc8375d7a9f3d4a41e0a3d5bf7b3bbf24c324fb6ec2cf32b603a59846dc07ed0c7529704f2f3e2aeec4efa8fa04f0d99f45075e9b9bc4bddc3aac6e42a683c2e7f73c10dbc89e6481be8dc128b13189311988848e88a762078097e28d5da548ee1fa63a"}, {0x1010, 0x385f5897d6cf5ab8, 0x1, "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"}, {0x18, 0x104, 0xfffffffb, "704bed7ba759"}, {0xf0, 0x0, 0x7fff, "3033b773e64109d77da7b135dbb4eb50ad33988c43af0dcb46532e6fc8b7ea36757a5a1de762a513446cc6d3b69c9d41bbb4b91ed15d19ce7cb30572e13de40e1e0d986c405680194cfd8794db526473413c1a2fc5da78dab237a5991be5c161fb2d9d22e0d32109098dd8f3c4c6096aa1b013c175cd548fd98200898d809775cbb18eb4343618a8671e0520a9bd1a30f62cd9b84a5e0914e10f31a2ab062a1fa261d59e044b02f470c57b21fc0785dab3f1c933968137132ea372d2ef3b6ae5397e87b961892eb6bbbe1acfbf3899c5c1e1079221ad810ba6e74b52d3"}, {0xf8, 0x88, 0x7ff1, "0a4b1c3112dd5a7f46e4d86ee70bf6e8a3dd68f36689fef20b3d542307169c8c375217242eee0b0e0a125d4cc127fc3e468bd5b7da520079f50d9496813cddcf3bea835e234212dddbdabebb056a5f12d8fda85ee3ff4a50c5a926adfae8ce99c11edaf93eede4bd805abd8c706c68a68f56a1f512a85506ab25c38fa1ad484d7a58db233ec12bc7b20b0e0eb61e1e977ea568f436ddb88eef30fb880f5f205ec6bc45509685acfc2207132fedaa8f41beef0e8793d1f50809b3241ff00315db14d51f04ee220c7c7bcc766ea64d6929e1bf09f7cecb24d9c643887439973c3a6b860b5eee9f"}], 0x1368}}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000004840)="1b1c60fdb179bd8b6a4c23642fe26abde22fabe6ad9eef5e14ddadbd47901cc9fcda8598ea602dc1898d00d3c554b638e8bbca0326b7495e95e7a8e15151f4afd2bc5cecb5cae942006f1cee6587ffe5ef1b3268fdc9a3c88843e6b7eac582f7f5cf36a5cb3159f99df5eb297024c1201a62e0b274df6df34c5fa7a33cb7d5cdb7ef8b8903b7e0b72a72a458a4c1649409181e9d814441f1a24640e2495a328fd5f5dcb71532421199b91c48af15b0215223e4f24d1b43aab0ea96d75f4c4ac904c364923f03a0546fa41d183d78872d7bea32231c105381c9", 0xd9}, {&(0x7f0000004940)="cde32cffd227a9aef6fa9781ff1cc02e5d4eee807734265ceea8c974997fdfe64f9497174e", 0x25}], 0x2, &(0x7f0000004c80)=ANY=[@ANYBLOB="600000000000000016000000ff000000c19292113a81ae6a020e25bcc256a794f1e50878f77e326a468cc9678c2e9cf262222f98136e6242da7fabecf9d72cabee63af04e176af1012090a8bd666843b0e91a75a85762bb26990fdeec8b641f1e8636c00000000"], 0x60}}, {{&(0x7f0000004a40)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004ac0)}], 0x1}}], 0x5, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x7800, 0x40, 0xfffffffc, 0x57c5, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x66, 0x0, 0xff, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@timestamp={0x44, 0x24, 0x9e, 0x0, 0x9, [0xf1, 0x10, 0x1, 0x1, 0x54, 0x3, 0x7, 0x5c]}]}}}}}) sendmsg$nl_route_sched_retired(r13, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=@deltclass={0x15a4, 0x29, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0xd}, {0x2, 0xfff6}, {0xb, 0x9}}, [@c_cbq={{0x8}, {0x1084, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x1, 0x9, 0x7fffffff, 0x3, 0x1, 0x5, 0x7, 0xfb, 0xbba, 0x7f, 0x10000, 0x7aa, 0x5, 0x3, 0x8001, 0x5, 0x3ff, 0x2, 0x10001, 0x401, 0x9, 0x6, 0x3, 0xb, 0x80000000, 0x8000, 0x0, 0x5, 0xf9, 0x7, 0x5, 0x3, 0xfffffffe, 0xd, 0xa069, 0x7, 0xf, 0x9, 0x5, 0x7, 0xfffffffc, 0x9, 0x9, 0x2, 0x10000, 0x8001, 0x7, 0xfffff99d, 0x80, 0x1, 0x81, 0x9, 0x1, 0xa, 0x67, 0x6, 0x7, 0x2, 0x9, 0x4, 0xfffffffb, 0x4, 0x3e88, 0x5ebf, 0x2, 0x2, 0x9, 0xa88, 0x80000000, 0x5, 0xee, 0x3, 0x5, 0x4, 0xf, 0x6, 0xfffffff9, 0x9, 0xfd7, 0x1, 0xfffffffa, 0x3, 0x3, 0x8, 0x10000, 0x1938000, 0x0, 0x7, 0x4, 0x7f, 0x1830c00, 0x3, 0x8000, 0xa0ef, 0xb8, 0x5401, 0xfc93, 0x0, 0x7, 0xfffffff8, 0x7, 0x6b52, 0x3ff, 0x8265, 0x8, 0x9b70, 0xffff16f4, 0x3, 0x0, 0xffffffff, 0x7, 0x2, 0x81, 0xb455, 0x5, 0x1ff, 0x4, 0x81, 0x675, 0x7, 0x1000, 0x0, 0x80000001, 0x2, 0x1, 0x8, 0x9, 0x8, 0x200, 0x6, 0x5, 0x3, 0x8, 0x7, 0x5, 0x2f, 0x0, 0x3, 0x7, 0x7ff, 0x4, 0x7, 0x2, 0xb, 0x7, 0xfff, 0x8000, 0x6, 0x1ff, 0x8000, 0x40, 0x100, 0x4, 0x5, 0xaca, 0x2, 0x100, 0xb, 0x8, 0x400, 0x9, 0x4, 0x80000001, 0x4, 0x1, 0x0, 0x6, 0x1, 0xa24, 0x101, 0x5, 0x6, 0x9, 0x9, 0x997f, 0x200, 0xb, 0x3, 0xb581, 0x0, 0x8a6b, 0x29cf, 0x7, 0x73, 0x3, 0x1, 0x9, 0xffff, 0x3, 0x9, 0x81, 0x1ff, 0x80000000, 0xfffff5b7, 0x800, 0x600, 0x2, 0x8000, 0x6, 0x1, 0xff37, 0x3, 0x7fffffff, 0x9a7e, 0x401, 0x5, 0x6, 0x6, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6, 0xfffff544, 0x7, 0x3, 0xfffffff9, 0x40, 0x3, 0x6, 0xf, 0x81, 0x80000001, 0xa, 0x3, 0x6, 0x26, 0x6, 0xffff8000, 0x6, 0x9, 0x3, 0xfffffff7, 0x0, 0x1, 0x30b, 0x0, 0x5, 0x5, 0x7, 0x3, 0xbcda, 0x800, 0x6, 0x1, 0x8, 0x4, 0xa, 0x4, 0x58, 0x0, 0x1, 0x8001]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x6, 0x0, 0x7, 0x0, 0xf3d1, 0xe6e, 0x0, 0x6, 0x4dd, 0xeeb, 0x4, 0x9, 0x8, 0x1, 0x8001, 0x5f, 0x7, 0x1b, 0x7, 0x9, 0x2, 0x7, 0x6, 0x6, 0xc, 0x9, 0x400, 0xc8, 0x2, 0x5, 0x0, 0x9, 0x80000000, 0xfff, 0x7fffffff, 0x4, 0x6, 0xfffffffd, 0x0, 0xbb8d, 0x101, 0x0, 0x2, 0x3, 0x10, 0x10000000, 0x341, 0x5, 0xc956, 0xfffffffd, 0xb5, 0x5, 0xda58, 0x4, 0x1000, 0x43, 0x8000, 0xffffffff, 0x9, 0x1, 0xe00, 0x1a8, 0x3, 0xfffffe01, 0x249e1cbb, 0xfffffff9, 0x5, 0x4, 0x1, 0xffff, 0x7, 0x8, 0x1, 0x0, 0x5, 0x7f, 0xf34, 0x1, 0x8, 0x8, 0x39, 0x5, 0x401, 0xfffffff7, 0x67, 0x398c73ba, 0x5, 0xffffffff, 0x1, 0x8, 0x0, 0xa, 0x3, 0xf37, 0x2, 0x9, 0x4, 0x81, 0x6, 0x8000, 0x9d6, 0x75, 0x2, 0x53cc, 0xfffffffe, 0x4c, 0x0, 0x10001, 0xa, 0x5, 0x3, 0x178, 0x2, 0xf, 0x4, 0x1, 0x10, 0x5, 0xcbb3, 0x4, 0xc971, 0x0, 0x9, 0xffffffff, 0x2, 0x40, 0x4, 0x1, 0xffffffad, 0x6, 0x401, 0x0, 0x5, 0xfff, 0x7, 0x6, 0x3, 0xfffffff7, 0x3, 0xffffff77, 0xa18, 0x80, 0x8, 0x0, 0x7, 0x7fff, 0x35c3, 0xff, 0x5, 0x2, 0x4, 0x93, 0x0, 0x3, 0x9, 0x0, 0x400, 0x1ff, 0x60c, 0x7b6d879e, 0xc2, 0x80, 0x1, 0xa6d5, 0x6, 0xb2, 0x2, 0x9, 0x6, 0x8, 0x6cf, 0xce76, 0x1ff, 0xa893, 0x0, 0x5, 0x500000, 0x5, 0x6, 0xc, 0xa1a, 0x9, 0x7f, 0x3, 0x6, 0x3, 0x10, 0x38, 0x0, 0x4, 0x1bfe0000, 0x10001, 0xfffffff7, 0x10001, 0x5, 0xff, 0x10000, 0xf, 0xcf, 0xff, 0xf, 0x2, 0x5, 0x0, 0x677, 0x3, 0x200, 0xd48, 0x1, 0x7, 0x1, 0xb, 0x8, 0x6, 0x100, 0x2, 0xb55f, 0x0, 0x0, 0x9, 0x3, 0x3, 0x22, 0x18, 0x2, 0x3, 0xfffffff9, 0x7fffffff, 0xfb1e, 0x7a, 0x3, 0x2, 0x7, 0x7ff, 0x3, 0x4, 0x0, 0x6, 0x0, 0x7, 0x10000, 0x3, 0x1, 0x401, 0x3, 0xfffff0fb, 0x6, 0x80000001, 0xea, 0xffff, 0xfffffffe, 0x2, 0xb4, 0x101, 0xc150, 0x7]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x3, 0x2, 0x2, 0xb, 0xd, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x6, 0x1, 0x12, 0x60, 0x5, 0xe00, 0xfbc, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x6, 0x2}, 0x5, 0x7fff}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x9f, 0x1, 0x3, 0x0, 0x800, 0x10}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xe, 0x1, 0x48, 0x2, 0x9, 0x3}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x16, 0x8, 0x7, 0x9, 0x7, 0x8, 0x47c, 0x7, 0xec, 0x8001, 0x6, 0x2, 0xfffffffa, 0xe, 0x5, 0x8, 0x2, 0xc, 0x8, 0x0, 0x0, 0x33e, 0x3, 0xcfa0, 0x9, 0x400, 0x3, 0x2, 0x1, 0x9399, 0x9, 0x6, 0x48, 0xc89e, 0xdf9, 0x80, 0xafd0, 0xff, 0x6, 0x7, 0x1, 0x4, 0x2, 0x0, 0x8, 0x9, 0xb39, 0x101, 0xe228, 0x100, 0x2, 0x2, 0x6, 0x6, 0x5, 0x2d9, 0x66, 0x0, 0x7, 0x40, 0x2, 0xca, 0x2, 0x6, 0xfff, 0xa, 0x3896, 0x1, 0x5c3, 0x8, 0xa, 0x7, 0x0, 0x0, 0x81, 0x9, 0x3c, 0x5, 0xffff, 0x7ff, 0x3, 0x8, 0x5, 0x7, 0x3, 0x5, 0xffff7fff, 0x0, 0x1702, 0x80000000, 0x101, 0xfffffe00, 0xffffffff, 0xfb, 0x100, 0x4, 0x8000, 0x6, 0x9, 0x4, 0x8, 0xb, 0xac, 0x84b, 0x9, 0xfffffffc, 0x4d, 0x5d58, 0xffffff5b, 0x7, 0x8, 0x800, 0x8, 0x10000, 0x5, 0x0, 0x1, 0x0, 0x8, 0x26, 0x0, 0x7, 0x10, 0x4, 0x9eb, 0xff, 0xf3, 0x7, 0x7, 0x5, 0x6a, 0x59c49bbe, 0x3, 0x7, 0x2, 0x4, 0x70, 0x31c, 0x85, 0x6, 0x8, 0x1000, 0x4, 0x5, 0xffff, 0x9, 0x4, 0x3, 0x6, 0x7, 0x2, 0x4, 0x8, 0x3, 0xffffffff, 0x7, 0x80000001, 0x6, 0x9, 0x5, 0xc265, 0x8, 0xfffffffe, 0xf043, 0x10, 0x0, 0x5a82, 0x400, 0x1, 0x6, 0xd, 0x5255, 0x0, 0x7, 0x8000, 0xcf, 0x3, 0xe, 0xffffffff, 0x1, 0xfffffff1, 0x4, 0x53f, 0x8, 0x8, 0x4, 0x5, 0xf, 0xc335, 0x5, 0x6, 0x97, 0x1, 0x9, 0x1ff, 0x80000000, 0xfffffff7, 0x0, 0x5, 0x8, 0x5c70, 0x3, 0x878, 0x1, 0x3, 0x80, 0x3, 0xe, 0x9, 0x100, 0x2, 0xfffffffa, 0xa9, 0x3ff, 0x89f, 0xfffffff8, 0xa55b, 0x6c58, 0x4, 0x40, 0x5, 0x3, 0x9, 0x70000000, 0x3, 0x9, 0x8, 0x0, 0x4, 0x148, 0x40, 0x5, 0x0, 0x2, 0x0, 0x13c, 0x9, 0x8, 0x3, 0x6, 0x1, 0x5, 0x6, 0x40, 0xfffffffc, 0x2, 0x5, 0x4, 0x3721, 0x80000000, 0x4, 0x2, 0x3, 0x1, 0xffff, 0x4]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3d, 0x0, 0x13, 0x7, 0x200, 0xffffffff, 0x0, 0xfffffffd}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x7c, 0x8, 0x2, 0x0, 0x4, 0x0, 0xe, 0xc, 0x0, 0xdc8f, 0xfffffff8, 0x4, 0x1, 0x0, 0x7, 0x1, 0x1000, 0x3, 0x2, 0x3, 0xfff, 0xc4a, 0x2, 0x9, 0x4, 0x7ff, 0xc, 0xfffffffa, 0x5, 0x1ff, 0x8, 0x7f, 0x9, 0xffffffff, 0x8001, 0x4, 0xcc, 0x5, 0x1000, 0x8001, 0x7ff, 0x10, 0x92, 0x0, 0xaa, 0x2, 0xf, 0x81, 0xa, 0xf, 0x1, 0x3, 0xe576, 0xc64c, 0xb, 0x652a, 0x6258, 0x0, 0x4, 0x80000001, 0x6, 0x800, 0x7ff, 0x1, 0x800, 0x6, 0x5, 0x1ff, 0x3, 0x7ff, 0x5, 0x12140722, 0xf8, 0x24a2, 0xfffffffa, 0x5, 0x1, 0x24000, 0x5, 0x2, 0x8, 0x2, 0x1, 0x8000, 0x19c9c503, 0x3, 0x5, 0x4, 0x2, 0x4, 0x4, 0xfc, 0xc6, 0x2, 0x3, 0x6, 0x2, 0x8, 0x2, 0x73, 0x0, 0x8, 0x4, 0x0, 0x7ff, 0xea70, 0x9c7a, 0x8001, 0x2, 0x80000001, 0x40, 0x1, 0x7, 0x2afc, 0xde, 0xc, 0x9, 0x8, 0x3, 0x8, 0x9c43, 0x5, 0x3, 0xffff5804, 0x2, 0xbe0c, 0x9, 0x4, 0x3, 0x4a8, 0x5, 0x1ff, 0x7, 0x10000, 0x0, 0x6, 0x1, 0x1, 0xd, 0x9, 0x8, 0x8, 0xab3b, 0x8, 0x4, 0x100, 0x401, 0x31, 0x3, 0x7, 0x0, 0x3, 0x8, 0x3, 0x5, 0x3, 0x5, 0x3, 0x3, 0xffffff16, 0x4, 0x5, 0x0, 0xfffffff7, 0x1, 0x3d69, 0x8, 0x7fff, 0xa, 0x9, 0x80, 0x22, 0x3, 0x4, 0x400, 0x717621fe, 0x7, 0x3, 0x6, 0x1dc7, 0x3e21000, 0x7cc, 0x77, 0x5, 0x1, 0xd9df, 0x2, 0xb, 0x50, 0x52e8, 0x7, 0x101, 0x30, 0x68, 0x53, 0x5, 0xff, 0xd566, 0xae1, 0x9, 0x5, 0x7, 0x800, 0x3, 0x8, 0x33, 0x7, 0x80, 0x5, 0x3, 0x9, 0x8000, 0xfffffffb, 0xfffeffff, 0x6, 0x0, 0x8, 0x3, 0xce8, 0x1000, 0xfffffffd, 0x40a9, 0x2, 0x2, 0x5, 0x1, 0x825, 0x39a3, 0x7ff, 0x80000000, 0x2, 0x4, 0xe, 0x8, 0x401, 0xe35, 0x3, 0x6, 0x4, 0x3, 0x958, 0xfff, 0x0, 0x6, 0x5, 0x3ff, 0x8, 0x8, 0x8, 0x7, 0x3, 0x7f0000, 0x7, 0x9, 0xbc56, 0xcf70]}]}}, @c_cbq={{0x8}, {0x450, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x40, 0x0, 0x5, 0x400, 0x1, 0x7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0x2, 0x7fffffff, 0x51d, 0x0, 0x3, 0x1, 0x4ae, 0x7, 0x1e8, 0x8, 0xa2, 0xffff, 0x101, 0xfffffffa, 0x0, 0x3, 0x3, 0x2, 0xc2f, 0x4, 0x0, 0x0, 0x2, 0x0, 0xbbd, 0x2, 0x8, 0x3, 0x3, 0x100, 0x7c3, 0x9, 0x7fff, 0x401, 0x7, 0x3, 0x7, 0x6, 0x1, 0x9, 0x1, 0x4, 0x10001, 0x8, 0x7f, 0x3, 0xffff7fff, 0x0, 0x8, 0x4, 0x3, 0x10, 0x3, 0x96, 0x1, 0x49, 0xf, 0x1, 0x2, 0x401, 0x8, 0x1, 0x9, 0x3, 0x80, 0x25737ced, 0x6, 0x3, 0x0, 0x6b, 0x2, 0x4cd2, 0x7fffffff, 0x0, 0x549, 0x9, 0x9, 0x5, 0x3, 0x12, 0x1, 0x3, 0x9, 0xf4a, 0x81, 0x2b1c357a, 0x3, 0x5, 0xfffffffc, 0x7, 0x8, 0xd780, 0x6, 0x4, 0x7ff, 0x7fff, 0xc39, 0x8, 0x80000000, 0x6, 0x7fffffff, 0x57b, 0x6, 0xe3, 0x232, 0x8, 0x7, 0x5, 0x58e, 0x1, 0x3, 0x3, 0x1000, 0x7fffffff, 0x45f, 0x4, 0x4, 0x8, 0x7, 0x756, 0x1, 0x80000000, 0x1fe, 0x3, 0x4, 0x3, 0x2f2f, 0x0, 0x3, 0x40, 0x9, 0x81, 0x2, 0x6, 0x9, 0x1, 0xf, 0x7d4da6c8, 0x6, 0x65, 0x10000, 0x80000001, 0x10000, 0xffff, 0x7fff, 0x2, 0x7fffffff, 0x1, 0x101, 0x8000, 0x8, 0x7fffffff, 0xff, 0xb, 0xfffffff8, 0x6, 0x8, 0x4, 0x1, 0x0, 0x40, 0x800, 0x6, 0xc, 0x7, 0xbe, 0x4, 0xe, 0x9, 0x2, 0x4c3d, 0xc, 0x3, 0x80000001, 0x7ff, 0x89, 0x5d98, 0x0, 0x1, 0x1f9, 0x4, 0xff, 0x0, 0x5, 0x1, 0x1, 0x7, 0x6, 0x5, 0x758e8c28, 0x1, 0x3b, 0x4, 0x10001, 0xf74, 0x8, 0x3, 0xfffffffd, 0x64dff161, 0x4, 0xea, 0x3, 0x4, 0x0, 0x10001, 0x7fffffff, 0xe, 0xa, 0xe61b, 0x0, 0x2, 0x59c, 0xe54, 0x18, 0x7, 0x4, 0x87f, 0x5, 0x8, 0x1, 0x8, 0x1, 0x71cf, 0x6, 0xa701, 0x7, 0x2, 0x0, 0x4, 0x80000000, 0x4, 0x800, 0xff, 0x1, 0x2, 0x3, 0x6, 0x101, 0x9, 0x6, 0x200, 0x6, 0x1ac619c0, 0x4, 0x2, 0x8, 0x4, 0x9, 0x83b, 0x5, 0xf8, 0x3ff, 0x7, 0xfffeffff, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x1, 0x57d7, 0x101, 0xf69, 0x3}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x1, 0x8, 0x9, 0x0, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x21, 0x0, 0xc, 0x7, 0x7, 0xaca, 0x4000000, 0x40}}]}}, @c_cbq={{0x8}, {0x94, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x80, 0x0, 0x0, 0x6, 0xf, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffff, 0x4}, 0x5}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x8, 0x2, 0x1b, 0xc, 0x81, 0x0, 0xfffffffe, 0x9}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xff, 0x8, 0xc, 0x35, 0x7, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x24, 0x2, 0x7, 0x5, 0x8, 0x6, 0x7, 0x412c}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0xd, 0x3, 0x101, 0x80000000}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0x7}, 0x1, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0xb}, 0xaf, 0xe2}}]}}]}, 0x15a4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') 28.179747554s ago: executing program 7 (id=2441): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x27, 0xfc0, 0x65, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0xc, 0x0}, @broadcast, {[@noop]}}, "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"/4008}}, 0xfce) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0xb4}}, 0x0) 15.515450335s ago: executing program 6 (id=2472): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0xf5) 15.244612201s ago: executing program 6 (id=2474): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="4011af000000b7", @ANYBLOB="e7d83b2680"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x2, 0xb7, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x1, 0x1, 0xc, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x7, 0x24, 0x6, 0x0, 0x0, "043f"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xffff, 0x2, 0x8}, [@mdlm_detail={0x32, 0x24, 0x13, 0x8, "f173f7c70e1ea1fe1fea6ea5f2d79f9288ea9b50709c52005a87943cd61c05dd611b937bd71126b295ff6ae78e7d"}, @network_terminal={0x7, 0x24, 0xa, 0xd, 0x9, 0x6, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x8, 0xa7, 0x0, 0xe4, 0x972, 0xfa}, @mbim={0xc, 0x24, 0x1b, 0xffff, 0x5, 0xa3, 0x5e, 0x30, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0xc, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x1, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0xe, 0x9, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x81, 0xe, 0xe9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xc, 0xe7, 0x8e}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x0, 0x2, 0x0, 0xff, 0x4}, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB='\t']}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.860282275s ago: executing program 35 (id=2441): r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xa}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000000ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x27, 0xfc0, 0x65, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0xc, 0x0}, @broadcast, {[@noop]}}, "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"/4008}}, 0xfce) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0xb4}}, 0x0) 12.013638525s ago: executing program 6 (id=2484): pread64(0xffffffffffffffff, &(0x7f0000000100)=""/48, 0x30, 0x20000000000040) 11.867444876s ago: executing program 6 (id=2485): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) write$vga_arbiter(r0, &(0x7f00000001c0)=@other={'lock', ' ', 'none'}, 0xa) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f010400000000000000e305241a00", @ANYRESOCT], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @local}, 0x10) r3 = io_uring_setup(0x235, &(0x7f00000002c0)={0x0, 0xf48f, 0x400, 0x0, 0x199}) syz_io_uring_setup(0x3637, &(0x7f0000000340)={0x0, 0xc448, 0x10, 0x0, 0x58, 0x0, r3}, &(0x7f00000003c0), &(0x7f0000000400)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) capget(&(0x7f0000000140)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000180)={0x7, 0x8, 0x6, 0x8, 0x1, 0xffffffff}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x3a0af83a) r5 = epoll_create(0xea3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000380)={0xb0000001}) listen(r4, 0x20) shutdown(r4, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @multicast}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf1186dd604df34200180600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600204e690780000130244023dd69235e66b62a2e00c387b1e04a68473f297520837ed2d0a606ad0a2ad30c5e47e35a1963fc34cf0a06221d6f49e1997b22d579d9adf"], 0x0) 10.065681579s ago: executing program 5 (id=2492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000004400), r0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x60}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000080)="360f01cb0f01c936260fc71d0f20d86635200000000f22d86666f30f1ef8baf80c66b84d90118e66efbafc0cb000ee66b9800000c00f326635008000000f30ba6100b006ee2e0f01c90f20e06635000200000f22e0", 0x55}], 0x1, 0x4f, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000004700)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000046c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ccdf2defe23256257af9319d3800a01a3f00f8781a", @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf2501000000060006004e21000008000500010000001400020077673000"/50], 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x800) 9.541141452s ago: executing program 6 (id=2493): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000480)={0x0, 0xaee5, 0x8, 0x2, 0x1f6, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000020c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="050000000008"], 0x20) r8 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r9) openat$fb0(0xffffffffffffff9c, 0x0, 0x420000, 0x0) 8.425442772s ago: executing program 5 (id=2495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x8, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x2000, 0xfefffffd, 0xb2}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000200)=@x86={0x6, 0x2, 0x10, 0x0, 0xb, 0x6, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x2, 0x7, '\x00', 0x6, 0x4080000000000005}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000300)={0xc, r8}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r7, 0x3b65, 0x4) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000600)={0x20, 0xc, 0x6, "000200000000"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000080)={0x40, 0x10, 0xa2, "ef6fe9926ce9d30b0ce9d250750ae39a7e5f88f51ebb11ffe5442a8b76c4b8c67df0eab1f4e49ed8a1575775934e3d38a78316ea1a515433256088f658830ae857bb10264385099f94"}, 0x0, 0x0}) 7.306656906s ago: executing program 6 (id=2500): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) setrlimit(0x0, &(0x7f00000000c0)={0x0, 0x1}) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)=@ipv4_newroute={0x2c, 0x18, 0x100, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x80, 0x4, 0x0, 0x3, 0x0, 0x7, 0x2200}, [@RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_SRC={0x8, 0x2, @multicast2}]}, 0x2c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="11109d00000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0xb0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xac, 0x6, 0xfe}}}}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}}, 0x24}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000000280)={0x10, 0x0, r8}, 0x10) 5.639768235s ago: executing program 1 (id=2503): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x7ff, @private2, 0x3}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0x0, 0x84a3, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x67, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) io_uring_setup(0x3454, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw}) 5.467493736s ago: executing program 1 (id=2504): ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0x3, @pix={0xf, 0x6, 0x47524247, 0x1, 0xef4, 0x4d4, 0xb, 0x9, 0x0, 0x7, 0x1, 0x7}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffc05]}, 0x0, 0xffffffffffffffc2) r3 = gettid() open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) socket(0x1000000010, 0x80002, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x7f, 0x400, 0x0, 0xb2}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r6, 0x2) syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r10 = getpid() rt_tgsigqueueinfo(r10, r3, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0xffffffff}) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) 5.198153347s ago: executing program 5 (id=2506): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="bc010000190001002abd700000000000e0000002000000000000000000000000e000000100000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b0000000000000000000000000000000000000000000000000000000000000000000000040105"], 0x1bc}}, 0x4000) 4.974757795s ago: executing program 5 (id=2507): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "c94ffb00"}]}}, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000020000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$kcm(0x15, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x212643, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setfsuid(0xffffffffffffffff) r6 = syz_clone(0x4019111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) wait4(r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 4.70288572s ago: executing program 2 (id=2509): socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2e, 0xc2, 0x5d}}]}}]}}, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x640800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$qrtr(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x2a, 0x4, 0x7fff}, 0xc, &(0x7f0000000300)=[{&(0x7f00000001c0)="c43d61353313972d3934a1ea16cd68b1353c34c45b2221888d7241425ff2699b86b3860b9f86d4aae6b7cc503e7fb6b2", 0x30}, {&(0x7f0000000200)="5920f8c242b433", 0x7}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000280)="5cd49738a72f7cb6fd0d8d50d11d14f9aafa39bf232c9401810f8cbb2e9260887a0a2046", 0x24}], 0x4, &(0x7f0000000440)=[{0x38, 0x113, 0x3, "9b2832e3373433dbc778e0ea7475d0033a8fae920630285d95bce6e7aa9726be13f3cbfc6a949f44"}, {0x98, 0x1, 0xfffffffd, "3fe439bfea845e62ce3bb8ca73ccfe531530b83767dd169d90041c2149f8afe97880681171aafeb4f31276ebb99918c23b0e9f38c25478bf13ea701d15ea13b3104bfaabfc56eb07bf3eb73ac2b543c0b8913a83427c499785b2ff2fd72a93ab558d74ca783d07596c2617c65b138b074cd12c94df589ed62dd90244ca246ba10d9e"}], 0xd0, 0x190}, 0x38) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x7, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4000110}, 0xc084) 4.135192733s ago: executing program 8 (id=2510): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000400)) setns(r5, 0x40000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000200)=@nullb, 0xee01, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b634280100"/20, @ANYRES32, @ANYRESDEC=r4], 0x0, 0x7, 0xffffffffffffffd2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1ff}, 0x800, 0x6e6bba, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) sched_setattr(r8, &(0x7f0000000580)={0x38, 0x0, 0x2, 0x7, 0x107e, 0x5, 0x5, 0xffffffff, 0x1, 0x800}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000000)=0x1) 3.476499994s ago: executing program 1 (id=2511): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00004c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x800008, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.240888472s ago: executing program 1 (id=2512): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') writev(r1, &(0x7f0000000340)=[{0x0, 0xff0f}, {&(0x7f0000000080)="2d0360c642", 0x5}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') preadv(r2, &(0x7f0000000340), 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f0308000000010000e2ffca1b1f0000001104c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f20900f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x5}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000040)={{0x32, @rand_addr=0x64010102, 0x4e20, 0x0, 'lblc\x00', 0x2, 0xfff, 0x78}, {@loopback, 0x4e23, 0x0, 0x8, 0x0, 0x6}}, 0x44) quotactl_fd$Q_SYNC(r0, 0x2, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000340)={{0x6, 0x5}, {0xfffffffffffffffe, 0x4}, 0xfffffe29, 0x6}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') (async) writev(r1, &(0x7f0000000340)=[{0x0, 0xff0f}, {&(0x7f0000000080)="2d0360c642", 0x5}], 0x2) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') (async) preadv(r2, &(0x7f0000000340), 0x0, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f0308000000010000e2ffca1b1f0000001104c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f20900f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x5}]}, 0x10) (async) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @remote, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000040)={{0x32, @rand_addr=0x64010102, 0x4e20, 0x0, 'lblc\x00', 0x2, 0xfff, 0x78}, {@loopback, 0x4e23, 0x0, 0x8, 0x0, 0x6}}, 0x44) (async) quotactl_fd$Q_SYNC(r0, 0x2, 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000340)={{0x6, 0x5}, {0xfffffffffffffffe, 0x4}, 0xfffffe29, 0x6}) (async) 3.011133922s ago: executing program 1 (id=2513): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x40011, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000e39340dec0a2ab4c1105f", @ANYBLOB="11022dbd7000ffdbdf2557", @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x44) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xc, 0xfff3}, {0xfff2, 0x1}, {0x8, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.010528567s ago: executing program 8 (id=2514): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000000000000eeffffff00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2.729978563s ago: executing program 2 (id=2515): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x9, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) unshare(0x2c020400) writev(r4, 0x0, 0x0) splice(r3, 0x0, r3, 0x0, 0x9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.585997672s ago: executing program 2 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x6400, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.439093122s ago: executing program 2 (id=2517): r0 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000100)=""/48, 0x30, 0x20000000000040) 2.376903208s ago: executing program 2 (id=2518): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0/file0\x00', 0x40a002, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000000050001000700000000000400000000000900020073797a310000000014000300686173683a69"], 0x58}}, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) read$FUSE(r4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x5, &(0x7f0000000380)=[{0x7, 0x7, 0x5, 0x401}, {0xaace, 0x8, 0x3, 0x1ff}, {0x3, 0x4, 0x7, 0xfff}, {0x0, 0x5, 0xc, 0x9}, {0x9, 0x9, 0x94, 0x80000001}]}) cachestat(r2, &(0x7f0000000300)={0x1, 0x8f89}, &(0x7f0000000340), 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup2(r6, r5) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES16=r0], 0xd4}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{}, {0x94, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x20004000) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60002080}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4100}, 0x0) r12 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r12}) 2.269833047s ago: executing program 8 (id=2519): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100001"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x80) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x44844) 2.186069512s ago: executing program 2 (id=2520): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) chroot(&(0x7f0000000000)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x114) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRESDEC=r0], 0x1c8}, 0x4000c010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000000700000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xffffff0a) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.52615237s ago: executing program 5 (id=2523): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r4 = io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xd9db, 0x8, 0x2}) io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00') r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x20, 0x46e2ce1dfc86f44b, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b01, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000100)={0x77359400}, 0x10) r8 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r8, 0x3516, 0xeffd, 0x0, 0x0, 0x0) 911.583989ms ago: executing program 8 (id=2524): r0 = syz_usb_connect(0x580b6fa9d905dffe, 0x202, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001c91bda4cbdf3ed67df2152018b401e0407400904cd86b36c02c65b6056fea2860fa572c9bc4e06ff303b02f0ca2c7180d1b9c4a86cd7bf3e75"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000400)={0x20, 0x22, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) 652.930981ms ago: executing program 1 (id=2525): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000900)={{0x0, 0x2, 0x1f, 0x8, 0x9, 0x9, 0x0, 0x8001, 0x5, 0x9, 0x7, 0x1, 0x3, 0x3, 0x401}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001900)={r1, 0xa}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x4e0206, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000007c0)=[@code={0xa, 0x5d, {"0f380a669766ba6100b000470fc7ba24a60000b98f090000b88cfe9500000000000000000f3066b845008ed8c4e1f96e42e46505e7ee19210f328fe9209b7ce100c403790cde08c461f8ae18"}}, @rdmsr={0x32, 0x18, {0x2bd}}, @wr_crn={0x46, 0x20, {0x0, 0x69f}}, @in_dx={0x82, 0x20, {0xaaa, 0x7}}, @in_dx={0x82, 0x20, {0xfd90, 0x6}}, @cpuid={0x14, 0x18}, @rdmsr={0x32, 0x18, {0x40000082}}], 0x105}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f00000001c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000240)={0x3}) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000140)={[{0xffffffff, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x4, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0xa3, 0x0, 0x0}) r6 = syz_open_dev$loop(&(0x7f0000000280), 0xfc5, 0x8000) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000440)={0x6, 0x0, 0x1}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000005c0)=[@wr_crn={0x46, 0x20, {0x4, 0x6}}, @wr_drn={0x6e, 0x20, {0x0, 0x5}}, @rdmsr={0x32, 0x18, {0x181}}, @code={0xa, 0x53, {"67735a2e0f019ee0000000650f01cfab66ba420066b89b1566ef4d0fc79ee388ef1966450f38803266baf80cb8947a2c89ef66bafc0ced40e80018000043d07c7800"}}, @out_dx={0xaa, 0x28, {0x5b77, 0x5, 0x4}}, @cpuid={0x14, 0x18, {0x10001, 0xa}}, @rdmsr={0x32, 0x18, {0xb7d}}, @rdmsr={0x32, 0x18, {0x2f0}}, @out_dx={0xaa, 0x28, {0xe6cb, 0x3, 0x4}}, @uexit={0x0, 0x18, 0x6}, @rdmsr={0x32, 0x18, {0x966}}, @rdmsr={0x32, 0x18, {0x5df6051ca135e8a7}}, @wr_drn={0x6e, 0x20, {0x6}}, @in_dx={0x82, 0x20, {0xbde0, 0x7}}], 0x1cb}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0xfffffff9, 0x8, 0x0, 0x7, 0x8, 0x2, 0xaf, 0xcf, 0x9, 0x9, 0x7f, 0x5b, 0x4}, {0x604, 0x9, 0x5, 0x30, 0x4, 0x80, 0xfb, 0x6, 0x1, 0x35, 0x6, 0x5e, 0x17}, {0x86, 0x5, 0x2, 0xf0, 0x2, 0x7f, 0x8, 0xa, 0x40, 0xdf, 0x6, 0x3, 0x5}], 0x401}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x406, r8) write$cgroup_pid(r9, &(0x7f00000003c0), 0xffffffa0) 0s ago: executing program 8 (id=2526): accept(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x0, @remote}, &(0x7f0000000000)=0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4089d}, 0xc010) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r4, @ANYBLOB="906ecbade549fb3353ea9a6f2193909216a8ebab7e46ce5fdb6142b562c4b5b2f67e1d04b42af97bd95d1a11ee779d1ecef8545bf48a2ba6b467ae93b4062387c4060a340bf135a1dc38fde7ecb3253f38f12bf65165ff550ff8561784a3072943b7fb6e27a0828f29c9a62ce7dd24a68831171b1180ad95c7bc3cb4", @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000080)='./file0\x00', 0x9000, &(0x7f00000000c0)={0x0, 0x74, 0x100000}, 0x20) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x20000023896) ioctl$TCXONC(r5, 0x540a, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$rxrpc(r9, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffffffff}}, 0x24) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) kernel console output (not intermixed with test programs): 5.839084][T14471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.839099][T14471] RIP: 0033:0x7f1e13f9aeb9 [ 695.839113][T14471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.839127][T14471] RSP: 002b:00007f1e14e13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.839143][T14471] RAX: ffffffffffffffda RBX: 00007f1e14216090 RCX: 00007f1e13f9aeb9 [ 695.839154][T14471] RDX: 0000200000000000 RSI: 0000000040045612 RDI: 000000000000000b [ 695.839165][T14471] RBP: 00007f1e14e13090 R08: 0000000000000000 R09: 0000000000000000 [ 695.839174][T14471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.839184][T14471] R13: 00007f1e14216128 R14: 00007f1e14216090 R15: 00007f1e1433fa48 [ 695.839207][T14471] [ 695.839224][T14471] ERROR: Out of memory at tomoyo_realpath_from_path. [ 696.202447][T14471] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 696.510976][ T5953] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 696.684709][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2157'. [ 696.693796][T14491] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 696.702017][ T5953] usb 8-1: Using ep0 maxpacket: 8 [ 696.720133][ T30] audit: type=1804 audit(1769924347.957:1024): pid=14491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2157" name="bus" dev="ramfs" ino=61104 res=1 errno=0 [ 696.727642][ T5953] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.770174][ T5953] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 696.786491][ T5953] usb 8-1: config 1 has no interface number 1 [ 696.792864][ T5953] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 697.049427][ T5953] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 697.068481][ T5953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.093693][ T5953] usb 8-1: Product: syz [ 697.113712][ T5953] usb 8-1: Manufacturer: syz [ 697.129604][ T5953] usb 8-1: SerialNumber: syz [ 697.149770][T14498] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2160'. [ 697.553262][ T5953] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 697.663463][ T5953] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 697.717153][ T5953] usb 8-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 697.724538][ T5953] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 697.920891][ T5953] usb 8-1: USB disconnect, device number 5 [ 698.153414][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 698.746116][ T5953] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 699.026785][ T5953] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.049131][ T5953] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.075318][ T5953] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 699.094666][ T5953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.186754][ T5953] usb 8-1: config 0 descriptor?? [ 699.226853][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2166'. [ 699.535300][ T5887] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 699.620381][ T5953] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0 [ 699.641814][ T5953] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0 [ 699.650139][ T5953] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0 [ 699.658590][ T5953] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0 [ 699.668368][ T5953] playstation 0003:054C:0DF2.001E: unknown main item tag 0x0 [ 699.702072][ T5953] playstation 0003:054C:0DF2.001E: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.7-1/input0 [ 699.775299][ T5887] usb 2-1: device descriptor read/64, error -71 [ 699.815310][T14156] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 699.847785][ T5953] playstation 0003:054C:0DF2.001E: Invalid reportID received, expected 9 got 169 [ 699.857464][ T5953] playstation 0003:054C:0DF2.001E: Failed to retrieve DualSense pairing info: -22 [ 699.884915][ T5953] playstation 0003:054C:0DF2.001E: Failed to get MAC address from DualSense [ 699.925319][ T5953] playstation 0003:054C:0DF2.001E: Failed to create dualsense. [ 699.938426][ T5953] playstation 0003:054C:0DF2.001E: probe with driver playstation failed with error -22 [ 700.008315][T14156] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.025622][ T5887] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 700.039332][T14156] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 700.080036][T14156] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 700.091703][ T5953] usb 8-1: USB disconnect, device number 6 [ 700.105262][T14156] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.123754][T14156] usb 7-1: Product: syz [ 700.164515][T14156] usb 7-1: Manufacturer: syz [ 700.165719][ T5887] usb 2-1: device descriptor read/64, error -71 [ 700.196135][T14156] usb 7-1: SerialNumber: syz [ 700.215577][T14156] usb 7-1: config 0 descriptor?? [ 700.305943][ T5887] usb usb2-port1: attempt power cycle [ 700.477279][T14156] usb 7-1: USB disconnect, device number 24 [ 700.645290][ T5887] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 700.676756][ T5887] usb 2-1: device descriptor read/8, error -71 [ 700.735928][T14548] FAULT_INJECTION: forcing a failure. [ 700.735928][T14548] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 700.775908][T14548] CPU: 0 UID: 0 PID: 14548 Comm: syz.6.2170 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.775947][T14548] Tainted: [L]=SOFTLOCKUP [ 700.775953][T14548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 700.775963][T14548] Call Trace: [ 700.775969][T14548] [ 700.775977][T14548] dump_stack_lvl+0xe8/0x150 [ 700.776000][T14548] should_fail_ex+0x412/0x560 [ 700.776023][T14548] _copy_from_user+0x2d/0xb0 [ 700.776048][T14548] video_usercopy+0x36f/0x1400 [ 700.776072][T14548] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 700.776092][T14548] ? __pfx___video_do_ioctl+0x10/0x10 [ 700.776112][T14548] ? __pfx_video_usercopy+0x10/0x10 [ 700.776139][T14548] ? __fget_files+0x2a/0x420 [ 700.776159][T14548] ? __fget_files+0x2a/0x420 [ 700.776174][T14548] ? __fget_files+0x3a0/0x420 [ 700.776193][T14548] v4l2_ioctl+0x18d/0x1e0 [ 700.776212][T14548] ? __pfx_v4l2_ioctl+0x10/0x10 [ 700.776231][T14548] __se_sys_ioctl+0xfc/0x170 [ 700.776255][T14548] do_syscall_64+0xe2/0xf80 [ 700.776271][T14548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.776286][T14548] ? clear_bhb_loop+0x60/0xb0 [ 700.776305][T14548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.776324][T14548] RIP: 0033:0x7f48c939aeb9 [ 700.776339][T14548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.776352][T14548] RSP: 002b:00007f48c75f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 700.776369][T14548] RAX: ffffffffffffffda RBX: 00007f48c9616090 RCX: 00007f48c939aeb9 [ 700.776380][T14548] RDX: 0000200000000000 RSI: 0000000040045612 RDI: 000000000000000b [ 700.776391][T14548] RBP: 00007f48c75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 700.776400][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.776410][T14548] R13: 00007f48c9616128 R14: 00007f48c9616090 R15: 00007f48c973fa48 [ 700.776433][T14548] [ 701.138137][T14554] kvm: user requested TSC rate below hardware speed [ 701.248662][ T5887] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 701.294155][ T5887] usb 2-1: device descriptor read/8, error -71 [ 701.422673][ T5887] usb usb2-port1: unable to enumerate USB device [ 701.452091][ T5953] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 701.482496][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2173'. [ 701.679023][ T5953] usb 6-1: Using ep0 maxpacket: 8 [ 701.716469][ T5953] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 701.754864][ T5953] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 701.781828][T14561] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 701.795096][ T5953] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 701.983749][ T5953] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 702.030901][ T5953] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 702.141650][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.385685][ T5953] usb 6-1: GET_CAPABILITIES returned 0 [ 702.418182][ T5953] usbtmc 6-1:16.0: can't read capabilities [ 702.509876][T14578] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 702.516463][T14578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 702.575960][T14578] vhci_hcd vhci_hcd.0: Device attached [ 702.596345][T14582] vhci_hcd: connection closed [ 702.601916][ T6391] vhci_hcd vhci_hcd.1: stop threads [ 702.616708][T14554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.626090][T14554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.695465][ T6391] vhci_hcd vhci_hcd.1: release socket [ 702.716800][ T6391] vhci_hcd vhci_hcd.1: disconnect device [ 702.756397][ T5953] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 702.965306][T14156] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 703.130709][T14156] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 703.142467][T14156] usb 3-1: config 0 has no interface number 0 [ 703.161025][T14156] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 703.173476][T14156] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 703.187373][T14156] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 703.198287][T14156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.209975][T14156] usb 3-1: config 0 descriptor?? [ 703.217388][T14585] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 703.268598][T14156] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 703.433620][T14593] netlink: 212924 bytes leftover after parsing attributes in process `syz.1.2182'. [ 703.483829][ T5887] usb 3-1: USB disconnect, device number 105 [ 703.524000][T14593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'. [ 703.971584][ T5928] usb 6-1: USB disconnect, device number 93 [ 704.046671][T14614] program syz.1.2188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 704.467307][ T5953] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 704.677283][ T5953] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 704.687483][ T5953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.707503][ T5953] usb 8-1: config 0 descriptor?? [ 705.301444][ T5953] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 705.333032][ T5953] [drm:udl_init] *ERROR* Selecting channel failed [ 705.392249][ T5953] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 705.443831][ T5953] [drm] Initialized udl on minor 2 [ 705.461080][ T5953] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 705.518372][ T5953] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 705.556438][ T5910] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 705.564953][ T5910] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 705.573864][ T5953] usb 8-1: USB disconnect, device number 7 [ 705.939084][T14652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 705.948182][ T30] audit: type=1804 audit(1769924357.217:1025): pid=14652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2199" name="bus" dev="ramfs" ino=62082 res=1 errno=0 [ 706.075611][T14652] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 706.354204][T14658] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 706.623991][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2200'. [ 707.555629][ T5953] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 707.724525][ T5953] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 707.736121][ T5953] usb 3-1: config 0 has no interface number 0 [ 707.742276][ T5953] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 707.794663][ T5953] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 707.807178][ T5953] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 707.828477][ T5953] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 707.845374][ T5953] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 707.859944][ T5953] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 707.873984][ T5953] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 707.883834][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.905977][ T5953] usb 3-1: config 0 descriptor?? [ 707.911996][T14666] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 707.919614][ T5910] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 707.929442][T14666] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 707.943830][ T5953] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 708.079011][ T5910] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 708.087702][ T5910] usb 7-1: can't read configurations, error -61 [ 708.157283][T14683] FAULT_INJECTION: forcing a failure. [ 708.157283][T14683] name failslab, interval 1, probability 0, space 0, times 0 [ 708.170254][T14683] CPU: 0 UID: 0 PID: 14683 Comm: syz.7.2208 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.170288][T14683] Tainted: [L]=SOFTLOCKUP [ 708.170296][T14683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 708.170330][T14683] Call Trace: [ 708.170340][T14683] [ 708.170350][T14683] dump_stack_lvl+0xe8/0x150 [ 708.170383][T14683] should_fail_ex+0x412/0x560 [ 708.170414][T14683] should_failslab+0xa8/0x100 [ 708.170439][T14683] __kmalloc_node_track_caller_noprof+0xe1/0x7f0 [ 708.170467][T14683] ? media_pipeline_add_pad+0x290/0x750 [ 708.170487][T14683] ? media_pipeline_add_pad+0x290/0x750 [ 708.170521][T14683] krealloc_node_align_noprof+0x1ae/0x390 [ 708.170551][T14683] media_pipeline_add_pad+0x290/0x750 [ 708.170584][T14683] __media_pipeline_start+0x211/0x2410 [ 708.170621][T14683] ? do_raw_spin_lock+0x12b/0x2f0 [ 708.170655][T14683] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 708.170674][T14683] media_pipeline_start+0x51/0x70 [ 708.170690][T14683] vimc_capture_start_streaming+0x7c/0x410 [ 708.170725][T14683] ? do_raw_spin_unlock+0xf5/0x210 [ 708.170750][T14683] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 708.170774][T14683] vb2_start_streaming+0x128/0x460 [ 708.170808][T14683] vb2_core_streamon+0x2e0/0x4f0 [ 708.170841][T14683] __video_do_ioctl+0x889/0xc50 [ 708.170874][T14683] ? __pfx___video_do_ioctl+0x10/0x10 [ 708.170923][T14683] video_usercopy+0x876/0x1400 [ 708.170963][T14683] ? __pfx___video_do_ioctl+0x10/0x10 [ 708.170991][T14683] ? __pfx_video_usercopy+0x10/0x10 [ 708.171029][T14683] ? __fget_files+0x2a/0x420 [ 708.171057][T14683] ? __fget_files+0x2a/0x420 [ 708.171073][T14683] ? __fget_files+0x3a0/0x420 [ 708.171107][T14683] v4l2_ioctl+0x18d/0x1e0 [ 708.171136][T14683] ? __pfx_v4l2_ioctl+0x10/0x10 [ 708.171163][T14683] __se_sys_ioctl+0xfc/0x170 [ 708.171196][T14683] do_syscall_64+0xe2/0xf80 [ 708.171218][T14683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.171242][T14683] ? trace_irq_disable+0x37/0x100 [ 708.171257][T14683] ? clear_bhb_loop+0x60/0xb0 [ 708.171276][T14683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.171309][T14683] RIP: 0033:0x7fddc259aeb9 [ 708.171329][T14683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.171349][T14683] RSP: 002b:00007fddc34e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.171372][T14683] RAX: ffffffffffffffda RBX: 00007fddc2816090 RCX: 00007fddc259aeb9 [ 708.171387][T14683] RDX: 0000200000000000 RSI: 0000000040045612 RDI: 000000000000000b [ 708.171401][T14683] RBP: 00007fddc34e7090 R08: 0000000000000000 R09: 0000000000000000 [ 708.171418][T14683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.171434][T14683] R13: 00007fddc2816128 R14: 00007fddc2816090 R15: 00007fddc293fa48 [ 708.171458][T14683] [ 708.456032][ T5910] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 708.494265][T14671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.503809][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2204'. [ 708.611343][ T5910] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 708.714022][ T5910] usb 7-1: can't read configurations, error -61 [ 708.751189][ T5910] usb usb7-port1: attempt power cycle [ 709.086676][ T5928] usb 3-1: USB disconnect, device number 106 [ 709.112955][ T5928] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 709.125386][ T5910] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 709.177047][ T5910] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 709.195231][ T5910] usb 7-1: can't read configurations, error -61 [ 709.345385][ T5910] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 709.388850][ T5910] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 709.443739][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2213'. [ 709.513044][ T5910] usb 7-1: can't read configurations, error -61 [ 709.534524][ T5910] usb usb7-port1: unable to enumerate USB device [ 710.654727][ T30] audit: type=1804 audit(1769924361.937:1026): pid=14729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2217" name="bus" dev="ramfs" ino=62773 res=1 errno=0 [ 710.909474][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2217'. [ 710.918895][T14729] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 711.579336][T14743] dlm: non-version read from control device 8224 [ 712.123904][T14757] FAULT_INJECTION: forcing a failure. [ 712.123904][T14757] name failslab, interval 1, probability 0, space 0, times 0 [ 712.137005][T14757] CPU: 0 UID: 0 PID: 14757 Comm: syz.6.2222 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.137042][T14757] Tainted: [L]=SOFTLOCKUP [ 712.137049][T14757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 712.137059][T14757] Call Trace: [ 712.137065][T14757] [ 712.137073][T14757] dump_stack_lvl+0xe8/0x150 [ 712.137098][T14757] should_fail_ex+0x412/0x560 [ 712.137121][T14757] should_failslab+0xa8/0x100 [ 712.137140][T14757] __kmalloc_cache_noprof+0x83/0x6e0 [ 712.137157][T14757] ? media_pipeline_add_pad+0xa9/0x750 [ 712.137174][T14757] ? krealloc_node_align_noprof+0x24d/0x390 [ 712.137194][T14757] media_pipeline_add_pad+0xa9/0x750 [ 712.137217][T14757] __media_pipeline_start+0x83e/0x2410 [ 712.137244][T14757] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 712.137262][T14757] media_pipeline_start+0x51/0x70 [ 712.137278][T14757] vimc_capture_start_streaming+0x7c/0x410 [ 712.137293][T14757] ? do_raw_spin_unlock+0xf5/0x210 [ 712.137318][T14757] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 712.137335][T14757] vb2_start_streaming+0x128/0x460 [ 712.137359][T14757] vb2_core_streamon+0x2e0/0x4f0 [ 712.137382][T14757] __video_do_ioctl+0x889/0xc50 [ 712.137409][T14757] ? __pfx___video_do_ioctl+0x10/0x10 [ 712.137440][T14757] video_usercopy+0x876/0x1400 [ 712.137468][T14757] ? __pfx___video_do_ioctl+0x10/0x10 [ 712.137490][T14757] ? __pfx_video_usercopy+0x10/0x10 [ 712.137518][T14757] ? __fget_files+0x2a/0x420 [ 712.137539][T14757] ? __fget_files+0x2a/0x420 [ 712.137556][T14757] ? __fget_files+0x3a0/0x420 [ 712.137575][T14757] v4l2_ioctl+0x18d/0x1e0 [ 712.137595][T14757] ? __pfx_v4l2_ioctl+0x10/0x10 [ 712.137613][T14757] __se_sys_ioctl+0xfc/0x170 [ 712.137637][T14757] do_syscall_64+0xe2/0xf80 [ 712.137654][T14757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.137668][T14757] ? trace_irq_disable+0x37/0x100 [ 712.137683][T14757] ? clear_bhb_loop+0x60/0xb0 [ 712.137701][T14757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.137717][T14757] RIP: 0033:0x7f48c939aeb9 [ 712.137731][T14757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.137745][T14757] RSP: 002b:00007f48c75f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 712.137761][T14757] RAX: ffffffffffffffda RBX: 00007f48c9616090 RCX: 00007f48c939aeb9 [ 712.137773][T14757] RDX: 0000200000000000 RSI: 0000000040045612 RDI: 000000000000000b [ 712.137783][T14757] RBP: 00007f48c75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 712.137792][T14757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.137802][T14757] R13: 00007f48c9616128 R14: 00007f48c9616090 R15: 00007f48c973fa48 [ 712.137826][T14757] [ 712.905582][ T5887] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 713.068394][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 713.121461][ T5887] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.142065][ T10] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 713.145494][ T5887] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.206341][ T5887] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 713.215897][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.223945][ T5887] usb 2-1: Product: syz [ 713.275258][ T5887] usb 2-1: Manufacturer: syz [ 713.295299][ T5887] usb 2-1: SerialNumber: syz [ 713.338078][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 713.354521][T14781] input: syz0 as /devices/virtual/input/input57 [ 713.367821][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.416179][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.444249][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 713.483382][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 713.511677][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.554745][T14765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.566260][T14765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.604398][ T10] usb 6-1: config 0 descriptor?? [ 713.638111][ T5887] usb 2-1: 0:2 : does not exist [ 713.663046][ T5887] usb 2-1: unit 9 not found! [ 713.688220][ T5887] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 713.742324][ T5887] usb 2-1: 4:0: cannot get min/max values for control 2 (id 4) [ 713.811967][ T5887] usb 2-1: USB disconnect, device number 6 [ 713.926343][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.111083][ T10] apple 0003:05AC:027A.001F: hidraw0: USB HID v0.07 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0 [ 714.277597][ T5887] usb 6-1: USB disconnect, device number 94 [ 714.453332][T14808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2232'. [ 715.403810][T14828] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 715.496410][T14836] FAULT_INJECTION: forcing a failure. [ 715.496410][T14836] name failslab, interval 1, probability 0, space 0, times 0 [ 715.515621][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.2.2237 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.515653][T14836] Tainted: [L]=SOFTLOCKUP [ 715.515659][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 715.515668][T14836] Call Trace: [ 715.515675][T14836] [ 715.515682][T14836] dump_stack_lvl+0xe8/0x150 [ 715.515706][T14836] should_fail_ex+0x412/0x560 [ 715.515729][T14836] should_failslab+0xa8/0x100 [ 715.515747][T14836] __kmalloc_cache_noprof+0x83/0x6e0 [ 715.515764][T14836] ? media_pipeline_add_pad+0xa9/0x750 [ 715.515781][T14836] ? krealloc_node_align_noprof+0x24d/0x390 [ 715.515800][T14836] media_pipeline_add_pad+0xa9/0x750 [ 715.515823][T14836] __media_pipeline_start+0x83e/0x2410 [ 715.515850][T14836] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 715.515868][T14836] media_pipeline_start+0x51/0x70 [ 715.515890][T14836] vimc_capture_start_streaming+0x7c/0x410 [ 715.515906][T14836] ? do_raw_spin_unlock+0xf5/0x210 [ 715.515924][T14836] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 715.515942][T14836] vb2_start_streaming+0x128/0x460 [ 715.515966][T14836] vb2_core_streamon+0x2e0/0x4f0 [ 715.515989][T14836] __video_do_ioctl+0x889/0xc50 [ 715.516016][T14836] ? __pfx___video_do_ioctl+0x10/0x10 [ 715.516046][T14836] video_usercopy+0x876/0x1400 [ 715.516077][T14836] ? __pfx___video_do_ioctl+0x10/0x10 [ 715.516097][T14836] ? __pfx_video_usercopy+0x10/0x10 [ 715.516125][T14836] ? __fget_files+0x2a/0x420 [ 715.516146][T14836] ? __fget_files+0x2a/0x420 [ 715.516161][T14836] ? __fget_files+0x3a0/0x420 [ 715.516180][T14836] v4l2_ioctl+0x18d/0x1e0 [ 715.516200][T14836] ? __pfx_v4l2_ioctl+0x10/0x10 [ 715.516219][T14836] __se_sys_ioctl+0xfc/0x170 [ 715.516242][T14836] do_syscall_64+0xe2/0xf80 [ 715.516259][T14836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.516273][T14836] ? trace_irq_disable+0x37/0x100 [ 715.516288][T14836] ? clear_bhb_loop+0x60/0xb0 [ 715.516306][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.516320][T14836] RIP: 0033:0x7f1e13f9aeb9 [ 715.516335][T14836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.516347][T14836] RSP: 002b:00007f1e14e13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.516364][T14836] RAX: ffffffffffffffda RBX: 00007f1e14216090 RCX: 00007f1e13f9aeb9 [ 715.516375][T14836] RDX: 0000200000000000 RSI: 0000000040045612 RDI: 000000000000000b [ 715.516385][T14836] RBP: 00007f1e14e13090 R08: 0000000000000000 R09: 0000000000000000 [ 715.516395][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.516404][T14836] R13: 00007f1e14216128 R14: 00007f1e14216090 R15: 00007f1e1433fa48 [ 715.516427][T14836] [ 716.236145][T14837] set match dimension is over the limit! [ 716.955414][T14156] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 717.128253][T14156] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.143511][T14156] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.171996][T14156] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 717.193398][T14156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 717.254160][T14156] usb 3-1: SerialNumber: syz [ 717.490191][T14855] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 718.246555][ T30] audit: type=1326 audit(1769924369.527:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14877 comm="syz.7.2244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddc259aeb9 code=0x0 [ 718.595700][ T5910] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 718.876054][ T5910] usb 8-1: Using ep0 maxpacket: 32 [ 718.919333][ T5910] usb 8-1: unable to get BOS descriptor or descriptor too short [ 718.951257][ T5910] usb 8-1: config 127 has an invalid interface number: 158 but max is 0 [ 718.982735][ T5910] usb 8-1: config 127 has no interface number 0 [ 719.042343][ T5910] usb 8-1: config 127 interface 158 has no altsetting 0 [ 719.063472][ T5910] usb 8-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=36.f5 [ 719.078420][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.096654][ T5910] usb 8-1: Product: syz [ 719.104595][ T5910] usb 8-1: Manufacturer: syz [ 719.109625][ T5910] usb 8-1: SerialNumber: syz [ 719.593740][T14156] usb 3-1: 0:2 : does not exist [ 719.718766][T14156] usb 3-1: USB disconnect, device number 107 [ 720.178306][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.845308][ T5953] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 721.025746][ T5953] usb 6-1: device descriptor read/64, error -71 [ 721.167060][ T5910] comedi comedi5: could not switch to alternate setting 1 [ 721.195316][ T5910] usbduxfast 8-1:127.158: driver 'usbduxfast' failed to auto-configure device. [ 721.265367][ T5953] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 721.285878][ T5910] usb 8-1: USB disconnect, device number 8 [ 721.386792][T14914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.431364][ T5953] usb 6-1: device descriptor read/64, error -71 [ 721.483007][T14914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.612578][ T5953] usb usb6-port1: attempt power cycle [ 721.665706][ T5887] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 721.826384][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 721.838436][ T5887] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 721.858837][T14921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2255'. [ 721.870047][ T5887] usb 2-1: config 0 has no interface number 0 [ 721.890003][ T5887] usb 2-1: config 0 interface 102 altsetting 14 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 721.943641][ T5887] usb 2-1: config 0 interface 102 altsetting 14 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 721.956076][ T5953] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 721.989240][ T5953] usb 6-1: device descriptor read/8, error -71 [ 721.996041][ T5887] usb 2-1: config 0 interface 102 altsetting 14 has a duplicate endpoint with address 0xA, skipping [ 722.045741][ T5887] usb 2-1: config 0 interface 102 has no altsetting 0 [ 722.125647][ T5887] usb 2-1: New USB device found, idVendor=04fc, idProduct=5360, bcdDevice=1a.1f [ 722.134758][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.164400][ T5887] usb 2-1: Product: syz [ 722.168902][ T5887] usb 2-1: Manufacturer: Д [ 722.173724][ T5887] usb 2-1: SerialNumber: syz [ 722.248729][ T5887] usb 2-1: config 0 descriptor?? [ 722.295563][ T5953] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 722.346990][ T5953] usb 6-1: device descriptor read/8, error -71 [ 722.459265][T14931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.469353][ T5953] usb usb6-port1: unable to enumerate USB device [ 722.477660][T14931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.507620][T14914] fuse: Bad value for 'fd' [ 722.512939][T14932] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2258'. [ 722.569071][ T5887] gspca_main: sunplus-2.14.0 probing 04fc:5360 [ 722.577226][T14932] QAT: failed to copy from user cfg_data. [ 722.590116][ T5887] gspca_sunplus: reg_r err -71 [ 723.374324][T14940] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 723.397398][T14940] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 723.756550][T14961] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 723.776527][T14961] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 723.812247][T14963] sctp: [Deprecated]: syz.7.2266 (pid 14963) Use of int in max_burst socket option deprecated. [ 723.812247][T14963] Use struct sctp_assoc_value instead [ 723.856486][T14964] sctp: [Deprecated]: syz.7.2266 (pid 14964) Use of int in max_burst socket option deprecated. [ 723.856486][T14964] Use struct sctp_assoc_value instead [ 723.978775][ T5887] sunplus 2-1:0.102: probe with driver sunplus failed with error -71 [ 724.020483][ T5887] usb 2-1: USB disconnect, device number 7 [ 724.256145][T14156] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 724.275398][ T5928] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 724.295320][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 724.417519][T14156] usb 6-1: Using ep0 maxpacket: 16 [ 724.434151][T14156] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 724.450901][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.463084][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 724.472771][T14156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.481141][ T10] usb 3-1: config 0 has no interface number 0 [ 724.487729][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.497696][T14156] usb 6-1: Product: syz [ 724.501913][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.513279][T14156] usb 6-1: Manufacturer: syz [ 724.518146][ T5928] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 724.527401][T14156] usb 6-1: SerialNumber: syz [ 724.532034][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.547623][T14156] usb 6-1: config 0 descriptor?? [ 724.554768][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.577857][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 724.591733][ T5928] usb 7-1: config 0 descriptor?? [ 724.597238][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.651164][ T10] usb 3-1: config 0 descriptor?? [ 724.995463][T14156] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 725.060311][T14156] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 725.117321][T14156] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 725.140109][T14156] usb 6-1: media controller created [ 725.172676][ T5928] usbhid 7-1:0.0: can't add hid device: -71 [ 725.206707][ T10] prodikeys 0003:041E:2801.0020: item fetching failed at offset 3/7 [ 725.233721][ T10] prodikeys 0003:041E:2801.0020: hid parse failed [ 725.240471][ T5928] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 725.251640][T14156] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 725.260817][ T10] prodikeys 0003:041E:2801.0020: probe with driver prodikeys failed with error -22 [ 725.277675][ T5928] usb 7-1: USB disconnect, device number 29 [ 725.343789][T14156] zl10353_read_register: readreg error (reg=127, ret==0) [ 725.351282][T14156] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 725.367888][T14156] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 725.430764][T14973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.431289][T14973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.456418][T14973] fuse: Unknown parameter '0x000000000000000601777777777777777777777' [ 725.464406][T14156] usb 3-1: USB disconnect, device number 108 [ 726.030684][T15023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 726.285470][ T797] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 726.467836][ T797] usb 3-1: config 4 has an invalid interface number: 28 but max is 0 [ 726.483860][ T797] usb 3-1: config 4 has no interface number 0 [ 726.503878][ T797] usb 3-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 726.523762][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.542877][ T797] usb 3-1: Product: syz [ 726.551855][ T797] usb 3-1: Manufacturer: syz [ 726.562495][ T797] usb 3-1: SerialNumber: syz [ 726.604781][ T797] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.28/input/input58 [ 726.802859][ T5181] bcm5974 3-1:4.28: could not read from device [ 726.862973][ T797] bcm5974 3-1:4.28: could not read from device [ 726.896930][ T5181] bcm5974 3-1:4.28: could not read from device [ 726.927419][ T797] input: failed to attach handler mousedev to device input58, error: -5 [ 726.951047][ T5181] bcm5974 3-1:4.28: could not read from device [ 726.960766][ T797] usb 3-1: USB disconnect, device number 109 [ 726.969312][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'. [ 727.153005][T14156] usb 6-1: USB disconnect, device number 99 [ 727.751435][T14156] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 728.154432][T14156] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 728.285483][ T5928] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 728.367792][T14156] usb 6-1: unable to get BOS descriptor or descriptor too short [ 728.435067][T14156] usb 6-1: config 66 has an invalid interface number: 152 but max is 0 [ 728.495690][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 728.599046][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.624008][T14156] usb 6-1: config 66 has no interface number 0 [ 728.646997][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.657467][T14156] usb 6-1: config 66 interface 152 altsetting 16 endpoint 0x7 has an invalid bInterval 127, changing to 10 [ 728.694320][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 728.713826][T14156] usb 6-1: config 66 interface 152 has no altsetting 0 [ 728.732520][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.754822][T14156] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1057, bcdDevice=c1.fa [ 728.779800][T14156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.790930][ T5928] usb 2-1: config 0 descriptor?? [ 728.816417][ T5928] hub 2-1:0.0: USB hub found [ 728.829627][T14156] usb 6-1: Product: syz [ 728.844162][T14156] usb 6-1: Manufacturer: syz [ 728.865394][T14156] usb 6-1: SerialNumber: syz [ 728.887511][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2287'. [ 729.038494][ T5928] hub 2-1:0.0: 1 port detected [ 729.533477][T14156] option 6-1:66.152: GSM modem (1-port) converter detected [ 729.638865][T14156] usb 6-1: USB disconnect, device number 100 [ 729.820948][T14156] option 6-1:66.152: device disconnected [ 730.398441][ T5928] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 730.785836][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2293'. [ 731.275862][ T5953] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 731.437496][ T5953] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 731.459971][ T5887] usb 2-1: USB disconnect, device number 8 [ 731.489820][ T5953] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 731.525520][ T5953] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 731.545439][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 731.567968][ T5953] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 731.577376][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 731.586387][ T5953] usb 6-1: Product: syz [ 731.600823][ T5953] usb 6-1: Manufacturer: syz [ 731.605576][ T5953] usb 6-1: SerialNumber: syz [ 731.616747][T13632] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 731.634943][ T5953] usb 6-1: config 0 descriptor?? [ 731.647732][T15087] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 731.690404][ T5953] usb 6-1: selecting invalid altsetting 0 [ 731.825534][T13632] usb 8-1: Using ep0 maxpacket: 32 [ 731.833498][T13632] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.858761][T15087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.889144][T13632] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.896015][T15087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.911274][T13632] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 731.932935][T13632] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 731.950465][T13632] usb 8-1: Product: syz [ 731.983006][T13632] usb 8-1: Manufacturer: syz [ 732.070355][ T5953] usb 6-1: USB disconnect, device number 101 [ 732.098869][T13632] hub 8-1:4.0: USB hub found [ 732.289687][T13632] hub 8-1:4.0: 2 ports detected [ 732.351703][T13632] hub 8-1:4.0: hub_hub_status failed (err = -71) [ 732.374614][T13632] hub 8-1:4.0: config failed, can't get hub status (err -71) [ 732.448900][T13632] usb 8-1: USB disconnect, device number 9 [ 732.821833][ T30] audit: type=1326 audit(1769924384.097:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15088 comm="syz.2.2295" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e13f9aeb9 code=0x0 [ 733.201988][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2304'. [ 734.429807][T15142] loop2: detected capacity change from 0 to 7 [ 734.446834][T15142] Dev loop2: unable to read RDB block 7 [ 734.452504][T15142] loop2: unable to read partition table [ 734.487209][T15142] loop2: partition table beyond EOD, truncated [ 734.525422][T15142] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 734.615299][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 734.787054][ T10] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 734.801149][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.832194][ T10] usb 8-1: config 0 has no interface number 0 [ 734.839617][ T10] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 734.855522][ T10] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.882930][ T10] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 734.900525][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.921239][ T10] usb 8-1: Product: syz [ 734.926593][ T10] usb 8-1: Manufacturer: syz [ 734.931381][ T10] usb 8-1: SerialNumber: syz [ 734.941329][ T10] usb 8-1: config 0 descriptor?? [ 734.999392][T15152] FAULT_INJECTION: forcing a failure. [ 734.999392][T15152] name failslab, interval 1, probability 0, space 0, times 0 [ 735.051949][T15152] CPU: 1 UID: 0 PID: 15152 Comm: syz.5.2312 Tainted: G L syzkaller #0 PREEMPT(full) [ 735.051983][T15152] Tainted: [L]=SOFTLOCKUP [ 735.051991][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 735.052004][T15152] Call Trace: [ 735.052013][T15152] [ 735.052023][T15152] dump_stack_lvl+0xe8/0x150 [ 735.052056][T15152] should_fail_ex+0x412/0x560 [ 735.052088][T15152] should_failslab+0xa8/0x100 [ 735.052116][T15152] __kmalloc_node_track_caller_noprof+0xe1/0x7f0 [ 735.052140][T15152] ? ethnl_default_set_doit+0x595/0xad0 [ 735.052175][T15152] ? trace_kmalloc+0x1f/0xb0 [ 735.052192][T15152] ? __kmalloc_noprof+0x42d/0x7e0 [ 735.052216][T15152] kmemdup_noprof+0x2b/0x70 [ 735.052244][T15152] ethnl_default_set_doit+0x595/0xad0 [ 735.052272][T15152] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 735.052311][T15152] genl_family_rcv_msg_doit+0x22a/0x330 [ 735.052341][T15152] ? __asan_memcpy+0x40/0x70 [ 735.052374][T15152] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 735.052416][T15152] ? bpf_lsm_capable+0x9/0x20 [ 735.052445][T15152] ? security_capable+0x7e/0x2c0 [ 735.052478][T15152] genl_rcv_msg+0x61c/0x7a0 [ 735.052513][T15152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.052541][T15152] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 735.052573][T15152] ? __pfx_ref_tracker_free+0x10/0x10 [ 735.052599][T15152] ? __skb_clone+0x63/0x7a0 [ 735.052634][T15152] netlink_rcv_skb+0x232/0x4b0 [ 735.052657][T15152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.052686][T15152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 735.052711][T15152] ? genl_rcv+0x19/0x40 [ 735.052757][T15152] ? down_read+0x272/0x2e0 [ 735.052780][T15152] ? genl_rcv+0xd/0x40 [ 735.052808][T15152] genl_rcv+0x28/0x40 [ 735.052832][T15152] netlink_unicast+0x80f/0x9b0 [ 735.052875][T15152] ? __pfx_netlink_unicast+0x10/0x10 [ 735.052906][T15152] ? __alloc_skb+0x193/0x390 [ 735.052931][T15152] ? netlink_sendmsg+0x650/0xb40 [ 735.052952][T15152] ? skb_put+0x11b/0x210 [ 735.052987][T15152] netlink_sendmsg+0x813/0xb40 [ 735.053022][T15152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.053049][T15152] ? aa_sock_msg_perm+0xf1/0x1b0 [ 735.053078][T15152] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.053103][T15152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.053125][T15152] ____sys_sendmsg+0xa68/0xad0 [ 735.053162][T15152] ? __might_fault+0xaf/0x130 [ 735.053200][T15152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.053239][T15152] ? import_iovec+0x73/0xa0 [ 735.053275][T15152] ___sys_sendmsg+0x2a5/0x360 [ 735.053304][T15152] ? __lock_acquire+0x6b5/0x2cf0 [ 735.053339][T15152] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.053406][T15152] ? __fget_files+0x2a/0x420 [ 735.053429][T15152] ? __fget_files+0x3a0/0x420 [ 735.053465][T15152] __x64_sys_sendmsg+0x1bd/0x2a0 [ 735.053498][T15152] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.053538][T15152] ? __pfx_ksys_write+0x10/0x10 [ 735.053582][T15152] do_syscall_64+0xe2/0xf80 [ 735.053605][T15152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.053626][T15152] ? trace_irq_disable+0x37/0x100 [ 735.053646][T15152] ? clear_bhb_loop+0x60/0xb0 [ 735.053673][T15152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.053694][T15152] RIP: 0033:0x7f6ae5b9aeb9 [ 735.053714][T15152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.053733][T15152] RSP: 002b:00007f6ae69e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.053756][T15152] RAX: ffffffffffffffda RBX: 00007f6ae5e15fa0 RCX: 00007f6ae5b9aeb9 [ 735.053773][T15152] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 735.053786][T15152] RBP: 00007f6ae69e0090 R08: 0000000000000000 R09: 0000000000000000 [ 735.053800][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.053813][T15152] R13: 00007f6ae5e16038 R14: 00007f6ae5e15fa0 R15: 00007f6ae5f3fa48 [ 735.053848][T15152] [ 735.666747][T15165] trusted_key: syz.1.2314 sent an empty control message without MSG_MORE. [ 735.714958][T15158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2314'. [ 736.115614][T14156] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 736.265669][T14156] usb 3-1: Using ep0 maxpacket: 32 [ 736.273128][T14156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.284669][T14156] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.303932][T14156] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 736.315464][T14156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.329784][T14156] usb 3-1: config 0 descriptor?? [ 737.052166][T14156] logitech 0003:046D:C29C.0021: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0 [ 737.348140][T14156] logitech 0003:046D:C29C.0021: no inputs found [ 737.387623][ T10] usbtouchscreen 8-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 737.416553][T14156] usb 3-1: USB disconnect, device number 110 [ 737.453043][ T10] usb 8-1: USB disconnect, device number 10 [ 737.585598][T13632] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 737.749945][T13632] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 737.758445][T13632] usb 7-1: config 0 has no interface number 0 [ 737.767416][T13632] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 737.785386][T13632] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.795302][T13632] usb 7-1: Product: syz [ 737.799617][T13632] usb 7-1: Manufacturer: syz [ 737.805478][T13632] usb 7-1: SerialNumber: syz [ 737.816135][T13632] usb 7-1: config 0 descriptor?? [ 737.824707][T15192] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 737.875321][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 738.058617][T15199] FAULT_INJECTION: forcing a failure. [ 738.058617][T15199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.073206][T15192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.084049][T15192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.093488][T15199] CPU: 1 UID: 0 PID: 15199 Comm: syz.1.2327 Tainted: G L syzkaller #0 PREEMPT(full) [ 738.093524][T15199] Tainted: [L]=SOFTLOCKUP [ 738.093532][T15199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 738.093545][T15199] Call Trace: [ 738.093554][T15199] [ 738.093564][T15199] dump_stack_lvl+0xe8/0x150 [ 738.093601][T15199] should_fail_ex+0x412/0x560 [ 738.093635][T15199] _copy_to_user+0x31/0xb0 [ 738.093670][T15199] simple_read_from_buffer+0xe1/0x170 [ 738.093699][T15199] proc_fail_nth_read+0x1bb/0x230 [ 738.093734][T15199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 738.093768][T15199] ? rw_verify_area+0x2a6/0x4d0 [ 738.093798][T15199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 738.093827][T15199] vfs_read+0x20c/0xa70 [ 738.093856][T15199] ? fdget_pos+0x246/0x320 [ 738.093884][T15199] ? __pfx___mutex_lock+0x10/0x10 [ 738.093918][T15199] ? __pfx_vfs_read+0x10/0x10 [ 738.093949][T15199] ? __fget_files+0x2a/0x420 [ 738.093977][T15199] ? __fget_files+0x3a0/0x420 [ 738.093998][T15199] ? __fget_files+0x2a/0x420 [ 738.094031][T15199] ksys_read+0x150/0x270 [ 738.094065][T15199] ? __pfx_ksys_read+0x10/0x10 [ 738.094108][T15199] do_syscall_64+0xe2/0xf80 [ 738.094129][T15199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.094150][T15199] ? trace_irq_disable+0x37/0x100 [ 738.094169][T15199] ? clear_bhb_loop+0x60/0xb0 [ 738.094193][T15199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.094214][T15199] RIP: 0033:0x7fb91f95b78e [ 738.094234][T15199] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 738.094252][T15199] RSP: 002b:00007fb920922fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 738.094275][T15199] RAX: ffffffffffffffda RBX: 00007fb9209236c0 RCX: 00007fb91f95b78e [ 738.094291][T15199] RDX: 000000000000000f RSI: 00007fb9209230a0 RDI: 0000000000000004 [ 738.094304][T15199] RBP: 00007fb920923090 R08: 0000000000000000 R09: 0000000000000000 [ 738.094316][T15199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.094329][T15199] R13: 00007fb91fc16038 R14: 00007fb91fc15fa0 R15: 00007fb91fd3fa48 [ 738.094362][T15199] [ 738.369132][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.381838][T15192] netlink: 'syz.6.2323': attribute type 10 has an invalid length. [ 738.414267][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 738.452824][T15192] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 738.499440][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.546748][T13632] asix 7-1:0.251: probe with driver asix failed with error -71 [ 738.556247][ T10] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 738.567114][T13632] usb 7-1: USB disconnect, device number 30 [ 738.574917][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.615387][ T10] usb 8-1: config 0 descriptor?? [ 738.788191][T15213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2328'. [ 738.942659][ T6385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.969567][ T6385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.006231][T15220] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 740.007695][ T10] ath6kl: Failed to submit usb control message: -110 [ 740.020338][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 740.035248][ T10] ath6kl: Unable to send get target info: -110 [ 740.153692][ T10] ath6kl: Failed to init ath6kl core: -110 [ 740.201516][ T10] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 740.683219][ T5928] usb 8-1: USB disconnect, device number 11 [ 740.885608][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 741.070730][ T10] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 741.115665][ T10] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 741.167010][ T10] usb 7-1: config 220 interface 0 has no altsetting 0 [ 741.208117][ T10] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 741.395362][ T5953] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 741.429621][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.481011][ T10] usb 7-1: Product: syz [ 741.486143][ T10] usb 7-1: Manufacturer: syz [ 741.492572][ T10] usb 7-1: SerialNumber: syz [ 741.555263][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 741.573629][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 741.606016][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 741.652078][ T5953] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 741.673887][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.693132][ T5953] usb 2-1: Product: syz [ 741.707767][ T5953] usb 2-1: Manufacturer: syz [ 741.774161][ T5953] usb 2-1: SerialNumber: syz [ 741.844514][ T5953] usb 2-1: config 0 descriptor?? [ 742.155793][ T5953] rc_core: IR keymap rc-streamzap not found [ 742.216909][ T5953] Registered IR keymap rc-empty [ 742.256294][ T5953] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 742.325412][ T5953] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input60 [ 742.466866][ T5953] usb 2-1: USB disconnect, device number 9 [ 742.734938][T15211] syz.2.2328 (15211): drop_caches: 2 [ 743.050082][ T10] usb 7-1: USB disconnect, device number 31 [ 743.216675][T15262] SET target dimension over the limit! [ 743.491299][ T30] audit: type=1326 audit(1769924394.777:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 743.592917][ T30] audit: type=1326 audit(1769924394.777:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 743.661995][ T30] audit: type=1326 audit(1769924394.777:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 743.769431][ T30] audit: type=1326 audit(1769924394.777:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 744.199887][T15281] binder: BINDER_SET_CONTEXT_MGR already set [ 744.206371][T15281] binder: 15271:15281 ioctl 4018620d 200000000040 returned -16 [ 744.215009][T15281] binder: 15271:15281 ioctl c0306201 2000000001c0 returned -22 [ 744.265682][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 744.373558][T15287] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2346'. [ 745.006992][T13632] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 745.187542][T13632] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 745.223262][T13632] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.264008][T13632] usb 7-1: config 0 interface 0 has no altsetting 0 [ 745.273953][T13632] usb 7-1: New USB device found, idVendor=17ef, idProduct=62ee, bcdDevice= 0.00 [ 745.315216][T13632] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.344353][T13632] usb 7-1: config 0 descriptor?? [ 745.718480][ T5953] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 745.823131][T13632] hid-generic 0003:17EF:62EE.0022: unknown main item tag 0x0 [ 745.853959][T13632] hid-generic 0003:17EF:62EE.0022: unknown main item tag 0x0 [ 745.875264][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 745.896185][ T5953] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 745.917463][T13632] hid-generic 0003:17EF:62EE.0022: unknown main item tag 0x0 [ 745.935128][ T5953] usb 3-1: config 0 has no interface number 0 [ 745.953366][T13632] hid-generic 0003:17EF:62EE.0022: unknown main item tag 0x0 [ 745.974308][ T5953] usb 3-1: config 0 interface 184 has no altsetting 0 [ 745.992070][T13632] hid-generic 0003:17EF:62EE.0022: unknown main item tag 0x0 [ 746.007328][ T5953] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 746.033223][T13632] hid-generic 0003:17EF:62EE.0022: hidraw0: USB HID v0.01 Device [HID 17ef:62ee] on usb-dummy_hcd.6-1/input0 [ 746.056363][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.084868][ T5953] usb 3-1: Product: syz [ 746.094298][ T5953] usb 3-1: Manufacturer: syz [ 746.104367][ T5953] usb 3-1: SerialNumber: syz [ 746.156321][ T5953] usb 3-1: config 0 descriptor?? [ 746.185127][ T5953] smsc75xx v1.0.0 [ 746.886012][T15291] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2349'. [ 746.925489][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 746.936833][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 747.429677][ T5928] usb 7-1: USB disconnect, device number 32 [ 747.618448][T15311] IPVS: length: 4096 != 8 [ 747.765544][ T10] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 747.875290][ T5928] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 747.916803][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 747.928126][ T10] usb 6-1: config 9 has an invalid interface number: 156 but max is 3 [ 747.957316][ T10] usb 6-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 747.979398][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 747.998819][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 748.005707][ T10] usb 6-1: config 9 has an invalid interface number: 224 but max is 3 [ 748.025830][ T5953] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 748.034949][ T10] usb 6-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 748.046144][ T5953] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 748.050801][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 748.072727][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 748.084771][ T10] usb 6-1: config 9 has 2 interfaces, different from the descriptor's value: 4 [ 748.095036][ T10] usb 6-1: config 9 has no interface number 0 [ 748.103501][ T5928] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 748.113009][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.122793][ T10] usb 6-1: config 9 has no interface number 1 [ 748.129456][ T5928] usb 2-1: Product: syz [ 748.133809][ T10] usb 6-1: config 9 interface 156 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 748.145428][ T5928] usb 2-1: Manufacturer: syz [ 748.147169][ T5953] usb 3-1: USB disconnect, device number 111 [ 748.150195][ T5928] usb 2-1: SerialNumber: syz [ 748.153735][ T10] usb 6-1: config 9 interface 156 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 748.202655][ T5928] usb 2-1: config 0 descriptor?? [ 748.220668][ T5928] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 748.241235][ T10] usb 6-1: config 9 interface 156 altsetting 1 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 748.274896][ T10] usb 6-1: config 9 interface 156 altsetting 1 endpoint 0x6 has an invalid bInterval 65, changing to 10 [ 748.289924][ T10] usb 6-1: config 9 interface 156 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 64 [ 748.300486][ T10] usb 6-1: config 9 interface 156 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 748.312460][ T10] usb 6-1: config 9 interface 156 altsetting 1 bulk endpoint 0x7 has invalid maxpacket 1024 [ 748.323873][ T10] usb 6-1: config 9 interface 156 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 748.335362][ T10] usb 6-1: config 9 interface 156 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 748.346995][ T10] usb 6-1: config 9 interface 156 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 748.358217][ T10] usb 6-1: config 9 interface 156 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 748.369517][ T10] usb 6-1: config 9 interface 224 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 748.380803][ T10] usb 6-1: config 9 interface 224 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 748.394514][ T10] usb 6-1: config 9 interface 156 has no altsetting 0 [ 748.401791][ T10] usb 6-1: config 9 interface 224 has no altsetting 0 [ 748.413339][ T10] usb 6-1: New USB device found, idVendor=1608, idProduct=001a, bcdDevice=86.a6 [ 748.424847][T15311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.437833][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.447236][T15311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.478085][ T5928] usb 2-1: USB disconnect, device number 10 [ 748.484118][ T10] usb 6-1: Product: М [ 748.489240][ T10] usb 6-1: Manufacturer: ᙢè…侴둴뺻踴⤱垷⷗ꬵ毬⠆柭댦ㆠ曇å‡ï§”ꞿ⌗固쑻茔㼞郣Ȁ⢌ç«á‡“ꇣ⹳㵻倹퉸ﶨ橬䑰ಂ媲︞丳㆙븫㱥쀲 [ 748.512545][ T10] usb 6-1: SerialNumber: ç’–á´ï³€çš²ï–ƒëµ±å»ƒî”˜ê©…꼉銱輯谴磓å—౧༾᎟ऀ淑㟰䩋〆억倥꿱â­ê£„䟥氩疱ﲠ襈셪쳸籾㫢ç‹êŠî›¥ã¯ƒæ„¨â•¥ï™‡ï›¶ì£¸á¬—࿂穨陧⯋䗚䑶솄륂늞↤꽥㞒å§îª­à¶­ï¾é˜‰åƒ§ä‰«äª±å™œâºîª¬â–¸í‰ž [ 748.545802][T13632] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 748.571373][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.613923][T15307] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 748.623620][T15307] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 748.635073][T15307] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 748.745613][T13632] usb 7-1: Using ep0 maxpacket: 8 [ 748.759866][T13632] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 748.773039][T13632] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 748.785359][T13632] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 748.796947][T13632] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.810603][T13632] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 748.820334][T13632] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.038570][T13632] usb 7-1: GET_CAPABILITIES returned 0 [ 749.055998][T13632] usbtmc 7-1:16.0: can't read capabilities [ 749.069862][ T10] io_edgeport 6-1:9.156: required endpoints missing [ 749.127045][T13632] usb 7-1: USB disconnect, device number 33 [ 749.172361][ T10] io_edgeport 6-1:9.224: required endpoints missing [ 749.215443][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2361'. [ 749.224912][ T10] usb 6-1: USB disconnect, device number 102 [ 749.398720][T15334] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2360'. [ 749.769974][T15339] futex_wake_op: syz.2.2363 tries to shift op by -1; fix this program [ 750.022660][ T30] audit: type=1326 audit(1769924401.277:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.5.2364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ae5b9aeb9 code=0x0 [ 751.125258][ T5953] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 751.322453][T15363] input: syz0 as /devices/virtual/input/input61 [ 751.363126][ T5953] usb 7-1: Using ep0 maxpacket: 32 [ 751.483017][ T5953] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 751.542323][ T5953] usb 7-1: config 0 has no interface number 0 [ 751.732057][ T5953] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 751.777241][ T5953] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.825838][ T5953] usb 7-1: Product: syz [ 751.830084][ T5953] usb 7-1: Manufacturer: syz [ 751.865330][ T5953] usb 7-1: SerialNumber: syz [ 751.893034][ T5953] usb 7-1: config 0 descriptor?? [ 751.925679][ T5953] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 752.139132][ T5953] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 752.206263][ T5953] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 752.433272][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.439787][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.570964][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2372'. [ 752.658710][T15376] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2371'. [ 753.694282][T15386] ip6tnl2: entered allmulticast mode [ 753.743609][ T6389] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 753.804371][ T6389] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 753.812677][ T5928] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 753.926935][ T5928] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 754.164469][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 754.172543][ T5953] usb 7-1: USB disconnect, device number 34 [ 754.176307][ T5928] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 754.211676][ T5953] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 754.299682][ T5953] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 754.362907][ T5953] quatech2 7-1:0.51: device disconnected [ 754.488671][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2381'. [ 754.497700][T15404] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2381'. [ 754.792085][T15410] netlink: 192 bytes leftover after parsing attributes in process `syz.5.2380'. [ 755.284998][ T30] audit: type=1326 audit(1769924406.567:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.7.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc259aeb9 code=0x7ffc0000 [ 755.326356][T15417] loop2: detected capacity change from 0 to 7 [ 755.337117][ T5831] loop2: [ 755.340138][ T5831] loop2: partition table partially beyond EOD, truncated [ 755.368852][T15417] loop2: [ 755.382934][T15417] loop2: partition table partially beyond EOD, truncated [ 755.517893][ T30] audit: type=1326 audit(1769924406.567:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.7.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc259aeb9 code=0x7ffc0000 [ 755.748542][ T30] audit: type=1326 audit(1769924406.597:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.7.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fddc259aeb9 code=0x7ffc0000 [ 755.822616][ T30] audit: type=1326 audit(1769924406.597:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.7.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc259aeb9 code=0x7ffc0000 [ 755.853341][T15430] binder: BINDER_SET_CONTEXT_MGR already set [ 755.871182][T15430] binder: 15428:15430 ioctl 4018620d 200000004a80 returned -16 [ 755.886445][ T30] audit: type=1326 audit(1769924406.597:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.7.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc259aeb9 code=0x7ffc0000 [ 755.912806][ T30] audit: type=1326 audit(1769924406.597:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.7.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fddc259aeb9 code=0x7ffc0000 [ 756.001501][T15432] binder: 15428:15432 ioctl c0306201 200000000280 returned -14 [ 756.037559][ T30] audit: type=1326 audit(1769924406.607:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.7.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc259aeb9 code=0x7ffc0000 [ 756.103281][ T30] audit: type=1326 audit(1769924406.607:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.7.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fddc255b78e code=0x7ffc0000 [ 756.413905][ T30] audit: type=1326 audit(1769924406.607:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.7.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc259aeb9 code=0x7ffc0000 [ 756.500203][ T30] audit: type=1326 audit(1769924406.607:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.7.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc259aeb9 code=0x7ffc0000 [ 756.779395][T15452] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 757.246360][T14156] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 757.445392][T14156] usb 8-1: Using ep0 maxpacket: 8 [ 757.795612][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 757.935110][T14156] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 757.944334][T14156] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.958863][T14156] usb 8-1: Product: syz [ 757.963093][T14156] usb 8-1: Manufacturer: syz [ 757.983099][T14156] usb 8-1: SerialNumber: syz [ 758.009706][T15464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2398'. [ 758.097417][T14156] usb 8-1: config 0 descriptor?? [ 758.360557][T14156] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 758.595344][ T5928] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 758.715281][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 758.757350][ T5928] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 758.771111][ T5928] usb 7-1: config 0 has no interface number 0 [ 758.789231][ T5928] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.827757][ T5928] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 758.857914][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.875476][ T5928] usb 7-1: Product: syz [ 758.885623][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 758.892304][ T5928] usb 7-1: Manufacturer: syz [ 758.905671][ T10] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 758.921663][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 758.932454][ T5928] usb 7-1: SerialNumber: syz [ 758.942804][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.964278][ T5928] usb 7-1: config 0 descriptor?? [ 758.987931][ T9] usb 2-1: config 0 has no interface number 0 [ 758.994742][ T5928] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 759.017819][ T9] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.066011][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 759.085797][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 759.107803][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 759.122527][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.142414][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 759.154108][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 759.166155][ T9] usb 2-1: config 0 descriptor?? [ 759.209663][ T9] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 759.217204][ T10] usb 6-1: Product: syz [ 759.221413][ T10] usb 6-1: Manufacturer: syz [ 759.238786][ T10] usb 6-1: SerialNumber: syz [ 759.261043][ T10] usb 6-1: config 0 descriptor?? [ 759.267463][T15474] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 759.276953][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 759.343805][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 759.984269][T15479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.007884][T15479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.019009][T15474] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2403'. [ 760.572575][T14156] usb write operation failed. (-71) [ 760.604515][T14156] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 760.645009][T14156] dvbdev: DVB: registering new adapter (Terratec H7) [ 760.746003][T14156] usb 8-1: media controller created [ 760.772386][T14156] usb read operation failed. (-71) [ 760.780044][T14156] usb write operation failed. (-71) [ 760.850540][T14156] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 760.968569][T14156] usb 8-1: USB disconnect, device number 12 [ 761.007512][T15495] netlink: 192 bytes leftover after parsing attributes in process `syz.7.2406'. [ 761.121764][T15496] netlink: 'syz.2.2407': attribute type 12 has an invalid length. [ 761.686478][T14156] usb 7-1: USB disconnect, device number 35 [ 761.992090][T14156] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 762.289883][ T5887] usb 6-1: USB disconnect, device number 103 [ 762.451496][ T5887] usb 2-1: USB disconnect, device number 11 [ 762.605322][ T5953] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 762.785838][ T5953] usb 7-1: Using ep0 maxpacket: 8 [ 762.803198][ T5953] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 762.826186][ T5953] usb 7-1: config 0 has no interface number 0 [ 762.849901][ T5953] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 762.895013][ T5953] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 762.910828][T15514] netlink: 1224 bytes leftover after parsing attributes in process `syz.2.2413'. [ 762.949957][ T5953] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 762.974004][ T5953] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 763.016227][ T5953] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 763.048825][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.084658][ T5953] usb 7-1: config 0 descriptor?? [ 763.127663][ T5953] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 763.340109][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 763.364500][ T10] usb 7-1: USB disconnect, device number 36 [ 763.412132][ T10] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 763.736455][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 763.791892][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 763.875250][ T5928] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 763.966928][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 763.980589][ T10] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 763.991650][ T10] usb 7-1: config 0 has no interface number 0 [ 763.998743][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 764.010402][ T10] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 764.039380][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 764.055939][ T10] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 764.086993][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 764.283057][ T5928] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 764.300965][ T5928] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 764.320026][ T10] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 764.340604][ T5928] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 764.350354][ T10] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 764.372432][ T5928] usb 2-1: config 128 has no interface number 0 [ 764.389974][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.398620][ T5928] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 764.413516][ T10] usb 7-1: config 0 descriptor?? [ 764.419525][ T5928] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 764.435630][ T5928] usb 2-1: config 128 interface 127 has no altsetting 0 [ 764.451445][ T10] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 764.466495][ T5928] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 764.477916][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.504702][ T5928] usb 2-1: Product: syz [ 764.512512][ T5928] usb 2-1: Manufacturer: syz [ 764.521917][ T5928] usb 2-1: SerialNumber: syz [ 764.930503][T15524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.940697][T15524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.041969][T15547] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 765.250499][ T5928] usb 2-1: USB disconnect, device number 12 [ 765.434742][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 765.841276][T15556] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2424'. [ 765.865389][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 766.293948][T15571] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2426'. [ 766.318324][T14156] usb 7-1: USB disconnect, device number 37 [ 766.341398][T14156] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 767.286362][T15590] usb usb8: usbfs: process 15590 (syz.7.2432) did not claim interface 0 before use [ 768.505497][ T5928] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 768.698208][ T5928] usb 7-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 768.708601][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.728889][ T5928] usb 7-1: Product: syz [ 768.733090][ T5928] usb 7-1: Manufacturer: syz [ 768.745654][ T5928] usb 7-1: SerialNumber: syz [ 768.842660][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 768.851905][T15608] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 768.865987][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 768.866005][ T30] audit: type=1804 audit(1769924420.117:1056): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2436" name="bus" dev="ramfs" ino=68273 res=1 errno=0 [ 769.607909][T15615] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2439'. [ 770.372874][T15627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2441'. [ 770.568092][T15627] bridge_slave_1: left allmulticast mode [ 770.577883][T15627] bridge_slave_1: left promiscuous mode [ 770.583992][T15627] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.796285][T15627] bridge_slave_0: left allmulticast mode [ 770.802317][T15627] bridge_slave_0: left promiscuous mode [ 770.951094][T15627] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.702813][T15609] delete_channel: no stack [ 771.950146][T15626] syzkaller1: entered promiscuous mode [ 771.957683][T15626] syzkaller1: entered allmulticast mode [ 772.046053][ T6385] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 772.104698][T15638] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 2, id = 0 [ 772.119253][ T5928] gspca_main: pac207-2.14.0 probing 093a:2476 [ 772.133891][ T5928] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 772.159605][ T5928] uvcvideo 7-1:13.0: Found UVC 0.00 device syz (093a:2476) [ 772.167072][ T5928] uvcvideo 7-1:13.0: No valid video chain found. [ 772.176433][ T5928] usb 7-1: USB disconnect, device number 38 [ 772.662939][ T1060] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 772.702962][T15664] netlink: 192 bytes leftover after parsing attributes in process `syz.6.2446'. [ 773.357849][ T1060] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 774.027893][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 774.408459][T15671] sctp: [Deprecated]: syz.2.2451 (pid 15671) Use of int in max_burst socket option deprecated. [ 774.408459][T15671] Use struct sctp_assoc_value instead [ 774.586453][ T1060] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 774.910766][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2453'. [ 774.921938][T15683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2453'. [ 775.106207][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 775.235846][ T10] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 775.425306][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 775.432628][ T10] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 775.447770][ T10] usb 7-1: config 0 has no interface number 0 [ 775.496646][ T10] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 775.505818][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.514359][ T10] usb 7-1: Product: syz [ 775.522203][ T10] usb 7-1: Manufacturer: syz [ 775.562317][ T10] usb 7-1: SerialNumber: syz [ 775.594897][ T10] usb 7-1: config 0 descriptor?? [ 775.602591][T15691] usb usb8: usbfs: process 15691 (syz.2.2455) did not claim interface 0 before use [ 775.635300][ T6385] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 775.680807][ T5953] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 775.710098][ T10] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 775.851971][ T5953] usb 6-1: config 0 has an invalid interface number: 129 but max is 0 [ 775.885542][ T5953] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 775.903032][ T5953] usb 6-1: config 0 has no interface number 1 [ 775.914283][T15680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.935735][ T5953] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 775.957867][T15680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.985295][ T5953] usb 6-1: config 0 interface 129 has no altsetting 0 [ 776.008893][ T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 776.016406][ T5953] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 776.082043][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.128592][ T5953] usb 6-1: config 0 descriptor?? [ 776.129715][ T10] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 776.176855][ T5953] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 776.195365][ T2950] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 776.210697][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 9 [ 776.458143][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 776.466494][T14156] usb 7-1: USB disconnect, device number 39 [ 776.487443][T14156] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 776.539631][T14156] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 776.576123][T14156] quatech2 7-1:0.51: device disconnected [ 776.816096][ T12] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 777.178827][ T30] audit: type=1326 audit(1769924428.467:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15700 comm="syz.6.2458" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48c939aeb9 code=0x0 [ 777.446231][ T1060] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 777.488135][ T5887] usb 6-1: USB disconnect, device number 104 [ 777.605270][ T5910] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 777.766123][ T5910] usb 7-1: Using ep0 maxpacket: 32 [ 777.779782][ T5910] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 777.825309][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.850063][ T5910] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 777.867159][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.981268][ T5910] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 777.983073][ T6389] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 778.042466][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.159154][ T5910] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 778.233555][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.262340][ T5910] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 778.271948][T15713] hub 9-0:1.0: USB hub found [ 778.285665][T15713] hub 9-0:1.0: 1 port detected [ 778.369003][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.383724][ T5910] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 778.398585][T15720] loop2: detected capacity change from 0 to 7 [ 778.449082][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.459463][ T5910] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 778.478107][ T5831] Dev loop2: unable to read RDB block 7 [ 778.486563][ T5831] loop2: unable to read partition table [ 778.492932][ T5831] loop2: partition table beyond EOD, truncated [ 778.500403][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.512681][T15720] Dev loop2: unable to read RDB block 7 [ 778.521916][ T5910] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 778.532204][T15720] loop2: unable to read partition table [ 778.538533][T15720] loop2: partition table beyond EOD, truncated [ 778.547744][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.559681][T15720] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 778.568828][ T1060] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 778.580995][ T5910] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 778.616754][ T5910] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 778.661539][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.670113][ T5910] usb 7-1: Product: syz [ 778.674327][ T5910] usb 7-1: Manufacturer: syz [ 778.680137][ T5910] usb 7-1: SerialNumber: syz [ 778.727133][ T5910] usb 7-1: config 0 descriptor?? [ 779.096200][ T2950] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 779.118140][ T30] audit: type=1326 audit(1769924430.407:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.1.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91f99aeb9 code=0x7ffc0000 [ 779.233722][ T30] audit: type=1326 audit(1769924430.407:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.1.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91f99aeb9 code=0x7ffc0000 [ 779.265663][ T30] audit: type=1326 audit(1769924430.417:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.1.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb91f99aeb9 code=0x7ffc0000 [ 779.326677][T15724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2465'. [ 779.347097][ T30] audit: type=1326 audit(1769924430.417:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.1.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91f99aeb9 code=0x7ffc0000 [ 779.373720][ T30] audit: type=1326 audit(1769924430.417:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.1.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fb91f99aeb9 code=0x7ffc0000 [ 779.408678][ T30] audit: type=1326 audit(1769924430.417:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.1.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91f99aeb9 code=0x7ffc0000 [ 779.586422][T15731] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2464'. [ 779.607646][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 779.668715][ T6389] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 779.790633][ T10] usb 3-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 779.799878][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.808707][ T10] usb 3-1: Product: syz [ 779.813209][ T10] usb 3-1: Manufacturer: syz [ 779.818359][ T10] usb 3-1: SerialNumber: syz [ 779.826626][ T10] usb 3-1: config 0 descriptor?? [ 779.839235][ T10] f81232 3-1:0.0: f81232 converter detected [ 779.850391][ T10] usb 3-1: f81232 converter now attached to ttyUSB0 [ 780.053535][T15724] netlink: 'syz.2.2465': attribute type 10 has an invalid length. [ 780.062332][T15724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.072572][T15724] batadv0: mtu less than device minimum [ 780.083679][T15724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 780.096094][T15724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 780.107910][T15724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 780.119757][T15724] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 780.172740][T15724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.226844][ T5910] usb 7-1: USB disconnect, device number 40 [ 780.234431][T15724] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 780.264769][ T5887] usb 3-1: USB disconnect, device number 112 [ 780.291742][ T5887] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 780.313858][ T5887] f81232 3-1:0.0: device disconnected [ 780.689026][T15743] netlink: 384 bytes leftover after parsing attributes in process `syz.5.2468'. [ 781.077576][ T5887] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 781.225396][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 781.275333][ T5887] usb 6-1: Using ep0 maxpacket: 16 [ 781.284102][ T5887] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 781.315391][ T5910] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 781.327658][ T5887] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 782.835545][ T13] net_ratelimit: 20 callbacks suppressed [ 782.835567][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 783.176061][ T5953] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 783.394464][ T5953] usb 7-1: device descriptor read/64, error -71 [ 783.457190][ T12] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 783.645383][ T5953] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 783.654964][ T5887] usb 6-1: string descriptor 0 read error: -71 [ 783.675602][ T5887] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 783.703307][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.742722][ T5887] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 783.777058][ T5887] usb 6-1: no configuration chosen from 1 choice [ 783.785792][ T5953] usb 7-1: device descriptor read/64, error -71 [ 783.824225][ T5887] usb 6-1: USB disconnect, device number 105 [ 783.896154][ T5953] usb usb7-port1: attempt power cycle [ 783.909876][T15780] syz_tun: entered allmulticast mode [ 783.938127][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2478'. [ 783.991999][T15780] syz_tun (unregistering): left allmulticast mode [ 784.006487][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 784.238060][ T5953] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 784.285546][ T5953] usb 7-1: device descriptor read/8, error -71 [ 784.525283][ T5953] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 784.548252][ T5953] usb 7-1: device descriptor read/8, error -71 [ 784.612749][ T50] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 784.659130][T15785] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2479'. [ 784.681770][ T5953] usb usb7-port1: unable to enumerate USB device [ 784.845305][ T5928] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 785.028172][ T5928] usb 7-1: device descriptor read/64, error -71 [ 785.217254][ T7192] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 785.300121][ T5928] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 785.435316][ T5928] usb 7-1: device descriptor read/64, error -71 [ 785.555656][ T5928] usb usb7-port1: attempt power cycle [ 785.638993][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 785.663729][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 785.677122][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 785.691214][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 785.700758][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 785.775675][ T7192] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 785.925283][ T5928] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 785.983441][ T5928] usb 7-1: device descriptor read/8, error -71 [ 786.288564][T15802] chnl_net:caif_netlink_parms(): no params data found [ 786.328302][ T12] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 786.549844][T15802] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.571058][T15802] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.607458][T15802] bridge_slave_0: entered allmulticast mode [ 786.634511][T15802] bridge_slave_0: entered promiscuous mode [ 786.671265][T15802] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.703898][T15802] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.715331][ T5928] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 786.729034][T15802] bridge_slave_1: entered allmulticast mode [ 786.764117][T15802] bridge_slave_1: entered promiscuous mode [ 786.784085][ T5928] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.796188][ T5928] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 786.806346][ T5928] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 786.822274][ T5928] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 786.834496][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.843885][ T5928] usb 7-1: Product: syz [ 786.848492][ T5928] usb 7-1: Manufacturer: syz [ 786.853135][ T5928] usb 7-1: SerialNumber: syz [ 786.858367][T15816] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2486'. [ 786.891332][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 786.912301][ T5928] cdc_ncm 7-1:1.0: skipping garbage [ 786.918536][ T5928] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 786.929519][ T5928] cdc_ncm 7-1:1.0: bind() failure [ 787.017877][T15802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.077397][T15802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.096559][T15823] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2488'. [ 787.125698][ T30] audit: type=1326 audit(1769924438.397:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15809 comm="syz.6.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c939aeb9 code=0x7ffc0000 [ 787.131747][T15823] loop8: detected capacity change from 0 to 8 [ 787.180128][ T30] audit: type=1326 audit(1769924438.397:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15809 comm="syz.6.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c939aeb9 code=0x7ffc0000 [ 787.213665][ T5831] Dev loop8: unable to read RDB block 8 [ 787.226798][T15828] FAULT_INJECTION: forcing a failure. [ 787.226798][T15828] name failslab, interval 1, probability 0, space 0, times 0 [ 787.243498][ T5831] loop8: unable to read partition table [ 787.253906][T15828] CPU: 1 UID: 0 PID: 15828 Comm: syz.1.2489 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.253943][T15828] Tainted: [L]=SOFTLOCKUP [ 787.253952][T15828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 787.253964][T15828] Call Trace: [ 787.253973][T15828] [ 787.253982][T15828] dump_stack_lvl+0xe8/0x150 [ 787.254014][T15828] should_fail_ex+0x412/0x560 [ 787.254044][T15828] should_failslab+0xa8/0x100 [ 787.254071][T15828] __kmalloc_cache_noprof+0x83/0x6e0 [ 787.254093][T15828] ? __io_uring_add_tctx_node+0x148/0x4f0 [ 787.254136][T15828] __io_uring_add_tctx_node+0x148/0x4f0 [ 787.254169][T15828] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 787.254199][T15828] ? __fget_files+0x2a/0x420 [ 787.254225][T15828] ? __fget_files+0x2a/0x420 [ 787.254250][T15828] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 787.254285][T15828] __se_sys_io_uring_enter+0x263b/0x2c30 [ 787.254337][T15828] ? ksys_write+0x1e6/0x270 [ 787.254369][T15828] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 787.254400][T15828] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 787.254431][T15828] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 787.254469][T15828] ? __fget_files+0x3a0/0x420 [ 787.254499][T15828] ? fput+0xa0/0xd0 [ 787.254523][T15828] ? ksys_write+0x242/0x270 [ 787.254555][T15828] ? __pfx_ksys_write+0x10/0x10 [ 787.254591][T15828] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 787.254627][T15828] do_syscall_64+0xe2/0xf80 [ 787.254650][T15828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.254671][T15828] ? trace_irq_disable+0x37/0x100 [ 787.254690][T15828] ? clear_bhb_loop+0x60/0xb0 [ 787.254716][T15828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.254736][T15828] RIP: 0033:0x7fb91f99aeb9 [ 787.254756][T15828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.254775][T15828] RSP: 002b:00007fb9208e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 787.254798][T15828] RAX: ffffffffffffffda RBX: 00007fb91fc16090 RCX: 00007fb91f99aeb9 [ 787.254814][T15828] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000005 [ 787.254826][T15828] RBP: 00007fb9208e8090 R08: 0000000000000000 R09: 0000000000000000 [ 787.254839][T15828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.254852][T15828] R13: 00007fb91fc16128 R14: 00007fb91fc16090 R15: 00007fb91fd3fa48 [ 787.254885][T15828] [ 787.300319][T15827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2488'. [ 787.304996][ T5831] loop8: partition table beyond EOD, [ 787.380613][ T30] audit: type=1326 audit(1769924438.397:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15809 comm="syz.6.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48c939aeb9 code=0x7ffc0000 [ 787.403061][ T5831] truncated [ 787.449673][ T6389] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 787.556376][ T30] audit: type=1326 audit(1769924438.397:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15809 comm="syz.6.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c939aeb9 code=0x7ffc0000 [ 787.580546][ T30] audit: type=1326 audit(1769924438.397:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15809 comm="syz.6.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c939aeb9 code=0x7ffc0000 [ 787.604658][ T30] audit: type=1326 audit(1769924438.397:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15809 comm="syz.6.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f48c939aeb9 code=0x7ffc0000 [ 787.637716][T15827] netlink: 'syz.5.2488': attribute type 3 has an invalid length. [ 787.652304][T15827] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2488'. [ 787.668274][T15810] veth0: entered promiscuous mode [ 787.677602][T15823] Dev loop8: unable to read RDB block 8 [ 787.683249][T15823] loop8: unable to read partition table [ 787.706357][ T30] audit: type=1326 audit(1769924438.997:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15809 comm="syz.6.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c939aeb9 code=0x7ffc0000 [ 787.709419][T15823] loop8: partition table beyond EOD, [ 787.733520][T15802] team0: Port device team_slave_0 added [ 787.752971][ T30] audit: type=1326 audit(1769924438.997:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15809 comm="syz.6.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c939aeb9 code=0x7ffc0000 [ 787.778845][T15809] veth0: left promiscuous mode [ 787.791104][T15823] truncated [ 787.794398][ T5835] Bluetooth: hci6: command tx timeout [ 787.807749][T15823] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 787.822025][T15802] team0: Port device team_slave_1 added [ 787.847487][ T5910] usb 7-1: USB disconnect, device number 48 [ 787.945898][ T5953] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 787.968049][T15802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.975316][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.002342][T15837] tipc: Can't bind to reserved service type 0 [ 788.025102][T15802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.038982][T15802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.046052][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.078260][T15802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.108160][ T5953] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 788.130504][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 788.146491][ T797] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 788.159035][ T5953] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 788.175198][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 788.175827][ T12] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 788.195693][ T5953] usb 3-1: SerialNumber: syz [ 788.244654][T15802] hsr_slave_0: entered promiscuous mode [ 788.252635][T15802] hsr_slave_1: entered promiscuous mode [ 788.263855][T15802] debugfs: 'hsr0' already exists in 'hsr' [ 788.274087][T15802] Cannot create hsr debugfs directory [ 788.315241][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 788.335046][ T797] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.359502][ T797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 788.376689][ T797] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 788.411542][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.459404][ T5953] usb 3-1: 0:2 : does not exist [ 788.468491][ T797] usb 2-1: config 0 descriptor?? [ 788.483057][ T5953] usb 3-1: unit 255 not found! [ 788.550832][ T5953] usb 3-1: USB disconnect, device number 114 [ 788.618353][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.709462][T15843] binder: 15840:15843 ioctl c0306201 2000000001c0 returned -22 [ 788.723107][ T6385] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 789.505962][ T6389] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 789.543863][ T797] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 789.585409][ T797] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 789.593195][ T797] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 789.605294][ T797] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 789.612198][ T797] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 789.650202][ T797] arvo 0003:1E7D:30D4.0023: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 789.808000][T15845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.820940][T15845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.873730][ T5837] Bluetooth: hci6: command tx timeout [ 789.888778][T15802] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 789.989474][ T10] usb 2-1: USB disconnect, device number 13 [ 790.029471][T15802] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 790.046200][ T797] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 790.056438][ T50] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 790.086938][T15856] fido_id[15856]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 790.121069][T15802] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 790.148759][T15861] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2497'. [ 790.194064][T15802] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 790.207575][ T797] usb 6-1: device descriptor read/64, error -71 [ 790.345830][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 790.484434][T15866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2498'. [ 790.495952][T15866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 790.503183][T15866] IPv6: NLM_F_CREATE should be set when creating new route [ 790.510478][T15866] IPv6: NLM_F_CREATE should be set when creating new route [ 790.517770][T15866] IPv6: NLM_F_CREATE should be set when creating new route [ 790.535489][ T797] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 790.615840][T15802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.625035][ T50] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 790.695676][ T797] usb 6-1: device descriptor read/64, error -71 [ 790.719370][T15802] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.790806][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.798037][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.821971][ T797] usb usb6-port1: attempt power cycle [ 790.827358][ T5928] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 790.868546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.875796][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.983744][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 791.004285][ T5928] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 791.017572][ T5928] usb 3-1: config 0 has no interface number 0 [ 791.041671][ T5928] usb 3-1: config 0 interface 217 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 791.092411][ T5928] usb 3-1: New USB device found, idVendor=1532, idProduct=d2a2, bcdDevice=f7.ed [ 791.114462][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.164150][ T6385] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 791.225473][ T797] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 791.262194][ T5928] usb 3-1: Product: syz [ 791.263388][ T797] usb 6-1: device descriptor read/8, error -71 [ 791.269661][ T5928] usb 3-1: Manufacturer: syz [ 791.277865][ T5928] usb 3-1: SerialNumber: syz [ 791.407167][ T5928] usb 3-1: config 0 descriptor?? [ 791.480677][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2500'. [ 791.537293][T15880] bridge_slave_1: left allmulticast mode [ 791.585993][T15880] bridge_slave_1: left promiscuous mode [ 791.591939][T15880] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.622743][T15873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2499'. [ 791.657265][T15880] bridge_slave_0: left allmulticast mode [ 791.665289][ T797] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 791.686024][ T797] usb 6-1: device descriptor read/8, error -71 [ 791.757232][T15880] bridge_slave_0: left promiscuous mode [ 791.775419][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 791.799724][ T797] usb usb6-port1: unable to enumerate USB device [ 791.829889][T15880] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.955748][ T5835] Bluetooth: hci6: command tx timeout [ 792.149624][T15802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.269558][ T5928] usb 3-1: USB disconnect, device number 115 [ 792.316066][ T6389] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 792.332456][T15802] veth0_vlan: entered promiscuous mode [ 792.359065][T15802] veth1_vlan: entered promiscuous mode [ 792.447753][T15802] veth0_macvtap: entered promiscuous mode [ 792.465743][T15802] veth1_macvtap: entered promiscuous mode [ 792.512830][T15802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.550603][T15802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.584253][ T6389] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.597982][ T6389] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.616364][ T6389] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.626866][ T6389] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.762507][T15891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 792.852454][ T6389] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 793.143951][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.178296][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.219540][T15899] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2508'. [ 793.287340][ T797] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 793.344227][ T6385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.359114][ T6385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.408328][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 793.486336][ T797] usb 6-1: Using ep0 maxpacket: 16 [ 793.533212][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.591939][ T797] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 793.615707][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.647000][ T797] usb 6-1: config 0 descriptor?? [ 793.815378][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 793.946166][ T7192] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 793.965333][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 793.981567][ T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 793.991697][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.011585][ T9] usb 3-1: Product: syz [ 794.022816][ T9] usb 3-1: Manufacturer: syz [ 794.034815][ T9] usb 3-1: SerialNumber: syz [ 794.036922][ T5835] Bluetooth: hci6: command tx timeout [ 794.063130][ T9] usb 3-1: config 0 descriptor?? [ 794.084891][ T9] usb 3-1: no audio or video endpoints found [ 794.119486][T15906] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 794.132897][ T797] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 794.306494][T15897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.322860][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 794.339733][T15901] batadv0: entered promiscuous mode [ 794.347175][T15897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.355785][T15901] macvtap1: entered promiscuous mode [ 794.363660][T15901] macvtap1: entered allmulticast mode [ 794.394857][T15901] batadv0: entered allmulticast mode [ 794.422366][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 794.458561][T15901] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 794.472927][ T30] audit: type=1326 audit(1769924445.757:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 794.515594][ T30] audit: type=1326 audit(1769924445.757:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 794.541249][ T6389] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 794.546451][ T30] audit: type=1326 audit(1769924445.757:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 794.606269][ T9] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 3a:40:b2:bb:f7:18 [ 794.628195][ T30] audit: type=1326 audit(1769924445.757:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 794.631901][ T797] usb 3-1: USB disconnect, device number 116 [ 794.667920][ T30] audit: type=1326 audit(1769924445.757:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 794.698226][ T30] audit: type=1326 audit(1769924445.757:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ae5b9c747 code=0x7ffc0000 [ 794.749834][ T30] audit: type=1326 audit(1769924445.757:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 794.779696][ T30] audit: type=1326 audit(1769924445.757:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 794.849614][ T30] audit: type=1326 audit(1769924445.757:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 794.874025][ T30] audit: type=1326 audit(1769924445.757:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15896 comm="syz.5.2507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f6ae5b9aeb9 code=0x7ffc0000 [ 795.048508][T15919] loop2: detected capacity change from 0 to 7 [ 795.058762][T15919] Dev loop2: unable to read RDB block 7 [ 795.064435][T15919] loop2: unable to read partition table [ 795.071293][T15919] loop2: partition table beyond EOD, truncated [ 795.077684][T15919] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 795.095347][ T6385] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 795.728851][ T6385] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 795.753316][T15929] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2518'. [ 795.980153][T15931] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2519'. [ 796.148370][ T5928] usb 6-1: USB disconnect, device number 110 [ 796.255609][ T2950] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 796.285470][T15938] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 796.292056][T15938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 796.312117][T15938] vhci_hcd vhci_hcd.0: Device attached [ 796.339351][T15942] vhci_hcd vhci_hcd.0: port 0 already used [ 796.431839][T15945] loop7: detected capacity change from 0 to 16384 [ 796.504008][T15940] vhci_hcd: connection closed [ 796.504462][ T2950] vhci_hcd vhci_hcd.8: stop threads [ 796.515037][ T2950] vhci_hcd vhci_hcd.8: release socket [ 796.538433][ T2950] vhci_hcd vhci_hcd.8: disconnect device [ 796.575321][ T9] usb 50-1: enqueue for inactive port 0 [ 796.786771][ T6389] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 797.310002][ T9] usb usb50-port1: attempt power cycle [ 797.345383][ T6385] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 797.365299][ T5928] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 797.575753][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 797.583863][ T5928] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 797.593066][ T5928] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 797.603192][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 797.606727][T15946] loop7: detected capacity change from 16384 to 0 [ 797.681721][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 797.701594][ T5928] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.725613][ T5928] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 797.734828][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.893765][ T12] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 797.913181][ T9] usb usb50-port1: unable to enumerate USB device [ 797.999754][ T5928] usb 6-1: GET_CAPABILITIES returned 0 [ 798.005615][ T5928] usbtmc 6-1:16.0: can't read capabilities [ 798.266450][T15959] fuse: Unknown parameter '' [ 798.431993][ T6389] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 798.511610][ T31] INFO: task kworker/0:4:5917 blocked for more than 143 seconds. [ 798.529908][ T31] Tainted: G L syzkaller #0 [ 798.537790][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 798.547764][ T31] task:kworker/0:4 state:D stack:21056 pid:5917 tgid:5917 ppid:2 task_flags:0x4208060 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 798.579399][ T31] Workqueue: usb_hub_wq hub_event [ 798.677298][ T31] Call Trace: [ 798.680759][ T31] [ 798.860610][ T31] __schedule+0x14ea/0x5050 [ 798.872901][ T31] ? __pfx___schedule+0x10/0x10 [ 798.911698][ T31] ? schedule+0x90/0x360 [ 798.932551][ T31] schedule+0x164/0x360 [ 798.949950][ T31] schedule_timeout+0xc3/0x2c0 [ 798.961415][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 798.970572][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 799.051397][ T6389] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 799.073097][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.079276][ T31] ? wait_for_completion+0x274/0x5e0 [ 799.084813][ T31] wait_for_completion+0x2cc/0x5e0 [ 799.090253][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 799.097259][ T31] i2c_del_adapter+0x5c0/0x790 [ 799.120252][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 799.147577][ T31] ? dvb_usbv2_exit+0x4d9/0xb60 [ 799.152513][ T31] ? kfree+0x1be/0x650 [ 799.165571][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 799.170947][ T31] ? dvb_usbv2_exit+0x935/0xb60 [ 799.185323][ T31] dvb_usbv2_probe+0x4c0/0x3c20 [ 799.190253][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 799.225677][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 799.231596][ T31] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 799.265343][ T31] usb_probe_interface+0x668/0xc90 [ 799.270626][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 799.285870][ T31] really_probe+0x267/0xaf0 [ 799.290461][ T31] __driver_probe_device+0x18c/0x320 [ 799.309476][ T31] driver_probe_device+0x4f/0x240 [ 799.314611][ T31] __device_attach_driver+0x279/0x430 [ 799.335300][ T31] bus_for_each_drv+0x258/0x2f0 [ 799.340256][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 799.415295][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 799.435588][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 799.440872][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 799.466771][ T31] __device_attach+0x2c5/0x450 [ 799.471706][ T31] ? __pfx___device_attach+0x10/0x10 [ 799.477654][ T31] ? _raw_spin_unlock+0x28/0x50 [ 799.495551][ T31] device_initial_probe+0xa1/0xd0 [ 799.500634][ T31] bus_probe_device+0x12a/0x220 [ 799.525553][ T31] ? device_add+0x726/0xb70 [ 799.530254][ T31] device_add+0x7b6/0xb70 [ 799.534658][ T31] usb_set_configuration+0x1a87/0x2110 [ 799.555609][ T31] usb_generic_driver_probe+0x8d/0x150 [ 799.561253][ T31] usb_probe_device+0x1c4/0x3b0 [ 799.575631][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 799.581057][ T31] really_probe+0x267/0xaf0 [ 799.586017][ T12] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 799.625433][ T31] __driver_probe_device+0x18c/0x320 [ 799.635252][ T31] driver_probe_device+0x4f/0x240 [ 799.640369][ T31] __device_attach_driver+0x279/0x430 [ 799.655301][ T31] bus_for_each_drv+0x258/0x2f0 [ 799.660239][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 799.692912][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 799.699278][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 799.704659][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 799.711076][ T31] __device_attach+0x2c5/0x450 [ 799.715937][ T31] ? __pfx___device_attach+0x10/0x10 [ 799.721328][ T31] ? _raw_spin_unlock+0x28/0x50 [ 799.726361][ T31] device_initial_probe+0xa1/0xd0 [ 799.732372][ T31] bus_probe_device+0x12a/0x220 [ 799.737850][ T31] ? device_add+0x726/0xb70 [ 799.742427][ T31] device_add+0x7b6/0xb70 [ 799.746978][ T31] usb_new_device+0xa08/0x16f0 [ 799.751827][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 799.757151][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.762412][ T31] hub_event+0x2a1c/0x4f30 [ 799.767378][ T31] ? __pfx_hub_event+0x10/0x10 [ 799.772208][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 799.778075][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 799.783858][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 799.790790][ T31] process_scheduled_works+0xaec/0x17a0 [ 799.796782][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 799.803420][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 799.808816][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 799.814248][ T31] ? schedule+0x90/0x360 [ 799.818611][ T31] worker_thread+0xda6/0x1360 [ 799.823384][ T31] kthread+0x726/0x8b0 [ 799.827946][ T31] ? __pfx_worker_thread+0x10/0x10 [ 799.834110][ T31] ? __pfx_kthread+0x10/0x10 [ 799.838940][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 799.844239][ T31] ? __pfx_kthread+0x10/0x10 [ 799.849019][ T31] ret_from_fork+0x51b/0xa40 [ 799.853665][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 799.859188][ T31] ? __switch_to+0xc82/0x1410 [ 799.863930][ T31] ? __pfx_kthread+0x10/0x10 [ 799.877379][ T31] ret_from_fork_asm+0x1a/0x30 [ 799.882281][ T31] [ 799.915651][ T31] INFO: task syz.0.2025:13919 blocked for more than 144 seconds. [ 799.923447][ T31] Tainted: G L syzkaller #0 [ 800.005036][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.056294][ T31] task:syz.0.2025 state:D stack:27328 pid:13919 tgid:13918 ppid:5846 task_flags:0x400040 flags:0x00080002 [ 800.085289][ T31] Call Trace: [ 800.088654][ T31] [ 800.091729][ T31] __schedule+0x14ea/0x5050 [ 800.105693][ T31] ? __pfx___schedule+0x10/0x10 [ 800.110638][ T31] ? schedule+0x90/0x360 [ 800.114932][ T31] schedule+0x164/0x360 [ 800.145317][ T12] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 800.185337][ T31] schedule_preempt_disabled+0x13/0x30 [ 800.190877][ T31] __mutex_lock+0x7fe/0x1300 [ 800.235253][ T31] ? __mutex_lock+0x5ac/0x1300 [ 800.241241][ T31] ? usbdev_open+0x182/0x770 [ 800.265316][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 800.270562][ T31] ? bus_find_device+0x27d/0x2d0 [ 800.295304][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 800.300773][ T31] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 800.355277][ T31] ? usbdev_open+0xa7/0x770 [ 800.359884][ T31] usbdev_open+0x182/0x770 [ 800.364350][ T31] ? kobject_get_unless_zero+0x167/0x1f0 [ 800.395394][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 800.400437][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 800.425900][ T31] chrdev_open+0x4cd/0x5e0 [ 800.430406][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 800.474707][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 800.481702][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 800.486947][ T31] do_dentry_open+0x7ce/0x1420 [ 800.493676][ T31] vfs_open+0x3b/0x340 [ 800.498183][ T31] ? path_openat+0x346e/0x3e20 [ 800.503014][ T31] path_openat+0x3486/0x3e20 [ 800.508269][ T31] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 800.514049][ T31] ? getname_flags+0xb7/0x540 [ 800.518850][ T31] ? __pfx_path_openat+0x10/0x10 [ 800.523839][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 800.529305][ T31] do_filp_open+0x22d/0x490 [ 800.533893][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 800.539139][ T31] ? _raw_spin_unlock+0x28/0x50 [ 800.544066][ T31] ? alloc_fd+0x64b/0x6c0 [ 800.549881][ T31] do_sys_openat2+0x12f/0x220 [ 800.554622][ T31] ? __se_sys_futex+0x3a8/0x450 [ 800.561563][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 800.567181][ T31] ? rcu_is_watching+0x15/0xb0 [ 800.572006][ T31] __x64_sys_openat+0x138/0x170 [ 800.577469][ T31] do_syscall_64+0xe2/0xf80 [ 800.582027][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.588978][ T31] ? trace_irq_disable+0x37/0x100 [ 800.594058][ T31] ? clear_bhb_loop+0x60/0xb0 [ 800.599250][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.605538][ T31] RIP: 0033:0x7f8def75b78e [ 800.610046][ T31] RSP: 002b:00007f8df0714b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 800.619405][ T31] RAX: ffffffffffffffda RBX: 00007f8df07156c0 RCX: 00007f8def75b78e [ 800.627801][ T31] RDX: 0000000000101301 RSI: 00007f8df0714c00 RDI: ffffffffffffff9c [ 800.636184][ T31] RBP: 00007f8df0714c00 R08: 0000000000000000 R09: 0000000000000000 [ 800.644299][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 800.657992][ T31] R13: 00007f8defa16038 R14: 00007f8defa15fa0 R15: 00007f8defb3fa48 [ 800.668160][ T31] [ 800.673425][ T31] [ 800.673425][ T31] Showing all locks held in the system: [ 800.715273][ T5953] usb 6-1: USB disconnect, device number 111 [ 800.724794][ T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 800.770158][ T31] 1 lock held by pool_workqueue_/3: [ 800.791300][ T31] 4 locks held by kworker/u8:0/12: [ 800.800980][ T31] 1 lock held by khungtaskd/31: [ 800.806229][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 800.816546][ T31] 3 locks held by kworker/u8:7/2950: [ 800.821871][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 800.835098][ T31] #1: ffffc9000b837bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 800.847727][ T31] #2: ffffffff8f9ac148 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 800.885588][ T31] 2 locks held by getty/5585: [ 800.890341][ T31] #0: ffff88814c3c90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 800.904436][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 800.946814][ T31] 5 locks held by kworker/0:4/5917: [ 800.952083][ T31] #0: ffff88801de8f548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 800.985749][ T31] #1: ffffc90004ddfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 801.005854][ T31] #2: ffff888028daa198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 801.015510][ T31] #3: ffff8880223c6198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 801.024767][ T31] #4: ffff888078d6d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 801.036028][ T31] 1 lock held by syz.1.1198/10519: [ 801.041185][ T31] #0: ffffffff8f9ac148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 801.055257][ T31] 1 lock held by syz.0.2025/13919: [ 801.061537][ T31] #0: ffff888028daa198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 801.075304][ T31] 1 lock held by syz.7.2441/15622: [ 801.080564][ T31] #0: ffff888028daa198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 801.105237][ T31] 1 lock held by syz.6.2500/15875: [ 801.110403][ T31] #0: ffff888028daa198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 801.135250][ T31] 2 locks held by syz.8.2526/15958: [ 801.140480][ T31] #0: ffffffff8f9ac148 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 801.155040][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 801.170049][ T31] [ 801.183820][ T31] ============================================= [ 801.183820][ T31] [ 801.193192][ T31] NMI backtrace for cpu 1 [ 801.193213][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 801.193239][ T31] Tainted: [L]=SOFTLOCKUP [ 801.193246][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 801.193258][ T31] Call Trace: [ 801.193267][ T31] [ 801.193275][ T31] dump_stack_lvl+0xe8/0x150 [ 801.193305][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 801.193331][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 801.193362][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 801.193391][ T31] sys_info+0x135/0x170 [ 801.193412][ T31] watchdog+0xf90/0xfe0 [ 801.193447][ T31] ? watchdog+0x209/0xfe0 [ 801.193472][ T31] kthread+0x726/0x8b0 [ 801.193496][ T31] ? __pfx_watchdog+0x10/0x10 [ 801.193515][ T31] ? __pfx_kthread+0x10/0x10 [ 801.193538][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.193566][ T31] ? __pfx_kthread+0x10/0x10 [ 801.193587][ T31] ret_from_fork+0x51b/0xa40 [ 801.193618][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 801.193644][ T31] ? __switch_to+0xc82/0x1410 [ 801.193673][ T31] ? __pfx_kthread+0x10/0x10 [ 801.193694][ T31] ret_from_fork_asm+0x1a/0x30 [ 801.193734][ T31] [ 801.193741][ T31] Sending NMI from CPU 1 to CPUs 0: [ 801.306033][ T12] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:51 [ 801.310492][ C0] NMI backtrace for cpu 0 [ 801.310510][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.310535][ C0] Tainted: [L]=SOFTLOCKUP [ 801.310542][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 801.310554][ C0] Workqueue: bat_events batadv_mcast_mla_update [ 801.310586][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 801.310612][ C0] Code: e8 de b1 92 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 00 fb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 801.310628][ C0] RSP: 0018:ffffc900001171b8 EFLAGS: 00000006 [ 801.310643][ C0] RAX: 1ffffffff3466c05 RBX: 00000000000003f9 RCX: 0000000000000000 [ 801.310656][ C0] RDX: 00000000000003f9 RSI: 0000000000000000 RDI: 0000000000000020 [ 801.310667][ C0] RBP: ffffc90000117350 R08: 0000000000000003 R09: 0000000000000004 [ 801.310680][ C0] R10: dffffc0000000000 R11: ffffffff8531c520 R12: dffffc0000000000 [ 801.310693][ C0] R13: dffffc0000000000 R14: ffffffff9a3362a0 R15: 0000000000000000 [ 801.310707][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 801.310722][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 801.310735][ C0] CR2: 0000200000404030 CR3: 0000000031966000 CR4: 00000000003526f0 [ 801.310751][ C0] Call Trace: [ 801.310759][ C0] [ 801.310768][ C0] serial8250_console_write+0x540/0x1ba0 [ 801.310794][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 801.310817][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 801.310839][ C0] ? console_flush_all+0x123/0xb20 [ 801.310863][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 801.310885][ C0] ? console_flush_all+0x123/0xb20 [ 801.310905][ C0] console_flush_all+0x718/0xb20 [ 801.310926][ C0] ? console_flush_all+0x123/0xb20 [ 801.310949][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 801.310972][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 801.310996][ C0] console_unlock+0xd1/0x1c0 [ 801.311013][ C0] ? vprintk_emit+0x2cf/0x560 [ 801.311031][ C0] ? __pfx_console_unlock+0x10/0x10 [ 801.311051][ C0] ? vprintk_emit+0x2cf/0x560 [ 801.311066][ C0] ? vprintk_emit+0x2cf/0x560 [ 801.311103][ C0] vprintk_emit+0x485/0x560 [ 801.311119][ C0] ? batadv_tt_hash_find+0x1fe/0x700 [ 801.311145][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 801.311173][ C0] _printk+0xdd/0x130 [ 801.311201][ C0] ? __pfx__printk+0x10/0x10 [ 801.311227][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 801.311255][ C0] ? ___ratelimit+0x58c/0x8d0 [ 801.311275][ C0] batadv_tt_local_add+0x1c33/0x2a80 [ 801.311309][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 801.311328][ C0] ? batadv_mcast_mla_update+0x2795/0x3740 [ 801.311354][ C0] ? __pfx_batadv_tt_local_add+0x10/0x10 [ 801.311378][ C0] ? br_multicast_list_adjacent+0x29/0x560 [ 801.311395][ C0] ? br_multicast_list_adjacent+0x54a/0x560 [ 801.311417][ C0] batadv_mcast_mla_update+0x2cd0/0x3740 [ 801.311454][ C0] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 801.311479][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 801.311498][ C0] ? lock_acquire+0x106/0x330 [ 801.311526][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 801.311558][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 801.311583][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 801.311609][ C0] process_scheduled_works+0xaec/0x17a0 [ 801.311650][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 801.311674][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 801.311695][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.311713][ C0] ? schedule+0x90/0x360 [ 801.311734][ C0] worker_thread+0xda6/0x1360 [ 801.311774][ C0] kthread+0x726/0x8b0 [ 801.311794][ C0] ? __pfx_worker_thread+0x10/0x10 [ 801.311820][ C0] ? __pfx_kthread+0x10/0x10 [ 801.311840][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.311866][ C0] ? __pfx_kthread+0x10/0x10 [ 801.311885][ C0] ret_from_fork+0x51b/0xa40 [ 801.311913][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 801.311938][ C0] ? __switch_to+0xc82/0x1410 [ 801.311964][ C0] ? __pfx_kthread+0x10/0x10 [ 801.311983][ C0] ret_from_fork_asm+0x1a/0x30 [ 801.312016][ C0] [ 801.312775][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 801.312829][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 801.312906][ T31] Tainted: [L]=SOFTLOCKUP [ 801.312929][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 801.312963][ T31] Call Trace: [ 801.312994][ T31] [ 801.313024][ T31] vpanic+0x1e0/0x670 [ 801.313104][ T31] panic+0xc5/0xd0 [ 801.313184][ T31] ? __pfx_panic+0x10/0x10 [ 801.313252][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 801.313358][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 801.313456][ T31] watchdog+0xfda/0xfe0 [ 801.313558][ T31] ? watchdog+0x209/0xfe0 [ 801.313649][ T31] kthread+0x726/0x8b0 [ 801.313721][ T31] ? __pfx_watchdog+0x10/0x10 [ 801.313777][ T31] ? __pfx_kthread+0x10/0x10 [ 801.313850][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 801.313934][ T31] ? __pfx_kthread+0x10/0x10 [ 801.314007][ T31] ret_from_fork+0x51b/0xa40 [ 801.314103][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 801.314190][ T31] ? __switch_to+0xc82/0x1410 [ 801.314274][ T31] ? __pfx_kthread+0x10/0x10 [ 801.314340][ T31] ret_from_fork_asm+0x1a/0x30 [ 801.314469][ T31] [ 801.317348][ T31] Kernel Offset: disabled