last executing test programs: 52.257163973s ago: executing program 3 (id=1455): socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000080)={{0x2, 0xfffc, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x4e22, @multicast1=0xe000cc02}}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 51.363805372s ago: executing program 3 (id=1456): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x75b, 0x20040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@out_dx={0x6a, 0x28, {0x6769, 0x4, 0x2000000}}], 0x28}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000180)={0x4, 0x8, 0x2, {0x1, @sliced={0xffff, [0x5, 0xc, 0x2800, 0x4, 0xd3a6, 0x800, 0x3, 0x1, 0x7, 0x1, 0x5, 0x7ff, 0x4, 0x1, 0x6, 0x70b, 0x2, 0x3, 0x5, 0x6, 0xf, 0xc, 0x2, 0x5, 0x4, 0x10, 0x93d, 0x3, 0x5, 0x9, 0x9, 0x0, 0x3, 0x2f24, 0x6, 0x8, 0x3, 0x7b, 0x3, 0xe1e, 0x2, 0x6, 0x7b, 0xd, 0xa, 0xe0, 0x20, 0xc], 0x7}}, 0x3ff}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000480)={0x9, 0x6, 0x2, {0x1, @sliced={0x7, [0x3, 0xfff, 0x66, 0x165a, 0x8, 0xef, 0x4eb, 0x800, 0xffff, 0x9, 0x1, 0x8000, 0x4, 0x9, 0x5, 0x0, 0x3, 0x400, 0x3, 0x7, 0x1000, 0x8, 0x5, 0x3, 0x400, 0x1000, 0xff, 0x2, 0x3, 0x3, 0x10, 0x0, 0xff00, 0x4, 0x3, 0xfff8, 0x54f, 0xb, 0x7, 0x2, 0x6, 0x6, 0x371, 0x10, 0x400, 0x9b8c, 0x200, 0x4], 0x6}}, 0x8}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) 51.164290451s ago: executing program 3 (id=1457): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x18, 0x0, 0xdddd0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 50.399889313s ago: executing program 3 (id=1460): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400080) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unshare(0x26020480) mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x2000, 0x4, 0x0) umount2(0x0, 0x3) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r3, 0x5607) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000fd8f71103b00000000005c050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 49.825105554s ago: executing program 3 (id=1462): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xaa1183fb, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sg(0x0, 0x6, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080000000", @ANYRES32=0x0, @ANYRES8, @ANYRES32=r3], 0x24}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000900020073797a32000000000500010006000049bd20760007000000050004000000000010000300686173683a69702c6d616300"], 0x48}}, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 48.904561288s ago: executing program 3 (id=1464): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="00082dbd7000fb"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x74}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x81, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xa, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_4={0x3, 0x0, 0xb, "9ac62233"}, @main=@item_4={0x3, 0x0, 0xc, "e7815168"}]}}, 0x0}, 0x0) 48.35631471s ago: executing program 32 (id=1464): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="00082dbd7000fb"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x74}) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0xa51, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x81, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xa, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_4={0x3, 0x0, 0xb, "9ac62233"}, @main=@item_4={0x3, 0x0, 0xc, "e7815168"}]}}, 0x0}, 0x0) 14.92044548s ago: executing program 1 (id=1552): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) getgroups(0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xee01, 0xee01]) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x100, 0x12, 0x1}, 0x18, 0x0) r5 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r5, 0x0) read(r5, &(0x7f0000000000)=""/269, 0xfffffdef) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000028c0)) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/147, 0x93}], 0x1}, 0x40000000) r8 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000400)=@name, &(0x7f0000000440)=0x10, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000480)={0x9, 0x7, {0xffffffffffffffff}, {0xffffffffffffffff}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in=@remote}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getresgid(&(0x7f0000002780), &(0x7f00000027c0), &(0x7f0000002800)=0x0) r13 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000002840)='devices.allow\x00', 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000002980)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="1fc639aa07fc916769e3a3076fcafcb94dd9a12d1dee60cf986b92fad47cb2a92c4167ebf54f1d2c6c8e306fe3b529bb4b377156deac34614e1790b96b6b4d2944d32a9c6edc691dd4", 0x49}], 0x1, &(0x7f0000000300)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, r3}}}, @rights={{0x1c, 0x1, 0x1, [r4, r0, r0]}}], 0x40, 0x4000000}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="7dddd82b5cbcfb351b780a995f70f235849d68364abb220a14230958f036b65f03988453abb784b7ecfe9f205a36aab3b093245e93a42274edbefac016c18c2962b45fddada4162469fbccd2acba37e1afa70ba732c633298fdbe31625d3be5c0bec85c0755d0eb22f3f54f160f0c0df927dcc63894b71ddb73e3bdc", 0x7c}], 0x1, &(0x7f0000002b00)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000ccec3a8f696716bf9b2591d8445c24f33f785c808b9dfa16bb0279a64d911d9d2c6e729797a1a375a115ed1580", @ANYRES32=r11, @ANYRES32, @ANYRES32=r12, @ANYRES8=r10, @ANYRES32=r0, @ANYRES32=r13, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0, 0x4800}}], 0x2, 0x44004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 6.947147322s ago: executing program 0 (id=1574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4100, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 5.80327396s ago: executing program 4 (id=1577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r1, 0x1, 0x4000000, 0x25dfdbef, {{}, {}, {0x14, 0x17, {0x8, 0xffffffff, @l2={'ib', 0x3a, 'lo\x00'}}}}}, 0x30}}, 0x0) 5.68415858s ago: executing program 1 (id=1579): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000003a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001500)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0xb9, 0x1, 0xd}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) 5.60588673s ago: executing program 5 (id=1580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390020001300034700bb65e1c3e4ffff01000000160000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 5.403498778s ago: executing program 5 (id=1581): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0xc, 0x133, 0x0, 0x0, @u64=0x1ff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) recvmmsg(r4, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffd10, 0x0, 0x0, &(0x7f0000000140)=""/32, 0xd307dfd740337a02}, 0x2}], 0x1, 0x6001, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x130, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x40844}, 0xc0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r1}, 0x14) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000100)=0xf, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) r11 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r11, 0x0, 0x0, 0x2, 0x0) 5.384015752s ago: executing program 1 (id=1582): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0x5d8174c4, 0x3, 0x4, 0x0, 0x45}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) r4 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) process_mrelease(0xffffffffffffffff, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x20000, 0x7, 0x40, 0x0, 0x2000, 0x2004cb, 0x1000000001, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setitimer(0x2, &(0x7f0000000580), 0x0) r6 = signalfd(r3, &(0x7f00000001c0)={[0x100bb]}, 0x8) utimensat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={{}, {0x77359400}}, 0x100) mkdir(0x0, 0x5) close(r6) inotify_init1(0x800) fcntl$setown(r6, 0x8, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 5.383807093s ago: executing program 4 (id=1583): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000003a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001500)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0xb9, 0x1, 0xd}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) (fail_nth: 2) 5.192960425s ago: executing program 4 (id=1584): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0018e0400000000", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f90", 0x81}], 0x1}}], 0x2, 0x44088) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 5.108604427s ago: executing program 5 (id=1585): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 4.993107276s ago: executing program 4 (id=1586): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000a40)={{0x1, 0x0, 0x3, 0x5, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7, 0x3d8e, 0x1, 0x100007, 0x8000000000000000, 0x401, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x5, 0x2d2b, 0x4000000000000, 0x100000001, 0xfffffffffffffff5, 0xffffffffffffffff, 0x200000000000000, 0x1, 0xfffffffffffffffe, 0x1, 0x0, 0x2, 0x40000000c5a, 0x2, 0x1, 0x0, 0x85, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff0, 0x1, 0x6, 0x0, 0x4000000000000000, 0x20000000000, 0x5e, 0x1, 0xfffffffffffffe, 0x0, 0x4, 0x1000000000, 0x3, 0x200000000000, 0x3, 0x200, 0xfffffffffffffffe, 0x0, 0x4000000000100001, 0x3, 0xfffffffffffffffc, 0x4, 0x800, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x10001, 0xebf, 0x6, 0x0, 0x754, 0x6, 0x0, 0x6b, 0x7, 0xfffffffffffffffd, 0x101, 0xb, 0x0, 0x2, 0x800, 0x9, 0x1, 0x3, 0x7, 0x7ffffffffffffe, 0x0, 0x0, 0xf31, 0x11, 0x2, 0x0, 0x0, 0x1ea, 0x7, 0x0, 0x4, 0x2, 0x0, 0x3, 0x4000b, 0x0, 0x3, 0x7, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0xffffffffffffbffc, 0x1, 0x0, 0x2c80000000000000, 0x0, 0x20000000, 0x1, 0x1553, 0x6, 0x0, 0x3]}) r1 = eventfd(0x0) r2 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fdf000/0x18000)=nil, 0x0, 0x0, 0x40, &(0x7f00000002c0)=[@cr4={0x1, 0x24}, @dstype3={0x7, 0xf}], 0x2) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/143) syz_usb_control_io$hid(r2, 0x0, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f00000000c0)}, {0x0}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="400000000000000071104d000000000006000000000000009500000000000000eada6c4ec7b49d93e6cfe47cbffc32e0ab0e0ae810033033920437"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.938835716s ago: executing program 5 (id=1587): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x80802, 0x0) r3 = syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x2, @broadcast}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000480)={r6, 0x1, 0x6, @multicast}, 0x10) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000240)={0x8, 0x100001d, 0x4003, 0x83ffffc, 0xb, "69b7841b47f3ce7a26149600"}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000000)) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01000080030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="203083000000830196e467a23546e426a313738a25b65133a1064958ecaefa3d4a7f3e83e2e08be90652794467facf11c4300e84d68d553ddca84038271e4353fa3f3a09c6dba3701e273777c05e3c9d974c8bf72216d1a11e6a590b92075f696210ddaa1b9408f6f2b75c816328aca0d84c020e0c1583c2f882de81f4933102f8b416da3c5a60796b81a2f31d28cd"], &(0x7f0000000740)=ANY=[@ANYBLOB="00039a0000009a03f62359c652866494598e0b5d4cee9a2bca2c8665ae3ff4d9595460b0c2e22dfb9475bdc1612c7e2370f438f99603696c4684999760a6428ec8c191a256ba4c1df12f217f291ddd38d201a2a56ec9ebd4dfb31bce99d1fd62c9fa65af886c4f13c742d9bbe4f5283a0b244765263ae50a1f86d31bb67932d30d9f90db5bd716f6a991194445ad0285db115ac33d323bdad0f93e2e82269ea4626e6c942e"], &(0x7f0000000240)={0x0, 0x22, 0x11, {[@main=@item_012={0x1, 0x0, 0x9, '/'}, @main=@item_4={0x3, 0x0, 0xc, "4efbca73"}, @global=@item_4={0x3, 0x1, 0x2, "686ff7f3"}, @main=@item_4={0x3, 0x0, 0x16, "ab3d1913"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x10, 0x6, 0x1, {0x22, 0xd4e}}}}, &(0x7f0000000880)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000008c0)=ANY=[@ANYBLOB="20014b3b00468408d570b14ea4cb2599eac78ceb17c094936f84691a9ff7730ec95b44bfcd464a6da5e8f31b452e230dc34ddce0197b161233747d508740e05db93844f6d4c31df088564b81e568fc3106e8c1745cafa389651d26f15921060514e7ca7e17beebd6996c951b41ad9b45eb8d1b151b0022470e309a3e1c67989d0bf2170cd4d65544a24e992cd0895c7654000200006bb1dba87e1dcd544a50390119680026082fc4a4836515b422f5a78e07da2e0568b565d62360872af170ff826477b15b90a1416985e4"], &(0x7f0000000840)={0x20, 0x3, 0x1, 0xfe}}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, 0x0) r8 = socket(0x1d, 0x2, 0x6) r9 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000001840)={0x90000001}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000000180)) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000400c73881d1bcafcdd6405ac625f23cd1f7d1fae0029da5e56ad67c4b69da240aea6f48791c4a8728570dc46df01ec148e4e3b494690016dcacad3d07d5cdc32426fa08265ada738af0a6960d0b5365b3a85199fb75c38fe5c6b70f1cd4bf404954847fb05e132df89debbcbee9ac59d5c72c5634db8b79c0ea6135970839485016594b9eb5c5e0abe87ba456f6", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) fsetxattr$trusted_overlay_redirect(r11, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002340)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a00", @ANYRES64=r10], 0x44}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) sendto$inet6(r1, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 4.852714199s ago: executing program 0 (id=1588): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000280)=[{0x1, 0x9001, 0x0, 0x0}, {0x1, 0xda00, 0x0, 0x0}], 0x2}) 4.538310623s ago: executing program 0 (id=1589): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x89e0, 0x0) epoll_create1(0x80000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@bridge_getlink={0x34, 0x12, 0x1, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x901, 0x10000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_batadv\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) r2 = userfaultfd(0x1) r3 = dup(r2) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, 0x0, &(0x7f0000000140)) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000040)=0xef) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000cfba000000000000080000009111b9000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) socket$kcm(0x10, 0x2, 0x10) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 4.099331882s ago: executing program 0 (id=1591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x8, 0x0, 0x7, 0xdb51, 0x8001, 0x8, 0x1ff, 0x2, 0x0, 0xa, 0x1e, 0x18, 0x7, 0x1d0fa844, 0xf1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000082, 0x0, 0x8002}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)) syz_genetlink_get_family_id$batadv(0x0, r8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, 0x0, 0x700) 3.809131191s ago: executing program 2 (id=1593): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000680)={r4, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5, 0x0, 0x0, r6], [0x2b8]}) close_range(r0, 0xffffffffffffffff, 0x406) 3.574284958s ago: executing program 1 (id=1594): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002180), 0xa0002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x38}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r7, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getpeername(r7, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2b, 0x1, 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) 3.435964177s ago: executing program 2 (id=1595): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="ea", 0x1}], 0x1, 0x0, 0x1802}}], 0x1, 0x608d8d0) 3.278213684s ago: executing program 5 (id=1596): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0018e0400000000", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f90", 0x81}], 0x1}}], 0x2, 0x44088) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 2.979121049s ago: executing program 5 (id=1597): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x8000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xc000) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) socket$netlink(0x10, 0x3, 0xf) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000300)={0x8, 0x0, r3}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r5, 0x40045565, 0x3b) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xd, 0x2002) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f00000001c0)={0x7, 0x0, '\x00', {0x0, @reserved}}) sendfile(r4, r4, 0x0, 0x200000) cachestat(r4, &(0x7f0000000000)={0x7}, &(0x7f0000000040), 0x0) r7 = syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001739e610f0100010000000000090212000107d440000704650000be866d0157581b"], 0x0) syz_usb_ep_read(r7, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 2.782257689s ago: executing program 4 (id=1598): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 2.392029032s ago: executing program 2 (id=1599): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000280)=[{0x1, 0x9001, 0x0, 0x0}, {0x1, 0xda00, 0x0, 0x0}], 0x2}) 2.230217961s ago: executing program 4 (id=1600): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x0, 0x7fff, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x7, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r5, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0xffffffff, {0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r5) syz_open_dev$ttys(0xc, 0x2, 0x0) 2.195443498s ago: executing program 2 (id=1601): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) poll(&(0x7f0000000800), 0x0, 0x1ad) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20000800, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) ftruncate(0xffffffffffffffff, 0xb) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x0, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x3, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x4, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0xfffffb82, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8008, 0x86, 0x13, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x201, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0xfffffffc, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x2, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0x1, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0xdc15, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x400005, 0x803, 0xd3, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.453463697s ago: executing program 0 (id=1602): r0 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0x2000434) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x06E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) 1.055948965s ago: executing program 0 (id=1603): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=@ipv4_delroute={0x3c, 0x19, 0x200, 0x70bd2b, 0x25dfdbfe, {0x2, 0x10, 0x80, 0xd, 0xfe, 0x0, 0x0, 0x4}, [@RTA_SRC={0x8, 0x2, @broadcast}, @RTA_PRIORITY={0x8, 0x6, 0xffffff81}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_TABLE={0x8, 0xf, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(0xffffffffffffffff, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r7}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1f0, 0x1f0, 0x130, 0x2b8, 0x1f0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f0000000440), {[{{@uncond, 0x0, 0xc0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x1, 0xd54, 0x1, 0x0, "4d689fdab81407608a552da12fa7666c83973f669ddebff8fd87719a74f30914b44abad3060804dadf344dc089c676a36722b961099ebae28efa86d8a2ca0b34"}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xe}}}, {{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x36}, 0xffffffff, 0xffffffff, 'wlan1\x00', 'vcan0\x00', {0xff}, {}, 0xe, 0x3, 0x4}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1000, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x7, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffffff, 0xffffffff, 'vlan1\x00', 'team_slave_0\x00', {}, {}, 0x5e, 0x2, 0x8}, 0x0, 0xd8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@set={{0x40}, {{0x0, [0x6, 0x5, 0x6, 0x3, 0x1, 0x3], 0x1, 0x6}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3e, 0x5, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 459.801216ms ago: executing program 2 (id=1604): r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000003c0)=[@ioring_restriction_sqe_op, @ioring_restriction_sqe_flags_required={0x3, 0x19}], 0x2) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) mprotect(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r4, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a3b830000000000000000050000020900010073797a3048a3763414000000110001"], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r3, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 379.767013ms ago: executing program 1 (id=1605): unshare(0xe000600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000060000ed8cba00aa8a4f0000acee48393b0ef03b61d86cf82daffa2fd921c69ccf81947f33cc60dd26c6f1b0db6dbba7916669ecf84c2ad74d119b66af14b397b5d2460b2d7ce8b9a203ef3bb06162a6349a093ea64f7899a6e27470a805c8f6a99b34a267090087d95fa5ba66ae20528ed7ed41d6dfa10a5d1bda64366c5dbb462736fa6031378049810194b31cceaa170000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') lseek(r1, 0x4, 0x2) getdents64(r1, 0xffffffffffffffff, 0x43) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0, 0x200000000000000}, 0x38) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000005, 0x80010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000000)=0xbcf7, 0x0, 0x4) 174.61236ms ago: executing program 1 (id=1606): prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ap_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r6}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44) 0s ago: executing program 2 (id=1607): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0018e0400000000", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f90", 0x81}], 0x1}}], 0x2, 0x44088) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.1.981'. [ 369.183374][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 369.251388][ T9436] netlink: 'syz.1.981': attribute type 7 has an invalid length. [ 369.281541][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 369.297848][ T5940] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 369.321450][ T5940] usb 1-1: config 1 has no interface number 1 [ 369.351961][ T5940] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 369.404227][ T5940] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.424784][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.463840][ T5940] usb 1-1: Product: syz [ 369.480700][ T1005] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.512489][ T5940] usb 1-1: Manufacturer: syz [ 369.517232][ T5940] usb 1-1: SerialNumber: syz [ 369.530425][ T1005] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.581319][ T1005] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.734204][ T1005] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.824147][ T5940] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 369.969017][ T5940] usb 1-1: USB disconnect, device number 38 [ 370.516793][ T9454] binder: BINDER_SET_CONTEXT_MGR already set [ 370.522965][ T9454] binder: 9449:9454 ioctl 4018620d 200000000040 returned -16 [ 371.393201][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 371.393219][ T30] audit: type=1326 audit(1771711594.166:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 371.589497][ T30] audit: type=1326 audit(1771711594.166:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 371.625895][ T30] audit: type=1326 audit(1771711594.166:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 371.695451][ T30] audit: type=1326 audit(1771711594.166:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 371.761736][ T9454] syz.3.985 (9454): drop_caches: 2 [ 371.771758][ T30] audit: type=1326 audit(1771711594.166:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 371.991815][ T30] audit: type=1326 audit(1771711594.226:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 372.137008][ T30] audit: type=1326 audit(1771711594.226:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 372.235565][ T30] audit: type=1326 audit(1771711594.226:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 372.307135][ T30] audit: type=1326 audit(1771711594.226:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 372.349874][ T30] audit: type=1326 audit(1771711594.226:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9461 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 372.887725][ T9483] atomic_op ffff88802a083998 conn xmit_atomic 0000000000000000 [ 373.570616][ T9500] binder: BINDER_SET_CONTEXT_MGR already set [ 373.576762][ T9500] binder: 9489:9500 ioctl 4018620d 200000004a80 returned -16 [ 373.611714][ T980] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 373.821499][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 373.853832][ T980] usb 5-1: config 0 has no interfaces? [ 373.899172][ T980] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 373.998076][ T980] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 374.018328][ T980] usb 5-1: Manufacturer: syz [ 374.043830][ T980] usb 5-1: config 0 descriptor?? [ 374.626714][ T9513] pim6reg1: entered promiscuous mode [ 374.639188][ T9513] pim6reg1: entered allmulticast mode [ 374.859135][ T5889] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 375.043795][ T5889] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 375.075380][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.086937][ T5889] usb 3-1: Product: syz [ 375.104604][ T5889] usb 3-1: Manufacturer: syz [ 375.109856][ T5889] usb 3-1: SerialNumber: syz [ 375.125413][ T5889] usb 3-1: config 0 descriptor?? [ 375.606400][ T5889] usb 3-1: Firmware: major: 14, minor: 16, hardware type: UNKNOWN (232) [ 375.818495][ T5889] usb 3-1: failed to fetch extended address, random address set [ 375.828987][ T5889] usb 3-1: atusb_probe: initialization failed, error = -524 [ 375.899840][ T5889] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 376.038158][ T5889] usb 3-1: USB disconnect, device number 44 [ 376.331931][ T9] usb 5-1: USB disconnect, device number 40 [ 376.451487][ T5896] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 376.761406][ T5896] usb 1-1: Using ep0 maxpacket: 8 [ 376.843767][ T5896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 376.871399][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.925761][ T5896] usb 1-1: Product: syz [ 376.942368][ T5896] usb 1-1: Manufacturer: syz [ 376.953058][ T5896] usb 1-1: SerialNumber: syz [ 376.992981][ T5896] usb 1-1: config 0 descriptor?? [ 377.278985][ T5896] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 377.431400][ T5940] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 377.591087][ T9554] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1014'. [ 377.640436][ T5940] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 377.651717][ T5940] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 377.679040][ T5940] usb 3-1: config 220 interface 0 has no altsetting 0 [ 377.732400][ T5940] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 377.808862][ T9555] netlink: 'syz.1.1014': attribute type 10 has an invalid length. [ 377.818360][ T9555] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1014'. [ 377.828030][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.847656][ T5940] usb 3-1: Product: syz [ 377.933674][ T5940] usb 3-1: Manufacturer: syz [ 377.948605][ T5940] usb 3-1: SerialNumber: syz [ 377.968914][ T5896] usb write operation failed. (-71) [ 378.000085][ T5896] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 378.040423][ T5896] dvbdev: DVB: registering new adapter (Terratec H7) [ 378.067527][ T5896] usb 1-1: media controller created [ 378.082439][ T5896] usb read operation failed. (-71) [ 378.101139][ T5896] usb write operation failed. (-71) [ 378.147158][ T5896] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 378.240512][ T5896] usb 1-1: USB disconnect, device number 39 [ 378.655844][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.672506][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.017174][ T5940] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 379.031607][ T5940] uvcvideo 3-1:220.0: No valid video chain found. [ 379.070602][ T5940] usb 3-1: USB disconnect, device number 45 [ 379.173005][ T9574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1019'. [ 379.235001][ T9574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1019'. [ 380.082088][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 380.276403][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1022'. [ 380.295849][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 380.305967][ T24] usb 3-1: config 0 has no interfaces? [ 380.313354][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 380.338447][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 380.360438][ T24] usb 3-1: Manufacturer: syz [ 380.593583][ T24] usb 3-1: config 0 descriptor?? [ 382.574153][ T9610] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1028'. [ 382.595580][ T24] usb 3-1: USB disconnect, device number 46 [ 382.602653][ T9610] netlink: 'syz.4.1028': attribute type 7 has an invalid length. [ 382.707356][ T9610] netlink: 'syz.4.1028': attribute type 7 has an invalid length. [ 382.715267][ T1005] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.724813][ T1005] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.817484][ T1005] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.885166][ T9616] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1026'. [ 382.947611][ T1005] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.860127][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1034'. [ 385.341416][ T10] usb 2-1: new low-speed USB device number 55 using dummy_hcd [ 385.493572][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 385.651436][ T10] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 385.812225][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 385.828708][ T10] usb usb2-port1: attempt power cycle [ 385.941411][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 386.101536][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 386.116578][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.127611][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.137729][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 386.149907][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.164980][ T9] usb 1-1: config 0 descriptor?? [ 386.202998][ T10] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 386.232199][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 386.362458][ T10] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 386.379482][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 386.393226][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 386.404723][ T10] usb 2-1: Invalid ep0 maxpacket: 32 [ 386.412986][ T10] usb usb2-port1: unable to enumerate USB device [ 386.425325][ T9] usb 1-1: USB disconnect, device number 40 [ 386.732155][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 386.887465][ T9] usb 1-1: config index 0 descriptor too short (expected 54, got 36) [ 386.896030][ T9] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 386.905117][ T9] usb 1-1: config 0 has no interface number 0 [ 386.912144][ T9] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.923871][ T9] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.939310][ T9] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.960882][ T9] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 386.971104][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.981987][ T9] usb 1-1: Product: syz [ 386.986285][ T9] usb 1-1: Manufacturer: syz [ 386.991037][ T9] usb 1-1: SerialNumber: syz [ 387.000792][ T9] usb 1-1: config 0 descriptor?? [ 387.224572][ T9661] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1042'. [ 387.243300][ T9] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -32 [ 387.304979][ T9677] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1046'. [ 387.527250][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.546609][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.640808][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.650168][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.308264][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 388.373154][ T5896] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 388.541332][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 388.552196][ T5896] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 388.561930][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.570151][ T5896] usb 2-1: Product: syz [ 388.575255][ T5896] usb 2-1: Manufacturer: syz [ 388.580075][ T5896] usb 2-1: SerialNumber: syz [ 388.589855][ T5896] usb 2-1: config 0 descriptor?? [ 388.735217][ T5889] usb 1-1: USB disconnect, device number 41 [ 389.191521][ T5889] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 389.363121][ T5889] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 389.375957][ T5889] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 389.397158][ T5889] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 389.428727][ T5889] usb 1-1: config 220 has no interface number 2 [ 389.471814][ T5889] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 389.519660][ T5889] usb 1-1: config 220 interface 0 has no altsetting 0 [ 389.538413][ T5889] usb 1-1: config 220 interface 76 has no altsetting 0 [ 389.550648][ T5889] usb 1-1: config 220 interface 1 has no altsetting 0 [ 389.570390][ T5889] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 389.580140][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.598254][ T5889] usb 1-1: Product: syz [ 389.607329][ T5889] usb 1-1: Manufacturer: syz [ 389.612303][ T5896] airspy 2-1:0.0: usb_control_msg() failed -110 request 09 [ 389.626401][ T5896] airspy 2-1:0.0: Could not detect board [ 389.633741][ T5896] airspy 2-1:0.0: probe with driver airspy failed with error -110 [ 389.635620][ T5889] usb 1-1: SerialNumber: syz [ 390.087914][ T5889] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 390.097429][ T5889] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 390.104855][ T5889] uvcvideo 1-1:220.0: No valid video chain found. [ 390.111849][ T5889] usb 1-1: selecting invalid altsetting 0 [ 390.125948][ T5889] usb 1-1: selecting invalid altsetting 0 [ 390.137833][ T5889] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 390.163230][ T5889] usb 1-1: USB disconnect, device number 42 [ 390.573488][ T9721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1058'. [ 390.605259][ T9720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1058'. [ 391.546949][ T5889] usb 2-1: USB disconnect, device number 59 [ 391.801988][ T9736] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1059'. [ 392.272700][ T9740] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.481531][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.490946][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.614353][ T5911] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 395.713363][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1065'. [ 395.803269][ T5911] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 395.817877][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.185403][ T5911] usb 5-1: config 0 descriptor?? [ 396.198037][ T5911] cp210x 5-1:0.0: cp210x converter detected [ 396.421782][ T5911] usb 5-1: cp210x converter now attached to ttyUSB0 [ 396.612559][ T9] usb 5-1: USB disconnect, device number 41 [ 396.620710][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 396.635251][ T9] cp210x 5-1:0.0: device disconnected [ 397.675997][ T9786] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:2 [ 397.872128][ T9786] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 397.894650][ T9786] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 398.416246][ T9794] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1477463 (2954926 ns) > initial count (80 ns). Using initial count to start timer. [ 399.911437][ T5889] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 400.183485][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.194925][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.281784][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.315470][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.342369][ T9820] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1083'. [ 400.491376][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 400.520640][ T5889] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 400.531751][ T5889] usb 5-1: config 0 has no interface number 0 [ 400.599255][ T5889] usb 5-1: config 0 interface 184 has no altsetting 0 [ 400.638066][ T5889] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 400.649674][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.657941][ T5889] usb 5-1: Product: syz [ 400.662324][ T5889] usb 5-1: Manufacturer: syz [ 400.667062][ T5889] usb 5-1: SerialNumber: syz [ 400.689552][ T5889] usb 5-1: config 0 descriptor?? [ 401.180095][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1085'. [ 401.219511][ T9832] tc_dump_action: action bad kind [ 401.491588][ T5896] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 401.521158][ T9836] netlink: 'syz.0.1087': attribute type 9 has an invalid length. [ 401.584861][ T9836] netlink: 'syz.0.1087': attribute type 11 has an invalid length. [ 401.604018][ T9836] netlink: 'syz.0.1087': attribute type 12 has an invalid length. [ 401.614228][ T9836] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.1087'. [ 401.640971][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 401.653503][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 401.662537][ T5896] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 401.673684][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.695858][ T5896] usb 2-1: config 0 descriptor?? [ 402.349765][ T5896] video4linux radio48: keene_cmd_set failed (-71) [ 402.358464][ T5896] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 402.392653][ T5896] usb 2-1: USB disconnect, device number 60 [ 402.916798][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'. [ 402.926197][ T9846] openvswitch: netlink: Flow actions attr not present in new flow. [ 403.375367][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 403.394515][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 403.418102][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 403.434577][ T5889] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 403.464528][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 403.492836][ T5889] usb 5-1: USB disconnect, device number 42 [ 403.498939][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 404.642557][ T9866] ucma_write: process 780 (syz.2.1095) changed security contexts after opening file descriptor, this is not allowed. [ 406.482329][ T9896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1101'. [ 406.535292][ T9896] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1101'. [ 407.241491][ T5911] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 407.626197][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 407.640076][ T5911] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 407.651163][ T5911] usb 1-1: config 0 has no interface number 0 [ 407.658393][ T5911] usb 1-1: config 0 interface 184 has no altsetting 0 [ 407.674753][ T5911] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 407.684373][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.718487][ T5911] usb 1-1: Product: syz [ 407.729714][ T5911] usb 1-1: Manufacturer: syz [ 407.742695][ T5911] usb 1-1: SerialNumber: syz [ 407.772224][ T5911] usb 1-1: config 0 descriptor?? [ 410.468717][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.483864][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.922013][ T5911] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 410.933899][ T5911] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 410.955335][ T5911] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 410.987210][ T5911] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 411.029069][ T5911] usb 1-1: USB disconnect, device number 43 [ 411.237307][ T9940] input: syz1 as /devices/virtual/input/input65 [ 411.269971][ T9942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1115'. [ 413.812606][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 413.823706][ T9955] program syz.1.1119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.976302][ T9977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.985699][ T9977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.218289][ T9981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1126'. [ 414.461455][ T5896] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 414.680077][ T5896] usb 2-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 414.701504][ T5896] usb 2-1: config 0 interface 0 altsetting 109 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 414.733198][ T5896] usb 2-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 414.779578][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 414.799424][ T5896] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 414.823625][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.871136][ T5896] usb 2-1: config 0 descriptor?? [ 414.892668][ T9955] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 415.612042][ T5896] elecom 0003:056E:011C.0005: report_id 2473884707 is invalid [ 415.652741][ T9991] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1128'. [ 415.691749][ T5896] elecom 0003:056E:011C.0005: item 0 4 1 8 parsing failed [ 415.699915][ T5896] elecom 0003:056E:011C.0005: probe with driver elecom failed with error -22 [ 415.753730][ T9991] netlink: 'syz.2.1128': attribute type 10 has an invalid length. [ 415.771756][ T9991] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1128'. [ 415.846941][ T5896] usb 2-1: USB disconnect, device number 61 [ 416.879982][ T9993] loop6: detected capacity change from 0 to 8 [ 418.106378][T10017] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1135'. [ 418.354661][T10023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1137'. [ 418.437987][T10010] netlink: 'syz.1.1135': attribute type 10 has an invalid length. [ 418.471640][T10010] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1135'. [ 419.434288][T10038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1142'. [ 419.480458][T10038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1142'. [ 419.555207][T10041] FAULT_INJECTION: forcing a failure. [ 419.555207][T10041] name failslab, interval 1, probability 0, space 0, times 0 [ 419.626310][T10041] CPU: 0 UID: 0 PID: 10041 Comm: syz.4.1143 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.626336][T10041] Tainted: [L]=SOFTLOCKUP [ 419.626342][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.626354][T10041] Call Trace: [ 419.626360][T10041] [ 419.626367][T10041] dump_stack_lvl+0xe8/0x150 [ 419.626393][T10041] should_fail_ex+0x412/0x560 [ 419.626415][T10041] should_failslab+0xa8/0x100 [ 419.626432][T10041] ? skb_clone+0x212/0x3a0 [ 419.626454][T10041] kmem_cache_alloc_noprof+0x87/0x650 [ 419.626485][T10041] skb_clone+0x212/0x3a0 [ 419.626509][T10041] __netlink_deliver_tap+0x404/0x850 [ 419.626536][T10041] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.626554][T10041] netlink_deliver_tap+0x19c/0x1b0 [ 419.626578][T10041] netlink_sendskb+0x68/0x140 [ 419.626595][T10041] netlink_unicast+0x3a3/0x9b0 [ 419.626617][T10041] ? __pfx_netlink_unicast+0x10/0x10 [ 419.626632][T10041] ? __asan_memcpy+0x40/0x70 [ 419.626655][T10041] ? nla_put+0xd0/0x150 [ 419.626678][T10041] batadv_netlink_tp_meter_start+0x359/0x490 [ 419.626698][T10041] ? dev_get_by_index+0x22/0x2e0 [ 419.626716][T10041] ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10 [ 419.626734][T10041] ? dev_get_by_index+0x2a1/0x2e0 [ 419.626750][T10041] ? batadv_pre_doit+0x13d/0x7b0 [ 419.626771][T10041] genl_family_rcv_msg_doit+0x22a/0x330 [ 419.626798][T10041] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 419.626832][T10041] ? bpf_lsm_capable+0x9/0x20 [ 419.626852][T10041] ? security_capable+0x7e/0x2c0 [ 419.626873][T10041] genl_rcv_msg+0x61c/0x7a0 [ 419.626898][T10041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.626919][T10041] ? __pfx_batadv_pre_doit+0x10/0x10 [ 419.626934][T10041] ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10 [ 419.626951][T10041] ? __pfx_batadv_post_doit+0x10/0x10 [ 419.626968][T10041] ? __lock_acquire+0x6b5/0x2cf0 [ 419.626995][T10041] netlink_rcv_skb+0x232/0x4b0 [ 419.627013][T10041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 419.627036][T10041] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.627065][T10041] ? down_read+0x272/0x2e0 [ 419.627079][T10041] ? genl_rcv+0xd/0x40 [ 419.627101][T10041] genl_rcv+0x28/0x40 [ 419.627121][T10041] netlink_unicast+0x80f/0x9b0 [ 419.627142][T10041] ? __pfx_netlink_unicast+0x10/0x10 [ 419.627159][T10041] ? netlink_sendmsg+0x650/0xb40 [ 419.627175][T10041] ? skb_put+0x11b/0x210 [ 419.627198][T10041] netlink_sendmsg+0x813/0xb40 [ 419.627254][T10041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.627283][T10041] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.627315][T10041] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.627335][T10041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.627352][T10041] ____sys_sendmsg+0xa68/0xad0 [ 419.627381][T10041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.627410][T10041] ? import_iovec+0x73/0xa0 [ 419.627433][T10041] ___sys_sendmsg+0x2a5/0x360 [ 419.627459][T10041] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.627506][T10041] ? __fget_files+0x2a/0x420 [ 419.627527][T10041] ? __fget_files+0x3a0/0x420 [ 419.627560][T10041] __x64_sys_sendmsg+0x1bd/0x2a0 [ 419.627584][T10041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.627613][T10041] ? __pfx_ksys_write+0x10/0x10 [ 419.627637][T10041] do_syscall_64+0x14d/0xf80 [ 419.627659][T10041] ? trace_irq_disable+0x3b/0x150 [ 419.627681][T10041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.627695][T10041] ? clear_bhb_loop+0x40/0x90 [ 419.627714][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.627732][T10041] RIP: 0033:0x7f4997d9c629 [ 419.627747][T10041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.627760][T10041] RSP: 002b:00007f4998c6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.627776][T10041] RAX: ffffffffffffffda RBX: 00007f4998015fa0 RCX: 00007f4997d9c629 [ 419.627787][T10041] RDX: 0000000020040084 RSI: 0000200000003140 RDI: 0000000000000005 [ 419.627797][T10041] RBP: 00007f4998c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 419.627807][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.627816][T10041] R13: 00007f4998016038 R14: 00007f4998015fa0 R15: 00007f499813fa48 [ 419.627839][T10041] [ 419.762244][ T5911] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 420.197684][ T5911] usb 3-1: device descriptor read/64, error -71 [ 420.461670][ T5911] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 420.610853][ T5911] usb 3-1: device descriptor read/64, error -71 [ 420.651431][ T5896] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 420.721952][ T5911] usb usb3-port1: attempt power cycle [ 420.812412][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 420.846668][ T5896] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 420.877799][ T5896] usb 5-1: config 0 has no interface number 0 [ 420.905722][ T5896] usb 5-1: config 0 interface 184 has no altsetting 0 [ 420.970152][ T5896] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 421.053267][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.071380][ T5911] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 421.090555][ T5896] usb 5-1: Product: syz [ 421.100508][ T5896] usb 5-1: Manufacturer: syz [ 421.117096][ T5911] usb 3-1: device descriptor read/8, error -71 [ 421.142002][ T5896] usb 5-1: SerialNumber: syz [ 421.178169][ T5896] usb 5-1: config 0 descriptor?? [ 421.401705][ T5911] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 421.425076][ T5911] usb 3-1: device descriptor read/8, error -71 [ 421.587946][ T5911] usb usb3-port1: unable to enumerate USB device [ 422.463586][T10068] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1147'. [ 422.933150][T10073] ip6gre1: entered promiscuous mode [ 424.251437][ T5896] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 424.303856][ T5896] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 424.320969][ T5896] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 424.341349][ T5911] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 424.351183][ T5896] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 424.491490][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 424.518859][ T5911] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 424.627725][ T5896] usb 5-1: USB disconnect, device number 43 [ 424.637531][ T5911] usb 2-1: config 0 has no interface number 0 [ 424.668713][ T5911] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 424.932461][ T5911] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 425.012661][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 425.025483][ T5911] usb 2-1: Manufacturer: syz [ 425.051330][ T5911] usb 2-1: SerialNumber: syz [ 425.077851][ T5911] usb 2-1: config 0 descriptor?? [ 426.199235][ T5911] usbtouchscreen 2-1:0.214: Failed to read FW rev: 0 [ 426.220638][ T5911] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 426.624744][T10095] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 426.647201][T10095] openvswitch: netlink: Flow key attr not present in new flow. [ 426.838700][ T5911] usb 2-1: USB disconnect, device number 62 [ 427.053724][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 427.066294][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 427.078098][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 427.095301][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 427.112051][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 427.149286][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 427.188739][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 427.220821][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 427.263205][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 427.300793][T10101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 427.512278][T10101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.639226][T10124] netlink: 'syz.0.1162': attribute type 1 has an invalid length. [ 428.885930][T10129] bond1: (slave bridge0): making interface the new active one [ 428.921664][T10129] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 428.975868][T10124] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 429.076747][T10130] macvlan0: entered promiscuous mode [ 429.093753][T10130] macvlan0: entered allmulticast mode [ 429.132148][T10130] bond1: entered promiscuous mode [ 429.137356][T10130] bridge0: entered promiscuous mode [ 429.151720][T10130] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 429.229665][T10130] bond1: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 429.286513][T10130] bond1: left promiscuous mode [ 429.312511][T10130] bridge0: left promiscuous mode [ 429.751423][ T5911] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 430.121452][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 430.191346][ T796] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 430.206362][ T5911] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 430.215902][ T5911] usb 2-1: config 0 has no interface number 0 [ 430.236837][ T5911] usb 2-1: config 0 interface 184 has no altsetting 0 [ 430.382698][ T5911] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 430.391431][ T796] usb 1-1: Using ep0 maxpacket: 16 [ 430.405686][ T796] usb 1-1: config 0 has no interfaces? [ 430.413089][ T796] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 430.431322][ T796] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 430.441803][ T796] usb 1-1: Manufacturer: syz [ 430.454226][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.480512][ T5911] usb 2-1: Product: syz [ 430.529774][ T5911] usb 2-1: Manufacturer: syz [ 430.535483][ T796] usb 1-1: config 0 descriptor?? [ 430.557681][ T5911] usb 2-1: SerialNumber: syz [ 430.574655][ T5911] usb 2-1: config 0 descriptor?? [ 432.241774][ T5904] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 432.401402][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 432.419649][ T5904] usb 5-1: config 0 has no interfaces? [ 432.473927][ T5904] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 432.500201][ T5904] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 432.532919][ T5904] usb 5-1: Manufacturer: syz [ 432.572498][ T5904] usb 5-1: config 0 descriptor?? [ 433.504688][ T9] usb 1-1: USB disconnect, device number 44 [ 434.680176][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 434.695817][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 434.806667][ T5911] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 434.834047][ T5911] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 434.880476][ T5911] usb 2-1: USB disconnect, device number 63 [ 435.188373][ T9] usb 5-1: USB disconnect, device number 44 [ 435.329917][T10190] __nla_validate_parse: 7 callbacks suppressed [ 435.329932][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 435.387609][T10190] FAULT_INJECTION: forcing a failure. [ 435.387609][T10190] name failslab, interval 1, probability 0, space 0, times 0 [ 435.470114][T10190] CPU: 0 UID: 0 PID: 10190 Comm: syz.4.1174 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.470148][T10190] Tainted: [L]=SOFTLOCKUP [ 435.470156][T10190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.470170][T10190] Call Trace: [ 435.470179][T10190] [ 435.470191][T10190] dump_stack_lvl+0xe8/0x150 [ 435.470218][T10190] should_fail_ex+0x412/0x560 [ 435.470239][T10190] should_failslab+0xa8/0x100 [ 435.470259][T10190] __kvmalloc_node_noprof+0x178/0x8a0 [ 435.470276][T10190] ? rhashtable_init_noprof+0x52e/0xa70 [ 435.470297][T10190] ? rhashtable_init_noprof+0x12d/0xa70 [ 435.470320][T10190] rhashtable_init_noprof+0x52e/0xa70 [ 435.470339][T10190] ? __init_waitqueue_head+0xa9/0x150 [ 435.470360][T10190] rhltable_init_noprof+0x1e/0x60 [ 435.470380][T10190] sta_info_init+0x54/0x130 [ 435.470402][T10190] ieee80211_alloc_hw_nm+0x818/0x1f60 [ 435.470417][T10190] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 435.470447][T10190] mac80211_hwsim_new_radio+0x1dc/0x5330 [ 435.470472][T10190] ? __pfx_vprintk_emit+0x10/0x10 [ 435.470496][T10190] ? _printk_deferred+0xe9/0x140 [ 435.470516][T10190] ? _printk+0xdd/0x130 [ 435.470533][T10190] ? __pfx__printk+0x10/0x10 [ 435.470549][T10190] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 435.470572][T10190] ? rcu_is_watching+0x15/0xb0 [ 435.470604][T10190] hwsim_new_radio_nl+0xf35/0x1bd0 [ 435.470643][T10190] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 435.470673][T10190] ? rcu_is_watching+0x15/0xb0 [ 435.470693][T10190] ? trace_kmalloc+0x2a/0x110 [ 435.470712][T10190] ? __nla_parse+0x40/0x60 [ 435.470734][T10190] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 435.470763][T10190] genl_family_rcv_msg_doit+0x22a/0x330 [ 435.470791][T10190] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 435.470822][T10190] ? bpf_lsm_capable+0x9/0x20 [ 435.470842][T10190] ? security_capable+0x7e/0x2c0 [ 435.470863][T10190] genl_rcv_msg+0x61c/0x7a0 [ 435.470889][T10190] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.470909][T10190] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 435.470932][T10190] ? __lock_acquire+0x6b5/0x2cf0 [ 435.470959][T10190] netlink_rcv_skb+0x232/0x4b0 [ 435.470977][T10190] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.470999][T10190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.471028][T10190] ? down_read+0x272/0x2e0 [ 435.471041][T10190] ? genl_rcv+0xd/0x40 [ 435.471063][T10190] genl_rcv+0x28/0x40 [ 435.471100][T10190] netlink_unicast+0x80f/0x9b0 [ 435.471135][T10190] ? __pfx_netlink_unicast+0x10/0x10 [ 435.471160][T10190] ? netlink_sendmsg+0x650/0xb40 [ 435.471183][T10190] ? skb_put+0x11b/0x210 [ 435.471206][T10190] netlink_sendmsg+0x813/0xb40 [ 435.471242][T10190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.471269][T10190] ? aa_sock_msg_perm+0xf1/0x1b0 [ 435.471295][T10190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.471316][T10190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.471339][T10190] ____sys_sendmsg+0xa68/0xad0 [ 435.471378][T10190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.471417][T10190] ? import_iovec+0x73/0xa0 [ 435.471449][T10190] ___sys_sendmsg+0x2a5/0x360 [ 435.471484][T10190] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.471550][T10190] ? __fget_files+0x2a/0x420 [ 435.471577][T10190] ? __fget_files+0x3a0/0x420 [ 435.471623][T10190] __x64_sys_sendmsg+0x1bd/0x2a0 [ 435.471655][T10190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.471695][T10190] ? __pfx_ksys_write+0x10/0x10 [ 435.471728][T10190] do_syscall_64+0x14d/0xf80 [ 435.471757][T10190] ? trace_irq_disable+0x3b/0x150 [ 435.471786][T10190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.471807][T10190] ? clear_bhb_loop+0x40/0x90 [ 435.471832][T10190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.471854][T10190] RIP: 0033:0x7f4997d9c629 [ 435.471873][T10190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.471891][T10190] RSP: 002b:00007f4998c6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.471912][T10190] RAX: ffffffffffffffda RBX: 00007f4998015fa0 RCX: 00007f4997d9c629 [ 435.471927][T10190] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 435.471939][T10190] RBP: 00007f4998c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 435.471952][T10190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.471963][T10190] R13: 00007f4998016038 R14: 00007f4998015fa0 R15: 00007f499813fa48 [ 435.471996][T10190] [ 437.351961][T10216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.385919][T10216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.593316][T10217] kvm: pic: non byte write [ 439.406025][T10253] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1184'. [ 440.103969][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.110529][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.377668][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 440.393049][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 440.444879][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 440.454701][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 440.465406][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 440.728925][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 440.760730][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 440.811904][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 440.918876][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 441.052538][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 441.770335][T10262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.956107][T10285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.102388][T10294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.112338][T10294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.843227][T10313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.911928][T10313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.312099][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 446.575587][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 446.629954][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 446.672868][ T9] usb 2-1: config 0 has no interface number 0 [ 446.707786][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 446.805580][T10344] __nla_validate_parse: 25 callbacks suppressed [ 446.805596][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 446.848899][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 446.861740][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 446.873860][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 446.885820][T10346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.898302][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 446.911354][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 446.920857][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 446.937325][T10346] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 446.970709][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.986599][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 447.000330][ T9] usb 2-1: Product: syz [ 447.012812][ T9] usb 2-1: Manufacturer: syz [ 447.031901][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 447.040969][ T9] usb 2-1: SerialNumber: syz [ 447.092438][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 447.172353][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 447.235590][ T9] usb 2-1: config 0 descriptor?? [ 447.650155][T10344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.691637][ T5911] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 447.861384][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 447.870799][ T5911] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 447.880186][ T5911] usb 1-1: config 1 has no interface number 1 [ 447.944470][ T5911] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 447.980068][ T5911] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.994482][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.016903][ T5911] usb 1-1: Product: syz [ 448.025708][ T5911] usb 1-1: Manufacturer: syz [ 448.034167][ T5911] usb 1-1: SerialNumber: syz [ 448.331509][ T5911] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 448.566653][ T5911] usb 1-1: USB disconnect, device number 45 [ 448.762713][ T8054] udevd[8054]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 449.824772][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 449.837216][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 450.108337][ T9] usb 2-1: USB disconnect, device number 64 [ 450.754271][T10373] FAULT_INJECTION: forcing a failure. [ 450.754271][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 450.787649][T10373] CPU: 1 UID: 0 PID: 10373 Comm: syz.0.1212 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.787674][T10373] Tainted: [L]=SOFTLOCKUP [ 450.787680][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.787689][T10373] Call Trace: [ 450.787695][T10373] [ 450.787702][T10373] dump_stack_lvl+0xe8/0x150 [ 450.787728][T10373] should_fail_ex+0x412/0x560 [ 450.787749][T10373] should_failslab+0xa8/0x100 [ 450.787769][T10373] __kmalloc_cache_noprof+0x88/0x660 [ 450.787790][T10373] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 450.787811][T10373] ? nft_trans_table_add+0x56/0x430 [ 450.787837][T10373] nft_trans_table_add+0x56/0x430 [ 450.787865][T10373] nf_tables_newtable+0xce3/0x1910 [ 450.787900][T10373] nfnetlink_rcv+0x1240/0x27b0 [ 450.787939][T10373] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 450.787965][T10373] ? ref_tracker_free+0x693/0x840 [ 450.788003][T10373] ? __netlink_deliver_tap+0x807/0x850 [ 450.788021][T10373] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.788050][T10373] netlink_unicast+0x80f/0x9b0 [ 450.788071][T10373] ? __pfx_netlink_unicast+0x10/0x10 [ 450.788088][T10373] ? netlink_sendmsg+0x650/0xb40 [ 450.788104][T10373] ? skb_put+0x11b/0x210 [ 450.788146][T10373] netlink_sendmsg+0x813/0xb40 [ 450.788170][T10373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.788191][T10373] ? aa_sock_msg_perm+0xf1/0x1b0 [ 450.788211][T10373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.788229][T10373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.788251][T10373] ____sys_sendmsg+0xa68/0xad0 [ 450.788279][T10373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.788306][T10373] ? import_iovec+0x73/0xa0 [ 450.788330][T10373] ___sys_sendmsg+0x2a5/0x360 [ 450.788355][T10373] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.788400][T10373] ? __fget_files+0x2a/0x420 [ 450.788420][T10373] ? __fget_files+0x3a0/0x420 [ 450.788474][T10373] __x64_sys_sendmsg+0x1bd/0x2a0 [ 450.788508][T10373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.788553][T10373] ? __pfx_ksys_write+0x10/0x10 [ 450.788576][T10373] do_syscall_64+0x14d/0xf80 [ 450.788599][T10373] ? trace_irq_disable+0x3b/0x150 [ 450.788620][T10373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.788635][T10373] ? clear_bhb_loop+0x40/0x90 [ 450.788653][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.788668][T10373] RIP: 0033:0x7f248bb9c629 [ 450.788681][T10373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.788694][T10373] RSP: 002b:00007f248c9ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.788710][T10373] RAX: ffffffffffffffda RBX: 00007f248be15fa0 RCX: 00007f248bb9c629 [ 450.788720][T10373] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 450.788729][T10373] RBP: 00007f248c9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 450.788738][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.788747][T10373] R13: 00007f248be16038 R14: 00007f248be15fa0 R15: 00007f248bf3fa48 [ 450.788770][T10373] [ 452.576132][T10389] __nla_validate_parse: 12 callbacks suppressed [ 452.576230][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 452.598586][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 452.611198][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 452.650390][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 452.688423][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 452.714850][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 452.747602][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 452.777928][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 452.802285][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 452.830921][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 452.877525][T10389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 454.665412][T10412] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 454.751398][ T5889] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 455.204879][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 455.253823][ T5889] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 455.285608][ T5889] usb 5-1: config 0 has no interface number 0 [ 455.307334][ T5889] usb 5-1: config 0 interface 184 has no altsetting 0 [ 455.333838][ T5889] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 455.746915][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.755638][ T5889] usb 5-1: Product: syz [ 455.759877][ T5889] usb 5-1: Manufacturer: syz [ 455.764870][ T5889] usb 5-1: SerialNumber: syz [ 455.771850][ T5889] usb 5-1: config 0 descriptor?? [ 455.961426][ T796] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 456.331486][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 456.405757][ T796] usb 2-1: config 0 has no interfaces? [ 456.413771][ T796] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 456.778684][ T796] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 456.804413][ T796] usb 2-1: Manufacturer: syz [ 456.835450][ T796] usb 2-1: config 0 descriptor?? [ 457.299272][ T5889] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 457.332151][ T5889] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 457.390445][ T5889] usb 5-1: USB disconnect, device number 45 [ 457.792290][ T980] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 458.031817][ T980] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 458.050296][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.078354][ T980] usb 3-1: config 0 has no interface number 0 [ 458.097499][ T980] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 458.252188][ T980] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.344377][ T980] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 458.364406][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.416250][ T980] usb 3-1: Product: syz [ 458.578663][ T980] usb 3-1: Manufacturer: syz [ 458.583750][ T980] usb 3-1: SerialNumber: syz [ 458.600448][ T980] usb 3-1: config 0 descriptor?? [ 458.642080][ T10] usb 2-1: USB disconnect, device number 65 [ 458.759741][T10443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.841874][T10443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.537956][ T980] usb 3-1: USB disconnect, device number 51 [ 460.104080][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.139828][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.654400][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.670897][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.142144][T10490] capability: warning: `syz.2.1242' uses deprecated v2 capabilities in a way that may be insecure [ 462.167766][T10491] FAULT_INJECTION: forcing a failure. [ 462.167766][T10491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.183699][T10491] CPU: 0 UID: 0 PID: 10491 Comm: syz.0.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.183732][T10491] Tainted: [L]=SOFTLOCKUP [ 462.183740][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.183751][T10491] Call Trace: [ 462.183760][T10491] [ 462.183768][T10491] dump_stack_lvl+0xe8/0x150 [ 462.183803][T10491] should_fail_ex+0x412/0x560 [ 462.183833][T10491] copy_folio_from_iter_atomic+0x30f/0x1950 [ 462.183886][T10491] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 462.183925][T10491] ? shmem_write_begin+0x1d8/0x330 [ 462.183964][T10491] generic_perform_write+0x5d9/0x8f0 [ 462.184003][T10491] ? __pfx_generic_perform_write+0x10/0x10 [ 462.184030][T10491] ? do_raw_spin_unlock+0xf5/0x210 [ 462.184052][T10491] ? mnt_put_write_access_file+0xc0/0x100 [ 462.184078][T10491] ? file_update_time_flags+0x400/0x4a0 [ 462.184103][T10491] shmem_file_write_iter+0xf8/0x120 [ 462.184139][T10491] vfs_write+0x61d/0xb90 [ 462.184170][T10491] ? __pfx_vfs_write+0x10/0x10 [ 462.184202][T10491] ? __fget_files+0x2a/0x420 [ 462.184241][T10491] ksys_write+0x150/0x270 [ 462.184265][T10491] ? __pfx_ksys_write+0x10/0x10 [ 462.184299][T10491] do_syscall_64+0x14d/0xf80 [ 462.184329][T10491] ? trace_irq_disable+0x3b/0x150 [ 462.184359][T10491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.184380][T10491] ? clear_bhb_loop+0x40/0x90 [ 462.184406][T10491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.184435][T10491] RIP: 0033:0x7f248bb9c629 [ 462.184456][T10491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.184473][T10491] RSP: 002b:00007f248c9ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.184495][T10491] RAX: ffffffffffffffda RBX: 00007f248be15fa0 RCX: 00007f248bb9c629 [ 462.184510][T10491] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000003 [ 462.184523][T10491] RBP: 00007f248c9ac090 R08: 0000000000000000 R09: 0000000000000000 [ 462.184536][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.184548][T10491] R13: 00007f248be16038 R14: 00007f248be15fa0 R15: 00007f248bf3fa48 [ 462.184581][T10491] [ 462.701496][ T5911] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 462.845342][T10507] __nla_validate_parse: 7 callbacks suppressed [ 462.845393][T10507] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1240'. [ 462.882463][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.894387][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.914732][ T5911] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 462.932481][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.954404][ T5911] usb 2-1: config 0 descriptor?? [ 463.907279][ T5911] usbhid 2-1:0.0: can't add hid device: -71 [ 463.915074][ T5911] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 464.029487][ T5911] usb 2-1: USB disconnect, device number 66 [ 464.172023][T10511] pim6reg1: entered promiscuous mode [ 464.485610][T10511] pim6reg1: entered allmulticast mode [ 464.777489][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1247'. [ 467.164423][ T5904] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 467.325831][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.338266][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.350113][ T5904] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 467.369048][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.422300][ T5904] usb 1-1: config 0 descriptor?? [ 468.180460][ T5904] usbhid 1-1:0.0: can't add hid device: -71 [ 468.197990][ T5904] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 468.228154][ T5904] usb 1-1: USB disconnect, device number 46 [ 468.259065][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.303703][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.970314][T10573] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1261'. [ 469.010892][T10573] netlink: 'syz.1.1261': attribute type 10 has an invalid length. [ 469.245802][T10573] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1261'. [ 471.134915][ T796] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 471.541453][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 471.550840][ T796] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 471.559885][ T796] usb 3-1: config 0 has no interface number 0 [ 471.568104][ T796] usb 3-1: config 0 interface 184 has no altsetting 0 [ 471.602564][ T796] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 471.642495][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.665368][ T796] usb 3-1: Product: syz [ 471.674792][ T796] usb 3-1: Manufacturer: syz [ 471.706593][ T796] usb 3-1: SerialNumber: syz [ 471.725474][ T796] usb 3-1: config 0 descriptor?? [ 472.052141][T10614] binder: BINDER_SET_CONTEXT_MGR already set [ 472.058735][T10614] binder: 10607:10614 ioctl 4018620d 200000004a80 returned -16 [ 475.126434][ T796] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 475.201748][ T796] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 475.215722][T10638] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1274'. [ 475.261328][ T980] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 475.299891][ T796] usb 3-1: USB disconnect, device number 52 [ 475.448634][ T980] usb 2-1: config 0 has an invalid interface number: 177 but max is 0 [ 475.458937][ T980] usb 2-1: config 0 has no interface number 0 [ 475.473370][ T980] usb 2-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=39.5d [ 475.489844][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.508207][ T980] usb 2-1: Product: syz [ 475.520473][ T980] usb 2-1: Manufacturer: syz [ 475.530433][ T980] usb 2-1: SerialNumber: syz [ 475.576286][ T980] usb 2-1: config 0 descriptor?? [ 477.190306][T10670] netlink: 'syz.3.1281': attribute type 10 has an invalid length. [ 477.311701][T10670] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1281'. [ 477.411097][ T980] usb 2-1: USB disconnect, device number 67 [ 479.531396][T10694] binder: BINDER_SET_CONTEXT_MGR already set [ 479.537803][T10694] binder: 10690:10694 ioctl 4018620d 200000004a80 returned -16 [ 482.835599][T10724] netlink: 'syz.3.1293': attribute type 8 has an invalid length. [ 483.088901][T10735] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1295'. [ 483.100351][T10735] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1295'. [ 483.119405][T10736] fuse: Bad value for 'fd' [ 483.126232][T10736] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1294'. [ 485.541419][ T5911] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 485.710830][ T5911] usb 2-1: not running at top speed; connect to a high speed hub [ 485.736429][ T5911] usb 2-1: config 254 has an invalid interface number: 254 but max is 3 [ 485.768776][ T5911] usb 2-1: config 254 has an invalid descriptor of length 1, skipping remainder of the config [ 485.840064][ T5911] usb 2-1: config 254 has 2 interfaces, different from the descriptor's value: 4 [ 485.867259][ T5911] usb 2-1: config 254 has no interface number 0 [ 485.887480][ T5911] usb 2-1: config 254 has no interface number 1 [ 485.907182][ T5911] usb 2-1: config 254 interface 254 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 485.971987][ T5911] usb 2-1: too many endpoints for config 254 interface 2 altsetting 7: 154, using maximum allowed: 30 [ 486.012265][ T5911] usb 2-1: config 254 interface 2 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 154 [ 486.058696][ T5911] usb 2-1: config 254 interface 254 has no altsetting 0 [ 486.086343][ T5911] usb 2-1: config 254 interface 2 has no altsetting 0 [ 486.110430][ T5911] usb 2-1: New USB device found, idVendor=3195, idProduct=f190, bcdDevice=15.b6 [ 486.119900][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.144845][ T5911] usb 2-1: Product: syz [ 486.150910][ T5911] usb 2-1: Manufacturer: 《 [ 486.151492][ T5911] usb 2-1: SerialNumber: syz [ 486.426341][ T5911] cp210x 2-1:254.254: cp210x converter detected [ 486.441395][ T5911] cp210x 2-1:254.254: failed to get vendor val 0x370b size 1: -71 [ 486.449725][ T5911] cp210x 2-1:254.254: querying part number failed [ 486.556767][ T5911] usb 2-1: cp210x converter now attached to ttyUSB0 [ 486.608275][ T5911] cp210x 2-1:254.2: cp210x converter detected [ 486.631615][ T5911] cp210x 2-1:254.2: failed to get vendor val 0x370b size 1: -71 [ 486.687629][ T5911] cp210x 2-1:254.2: querying part number failed [ 486.703515][ T5911] usb 2-1: cp210x converter now attached to ttyUSB1 [ 486.725840][ T5911] usb 2-1: USB disconnect, device number 68 [ 486.747288][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 486.760145][ T5911] cp210x 2-1:254.254: device disconnected [ 486.808496][ T5911] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 486.829654][ T5911] cp210x 2-1:254.2: device disconnected [ 487.272936][T10769] FAULT_INJECTION: forcing a failure. [ 487.272936][T10769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.360936][T10769] CPU: 0 UID: 0 PID: 10769 Comm: syz.4.1304 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.360970][T10769] Tainted: [L]=SOFTLOCKUP [ 487.360978][T10769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.360991][T10769] Call Trace: [ 487.360999][T10769] [ 487.361008][T10769] dump_stack_lvl+0xe8/0x150 [ 487.361043][T10769] should_fail_ex+0x412/0x560 [ 487.361073][T10769] _copy_from_user+0x2d/0xb0 [ 487.361104][T10769] tiocswinsz+0x8e/0x160 [ 487.361130][T10769] ? __pfx_tiocswinsz+0x10/0x10 [ 487.361157][T10769] ? __fget_files+0x2a/0x420 [ 487.361185][T10769] ? __fget_files+0x3a0/0x420 [ 487.361216][T10769] ? __fget_files+0x2a/0x420 [ 487.361247][T10769] tty_ioctl+0x225/0xde0 [ 487.361274][T10769] ? __pfx_tty_ioctl+0x10/0x10 [ 487.361300][T10769] __se_sys_ioctl+0xfc/0x170 [ 487.361325][T10769] do_syscall_64+0x14d/0xf80 [ 487.361355][T10769] ? trace_irq_disable+0x3b/0x150 [ 487.361385][T10769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.361406][T10769] ? clear_bhb_loop+0x40/0x90 [ 487.361431][T10769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.361451][T10769] RIP: 0033:0x7f4997d9c629 [ 487.361470][T10769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.361487][T10769] RSP: 002b:00007f4998c6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.361509][T10769] RAX: ffffffffffffffda RBX: 00007f4998015fa0 RCX: 00007f4997d9c629 [ 487.361524][T10769] RDX: 0000200000000040 RSI: 0000000000005414 RDI: 0000000000000003 [ 487.361537][T10769] RBP: 00007f4998c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 487.361550][T10769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.361562][T10769] R13: 00007f4998016038 R14: 00007f4998015fa0 R15: 00007f499813fa48 [ 487.361595][T10769] [ 487.422394][ T5896] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 488.126115][T10786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1307'. [ 488.323826][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 488.341389][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 488.356006][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 488.416768][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 488.431995][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 488.442101][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 488.473483][T10786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1307'. [ 488.476221][ T5896] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 488.544990][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.601365][ T5896] usb 2-1: Product: syz [ 488.607898][ T5896] usb 2-1: Manufacturer: syz [ 488.614451][ T5896] usb 2-1: SerialNumber: syz [ 488.624804][ T5896] usb 2-1: config 0 descriptor?? [ 488.833320][ T5896] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 488.864211][T10767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.932069][T10767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.006063][ T5896] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 490.253019][T10799] fuse: Bad value for 'fd' [ 490.259647][T10799] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1310'. [ 491.598397][ T796] usb 2-1: USB disconnect, device number 69 [ 492.373126][T10813] FAULT_INJECTION: forcing a failure. [ 492.373126][T10813] name failslab, interval 1, probability 0, space 0, times 0 [ 492.397526][T10813] CPU: 1 UID: 0 PID: 10813 Comm: syz.2.1314 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.397551][T10813] Tainted: [L]=SOFTLOCKUP [ 492.397556][T10813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.397565][T10813] Call Trace: [ 492.397571][T10813] [ 492.397577][T10813] dump_stack_lvl+0xe8/0x150 [ 492.397603][T10813] should_fail_ex+0x412/0x560 [ 492.397625][T10813] should_failslab+0xa8/0x100 [ 492.397644][T10813] __kmalloc_cache_noprof+0x88/0x660 [ 492.397661][T10813] ? fl_change+0x19e/0x38b0 [ 492.397680][T10813] ? __kmalloc_cache_noprof+0x15b/0x660 [ 492.397699][T10813] fl_change+0x19e/0x38b0 [ 492.397722][T10813] ? fl_get+0x9a/0x3b0 [ 492.397746][T10813] ? fl_get+0x9a/0x3b0 [ 492.397764][T10813] ? fl_get+0x9a/0x3b0 [ 492.397780][T10813] ? fl_get+0x9a/0x3b0 [ 492.397799][T10813] ? fl_get+0x326/0x3b0 [ 492.397817][T10813] ? __pfx_fl_change+0x10/0x10 [ 492.397837][T10813] ? __pfx_fl_get+0x10/0x10 [ 492.397861][T10813] tc_new_tfilter+0xe1c/0x1630 [ 492.397902][T10813] ? __pfx_tc_new_tfilter+0x10/0x10 [ 492.397945][T10813] ? __pfx_tc_new_tfilter+0x10/0x10 [ 492.397965][T10813] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 492.397987][T10813] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 492.398004][T10813] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 492.398025][T10813] ? do_raw_spin_unlock+0xf5/0x210 [ 492.398048][T10813] netlink_rcv_skb+0x232/0x4b0 [ 492.398067][T10813] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 492.398086][T10813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.398119][T10813] netlink_unicast+0x80f/0x9b0 [ 492.398140][T10813] ? __pfx_netlink_unicast+0x10/0x10 [ 492.398162][T10813] netlink_sendmsg+0x813/0xb40 [ 492.398187][T10813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.398206][T10813] ? aa_sock_msg_perm+0xf1/0x1b0 [ 492.398232][T10813] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.398249][T10813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.398266][T10813] ____sys_sendmsg+0xa68/0xad0 [ 492.398294][T10813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.398322][T10813] ? import_iovec+0x73/0xa0 [ 492.398345][T10813] ___sys_sendmsg+0x2a5/0x360 [ 492.398371][T10813] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.398417][T10813] ? __fget_files+0x2a/0x420 [ 492.398438][T10813] ? __fget_files+0x3a0/0x420 [ 492.398466][T10813] __x64_sys_sendmsg+0x1bd/0x2a0 [ 492.398489][T10813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.398518][T10813] ? __pfx_ksys_write+0x10/0x10 [ 492.398541][T10813] do_syscall_64+0x14d/0xf80 [ 492.398563][T10813] ? trace_irq_disable+0x3b/0x150 [ 492.398584][T10813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.398600][T10813] ? clear_bhb_loop+0x40/0x90 [ 492.398618][T10813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.398633][T10813] RIP: 0033:0x7f076419c629 [ 492.398647][T10813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.398659][T10813] RSP: 002b:00007f0765122028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.398674][T10813] RAX: ffffffffffffffda RBX: 00007f0764415fa0 RCX: 00007f076419c629 [ 492.398685][T10813] RDX: 0000000020084084 RSI: 0000200000000580 RDI: 0000000000000005 [ 492.398695][T10813] RBP: 00007f0765122090 R08: 0000000000000000 R09: 0000000000000000 [ 492.398704][T10813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 492.398713][T10813] R13: 00007f0764416038 R14: 00007f0764415fa0 R15: 00007f076453fa48 [ 492.398736][T10813] [ 493.384026][T10826] fuse: Bad value for 'fd' [ 493.390970][T10826] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1315'. [ 493.661326][ T796] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 494.063851][ T796] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 494.115747][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.214834][ T796] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 494.321369][ T796] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 494.345529][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.380866][ T796] usb 3-1: config 0 descriptor?? [ 494.445999][ T796] usbhid 3-1:0.0: can't add hid device: -22 [ 494.456603][ T796] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 497.155126][ T5911] usb 3-1: USB disconnect, device number 53 [ 497.488990][T10860] pim6reg1: entered promiscuous mode [ 497.494483][T10860] pim6reg1: entered allmulticast mode [ 497.796816][T10868] FAULT_INJECTION: forcing a failure. [ 497.796816][T10868] name failslab, interval 1, probability 0, space 0, times 0 [ 497.878248][T10868] CPU: 1 UID: 0 PID: 10868 Comm: syz.2.1327 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.878282][T10868] Tainted: [L]=SOFTLOCKUP [ 497.878290][T10868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.878303][T10868] Call Trace: [ 497.878312][T10868] [ 497.878321][T10868] dump_stack_lvl+0xe8/0x150 [ 497.878356][T10868] should_fail_ex+0x412/0x560 [ 497.878384][T10868] should_failslab+0xa8/0x100 [ 497.878410][T10868] __kmalloc_noprof+0xe8/0x760 [ 497.878430][T10868] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 497.878463][T10868] tomoyo_realpath_from_path+0xe3/0x5d0 [ 497.878500][T10868] ? tomoyo_path_number_perm+0x219/0x630 [ 497.878521][T10868] tomoyo_path_number_perm+0x246/0x630 [ 497.878545][T10868] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 497.878569][T10868] ? __lock_acquire+0x6b5/0x2cf0 [ 497.878608][T10868] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 497.878662][T10868] ? __fget_files+0x2a/0x420 [ 497.878694][T10868] ? __fget_files+0x2a/0x420 [ 497.878722][T10868] ? __fget_files+0x3a0/0x420 [ 497.878749][T10868] ? __fget_files+0x2a/0x420 [ 497.878782][T10868] security_file_ioctl+0xc3/0x2a0 [ 497.878817][T10868] __se_sys_ioctl+0x47/0x170 [ 497.878841][T10868] do_syscall_64+0x14d/0xf80 [ 497.878869][T10868] ? trace_irq_disable+0x3b/0x150 [ 497.878908][T10868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.878929][T10868] ? clear_bhb_loop+0x40/0x90 [ 497.878954][T10868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.878973][T10868] RIP: 0033:0x7f076419c629 [ 497.878992][T10868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.879009][T10868] RSP: 002b:00007f0765122028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.879031][T10868] RAX: ffffffffffffffda RBX: 00007f0764415fa0 RCX: 00007f076419c629 [ 497.879046][T10868] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000003 [ 497.879059][T10868] RBP: 00007f0765122090 R08: 0000000000000000 R09: 0000000000000000 [ 497.879071][T10868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.879083][T10868] R13: 00007f0764416038 R14: 00007f0764415fa0 R15: 00007f076453fa48 [ 497.879115][T10868] [ 497.879851][T10868] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.621915][T10891] FAULT_INJECTION: forcing a failure. [ 499.621915][T10891] name failslab, interval 1, probability 0, space 0, times 0 [ 499.641916][T10891] CPU: 0 UID: 0 PID: 10891 Comm: syz.4.1332 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.641949][T10891] Tainted: [L]=SOFTLOCKUP [ 499.641957][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.641968][T10891] Call Trace: [ 499.641976][T10891] [ 499.641984][T10891] dump_stack_lvl+0xe8/0x150 [ 499.642018][T10891] should_fail_ex+0x412/0x560 [ 499.642044][T10891] ? sock_alloc_inode+0x28/0xc0 [ 499.642068][T10891] should_failslab+0xa8/0x100 [ 499.642094][T10891] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 499.642129][T10891] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.642153][T10891] ? __pfx_sock_alloc_inode+0x10/0x10 [ 499.642174][T10891] sock_alloc_inode+0x28/0xc0 [ 499.642195][T10891] alloc_inode+0x6a/0x1b0 [ 499.642223][T10891] __sock_create+0x12d/0x9d0 [ 499.642245][T10891] ? __lock_acquire+0x6b5/0x2cf0 [ 499.642280][T10891] mptcp_subflow_create_socket+0xfb/0x800 [ 499.642302][T10891] ? tcp_cleanup_congestion_control+0x11d/0x180 [ 499.642341][T10891] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 499.642368][T10891] ? do_raw_spin_lock+0x12b/0x2f0 [ 499.642392][T10891] __mptcp_nmpc_sk+0x155/0x790 [ 499.642418][T10891] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 499.642438][T10891] ? mptcp_pm_nl_add_addr_doit+0xaa0/0x1500 [ 499.642471][T10891] ? __local_bh_enable_ip+0xd0/0x130 [ 499.642514][T10891] mptcp_pm_nl_add_addr_doit+0xaf6/0x1500 [ 499.642544][T10891] ? __nla_validate_parse+0x2480/0x2dc0 [ 499.642580][T10891] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 499.642617][T10891] ? __pfx___nla_validate_parse+0x10/0x10 [ 499.642692][T10891] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 499.642734][T10891] genl_family_rcv_msg_doit+0x22a/0x330 [ 499.642766][T10891] ? __asan_memcpy+0x40/0x70 [ 499.642801][T10891] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 499.642844][T10891] ? bpf_lsm_capable+0x9/0x20 [ 499.642871][T10891] ? security_capable+0x7e/0x2c0 [ 499.642901][T10891] genl_rcv_msg+0x61c/0x7a0 [ 499.642939][T10891] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.642968][T10891] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 499.643000][T10891] ? __lock_acquire+0x6b5/0x2cf0 [ 499.643038][T10891] netlink_rcv_skb+0x232/0x4b0 [ 499.643063][T10891] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.643094][T10891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.643137][T10891] ? down_read+0x272/0x2e0 [ 499.643156][T10891] ? genl_rcv+0xd/0x40 [ 499.643186][T10891] genl_rcv+0x28/0x40 [ 499.643214][T10891] netlink_unicast+0x80f/0x9b0 [ 499.643245][T10891] ? __pfx_netlink_unicast+0x10/0x10 [ 499.643270][T10891] ? netlink_sendmsg+0x650/0xb40 [ 499.643292][T10891] ? skb_put+0x11b/0x210 [ 499.643323][T10891] netlink_sendmsg+0x813/0xb40 [ 499.643358][T10891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.643387][T10891] ? aa_sock_msg_perm+0xf1/0x1b0 [ 499.643413][T10891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 499.643436][T10891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.643460][T10891] ____sys_sendmsg+0xa68/0xad0 [ 499.643499][T10891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.643540][T10891] ? import_iovec+0x73/0xa0 [ 499.643573][T10891] ___sys_sendmsg+0x2a5/0x360 [ 499.643609][T10891] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.643686][T10891] ? __fget_files+0x2a/0x420 [ 499.643715][T10891] ? __fget_files+0x3a0/0x420 [ 499.643755][T10891] __x64_sys_sendmsg+0x1bd/0x2a0 [ 499.643787][T10891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.643828][T10891] ? __pfx_ksys_write+0x10/0x10 [ 499.643862][T10891] do_syscall_64+0x14d/0xf80 [ 499.643893][T10891] ? trace_irq_disable+0x3b/0x150 [ 499.643922][T10891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.643944][T10891] ? clear_bhb_loop+0x40/0x90 [ 499.643970][T10891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.643991][T10891] RIP: 0033:0x7f4997d9c629 [ 499.644011][T10891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.644028][T10891] RSP: 002b:00007f4998c6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.644051][T10891] RAX: ffffffffffffffda RBX: 00007f4998015fa0 RCX: 00007f4997d9c629 [ 499.644065][T10891] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 499.644078][T10891] RBP: 00007f4998c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 499.644091][T10891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.644103][T10891] R13: 00007f4998016038 R14: 00007f4998015fa0 R15: 00007f499813fa48 [ 499.644136][T10891] [ 499.644148][T10891] socket: no more sockets [ 500.426575][T10899] binder: BINDER_SET_CONTEXT_MGR already set [ 500.432857][T10899] binder: 10892:10899 ioctl 4018620d 200000004a80 returned -16 [ 500.785872][T10911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1335'. [ 500.948636][T10911] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 500.956746][T10911] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1335'. [ 500.973957][ T5911] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 501.001671][ T796] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 501.202436][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 501.227423][ T5911] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 501.237176][ T5911] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 501.255506][ T5911] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 501.268859][ T5911] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 501.268978][ T796] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 501.320097][ T5911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 501.359508][ T5911] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 501.368752][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.381097][ T5911] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 501.391516][ T5911] usb 1-1: Product: syz [ 501.399872][ T5911] usb 1-1: Manufacturer: syz [ 501.418731][ T796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 501.511323][ T796] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 501.565110][ T5911] usb 1-1: SerialNumber: syz [ 501.571141][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.577554][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.596787][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.748681][ T796] usb 5-1: config 0 descriptor?? [ 501.777816][ T5911] usb 1-1: config 0 descriptor?? [ 501.817583][ T5911] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 501.820299][ T796] usbhid 5-1:0.0: can't add hid device: -22 [ 501.898411][ T796] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 501.918238][ T5911] ldusb 1-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 502.583414][T10917] pim6reg1: entered promiscuous mode [ 502.589584][T10917] pim6reg1: entered allmulticast mode [ 502.978322][T10922] sctp: [Deprecated]: syz.3.1340 (pid 10922) Use of int in maxseg socket option. [ 502.978322][T10922] Use struct sctp_assoc_value instead [ 503.011373][ T5889] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 503.162393][ T796] usb 1-1: USB disconnect, device number 47 [ 503.177340][ T796] ldusb 1-1:0.0: LD USB Device #1 now disconnected [ 503.191526][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.205071][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.239542][ T5889] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 503.325216][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.381040][ T5889] usb 3-1: config 0 descriptor?? [ 504.629016][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 504.638565][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 504.660431][ T5889] usb 3-1: USB disconnect, device number 54 [ 505.149684][ T980] usb 5-1: USB disconnect, device number 46 [ 506.016902][T10958] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 508.229104][ T5911] IPVS: starting estimator thread 0... [ 508.353794][T10985] IPVS: using max 26 ests per chain, 62400 per kthread [ 508.511544][ T5889] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 508.598833][T10990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.608513][T10990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.812336][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 508.821731][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.833465][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 508.858641][ T5889] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 508.878343][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.918604][ T5889] usb 5-1: config 0 descriptor?? [ 509.336451][ T5889] kye 0003:0458:5010.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 509.375465][ T5889] kye 0003:0458:5010.0006: hidraw0: USB HID v0.0f Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 509.438965][ T5889] kye 0003:0458:5010.0006: tablet-enabling feature report not found [ 509.455919][ T5889] kye 0003:0458:5010.0006: tablet enabling failed [ 510.051342][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 510.216465][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.229693][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.246767][ T9] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 510.258506][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.282202][ T9] usb 1-1: config 0 descriptor?? [ 510.765015][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 510.771141][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 510.793638][ T9] usb 1-1: USB disconnect, device number 48 [ 511.029196][ T5896] usb 5-1: USB disconnect, device number 47 [ 511.858796][T11012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1361'. [ 512.111361][ T5896] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 512.291402][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 512.305839][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.382399][ T5896] usb 5-1: config 0 has no interfaces? [ 512.394866][ T5896] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 512.404813][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.413142][ T5896] usb 5-1: Product: syz [ 512.417947][ T5896] usb 5-1: Manufacturer: syz [ 512.422738][ T5896] usb 5-1: SerialNumber: syz [ 512.452259][ T5896] usb 5-1: config 0 descriptor?? [ 513.065196][T11022] binder: 11019:11022 ioctl c0306201 200000004a40 returned -14 [ 514.250479][ T5889] usb 5-1: USB disconnect, device number 48 [ 514.961599][ T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 515.621878][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 515.641479][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.668979][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 515.715859][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.745040][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 515.766815][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.802732][ T9] usb 2-1: config 0 descriptor?? [ 515.817175][T11041] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 515.826573][ T9] hub 2-1:0.0: USB hub found [ 515.973076][T11049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1370'. [ 516.031070][ T9] hub 2-1:0.0: 2 ports detected [ 516.531380][ T5889] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 516.616300][T11057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1373'. [ 516.626956][T11057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1373'. [ 516.793423][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.805960][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.817751][ T5889] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 516.933475][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.949163][ T5889] usb 3-1: config 0 descriptor?? [ 517.289488][ T9] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 517.310046][ T9] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 517.356668][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 517.368007][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 517.455791][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 517.462108][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 517.489886][ T5889] usb 3-1: USB disconnect, device number 55 [ 517.503128][ T9] usb 2-1: USB disconnect, device number 70 [ 518.581757][T11069] binder: BINDER_SET_CONTEXT_MGR already set [ 518.587905][T11069] binder: 11063:11069 ioctl 4018620d 200000004a80 returned -16 [ 520.929622][T11090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.000937][T11090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.279357][T11106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1386'. [ 522.611880][T11115] sch_tbf: burst 274 is lower than device lo mtu (11337746) ! [ 524.115748][T11134] sctp: [Deprecated]: syz.3.1392 (pid 11134) Use of int in maxseg socket option. [ 524.115748][T11134] Use struct sctp_assoc_value instead [ 526.468729][T11150] geneve2: entered promiscuous mode [ 526.501067][T11150] gre0: entered promiscuous mode [ 526.602848][T11156] netlink: 'syz.2.1396': attribute type 2 has an invalid length. [ 528.074895][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 528.108011][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 528.130905][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 528.164124][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 528.183814][T11167] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1398'. [ 528.253544][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 528.302700][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 528.334278][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 528.391835][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 528.410280][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1399'. [ 528.439743][T11168] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.563817][T11178] binder: BINDER_SET_CONTEXT_MGR already set [ 528.570085][T11178] binder: 11172:11178 ioctl 4018620d 200000004a80 returned -16 [ 529.391786][T11183] binder: BINDER_SET_CONTEXT_MGR already set [ 529.397890][T11183] binder: 11180:11183 ioctl 4018620d 200000004a80 returned -16 [ 532.104127][T11206] netlink: 'syz.3.1406': attribute type 10 has an invalid length. [ 534.714517][T11239] __nla_validate_parse: 13 callbacks suppressed [ 534.714533][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 534.739847][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 534.843326][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 534.875762][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 535.015210][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 535.025445][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 535.035265][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 535.044870][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 535.091816][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 535.102124][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1416'. [ 535.422825][T11239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.574387][ T5911] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 538.735242][ T5911] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 538.780137][ T5911] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 538.831988][ T5911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 538.861952][ T5911] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 538.886767][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 538.912015][ T5911] usb 5-1: Product: syz [ 538.927668][ T5911] usb 5-1: Manufacturer: syz [ 538.937594][ T5911] usb 5-1: SerialNumber: syz [ 538.950707][ T5911] usb 5-1: config 0 descriptor?? [ 538.974365][ T5911] usb 5-1: selecting invalid altsetting 0 [ 539.584395][T11292] random: crng reseeded on system resumption [ 541.262701][T11303] sctp: [Deprecated]: syz.1.1430 (pid 11303) Use of int in maxseg socket option. [ 541.262701][T11303] Use struct sctp_assoc_value instead [ 541.553473][ T5911] usb 5-1: USB disconnect, device number 49 [ 542.665032][T11321] __nla_validate_parse: 9 callbacks suppressed [ 542.665052][T11321] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1431'. [ 542.792021][T11323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1433'. [ 543.217308][T11328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.727568][T11330] geneve2: entered promiscuous mode [ 543.733011][T11330] geneve2: entered allmulticast mode [ 545.162368][T11350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.171681][T11350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.483475][T11352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1439'. [ 545.987797][T11359] netlink: 'syz.4.1441': attribute type 4 has an invalid length. [ 546.751862][ T5911] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 546.800823][T11365] FAULT_INJECTION: forcing a failure. [ 546.800823][T11365] name failslab, interval 1, probability 0, space 0, times 0 [ 546.815804][T11365] CPU: 0 UID: 0 PID: 11365 Comm: syz.1.1442 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.815838][T11365] Tainted: [L]=SOFTLOCKUP [ 546.815844][T11365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.815853][T11365] Call Trace: [ 546.815859][T11365] [ 546.815865][T11365] dump_stack_lvl+0xe8/0x150 [ 546.815891][T11365] should_fail_ex+0x412/0x560 [ 546.815911][T11365] should_failslab+0xa8/0x100 [ 546.815929][T11365] ? skb_clone+0x212/0x3a0 [ 546.815950][T11365] kmem_cache_alloc_noprof+0x87/0x650 [ 546.815979][T11365] skb_clone+0x212/0x3a0 [ 546.816003][T11365] __netlink_deliver_tap+0x404/0x850 [ 546.816030][T11365] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.816047][T11365] netlink_deliver_tap+0x19c/0x1b0 [ 546.816065][T11365] netlink_sendskb+0x68/0x140 [ 546.816081][T11365] netlink_unicast+0x3a3/0x9b0 [ 546.816102][T11365] ? __pfx_netlink_unicast+0x10/0x10 [ 546.816123][T11365] netlink_rcv_skb+0x2b6/0x4b0 [ 546.816141][T11365] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 546.816157][T11365] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.816182][T11365] ? bpf_lsm_capable+0x9/0x20 [ 546.816201][T11365] ? security_capable+0x7e/0x2c0 [ 546.816222][T11365] nfnetlink_rcv+0x2c0/0x27b0 [ 546.816245][T11365] ? __local_bh_enable_ip+0xd0/0x130 [ 546.816266][T11365] ? lockdep_hardirqs_on+0x7a/0x110 [ 546.816288][T11365] ? __dev_queue_xmit+0x274/0x38a0 [ 546.816310][T11365] ? __local_bh_enable_ip+0xd0/0x130 [ 546.816328][T11365] ? __dev_queue_xmit+0x274/0x38a0 [ 546.816350][T11365] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 546.816371][T11365] ? do_syscall_64+0x14d/0xf80 [ 546.816400][T11365] ? __dev_queue_xmit+0x274/0x38a0 [ 546.816424][T11365] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 546.816444][T11365] ? __pfx___dev_queue_xmit+0x10/0x10 [ 546.816472][T11365] ? ref_tracker_free+0x693/0x840 [ 546.816494][T11365] ? __copy_skb_header+0xa3/0x4a0 [ 546.816517][T11365] ? __pfx_ref_tracker_free+0x10/0x10 [ 546.816534][T11365] ? __skb_clone+0x63/0x7a0 [ 546.816558][T11365] ? __skb_clone+0x483/0x7a0 [ 546.816584][T11365] ? skb_clone+0x246/0x3a0 [ 546.816608][T11365] ? __netlink_deliver_tap+0x807/0x850 [ 546.816625][T11365] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.816647][T11365] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.816670][T11365] netlink_unicast+0x80f/0x9b0 [ 546.816691][T11365] ? __pfx_netlink_unicast+0x10/0x10 [ 546.816708][T11365] ? netlink_sendmsg+0x650/0xb40 [ 546.816741][T11365] ? skb_put+0x11b/0x210 [ 546.816763][T11365] netlink_sendmsg+0x813/0xb40 [ 546.816813][T11365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.816842][T11365] ? aa_sock_msg_perm+0xf1/0x1b0 [ 546.816870][T11365] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 546.816895][T11365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.816912][T11365] ____sys_sendmsg+0xa68/0xad0 [ 546.816934][T11365] ? __lock_acquire+0x6b5/0x2cf0 [ 546.816959][T11365] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.816987][T11365] ? import_iovec+0x73/0xa0 [ 546.817010][T11365] ___sys_sendmsg+0x2a5/0x360 [ 546.817035][T11365] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.817061][T11365] ? kstrtouint+0x6e/0xe0 [ 546.817095][T11365] ? __fget_files+0x2a/0x420 [ 546.817116][T11365] ? __fget_files+0x3a0/0x420 [ 546.817144][T11365] __sys_sendmmsg+0x27c/0x4e0 [ 546.817169][T11365] ? __pfx___sys_sendmmsg+0x10/0x10 [ 546.817189][T11365] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 546.817230][T11365] ? ksys_write+0x242/0x270 [ 546.817248][T11365] ? __pfx_ksys_write+0x10/0x10 [ 546.817268][T11365] __x64_sys_sendmmsg+0xa0/0xc0 [ 546.817291][T11365] do_syscall_64+0x14d/0xf80 [ 546.817313][T11365] ? trace_irq_disable+0x3b/0x150 [ 546.817334][T11365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.817348][T11365] ? clear_bhb_loop+0x40/0x90 [ 546.817366][T11365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.817381][T11365] RIP: 0033:0x7f044f19c629 [ 546.817394][T11365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.817407][T11365] RSP: 002b:00007f04500f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 546.817422][T11365] RAX: ffffffffffffffda RBX: 00007f044f415fa0 RCX: 00007f044f19c629 [ 546.817433][T11365] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 546.817443][T11365] RBP: 00007f04500f0090 R08: 0000000000000000 R09: 0000000000000000 [ 546.817451][T11365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.817460][T11365] R13: 00007f044f416038 R14: 00007f044f415fa0 R15: 00007f044f53fa48 [ 546.817482][T11365] [ 547.031836][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 548.300148][ T5911] usb 5-1: config 0 has no interfaces? [ 548.332071][ T5911] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 548.526647][ T5911] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 548.544991][ T5911] usb 5-1: Manufacturer: syz [ 548.563848][ T5911] usb 5-1: config 0 descriptor?? [ 548.692924][T11378] sctp: [Deprecated]: syz.0.1446 (pid 11378) Use of int in maxseg socket option. [ 548.692924][T11378] Use struct sctp_assoc_value instead [ 549.545263][ T5911] usb 5-1: USB disconnect, device number 50 [ 551.125843][T11400] sctp: [Deprecated]: syz.1.1450 (pid 11400) Use of int in maxseg socket option. [ 551.125843][T11400] Use struct sctp_assoc_value instead [ 551.338295][T11403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1451'. [ 551.811474][T11413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1452'. [ 551.825989][T11413] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1452'. [ 554.757902][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 555.475889][ T9] usb 4-1: USB disconnect, device number 10 [ 555.588480][T11444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.835597][ T8800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.038896][ T8800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.189904][ T8800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.342583][T11457] binder: BINDER_SET_CONTEXT_MGR already set [ 556.349240][T11457] binder: 11449:11457 ioctl 4018620d 200000004a80 returned -16 [ 556.513201][ T8800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.658763][T11460] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 556.673980][T11460] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 556.686621][T11460] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 556.698514][T11460] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 556.707295][T11460] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 557.518116][ T8800] hsr0: left allmulticast mode [ 557.532111][ T8800] hsr_slave_0: left allmulticast mode [ 557.558291][ T8800] hsr_slave_1: left allmulticast mode [ 557.594883][ T8800] hsr0: left promiscuous mode [ 557.622979][ T8800] bridge0: port 3(hsr0) entered disabled state [ 557.718603][ T8800] bridge_slave_1: left allmulticast mode [ 557.775400][ T8800] bridge_slave_1: left promiscuous mode [ 557.821920][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.896864][ T8800] bridge_slave_0: left allmulticast mode [ 557.906146][ T8800] bridge_slave_0: left promiscuous mode [ 557.932814][ T8800] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.711988][ T8800] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 558.720373][ T8800] bridge1 (unregistering): left promiscuous mode [ 558.813198][ T5831] Bluetooth: hci2: command tx timeout [ 558.876161][ T8800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.024475][ T8800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.042264][ T8800] bond0 (unregistering): Released all slaves [ 559.054421][ T8800] bond1 (unregistering): Released all slaves [ 559.851720][T11505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1474'. [ 560.580673][T11511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1475'. [ 560.595185][T11511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1475'. [ 560.768212][T11462] chnl_net:caif_netlink_parms(): no params data found [ 560.881496][ T5831] Bluetooth: hci2: command tx timeout [ 561.230100][ T8800] hsr_slave_0: left promiscuous mode [ 561.241051][ T8800] hsr_slave_1: left promiscuous mode [ 561.306113][ T8800] veth1_macvtap: left promiscuous mode [ 561.348472][ T8800] veth0_macvtap: left promiscuous mode [ 561.879517][ T8800] team0 (unregistering): Port device team_slave_1 removed [ 561.939592][ T8800] team0 (unregistering): Port device team_slave_0 removed [ 562.105409][T11518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1477'. [ 562.157220][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 562.157241][ T30] audit: type=1326 audit(1771711784.926:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11516 comm="syz.0.1477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f248bb9c629 code=0x0 [ 562.329161][T11524] FAULT_INJECTION: forcing a failure. [ 562.329161][T11524] name failslab, interval 1, probability 0, space 0, times 0 [ 562.359671][T11524] CPU: 1 UID: 0 PID: 11524 Comm: syz.4.1479 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.359705][T11524] Tainted: [L]=SOFTLOCKUP [ 562.359713][T11524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.359725][T11524] Call Trace: [ 562.359733][T11524] [ 562.359743][T11524] dump_stack_lvl+0xe8/0x150 [ 562.359777][T11524] should_fail_ex+0x412/0x560 [ 562.359807][T11524] should_failslab+0xa8/0x100 [ 562.359832][T11524] ? __kernfs_new_node+0xe9/0x8e0 [ 562.359861][T11524] kmem_cache_alloc_noprof+0x87/0x650 [ 562.359903][T11524] __kernfs_new_node+0xe9/0x8e0 [ 562.359938][T11524] ? __pfx___kernfs_new_node+0x10/0x10 [ 562.359968][T11524] ? kernfs_root+0x1c/0x230 [ 562.360001][T11524] ? kernfs_root+0x1c/0x230 [ 562.360027][T11524] ? kernfs_root+0x1c/0x230 [ 562.360052][T11524] ? kernfs_root+0x1c/0x230 [ 562.360084][T11524] kernfs_new_node+0x102/0x210 [ 562.360118][T11524] __kernfs_create_file+0x4b/0x2e0 [ 562.360144][T11524] sysfs_add_file_mode_ns+0x238/0x300 [ 562.360177][T11524] internal_create_group+0x673/0x1180 [ 562.360229][T11524] ? __pfx_internal_create_group+0x10/0x10 [ 562.360256][T11524] ? kernfs_add_one+0x477/0x5c0 [ 562.360290][T11524] ? up_write+0x1ab/0x410 [ 562.360313][T11524] sysfs_create_groups+0x59/0x120 [ 562.360343][T11524] device_add_attrs+0x13b/0x5b0 [ 562.360378][T11524] ? __pfx_device_add_attrs+0x10/0x10 [ 562.360407][T11524] ? kobject_put+0x516/0x560 [ 562.360434][T11524] ? device_add_class_symlinks+0x21f/0x240 [ 562.360469][T11524] device_add+0x496/0xb70 [ 562.360504][T11524] input_register_device+0x9d3/0x1160 [ 562.360531][T11524] ? input_ff_create+0x235/0x300 [ 562.360564][T11524] uinput_create_device+0x422/0x670 [ 562.360603][T11524] uinput_ioctl_handler+0x417/0x14a0 [ 562.360645][T11524] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 562.360685][T11524] ? __fget_files+0x2a/0x420 [ 562.360712][T11524] ? __fget_files+0x3a0/0x420 [ 562.360746][T11524] ? bpf_lsm_file_ioctl+0x9/0x20 [ 562.360771][T11524] ? __pfx_uinput_ioctl+0x10/0x10 [ 562.360799][T11524] __se_sys_ioctl+0xfc/0x170 [ 562.360825][T11524] do_syscall_64+0x14d/0xf80 [ 562.360855][T11524] ? trace_irq_disable+0x3b/0x150 [ 562.360884][T11524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.360906][T11524] ? clear_bhb_loop+0x40/0x90 [ 562.360932][T11524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.360952][T11524] RIP: 0033:0x7f4997d9c629 [ 562.360972][T11524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.360991][T11524] RSP: 002b:00007f4998c6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.361013][T11524] RAX: ffffffffffffffda RBX: 00007f4998015fa0 RCX: 00007f4997d9c629 [ 562.361029][T11524] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 562.361041][T11524] RBP: 00007f4998c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 562.361054][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.361066][T11524] R13: 00007f4998016038 R14: 00007f4998015fa0 R15: 00007f499813fa48 [ 562.361099][T11524] [ 562.967538][ T5831] Bluetooth: hci2: command tx timeout [ 562.973772][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.980257][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.139530][T11462] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.193343][T11462] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.200640][T11462] bridge_slave_0: entered allmulticast mode [ 563.255379][T11462] bridge_slave_0: entered promiscuous mode [ 563.275633][T11462] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.291448][T11462] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.328173][T11462] bridge_slave_1: entered allmulticast mode [ 563.353086][T11462] bridge_slave_1: entered promiscuous mode [ 563.586822][T11462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.613277][T11543] netlink: 'syz.4.1481': attribute type 12 has an invalid length. [ 563.645703][T11543] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1481'. [ 563.707357][T11462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.765262][T11543] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1481'. [ 563.969659][T11462] team0: Port device team_slave_0 added [ 564.006443][T11462] team0: Port device team_slave_1 added [ 564.264007][T11462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.356639][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.573860][T11462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.600829][T11462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.628219][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.713709][T11462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.780274][T11558] netlink: 'syz.0.1483': attribute type 10 has an invalid length. [ 564.788409][T11558] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1483'. [ 565.084227][ T5831] Bluetooth: hci2: command tx timeout [ 565.119185][T11462] hsr_slave_0: entered promiscuous mode [ 565.139089][T11462] hsr_slave_1: entered promiscuous mode [ 565.157119][T11462] debugfs: 'hsr0' already exists in 'hsr' [ 565.180280][T11462] Cannot create hsr debugfs directory [ 565.533431][T11563] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1484'. [ 567.170113][T11588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1487'. [ 567.452976][T11462] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 567.496977][T11462] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.564924][T11462] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.609746][T11462] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 568.048791][T11462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.455622][T11462] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.498269][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.505532][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.676832][ T8800] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.684151][ T8800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.231786][T11624] netlink: 'syz.4.1493': attribute type 10 has an invalid length. [ 569.250164][T11624] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1493'. [ 569.506966][T11462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.820699][T11462] veth0_vlan: entered promiscuous mode [ 569.880616][T11462] veth1_vlan: entered promiscuous mode [ 570.509839][T11637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1494'. [ 571.080337][T11462] veth0_macvtap: entered promiscuous mode [ 571.124119][T11462] veth1_macvtap: entered promiscuous mode [ 571.208339][T11462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.302821][T11462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.410554][ T1005] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.578724][ T1005] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.598172][ T1005] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.650315][ T1005] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.773522][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.793975][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.788706][ T8789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.821375][ T8789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.901369][T11660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1498'. [ 573.716915][T11672] pim6reg: entered allmulticast mode [ 573.780733][T11682] ip6gre1: entered promiscuous mode [ 575.568422][T11692] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1504'. [ 576.809355][T11716] binder: BINDER_SET_CONTEXT_MGR already set [ 576.815531][T11716] binder: 11712:11716 ioctl 4018620d 200000004a80 returned -16 [ 576.831852][ T5889] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 576.999563][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 577.054914][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.071706][ T5889] usb 5-1: config 0 has no interfaces? [ 577.104467][ T5889] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 577.128175][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.259264][ T5889] usb 5-1: Product: syz [ 577.321148][ T5889] usb 5-1: Manufacturer: syz [ 577.349042][ T5889] usb 5-1: SerialNumber: syz [ 577.522427][ T5889] usb 5-1: config 0 descriptor?? [ 578.514137][T11736] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1517'. [ 579.548201][ T9] usb 5-1: USB disconnect, device number 51 [ 580.037543][T11756] sctp: [Deprecated]: syz.2.1522 (pid 11756) Use of int in maxseg socket option. [ 580.037543][T11756] Use struct sctp_assoc_value instead [ 580.184081][T11758] geneve2: entered promiscuous mode [ 580.326316][T11761] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1524'. [ 580.376473][T11761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1524'. [ 581.248319][T11770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.696685][T11775] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1528'. [ 584.365388][T11812] geneve2: entered promiscuous mode [ 584.395497][ T30] audit: type=1326 audit(1771711807.156:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b99c629 code=0x7ffc0000 [ 584.551306][ T30] audit: type=1326 audit(1771711807.156:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b99c629 code=0x7ffc0000 [ 584.652787][ T30] audit: type=1326 audit(1771711807.216:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f291b99c629 code=0x7ffc0000 [ 584.807523][ T30] audit: type=1326 audit(1771711807.216:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b99c629 code=0x7ffc0000 [ 584.926126][ T30] audit: type=1326 audit(1771711807.216:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b99c629 code=0x7ffc0000 [ 585.074683][ T30] audit: type=1326 audit(1771711807.216:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f291b99c629 code=0x7ffc0000 [ 585.098933][T11825] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1539'. [ 585.376645][ T30] audit: type=1326 audit(1771711807.216:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b99c629 code=0x7ffc0000 [ 585.594472][ T30] audit: type=1326 audit(1771711807.216:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11795 comm="syz.5.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291b99c629 code=0x7ffc0000 [ 586.091544][ T5896] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 586.308429][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 586.340733][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.431232][ T5896] usb 2-1: config 0 has no interfaces? [ 586.580768][ T5896] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 586.645619][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.671327][ T5896] usb 2-1: Product: syz [ 586.675622][ T5896] usb 2-1: Manufacturer: syz [ 586.698515][T11840] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 586.710979][ T5896] usb 2-1: SerialNumber: syz [ 586.759293][ T5896] usb 2-1: config 0 descriptor?? [ 587.033035][ T30] audit: type=1326 audit(1771711809.806:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 587.086940][ T30] audit: type=1326 audit(1771711809.806:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11843 comm="syz.0.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f248bb9c629 code=0x7ffc0000 [ 587.160578][T11845] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 588.173831][T11871] geneve2: entered promiscuous mode [ 588.730435][T11881] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1549'. [ 589.439992][ T5896] usb 2-1: USB disconnect, device number 71 [ 592.081345][ T980] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 592.276137][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 592.351960][ T980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.481365][ T980] usb 1-1: config 0 has no interfaces? [ 592.519710][T11924] netlink: 'syz.2.1557': attribute type 1 has an invalid length. [ 592.569651][ T980] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 592.615961][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.657830][ T980] usb 1-1: Product: syz [ 592.677136][ T980] usb 1-1: Manufacturer: syz [ 592.704435][ T980] usb 1-1: SerialNumber: syz [ 592.751538][ T980] usb 1-1: config 0 descriptor?? [ 593.272843][T11937] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1561'. [ 593.341789][T11937] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1561'. [ 594.243054][ T980] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 594.282771][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 594.430678][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 594.456336][ T980] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 594.498923][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.530157][ T980] pvrusb2: Hardware description: Terratec Grabster AV400 [ 594.545101][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 594.550356][ T980] pvrusb2: ********** [ 594.570627][ T980] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 594.593836][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.614288][ T9] usb 3-1: config 0 has no interfaces? [ 594.651240][ T980] pvrusb2: Important functionality might not be entirely working. [ 594.681231][ T980] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 594.714882][ T5911] usb 1-1: USB disconnect, device number 49 [ 594.742187][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 594.744676][ T980] pvrusb2: ********** [ 594.773193][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.813071][ T2347] pvrusb2: Invalid write control endpoint [ 594.819910][ T9] usb 3-1: Product: syz [ 594.879494][ T9] usb 3-1: Manufacturer: syz [ 594.901306][ T9] usb 3-1: SerialNumber: syz [ 594.965229][ T9] usb 3-1: config 0 descriptor?? [ 594.996525][ T2347] pvrusb2: Invalid write control endpoint [ 595.009009][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 595.029421][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 595.061483][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 595.103606][ T2347] pvrusb2: Device being rendered inoperable [ 595.264784][ T5904] usb 5-1: USB disconnect, device number 52 [ 595.280969][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 595.329371][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 595.554268][ T2347] pvrusb2: Attached sub-driver cx25840 [ 595.561429][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 595.574579][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 596.561414][ T5889] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 596.730753][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.761888][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.816934][ T5889] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 596.829614][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.867397][ T5889] usb 6-1: config 0 descriptor?? [ 596.951152][T11983] bridge_slave_0: entered promiscuous mode [ 597.022080][T11983] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 597.051698][ T5911] usb 3-1: USB disconnect, device number 56 [ 597.331429][T11988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1571'. [ 597.370858][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 597.377245][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 597.423049][ T5889] usb 6-1: USB disconnect, device number 2 [ 598.880138][T12006] lo: MTU too low for tipc bearer [ 598.889911][T12006] tipc: Enabling of bearer rejected, failed to enable media [ 599.587927][T12025] veth0: entered promiscuous mode [ 599.885586][T12025] bridge_slave_0: left allmulticast mode [ 599.892031][T12025] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.947149][T12025] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 600.131357][ T796] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 600.315048][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.343854][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.383416][ T796] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 600.413667][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.440989][T12024] veth0: left promiscuous mode [ 600.464282][ T796] usb 5-1: config 0 descriptor?? [ 600.963201][ T796] usbhid 5-1:0.0: can't add hid device: -71 [ 600.976523][ T796] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 601.017195][ T796] usb 5-1: USB disconnect, device number 53 [ 602.061999][ T980] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 602.351292][ T980] usb 6-1: device descriptor read/64, error -71 [ 602.612368][ T980] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 602.837344][ T980] usb 6-1: device descriptor read/64, error -71 [ 602.985084][ T980] usb usb6-port1: attempt power cycle [ 603.432853][T12088] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1600'. [ 603.452890][ T980] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 603.529825][ T980] usb 6-1: device descriptor read/8, error -71 [ 603.644403][T12092] binder: BINDER_SET_CONTEXT_MGR already set [ 603.650553][T12092] binder: 12089:12092 ioctl 4018620d 200000004a80 returned -16 [ 603.821401][ T980] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 603.863665][ T980] usb 6-1: device descriptor read/8, error -71 [ 604.021788][ T980] usb usb6-port1: unable to enumerate USB device [ 604.148150][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 604.188540][T12095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1604'. [ 604.511138][ T8792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.527027][ T8792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.571681][ T980] ------------[ cut here ]------------ [ 604.577500][ T980] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 604.587465][ T980] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: kworker/1:2/980 [ 604.598183][ T980] Modules linked in: [ 604.602448][ T980] CPU: 1 UID: 0 PID: 980 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.613386][ T980] Tainted: [L]=SOFTLOCKUP [ 604.617734][ T980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.627872][ T980] Workqueue: mld mld_ifc_work [ 604.632644][ T980] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 604.639216][ T980] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 604.658924][ T980] RSP: 0018:ffffc900046e6678 EFLAGS: 00010246 [ 604.665094][ T980] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 604.673165][ T980] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022c1c0 [ 604.681301][ T980] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 604.689332][ T980] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807df60b68 [ 604.697349][ T980] R13: 0000000000000000 R14: ffffffff9022c1c0 R15: ffff888058abb138 [ 604.705386][ T980] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 604.714349][ T980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 604.720952][ T980] CR2: 0000200000142030 CR3: 00000000555da000 CR4: 00000000003526f0 [ 604.728978][ T980] Call Trace: [ 604.732316][ T980] [ 604.735267][ T980] rate_control_send_low+0x1a7/0x7b0 [ 604.740636][ T980] rate_control_get_rate+0x20b/0x5d0 [ 604.746017][ T980] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 604.751731][ T980] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 604.757874][ T980] invoke_tx_handlers_late+0xba/0x18a0 [ 604.763393][ T980] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 604.769311][ T980] ieee80211_tx_dequeue+0x3f4c/0x5440 [ 604.774775][ T980] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 604.780528][ T980] ? ieee80211_next_txq+0x82e/0x9a0 [ 604.785805][ T980] ieee80211_handle_wake_tx_queue+0x132/0x2c0 [ 604.791933][ T980] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 604.798538][ T980] ? ieee80211_queue_skb+0x184f/0x2260 [ 604.804054][ T980] ? __local_bh_enable_ip+0xd0/0x130 [ 604.809356][ T980] ieee80211_queue_skb+0x1a3f/0x2260 [ 604.814705][ T980] ieee80211_tx+0x2c2/0x4b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 604.819254][ T980] ? __pfx_ieee80211_tx+0x10/0x10 [ 604.824348][ T980] ? ieee80211_xmit+0x315/0x400 [ 604.829214][ T980] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 604.835241][ T980] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 604.841468][ T980] ? process_scheduled_works+0xb02/0x1830 [ 604.847204][ T980] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 604.853702][ T980] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 604.860001][ T980] ieee80211_subif_start_xmit+0xf3/0x570 [ 604.865730][ T980] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 604.872053][ T980] ? skb_network_protocol+0x23d/0x3f0 [ 604.877454][ T980] dev_hard_start_xmit+0x2d8/0x870 [ 604.882641][ T980] __dev_queue_xmit+0x168f/0x38a0 [ 604.887741][ T980] ? __dev_queue_xmit+0x274/0x38a0 [ 604.892903][ T980] ? ___neigh_create+0x1c5f/0x2280 [ 604.898038][ T980] ? __local_bh_enable_ip+0xd0/0x130 [ 604.903361][ T980] ? lockdep_hardirqs_on+0x7a/0x110 [ 604.908600][ T980] ? __pfx___dev_queue_xmit+0x10/0x10 [ 604.914018][ T980] ? neigh_resolve_output+0x438/0x750 [ 604.919421][ T980] ? eth_header+0x11b/0x200 [ 604.924021][ T980] ? __asan_memcpy+0x40/0x70 [ 604.928627][ T980] ? eth_header+0x11b/0x200 [ 604.933174][ T980] ? __pfx_eth_header+0x10/0x10 [ 604.938059][ T980] ? neigh_resolve_output+0x624/0x750 [ 604.943489][ T980] ? ip6_output+0x126/0x550 [ 604.948003][ T980] ip6_output+0x340/0x550 [ 604.952376][ T980] NF_HOOK+0xa2/0x3a0 [ 604.956386][ T980] ? NF_HOOK+0xf9/0x3a0 [ 604.960556][ T980] ? __pfx_NF_HOOK+0x10/0x10 [ 604.965190][ T980] ? __pfx_dst_output+0x10/0x10 [ 604.970052][ T980] ? lockdep_hardirqs_on+0x7a/0x110 [ 604.975303][ T980] ? __local_bh_enable_ip+0xd0/0x130 [ 604.980603][ T980] ? icmp6_dst_alloc+0x3a6/0x440 [ 604.985595][ T980] mld_sendpack+0x8b4/0xe40 [ 604.990162][ T980] ? look_up_lock_class+0x57/0x110 [ 604.995321][ T980] ? mld_sendpack+0x213/0xe40 [ 605.000007][ T980] ? __pfx_mld_sendpack+0x10/0x10 [ 605.005092][ T980] mld_ifc_work+0x835/0xe70 [ 605.009609][ T980] ? process_scheduled_works+0xa25/0x1830 [ 605.015363][ T980] process_scheduled_works+0xb02/0x1830 [ 605.020954][ T980] ? __pfx_process_scheduled_works+0x10/0x10 [ 605.026977][ T980] ? assign_work+0x3d5/0x5e0 [ 605.031612][ T980] worker_thread+0xa50/0xfc0 [ 605.036214][ T980] ? __kthread_parkme+0x7a/0x1f0 [ 605.041247][ T980] kthread+0x388/0x470 [ 605.045354][ T980] ? __pfx_worker_thread+0x10/0x10 [ 605.050509][ T980] ? __pfx_kthread+0x10/0x10 [ 605.055185][ T980] ret_from_fork+0x51e/0xb90 [ 605.059789][ T980] ? __pfx_ret_from_fork+0x10/0x10 [ 605.064935][ T980] ? __switch_to+0xc7d/0x1450 [ 605.069651][ T980] ? __pfx_kthread+0x10/0x10 [ 605.074281][ T980] ret_from_fork_asm+0x1a/0x30 [ 605.079071][ T980] [ 605.082164][ T980] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 605.089468][ T980] CPU: 1 UID: 0 PID: 980 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.100326][ T980] Tainted: [L]=SOFTLOCKUP [ 605.104655][ T980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 605.114710][ T980] Workqueue: mld mld_ifc_work [ 605.119408][ T980] Call Trace: [ 605.122690][ T980] [ 605.125633][ T980] vpanic+0x56c/0xa60 [ 605.129650][ T980] ? __pfx__printk+0x10/0x10 [ 605.134241][ T980] ? __pfx_vpanic+0x10/0x10 [ 605.138752][ T980] ? is_bpf_text_address+0x292/0x2b0 [ 605.144055][ T980] ? is_bpf_text_address+0x26/0x2b0 [ 605.149272][ T980] panic+0xc5/0xd0 [ 605.152999][ T980] ? __pfx_panic+0x10/0x10 [ 605.157430][ T980] ? ret_from_fork_asm+0x1a/0x30 [ 605.162380][ T980] __warn+0x315/0x4f0 [ 605.166369][ T980] ? __rate_control_send_low+0x524/0x800 [ 605.172048][ T980] ? __rate_control_send_low+0x524/0x800 [ 605.177700][ T980] __report_bug+0x29a/0x540 [ 605.182219][ T980] ? __rate_control_send_low+0x524/0x800 [ 605.187865][ T980] ? __pfx___report_bug+0x10/0x10 [ 605.192909][ T980] ? __lock_acquire+0x6b5/0x2cf0 [ 605.197867][ T980] report_bug_entry+0x19a/0x290 [ 605.202727][ T980] ? __rate_control_send_low+0x5bb/0x800 [ 605.208366][ T980] ? __rate_control_send_low+0x5c0/0x800 [ 605.214002][ T980] handle_bug+0xca/0x200 [ 605.218249][ T980] exc_invalid_op+0x1a/0x50 [ 605.222752][ T980] asm_exc_invalid_op+0x1a/0x20 [ 605.227602][ T980] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 605.233850][ T980] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 605.253460][ T980] RSP: 0018:ffffc900046e6678 EFLAGS: 00010246 [ 605.259529][ T980] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 605.267505][ T980] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff9022c1c0 [ 605.275475][ T980] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 605.283448][ T980] R10: 0000000000000004 R11: 0000000000000000 R12: ffff88807df60b68 [ 605.291426][ T980] R13: 0000000000000000 R14: ffffffff9022c1c0 R15: ffff888058abb138 [ 605.299436][ T980] ? __rate_control_send_low+0x58d/0x800 [ 605.305106][ T980] rate_control_send_low+0x1a7/0x7b0 [ 605.310585][ T980] rate_control_get_rate+0x20b/0x5d0 [ 605.315906][ T980] ieee80211_tx_h_rate_ctrl+0xaf6/0x1760 [ 605.321573][ T980] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 605.327667][ T980] invoke_tx_handlers_late+0xba/0x18a0 [ 605.333144][ T980] ? ieee80211_tx_h_select_key+0xd1b/0x1ab0 [ 605.339054][ T980] ieee80211_tx_dequeue+0x3f4c/0x5440 [ 605.344484][ T980] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 605.350227][ T980] ? ieee80211_next_txq+0x82e/0x9a0 [ 605.355448][ T980] ieee80211_handle_wake_tx_queue+0x132/0x2c0 [ 605.361536][ T980] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 605.368130][ T980] ? ieee80211_queue_skb+0x184f/0x2260 [ 605.373623][ T980] ? __local_bh_enable_ip+0xd0/0x130 [ 605.378917][ T980] ieee80211_queue_skb+0x1a3f/0x2260 [ 605.384236][ T980] ieee80211_tx+0x2c2/0x4b0 [ 605.388751][ T980] ? __pfx_ieee80211_tx+0x10/0x10 [ 605.393811][ T980] ? ieee80211_xmit+0x315/0x400 [ 605.398680][ T980] __ieee80211_subif_start_xmit+0xd12/0x1660 [ 605.404678][ T980] ? __ieee80211_subif_start_xmit+0x2cf/0x1660 [ 605.410931][ T980] ? process_scheduled_works+0xb02/0x1830 [ 605.416668][ T980] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 605.423102][ T980] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 605.429357][ T980] ieee80211_subif_start_xmit+0xf3/0x570 [ 605.435003][ T980] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 605.441270][ T980] ? skb_network_protocol+0x23d/0x3f0 [ 605.446696][ T980] dev_hard_start_xmit+0x2d8/0x870 [ 605.451856][ T980] __dev_queue_xmit+0x168f/0x38a0 [ 605.456903][ T980] ? __dev_queue_xmit+0x274/0x38a0 [ 605.462029][ T980] ? ___neigh_create+0x1c5f/0x2280 [ 605.467150][ T980] ? __local_bh_enable_ip+0xd0/0x130 [ 605.472460][ T980] ? lockdep_hardirqs_on+0x7a/0x110 [ 605.477669][ T980] ? __pfx___dev_queue_xmit+0x10/0x10 [ 605.483062][ T980] ? neigh_resolve_output+0x438/0x750 [ 605.488438][ T980] ? eth_header+0x11b/0x200 [ 605.492951][ T980] ? __asan_memcpy+0x40/0x70 [ 605.497576][ T980] ? eth_header+0x11b/0x200 [ 605.502112][ T980] ? __pfx_eth_header+0x10/0x10 [ 605.506990][ T980] ? neigh_resolve_output+0x624/0x750 [ 605.512378][ T980] ? ip6_output+0x126/0x550 [ 605.516890][ T980] ip6_output+0x340/0x550 [ 605.521249][ T980] NF_HOOK+0xa2/0x3a0 [ 605.525270][ T980] ? NF_HOOK+0xf9/0x3a0 [ 605.529622][ T980] ? __pfx_NF_HOOK+0x10/0x10 [ 605.534221][ T980] ? __pfx_dst_output+0x10/0x10 [ 605.539075][ T980] ? lockdep_hardirqs_on+0x7a/0x110 [ 605.544379][ T980] ? __local_bh_enable_ip+0xd0/0x130 [ 605.549674][ T980] ? icmp6_dst_alloc+0x3a6/0x440 [ 605.554622][ T980] mld_sendpack+0x8b4/0xe40 [ 605.559132][ T980] ? look_up_lock_class+0x57/0x110 [ 605.564264][ T980] ? mld_sendpack+0x213/0xe40 [ 605.568947][ T980] ? __pfx_mld_sendpack+0x10/0x10 [ 605.573999][ T980] mld_ifc_work+0x835/0xe70 [ 605.578516][ T980] ? process_scheduled_works+0xa25/0x1830 [ 605.584243][ T980] process_scheduled_works+0xb02/0x1830 [ 605.589818][ T980] ? __pfx_process_scheduled_works+0x10/0x10 [ 605.595809][ T980] ? assign_work+0x3d5/0x5e0 [ 605.600423][ T980] worker_thread+0xa50/0xfc0 [ 605.605049][ T980] ? __kthread_parkme+0x7a/0x1f0 [ 605.610019][ T980] kthread+0x388/0x470 [ 605.614096][ T980] ? __pfx_worker_thread+0x10/0x10 [ 605.619212][ T980] ? __pfx_kthread+0x10/0x10 [ 605.623802][ T980] ret_from_fork+0x51e/0xb90 [ 605.628403][ T980] ? __pfx_ret_from_fork+0x10/0x10 [ 605.633606][ T980] ? __switch_to+0xc7d/0x1450 [ 605.638305][ T980] ? __pfx_kthread+0x10/0x10 [ 605.642895][ T980] ret_from_fork_asm+0x1a/0x30 [ 605.647686][ T980] [ 605.651322][ T980] Kernel Offset: disabled [ 605.655655][ T980] Rebooting in 86400 seconds..