last executing test programs: 22m43.517293249s ago: executing program 4 (id=346): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x88, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000845}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) preadv(r9, 0x0, 0x0, 0xfff, 0x8001) 22m43.182047984s ago: executing program 4 (id=347): syz_usb_connect(0x5, 0x24, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000380)=[{0x2, 0x1000, 0xb5, &(0x7f0000000080)="eada6989515985cb681cf49486389e2f07d1edd9840ba89ab1c22dd11688795074f7bbd5bd903c20034326dfa91aa5520494023bea409218601c37be537e79ee209c8d6da4f688cd7b34d5c8248bf4308f6697ad81db5667a6fc9475cf52c029ce89676f6965ec072cf4b21463b516b816e4390f05150929b646fb4154030cf2acd1d908ab755e950efc489793b9138c50bb10d872110380ec002eae6edc3cc714c1afaba7d43483fb420c477bd88adb79ac5ce7c3"}, {0x64, 0x200, 0xa4, &(0x7f0000000200)="7851b5c1edc75791dd257d6492c160e8eba4ab08d9e671b1d8695fdaa29ce694a1740d3d9f2586613faf5d75c62d923f6a3cbec9c62a43874c96533fd2185a5f142e4c54bf4b710e078f8927d61e19e395ca697ef2974f0ff6996e586d868818d89bb342d6828631356c2056b8b67baaf50e59fc2b0194db2773e9ea274936006ec426080ae45fcecc1e8a4d0502f03752334aa12c134154c0f82299a9c69c5ab52fd14a"}, {0x6, 0x8000, 0x92, &(0x7f00000002c0)="245111e00b7faabe97dff26003ff9178ac84a502ad836b46eda907220db365de615eccc4c257cd9a9edcd1d87e65608ae1c64fc7f58a8ec35ce68ef9814c31fb24c13d45b654159f0795447cc2a211f37788120b8fb13945bc4e73cab1f505585c88024a9805283079eeb85b86c6f01a86430df22e6f0faa5a38875c1a1261ec6c015d5a63b0c610168157be1b9da15dd9b4"}, {0x5, 0x11, 0x1e, &(0x7f0000000140)="14ee45e4ddcb459c33c19008f79308dc1c46a8b773467d240947b14f079b"}, {0x5, 0x1000, 0xc0, &(0x7f0000000480)="4037e06b7989abb816094907d5dbf99752a17bb475dfc1d86bfb8e2d761147359e61ee4e880e2261711423315f53d93c32f6f4053a7cb93e9c051ee442bfc5679828bf9b2009d4ea2c47f8981ff126930c613e1612e266382ef6c489005e161d105c83e8bb9b6110c96939696979541e4d5a61fcb2160981b1c9528af38d48c940209b8afdb0cdbb1e1147e09dbcea8c7b0916969f622b8ac3f9f25c1e7d8697009b1dcabe09c0a085589c70f742e8a15dd06a77846589b3573fb487e6dd980c"}, {0xa76e, 0x1010, 0xb4, &(0x7f0000000540)="3041dfca69ee6844e1457b214b545adb1f99178550748efc213423a163cacec5ab5ff2e662a6ceba202a76d13e5063e4652a5756d810f12dbbf1c049975e51c30044f229abad5858fe6e495104d829948c119303afee82bf62e2329ded55dd994396681e8c72a8ff59d23cc3647c2cf574ffa2c1498164edb1604a126c9a18f6ed535476173f884d591814bf3cd3fd99cb42b3b0042e9bbf49bcac0314a20fd47be0ec73f0d5e9e4270059477e515af2755e9aae"}, {0x8, 0x8110, 0x81, &(0x7f0000000600)="297b51b884811f7a64149081e74fc6e2cbfee53bacb20fffd82d1d1f737b6bfced9cbfe7f1edcca32b0cd6d9c0897b339442472c25fcb566314aae5e6d2dcfb784ecbc975e77ee3b7e027d6566bcc78b9a74dfb425550c38b57b5f7f686f23851456e66c781136bce390ccbeaf1d6e9fd1afd3cb1f0f41aa36a52663a3eef7c2d4"}, {0xe61, 0xe800, 0x9c, &(0x7f0000000780)="8e7f48e6aff37cf575d27e9e9b2fcfd9739600cc5f32e4aabe473d21ec3e74cce9cd5a50e18729ae9b65ce2900761867416835c523d3218a4a4c059280990c6a7f60475d2852af6761f5da124bc9f6edd4ac386c969af4b88873788c1a1fac935b11d190744b6503f198e39e415e8814074838013d8b3d7357946e2e9d37b3a2438e7d9748d079aaeaf40a3c4a3be178798906a1cfa51da310815987"}], 0x8}) 22m42.482837812s ago: executing program 4 (id=354): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 22m42.361455341s ago: executing program 4 (id=355): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) setrlimit(0x7, &(0x7f0000000300)={0x2, 0x7fffffc0}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1f) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/15, 0x13}], 0x1d) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009fef7f2099043910760c010203010902450001000010000904b00002a1e0d800052406000105240006000d24020100000000060091008106241a00002f0424020009050402ffe7ff0000090582021800"], 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000540)=ANY=[@ANYBLOB="1201100300000020050b391740000102030109026000030102d0090904000000010100000a240101000a0002010209040100000102000009040101010102000009050109ff030908040725010001070009040200000102000009040201010102000009058209000207000707250104080800ddcdb1cd23fca8c8851149b99514ea48a9a22f3e306f69f965e451febd7a0ba14b0315822ea5361ad325ec0a1e344d3d335951dbb0ce93a6e941fa5d5692582f569c251805a3cf2efcbc0487c468ea98e4d1c834f58316ec33e9371c34fccd06e44cf63a9c7dc08a6be111154e1e29d769d28a681810b60ba052b2ce55"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000101e04193f4000010203010902600003010cf0030904000000010100000a2401ff0f0a0002010209040100000102000009040101010102000009050109ff030d08010225010c08080009040200000102000009040201010102000009058209000408090507250100010900"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x2, 0x83, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x28, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x1, 0x0, 0xfd, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "18acb4e9"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x18f, 0x3ff, 0x4, 0x6}, {0x6, 0x24, 0x1a, 0x8000, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x15}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x10, 0x7, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xf7}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x4, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xdd, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x10, 0x2, 0x1}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x7, 0x3, 0x4, 0x20, 0x9}, 0x5d, &(0x7f00000001c0)={0x5, 0xf, 0x5d, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x15, 0x8, 0xc7, 0x9, 0xa}, @wireless={0xb, 0x10, 0x1, 0x6, 0x2, 0xc0, 0x7, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "9f43f5c657bbb208f1bd346896a0d086"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0xfe, 0x66, 0xfffc, 0x5a}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x3, 0xf00f, 0x8, [0x6000, 0x3fd8, 0x0, 0xcf, 0x30]}]}, 0x7, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x42f}}, {0xa0, &(0x7f0000000240)=@string={0xa0, 0x3, "4e51f3953283cccd1edeadb74b71d3bdf5233170b0d4337619e2549047a8b53928b7fc4c2ddd7d251f98423fd4cd045b345471915a3150ac92542d153be7b9808654f7d6bb2683e275e3eb836aa8af2d62c34e4064021e02a4568204141a00d107f3c8c04a709a9231b9656b0c228f9709bbe99d3567ab7408ff6129abb07caf500e07b579c7f17ba37447acc59c335540951779992da57e9bf6f6184b04"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x421}}, {0x99, &(0x7f0000000400)=@string={0x99, 0x3, "5c60f46ed232bae13a13058a3560902085784fbf296420309b5597619d7d1e7077a7fa29d583754155942130416a71c81165b705c52fc26cd56ed739bd9835249896fcdadf9e7e5254c3e8f85a9ca21128d39c5b0afa822f0b824d49451587759f417c2ae9135343baef12f16573f2f3e4d81ed086358662d8ed7a2c1c7deaa143549086856c1fb0e02f7597c8ef8c9a7bff1f297a9084"}}]}) 22m39.134172104s ago: executing program 4 (id=369): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000000009040000030300000009056f2f"], 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x614b, 0x0, 0x8001, 0x10, 0x5, 0xfffffc01, 0x10001, 0x9}, &(0x7f0000000340)=0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000010c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xffffffc2, &(0x7f0000000040)=ANY=[]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000780)={0x0, 0xcd1d, 0x10000}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, 0x0, 0x1) ioctl$VIDIOC_S_PARM(r5, 0xc0cc5616, &(0x7f0000000400)={0x6, @output={0x0, 0x0, {0x77, 0xb}, 0x5, 0x1}}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000140), 0x12) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="7f3327bd7000fedbc2947eea4386bb249fbf2ee4b6a0f335df2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000d081}, 0x4040) r12 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="7b8df1653303f02a4d13ef51a9271f5431755ff483936f729e0752be52eb47ac0a8f9bb4b751cd229c9550758e756930cf03d886d303d67d849343b44dae362e7ce5800e8f8e34cc1a6a03f4a315eac11c3941436a0127fefacb67f4c8ed93ad27ca56c23445f27927ec8e47e6c4cfb04b0421465307ef758b935d2d45179e92608ad1f865762dfa7cda313bc8882e65a32623fae2e395d02267eb79ca96d23432300adb758e2b91b4faa59483b7d2", 0xaf, 0xfffffffffffffffe) keyctl$instantiate(0xc, r12, &(0x7f0000000180)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', '@', 0x20, 0x2}, 0x29, 0xfffffffffffffff9) 22m38.803249218s ago: executing program 4 (id=370): openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x5600) 22m38.069883914s ago: executing program 32 (id=370): openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x5600) 8.152219509s ago: executing program 2 (id=10882): open(0x0, 0x80242, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) openat$nullb(0xffffff9c, &(0x7f0000000340), 0x86000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 7.953124239s ago: executing program 2 (id=10888): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000040)={'erspan0\x00', r0, 0x10, 0x8000, 0xa98c, 0xbd4, {{0x31, 0x4, 0x3, 0xb, 0xc4, 0x64, 0x0, 0x0, 0x4, 0x0, @remote, @local, {[@lsrr={0x83, 0xb, 0xa4, [@private=0xa010102, @private=0xa010100]}, @lsrr={0x83, 0x17, 0x95, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, @remote, @broadcast]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xe6, 0x3, 0x1, [{@loopback, 0x9}, {@private=0xa010100, 0x6}, {@multicast1, 0x3}, {@loopback, 0x401}, {@remote, 0x60000}, {@empty, 0x3}]}, @timestamp_prespec={0x44, 0x1c, 0xfe, 0x3, 0x9, [{@broadcast, 0x40}, {@broadcast, 0x100}, {@rand_addr=0x64010101, 0xcd}]}, @timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0x1, [{@broadcast, 0x7ff}, {@loopback, 0x8}, {@broadcast, 0xbd}]}, @lsrr={0x83, 0x1b, 0xe5, [@loopback, @private=0xa010101, @rand_addr=0x64010101, @multicast1, @empty, @multicast1]}]}}}}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(0xffffffffffffffff, 0x1c, 0x404, 0x4) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000cc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "08a5"}, 0x0, 0x0, &(0x7f0000000b40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x0, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x4}, 0x0, 0x0, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x9}}) r2 = gettid() get_robust_list(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) syz_emit_vhci(&(0x7f0000001680)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x5, 0xc8}}}, 0x6) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000a7c4090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1, 0x2, 0xe37ffffffffffe}) fcntl$lock(r5, 0x6, &(0x7f0000000440)={0x1, 0x1, 0x1, 0xffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$uac3(0x6, 0xe9, &(0x7f0000000340)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x20, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x1, 0x30, 0x9, {0x8, 0xb, 0x2, 0x0, 0x1, 0x24, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x35, 0x2}, [@source_unit={0xc, 0x24, 0xb, 0x8, 0x0, 0x5, 0x3, 0x5}, @cluster_info_segment={0x6, 0x20, 0x3, 0xa5}, @cluster_info_segment={0x6, 0x20, 0x4, 0x8d, 0x7}, @output_terminal={0x13, 0x24, 0x3, 0x5, 0x303, 0x3, 0x6, 0x4, 0x0, 0x7, 0x7, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}, @as_header={0x17, 0x24, 0x1, 0xd, 0x1, 0x1000, 0x3, 0x3, 0xb1, 0x1ff, 0xb3}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x40, 0x0, 0x9, "87"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0x29, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xb2, 0x0, {0xa, 0x25, 0x25, 0x8, 0xff, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x2, 0x7, 0x0, "d1c07bd4c6966b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x66, 0x5, 0x7, {0xa, 0x25, 0x25, 0x9, 0x0, 0x6}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x110, 0x6f, 0x4, 0x81, 0x40, 0x2}, 0x1d, &(0x7f0000000280)={0x5, 0xf, 0x1d, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x5d6a12b7ae7e0acf, 0xa, 0x7f, 0x5, 0xffff}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x8, 0x6, 0x1}]}, 0x4, [{0x15, &(0x7f00000002c0)=@string={0x15, 0x3, "c58d9375a94763ca22cf02931e586400fb6712"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41f}}, {0x9f, &(0x7f00000004c0)=@string={0x9f, 0x3, "2db5a86bfd70ccd92b817a0da0fd8b30136c8bd0d159edbf50f1b17c698be18f1b6a3396e5e1a15138074a5efa081bff3692cb9a49b2f433c2af9b03b521d3115ec2cc492d66b0484a8f6b5fd545fa33389cef45125b70e5b07d5c6d564d0bfdb869a259923a7ba8aa75d3289af7c583ec52d378d405929fde399f7c8dd677e9352c1c8aa3029ce56012c59cce42de91663fb84eae75d1d4ab7bb94a7e"}}, {0x1a, &(0x7f00000005c0)=@string={0x1a, 0x3, "5564b388bf1510f117c83b6247d8354acb675ad4c433739e"}}]}) 7.329530474s ago: executing program 0 (id=10890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0}, &(0x7f0000000000)=0x40) 7.170036015s ago: executing program 0 (id=10891): r0 = memfd_secret(0x0) unshare(0x6020400) syz_io_uring_setup(0x6c24, &(0x7f0000000000)={0x0, 0xa94d, 0x80, 0x0, 0x1e3, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000100)) fcntl$lock(r0, 0x7, &(0x7f0000000880)={0x0, 0x0, 0x10000000000003, 0x9}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000240)={'vxcan1\x00'}) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x10000000000000a5, 0x0, 0x0) 7.066811895s ago: executing program 1 (id=10892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xe) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 6.961169143s ago: executing program 0 (id=10893): r0 = inotify_init1(0x80000) read(r0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x860007d5) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f00000001c0)={{@any, 0x2}, 0x2207, 0xc, 0x5, 0x7}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x4) ioctl$IOMMU_VFIO_IOAS$CLEAR(r4, 0x3b88, &(0x7f0000000200)={0xc}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x99, 0x0, 0x0, 0x0}, {0x5, 0x1, 0x0, 0x0}, {0xf800, 0x4000, 0x0, 0x0}], 0x3}) 6.745718519s ago: executing program 1 (id=10894): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e0000003c000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x36}, 0x94) read$FUSE(r2, &(0x7f0000008180)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f0000090583"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010000906000000000000000000", @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r7, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000ac56692b06af86bc5167d4d2d7e60203d882864d0befb52ffbc1c9511b9e23865e1718751fe28dcdc773e21b92c522669a9bf010a10ee7a64c3caf35a6235b4e1dc3afb0120e3602f779f63f2ec1de059e4e269b83fdd84f06b602e596ca2c8bde9adb6a582fe3e7ff01ba1cbebf901d0cbd8e", @ANYRES16=0x0, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="5f2e1d53a5c922436ad6aff1a9ac314ba67878741bf378dd908fccfa8467d15180a4caf37aee2849b9f6e56e2559da12b08267cf56c81f8062305db176f55663f813df00d7376b2c18c26b4e815b03fc2416d23d186aeef770527578eca1ce1a539c30c9b5020defb025d39344a401b1ff42160453c3694669583944f394b9076c6d8c6062072ad8ad4a32fed4a0fce93b4ae65e58", @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008a000000080004000cdb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24008070}, 0x0) 5.174985645s ago: executing program 5 (id=10902): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@remote, @in6=@private2}}, {{@in6=@remote}}}, &(0x7f0000000000)=0xe8) 5.15636251s ago: executing program 3 (id=10903): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x4000001) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}}, 0x20}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, 0x0) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 5.046543793s ago: executing program 5 (id=10904): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000000)=0x1ff, 0x4) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000300)=""/25, &(0x7f0000000280)=0x19) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x842) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000003c0)={0x2, [0x0, 0x0]}, &(0x7f0000000900)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000940)={r6, 0xd132}, 0x8) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2e}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000500)={0x4, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x6}, {0x0, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0xfffffff8}, {0x2, 0x4a, 0x0, 0x5, 0x2, 0x3, 0x1}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="3d97177d97d254b6390f05c327d4d460ee081ee32f69f78d207d086b343df97ac45e6d"], 0x4c}}, 0x884) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="9b37972abbfbefd512605fd124d9590a820d892d2f21936cc7c030548883dcf3e00ba8be589900607b3099ac99a0e0c67ed3539aeed64521eff39bf484", 0x3d}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f00000005c0)="cfc85dea469037c27bf65c3154c7e64fa2d6272c1314b9b877bf4fc40ecb5270b5d03a741b71ed089d87f072ae33554c94fb27617af7df2e57a5436fe22cfe281f1476695582d6e5562a7a8600990fab0b20ed0de547731d85b3f4d628c164b6289d8548aeb1d056548addd9367c1ee3fa937934d53885f4705c2a0349d6871abb51fa07a3d25bc307003250f038a899b754975d861a7a71e207da9937bee91e2bc369a45defe38f280e1f0b00d5ddca190fe39f6dcec29f693a013b0939334aa5f338713a23cedbc34267c8f801", 0xce}, {&(0x7f00000006c0)="e9876c305501e74129134c4e1dbeb2a47e15ed89f1fbab2ffb45b6aa957983b2cd5083e37b6a878e298bd5c75c69fd2acae992449aa3bd1711abca67bf521f445261c5ae3daa7b2187bd21a5991e4d367d3991d9350f4f00b42afd7651c59967d4b3f7c9de9cde0273e40f55119d4fc9b0d907a3713a3b63cbc05299b8333bd275be19e053e2cef3cb6958b23edc6d5a141e4cde39d3fe4e14af697a593e23c65f19f157e88e510744057d67190cf18a9c2952efeeaee458488c9dca19ac62", 0xbf}, {&(0x7f0000000780)="84f9385f38e0e162ab904dca6aae283ea212ffa1fc6ab820ac9e697f2674704093bb36729cfd1bc39a16d3840a199d1c9a72efcea605674f1b6814bd0e5c09212e9d49836bab4cb83bcf66c9677dc8b949f7c87df28700159168e5f88ddfe467ea9a1ddcf2937c44d54a59ef7731e6f8ed6c4e0f784db4ad3d717d32b942e5e18dec", 0x82}], 0x5, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2b}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x7fffffffffffffff}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0xc0}, 0x40000) 4.458756694s ago: executing program 2 (id=10905): r0 = fsopen(&(0x7f0000000640)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x800, 0x1) 4.290156107s ago: executing program 2 (id=10906): io_setup(0x6, &(0x7f0000000d80)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x18}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xbc0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) ioctl$TCFLSH(r3, 0x540b, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup3(r1, r0, 0x80000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x7, 0x20000000, 0x6, 0x6}, 0x7f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x5}}, @TCA_RATE={0x6, 0x5, {0x89, 0xb}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x2) 4.213946887s ago: executing program 3 (id=10907): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x100000000, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x400}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040044}, 0x800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0xfffffeb1, 0x1, 0x0, 0x0, r5}) unshare(0x2c020400) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="000328bd7000fedbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4080004) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="b202ccb02c8ac5b53b00a53e720893444a495ba9e07ca2018f90f3d2affa0b7b1e735efd4f11d895da9e9560fa12f05cb1bf88a0207e12495c0e651128c7bc62e3fcff63a00ca94176227029bf8b43406e7c49952f7ab5e698036494b24f786257ace9c9931863d1bf6ba732455d0388a3658e7e9721e8028c264d4964c814a775d8cc4cdb83506e0560c27f831b230498b8e16b0c00000000", @ANYRES64=r10, @ANYBLOB="0a0018000303030303030000"], 0x28}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = open(&(0x7f0000000240)='./bus\x00', 0x41a100, 0x10) lseek(r1, 0x5, 0x2) mknodat$loop(r12, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000008000}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x40000}, 0x1c) 4.161688958s ago: executing program 5 (id=10908): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e23, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x7ff, 0x1, 0x14, 0x8001, 0x4}, 0x98) 4.150392624s ago: executing program 2 (id=10909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)={0x4c, 0x2, 0x6, 0x5, 0x7, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x814}, 0x20040c85) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') unshare(0x24000400) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x8, 0x80, 0x3c, @ipv4={'\x00', '\xff\xff', @empty}, @remote, 0x8000, 0x700, 0xfffffc00, 0x2d}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x1, 0xffff7782, 0x1, 0xf3e89d9413c697e9, 0xffffffffffffffff, 0x3, '\x00', r2, r1, 0x4, 0x4, 0x3, 0x5, @value=r3}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480"], 0x38}, 0x1, 0x300}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xd, 0x5, 0x4, 0x6, 0x20001, r4}, 0x50) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x88011}, 0x40) 4.028712059s ago: executing program 5 (id=10910): open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) openat$nullb(0xffffff9c, &(0x7f0000000340), 0x86000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 3.935027092s ago: executing program 5 (id=10911): bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0xf, 0x1, 'D'}, 0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffd, 0xfffffffc}, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x62) fchdir(r4) ioprio_set$pid(0x3, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f00000002c0)={0x0, 0x401}) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000280)="dadbb8606c85f39aabda95f6", 0xc, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="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", 0x1ff, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={'sha256\x00'}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_int(r4, 0x107, 0x7, &(0x7f0000000300)=0x388, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000fcdbdf250600000008ab8800", @ANYRES32=r11, @ANYBLOB="08000500020000000500530001000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES64=r0, @ANYBLOB="0500feffffff000000002e0000000c009900d9780000030000000a0034000101010101010000080026006c090000"], 0x34}}, 0x0) 3.826436891s ago: executing program 0 (id=10912): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x3c}}, 0x40040) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r10 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8002, 0x0) ioctl$TCSETSW(r10, 0x5403, &(0x7f00000027c0)={0xab6, 0x3, 0xffffffc0, 0x80, 0x1, "e625b7fcf9fe176d572f93d8e16b493ad3f282"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000001c0)={0x0, 0xffffffffffffffa4, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r9, 0x309, 0x70bd2b, 0x0, {0x1d}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x331002, 0x0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r11, 0x4601, &(0x7f0000000100)={0x60, 0xf0, 0x60, 0x600, 0x0, 0xffff, 0x10, 0x0, {0x5, 0x10040}, {0x0, 0x200002, 0xffffffff}, {0x8000}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x3fe, 0x0, 0x0, 0x21, 0x0, 0x3, 0x7}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r12, 0x0, 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x1000, 0x3ff, 0x0, 0xf, 0x0, {0x0, 0x9}, {0x7, 0x20002, 0xfffffffd}, {0xf4ef}, {0x6, 0x0, 0x7fe}, 0x2, 0x100, 0x10000, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x5, 0x0, 0x2f, 0x100, 0x1}) 3.757330846s ago: executing program 2 (id=10913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe80, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.506652594s ago: executing program 3 (id=10914): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='S', 0x1}], 0x1}}], 0x1, 0x20008000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@remote, @in6=@private2}}, {{@in6=@remote}}}, &(0x7f0000000000)=0xe8) 2.315120398s ago: executing program 0 (id=10915): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003100), 0x40041, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000003140)=0x4) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_delete(0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r3, 0x1}}, 0x18) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x75e}], 0x3) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0x4b5a9da54893e123, 0x3, 0x1d, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sync() 2.234374312s ago: executing program 3 (id=10916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009eff"], 0x6f4}}, 0x0) 2.220699062s ago: executing program 3 (id=10917): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x4000001) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000a93000/0x4000)=nil, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}}, 0x20}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r6, 0x40189206, 0x0) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 2.094408575s ago: executing program 0 (id=10918): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, 0x0) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180), 0x4) (async) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd2835090000330000010902240001000020080904140002030002000921fdff000122450009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6000000006010900010073797a310000000034000480300001800a00010072616e6765000000200002800800495f04000100080001400000001308000228bf9c4000000000040004800900020073797a32000009000000000011000100000000000000000001"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) listen(r2, 0xffffff3e) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000340)="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") (async) write$dsp(r4, &(0x7f0000001340)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984c9d212e5baf40793406000000000000f495030000000000000073bdbaa464c040e61ea6e658101100101097a530970fd979d177b96995281707ce0fd0fbb04d", 0xffffffffffffff0c) write$dsp(r4, &(0x7f0000000080)="cd", 0x1) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="000ff3"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f00000001c0)={0xffffffffffffff12, &(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_enable(r7, &(0x7f0000000100)='0', 0x1) 1.786102456s ago: executing program 1 (id=10919): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}, 0x3a) (fail_nth: 5) 1.251642754s ago: executing program 3 (id=10920): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='THAWED\x00', 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="30a5db802ab92ff36abea7", @ANYRES16=r2, @ANYBLOB="010000000000000000203900000070005a806c0002800500070001000000140003000b0601000600fe0008000180feff0200050006000100000005000400010000001400030007000000a30f0004d684fdffee090700140003005b0d10000500030004000800ff0300101400030005000800010000000900020000000200"], 0x84}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) r3 = socket$kcm(0x2b, 0x3, 0x0) close(r3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000001300)=@delchain={0x1fec, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x1fbc, 0x2, [@TCA_TCINDEX_ACT={0x1fb8, 0x7, [@m_xt={0x154, 0x17, 0x0, 0x0, {{0x7}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x148, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcd9}]}, {0xe1, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd007f06888e398a5b1ebc9d8bc2a03083a899050d24dab394fce9a6391ce9085db859988a09d21d1026bb3980d2593302bbf456aa01e22d4e64be134fbd8c7653ca89413645fb68d2776dd5a9ff23ed61a15139d82f7de1aee3b13c48f18cb8dc7c39dd9c924b24b96d151107ca9811f7b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x1d18, 0x1e, 0x0, 0x0, {{0xa}, {0x1cec, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x3, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x6, 0x3, 0x1}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0x7}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x10001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xbc0a, 0xf, 0x2, 0x80, 0x3}, 0x3, 0x5, [{0x8, 0xbe4e, 0x7, 0x80000001, 0x9, 0xd}, {0x0, 0x1, 0x0, 0x0, 0x4, 0x9}, {0xfffffffb, 0xffffffff, 0x6, 0x40, 0x1, 0x1}, {0x401, 0x7, 0x0, 0x7, 0x8, 0xd}, {0x7, 0xfffffbff, 0xffffffff, 0x0, 0x3ff, 0x9}]}, [{0x0, 0x1, 0xffff, 0x7, 0xffffff50, 0x7}, {0x6, 0x5, 0x2, 0x401, 0xf, 0xd}, {0x8, 0x40, 0x1, 0x8, 0x0, 0x5}, {0x3, 0xc8, 0x2, 0x2, 0xa, 0xfff}, {0x3, 0xffffffff, 0x7, 0x9, 0x7, 0xbf16}, {0x3ff, 0xfffffffc, 0x7, 0x9, 0x2, 0x7}, {0x0, 0x1ff, 0x8, 0x4, 0x6, 0x5}, {0x6, 0x4, 0x9, 0x0, 0x9}, {0x7, 0x8001, 0x1000, 0x8, 0x9, 0x7ff}, {0x2, 0x5, 0x9, 0x802, 0x4, 0x5}, {0x8, 0xf, 0x3, 0x8, 0x8, 0xaa6}, {0x9, 0xe, 0x4, 0xf, 0xbec4, 0xf}, {0xfffffff7, 0x3, 0x8, 0x0, 0xffff, 0x2}, {0x98, 0x4, 0x4, 0x89, 0x8, 0x6}, {0x0, 0x10, 0xcfd7, 0x100, 0x7fffffff}, {0x8, 0x1000, 0x1, 0xd, 0x1, 0xa589}, {0x6, 0x3, 0x8, 0x5, 0x9, 0x2}, {0x1, 0x80, 0x9, 0x80000001, 0x9, 0x3}, {0x4, 0x7, 0xc, 0x200, 0x4}, {0x0, 0x400, 0x3, 0xdd74, 0x1}, {0x3, 0x6, 0x8, 0xffff8543, 0x3, 0xd2c}, {0x80, 0xffffffff, 0x101, 0x5, 0x7f, 0x300}, {0x4, 0x10, 0x8f, 0x4, 0xd1, 0x1}, {0xb6e0, 0xb9ba, 0x3, 0x17, 0x3, 0x7}, {0x8, 0x0, 0x7, 0x6, 0x7, 0xfffffffe}, {0x8, 0x200, 0xef0, 0x0, 0x6, 0xb4}, {0xae6f, 0x4, 0x2, 0x3, 0x7, 0x1}, {0x34, 0xffff, 0x2, 0x7, 0x2, 0x7fffffff}, {0x6, 0x10, 0x3, 0x6, 0x10000, 0x2}, {0x0, 0x8, 0xfffff34d, 0x80000000, 0xff, 0xfffffffb}, {0x94a, 0x5, 0x9, 0x0, 0x7, 0x6c241156}, {0x8, 0x5, 0x3, 0x5, 0x80000001, 0x1}, {0xffff, 0x4791, 0x5, 0x9, 0xa7, 0x6}, {0x0, 0x7, 0x0, 0xfd, 0x9, 0x6}, {0x400, 0xc577, 0x1000, 0x1, 0x3, 0x8}, {0xdaa5, 0x2, 0xfffffff9, 0x158, 0x6, 0x1d2}, {0x2d, 0x5, 0x400, 0x4, 0x2, 0x9}, {0xad08, 0x0, 0xa, 0x2, 0x36b, 0x63}, {0x6, 0x2, 0xb8, 0x2, 0x7, 0x6}, {0xd4e4, 0x2, 0x6, 0x8001, 0x8, 0x8}, {0x3, 0x4, 0x3ff, 0x81, 0x3, 0x4}, {0x1, 0x1, 0x401, 0x9, 0x8, 0xd4da}, {0xffffff15, 0x7f96, 0xae7, 0x8, 0x80000000}, {0x482f, 0xffffffc5, 0x1, 0x3, 0x2, 0x1}, {0x17, 0x100, 0x9, 0x200, 0x1, 0x5}, {0x1, 0x3a88, 0x9, 0xb50d, 0x0, 0x10000}, {0x80, 0xfd2, 0x6, 0x8, 0x7, 0x4}, {0x3eca, 0x0, 0xa, 0x1ff, 0xab0}, {0x5, 0x8, 0xfffffffd, 0x2, 0xe04b, 0x80000000}, {0x10, 0xffffffff, 0x1ff, 0x1, 0x9b38, 0x2463}, {0x8, 0x3, 0xb, 0xffffff68, 0x370, 0x401}, {0x5, 0x8, 0x4, 0x7, 0x3, 0x4b}, {0x4, 0x9, 0x8, 0x1, 0x800, 0xfffffffe}, {0x7, 0xfffffff9, 0x7fff, 0x9, 0x800000, 0x3}, {0x4, 0x6, 0xf96f, 0x8, 0x5, 0x6}, {0x20c, 0x800, 0x8, 0xfffffffd, 0x7, 0x1}, {0x2, 0x101, 0x0, 0x2, 0xf9, 0x7fffffff}, {0x5, 0x47, 0x100, 0x40, 0x8, 0xe}, {0xfff, 0x3, 0x100, 0xdf9, 0x6, 0x4}, {0x1, 0x8001, 0xff, 0x4, 0xa, 0x3}, {0x101, 0x8, 0x979, 0x6d, 0x6, 0x6}, {0xf, 0x9, 0xfffffff7, 0x1, 0x4, 0x3ff}, {0x10, 0x1, 0x148, 0x2, 0x0, 0x14e7}, {0x4, 0x9, 0x3, 0x6, 0x1590, 0x7}, {0x0, 0x7, 0x3821, 0x5, 0x2, 0x5}, {0x2, 0x9, 0x1, 0x9, 0x28dbd359, 0x6}, {0x10000, 0xc29, 0x5, 0x5, 0x36b9, 0x7f}, {0x2, 0xdb7, 0x842, 0x4b, 0xfffffff8, 0x9}, {0xe, 0x101, 0x400, 0x7, 0x3, 0x7ff}, {0x5, 0x5, 0x9, 0xffffffff, 0x4, 0x2}, {0x40, 0x4, 0x5, 0x3, 0x8, 0x6}, {0x7ff, 0x10000, 0x2, 0xf281, 0x9, 0x8000}, {0x6, 0x14c800, 0x100, 0x8, 0xd, 0x3}, {0x3, 0x8000, 0x3, 0x5, 0x5, 0xc}, {0x5, 0x8, 0x8, 0x6, 0x3ff, 0x2}, {0x5, 0x80000000, 0x1, 0x8, 0x1, 0xdea}, {0x926b, 0x80000000, 0x8, 0x1, 0x2, 0x10001}, {0x6, 0x2, 0x0, 0x7, 0x5, 0x10001}, {0x5, 0xfffffffd, 0x401, 0xa, 0x800, 0x7fff}, {0xa0, 0x7fff, 0x4, 0x7, 0xffffffff, 0x401}, {0xd7, 0xfc, 0x8, 0x4, 0x3ff, 0xc33}, {0x6, 0x19, 0x2, 0x2, 0x7, 0x8001}, {0x7f, 0xffff9dcb, 0x9, 0x1, 0x24000000, 0x7}, {0x5, 0x8, 0x9, 0x5, 0x80000001, 0x6}, {0x2, 0xaebf, 0x6, 0x7a, 0x8, 0x9}, {0x9e7, 0x3ff, 0x1, 0x2, 0x7fffffff, 0x3}, {0x2, 0x2, 0x1, 0x4, 0x0, 0xd5}, {0x6bd, 0x80, 0x7, 0x1, 0xffff, 0xfffffff1}, {0x7, 0x7ff, 0x7fff, 0x6, 0x7, 0xff}, {0x4800, 0x1, 0x2, 0xa131, 0x848, 0x6}, {0x5, 0x6, 0x2, 0x3, 0xffff, 0x3}, {0x6, 0x800, 0x8ce, 0x2, 0x1}, {0x9, 0xfffffff9, 0x1, 0x2, 0x20, 0x38000000}, {0x0, 0xffffffff, 0x7bf, 0x2, 0x5, 0x2}, {0x71d, 0x9, 0x7f, 0x79, 0x7, 0xfff}, {0x6, 0x0, 0x7, 0x4, 0xfffffffe, 0x9bc}, {0x9, 0xfffffffb, 0x1, 0x0, 0x1}, {0x1, 0x7, 0x9, 0x7, 0xf, 0xc}, {0x9, 0xf, 0x4, 0x10, 0x8, 0x215}, {0xa944, 0x86, 0x51b, 0x10000, 0x80000000, 0x3}, {0x8, 0x0, 0x4, 0x7, 0xffffffff, 0x5165}, {0x4, 0x1, 0x4, 0x1, 0x9765}, {0x0, 0x6, 0x6, 0x8, 0x2, 0x2}, {0x3877ae68, 0x4, 0x9, 0xf, 0x2, 0x9}, {0x6, 0x7, 0xc, 0xfff, 0xdc, 0x3}, {0x8, 0x7fff, 0x10, 0xfffffe00, 0xd6, 0x8}, {0x100, 0x8, 0x5d7, 0xe8878000, 0x7, 0x9}, {0x3, 0x4, 0x83c6, 0x0, 0x1000, 0x7}, {0x401, 0x5, 0x9, 0x1186, 0xc0, 0x7f}, {0x7ff, 0xb3, 0x4, 0x0, 0xf, 0xd64}, {0x0, 0x7, 0x3, 0x7, 0x400, 0xffffffff}, {0x0, 0x6, 0x7fffffff, 0x8, 0x7, 0x9}, {0x8, 0x2, 0x101, 0x0, 0x7f}, {0x9, 0x4662, 0x70, 0x9, 0xce, 0x10001}, {0x4, 0xa, 0x3, 0x0, 0xf, 0x5}, {0xcc, 0x8, 0x5137, 0x2, 0x2e9a, 0xaf}, {0x789c, 0x5, 0x2, 0x7ff, 0xb67, 0x4}, {0x0, 0x91f, 0xb0e, 0xffff, 0x2, 0xffffffff}, {0xc7a, 0x6, 0xffffffc5, 0x9, 0x4, 0x7fff}, {0x21, 0x0, 0x7, 0x4, 0x80, 0x2800}, {0x3, 0x9, 0x0, 0x80, 0x6, 0x2}, {0x1, 0xc5, 0x0, 0x3, 0x2, 0x3}, {0x6, 0x4, 0x7ff, 0x8, 0x4, 0xb}, {0x4, 0x0, 0x5, 0x7fff, 0x5, 0x9}, {0x9, 0x4, 0x10, 0x3, 0x0, 0x8}, {0x7fffffff, 0x6, 0x8, 0x7, 0x7, 0x2}, {0x3, 0x5b8, 0x5, 0x6, 0x3d67, 0x3}, {0x4, 0x0, 0x9, 0x5, 0x80000000, 0x1}], [{0x4}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x3}, {0x1}, {0x2}, {0x7}, {0x3}, {0x1}, {0x4}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x501abeaffe19eb8}, {0x4}, {0x2}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x6}, {0x3}, {0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x8c8f22033c51199d}, {}, {0x4}, {0x5, 0xe909f12c5f33f997}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x3}, {0x2}, {0x7}, {}, {}, {0x3}, {0x2}, {0x3}, {0x5}, {0x2}, {0x4}, {0x654d41918ae72e00}, {0x4}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x1}, {}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x2}, {0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1fec}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002fb}) io_uring_setup(0x5386, &(0x7f0000000100)={0x0, 0x6dd3, 0x4, 0x3, 0x3d5, 0x0, r4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r3) 1.235961961s ago: executing program 1 (id=10921): open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)) openat$nullb(0xffffff9c, &(0x7f0000000340), 0x86000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 973.339621ms ago: executing program 1 (id=10922): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0}, &(0x7f0000000000)=0x40) 842.744414ms ago: executing program 1 (id=10923): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x100000000, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x400}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffffd}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040044}, 0x800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0xfffffeb1, 0x1, 0x0, 0x0, r5}) unshare(0x2c020400) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="000328bd7000fedbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4080004) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="b202ccb02c8ac5b53b00a53e720893444a495ba9e07ca2018f90f3d2affa0b7b1e735efd4f11d895da9e9560fa12f05cb1bf88a0207e12495c0e651128c7bc62e3fcff63a00ca94176227029bf8b43406e7c49952f7ab5e698036494b24f786257ace9c9931863d1bf6ba732455d0388a3658e7e9721e8028c264d4964c814a775d8cc4cdb83506e0560c27f831b230498b8e16b0c00000000", @ANYRES64=r10, @ANYBLOB="0a0018000303030303030000"], 0x28}, 0x1, 0x0, 0x0, 0x24000015}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r12 = open(&(0x7f0000000240)='./bus\x00', 0x41a100, 0x10) lseek(r1, 0x5, 0x2) mknodat$loop(r12, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000008000}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x40000}, 0x1c) 0s ago: executing program 5 (id=10924): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102e, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x0) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x34ae}], 0x1, 0x22, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x10001, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x1000400000de, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000300), &(0x7f0000000340)=0x8) r2 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x80000) accept$inet(r2, 0x0, &(0x7f00000003c0)) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4) unshare(0x2c020400) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x800) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffe, 0x101001) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x10, 0x1014, 0x0, 0x6, 0x0, 0x3, 0xdd2fcb245114ab72}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60040000020605000000000000000000070000001400078008000272055d37dca889124000000c8f05000100070000000000000003000000050004000000000009000200000300686173683a69702c6d61726b00000000"], 0x60}}, 0x20004000) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 000000 R11: 0000000000000246 R12: 0000000000000001 [ 1452.013133][ T4379] R13: 00007f5f12a16038 R14: 00007f5f12a15fa0 R15: 00007f5f12b3fa48 [ 1452.013161][ T4379] [ 1452.533934][ T4391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10547'. [ 1452.578243][ T5879] usb 6-1: USB disconnect, device number 44 [ 1452.677282][ T4395] netlink: 'syz.3.10549': attribute type 3 has an invalid length. [ 1452.753955][ T4399] binder: 4398:4399 ioctl 127a 0 returned -22 [ 1453.452736][ T4408] netlink: 'syz.1.10554': attribute type 1 has an invalid length. [ 1453.461243][ T4408] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10554'. [ 1453.963626][T27655] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1454.147378][T27655] usb 2-1: Using ep0 maxpacket: 8 [ 1454.162934][T27653] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1454.219143][T27655] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1454.284256][T27655] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1454.318102][T27655] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1454.329668][T27655] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1454.350114][T27653] usb 4-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1454.361800][T27653] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1454.376901][T27655] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1454.394524][T27655] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1454.407393][T27653] usb 4-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1454.426235][T27655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.470909][T27653] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1454.557086][T27653] usb 4-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1454.616526][T27653] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1454.709125][T27653] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1454.751017][T27653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.790743][T27653] usb 4-1: config 0 descriptor?? [ 1454.830432][T27655] usb 2-1: GET_CAPABILITIES returned 0 [ 1454.843893][T27655] usbtmc 2-1:16.0: can't read capabilities [ 1454.993004][ T5910] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1455.132820][ T5910] usb 6-1: device descriptor read/64, error -71 [ 1455.152983][ T4430] geneve3: entered promiscuous mode [ 1455.392870][ T5910] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1455.542782][ T5910] usb 6-1: device descriptor read/64, error -71 [ 1455.653453][ T5910] usb usb6-port1: attempt power cycle [ 1455.752863][T15577] Bluetooth: hci3: command 0x0406 tx timeout [ 1455.992960][ T5910] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1456.023608][ T5910] usb 6-1: device descriptor read/8, error -71 [ 1456.263079][ T5910] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1456.285389][ T5910] usb 6-1: device descriptor read/8, error -71 [ 1456.393005][ T5910] usb usb6-port1: unable to enumerate USB device [ 1456.402089][ T4458] blktrace: Concurrent blktraces are not allowed on loop4 [ 1456.546675][T27655] usb 2-1: USB disconnect, device number 71 [ 1456.711502][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1456.711538][ T30] audit: type=1326 audit(1774274291.831:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.1.10567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1279c799 code=0x7ffc0000 [ 1456.742220][ T30] audit: type=1326 audit(1774274291.871:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.1.10567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f1279c799 code=0x7ffc0000 [ 1456.767723][ T30] audit: type=1326 audit(1774274291.891:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.1.10567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1279c799 code=0x7ffc0000 [ 1456.883744][ T30] audit: type=1326 audit(1774274292.011:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.1.10567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5f1279c799 code=0x7ffc0000 [ 1456.893386][T27655] usb 4-1: USB disconnect, device number 87 [ 1456.908938][ T30] audit: type=1326 audit(1774274292.031:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.1.10567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1279c799 code=0x7ffc0000 [ 1456.943308][ T30] audit: type=1326 audit(1774274292.071:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.1.10567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1279c799 code=0x7ffc0000 [ 1456.987674][ T30] audit: type=1326 audit(1774274292.071:5614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4459 comm="syz.1.10567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5f1279c799 code=0x7ffc0000 [ 1457.071872][ T4465] FAULT_INJECTION: forcing a failure. [ 1457.071872][ T4465] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.100857][ T4465] CPU: 0 UID: 0 PID: 4465 Comm: syz.3.10568 Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.100877][ T4465] Tainted: [L]=SOFTLOCKUP [ 1457.100881][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1457.100888][ T4465] Call Trace: [ 1457.100892][ T4465] [ 1457.100898][ T4465] dump_stack_lvl+0xe8/0x150 [ 1457.100918][ T4465] should_fail_ex+0x412/0x560 [ 1457.100935][ T4465] should_failslab+0xa8/0x100 [ 1457.100948][ T4465] ? fuse_get_req+0x7da/0x10d0 [ 1457.100960][ T4465] kmem_cache_alloc_noprof+0x87/0x650 [ 1457.100975][ T4465] fuse_get_req+0x7da/0x10d0 [ 1457.100991][ T4465] ? __pfx_fuse_get_req+0x10/0x10 [ 1457.101001][ T4465] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1457.101014][ T4465] ? do_raw_spin_lock+0x12b/0x2f0 [ 1457.101028][ T4465] __fuse_simple_request+0x2cc/0x1c60 [ 1457.101042][ T4465] ? try_to_unlazy+0x6ad/0xc50 [ 1457.101053][ T4465] ? __pfx___fuse_simple_request+0x10/0x10 [ 1457.101063][ T4465] ? try_to_unlazy+0x705/0xc50 [ 1457.101079][ T4465] ? __asan_memset+0x22/0x50 [ 1457.101089][ T4465] ? terminate_walk+0x3d7/0x510 [ 1457.101106][ T4465] ? path_lookupat+0x74f/0x8c0 [ 1457.101124][ T4465] fuse_permission+0x88b/0xe30 [ 1457.101142][ T4465] ? __pfx_fuse_permission+0x10/0x10 [ 1457.101168][ T4465] ? strncpy_from_user+0x150/0x2b0 [ 1457.101181][ T4465] ? __pfx_fuse_permission+0x10/0x10 [ 1457.101195][ T4465] inode_permission+0x46f/0x5f0 [ 1457.101211][ T4465] __se_sys_chroot+0x15a/0x3f0 [ 1457.101224][ T4465] ? __pfx___se_sys_chroot+0x10/0x10 [ 1457.101241][ T4465] do_syscall_64+0x14d/0xf80 [ 1457.101253][ T4465] ? trace_irq_disable+0x3b/0x150 [ 1457.101267][ T4465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.101277][ T4465] ? clear_bhb_loop+0x40/0x90 [ 1457.101289][ T4465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.101299][ T4465] RIP: 0033:0x7fe63939c799 [ 1457.101309][ T4465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.101319][ T4465] RSP: 002b:00007fe63a2eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 1457.101331][ T4465] RAX: ffffffffffffffda RBX: 00007fe639615fa0 RCX: 00007fe63939c799 [ 1457.101339][ T4465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 1457.101345][ T4465] RBP: 00007fe63a2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.101351][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.101357][ T4465] R13: 00007fe639616038 R14: 00007fe639615fa0 R15: 00007fe63973fa48 [ 1457.101372][ T4465] [ 1458.112905][T27655] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1458.292920][T27655] usb 4-1: device descriptor read/64, error -71 [ 1458.393812][ T5886] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1458.543053][T27655] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1458.592789][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 1458.688423][ T5886] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1458.722964][T27655] usb 4-1: device descriptor read/64, error -71 [ 1458.737502][ T5886] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 29900, setting to 1024 [ 1458.787062][ T5886] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1458.863271][T27655] usb usb4-port1: attempt power cycle [ 1459.024002][ T5886] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1459.036230][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.048443][ T5886] usb 6-1: Product: syz [ 1459.056427][ T5886] usb 6-1: Manufacturer: syz [ 1459.066051][ T5886] usb 6-1: SerialNumber: syz [ 1459.172833][T19974] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1459.202922][T27655] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1459.223438][T27655] usb 4-1: device descriptor read/8, error -71 [ 1459.325294][T19974] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.359442][T19974] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1459.399141][T19974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.436258][T19974] usb 2-1: Product: syz [ 1459.455442][T19974] usb 2-1: Manufacturer: syz [ 1459.463223][T27655] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1459.475940][T19974] usb 2-1: SerialNumber: syz [ 1459.523587][T27655] usb 4-1: device descriptor read/8, error -71 [ 1459.536444][T19974] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1459.550657][T19974] dvb-usb: bulk message failed: -22 (3/0) [ 1459.576026][T19974] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1459.600521][T19974] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1459.609829][T19974] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1459.623271][T27653] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1459.653181][T27655] usb usb4-port1: unable to enumerate USB device [ 1459.810520][T27653] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1459.825864][T27653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.843997][T27653] usb 3-1: Product: syz [ 1459.853580][T27653] usb 3-1: Manufacturer: syz [ 1459.864065][T27653] usb 3-1: SerialNumber: syz [ 1459.904004][T27653] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1459.941818][T27655] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1460.544179][ T5886] cdc_ncm 6-1:1.0: bind() failure [ 1460.573405][ T5886] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1460.581147][ T5886] cdc_ncm 6-1:1.1: bind() failure [ 1460.595302][ T5879] usb 2-1: USB disconnect, device number 72 [ 1460.599472][ T5886] usb 6-1: USB disconnect, device number 49 [ 1460.621045][ T4497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.631177][ T4497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.035017][T27655] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1461.049074][T27655] ath9k_htc: Failed to initialize the device [ 1461.099085][T27655] usb 3-1: ath9k_htc: USB layer deinitialized [ 1461.253927][ T5879] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1461.414890][ T5879] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.446532][ T5879] usb 4-1: too many endpoints for config 0 interface 0 altsetting 1: 48, using maximum allowed: 30 [ 1461.481222][ T5879] usb 4-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1461.520208][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1461.521155][ T4518] FAULT_INJECTION: forcing a failure. [ 1461.521155][ T4518] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1461.547181][ T4518] CPU: 0 UID: 0 PID: 4518 Comm: syz.5.10586 Tainted: G L syzkaller #0 PREEMPT(full) [ 1461.547208][ T4518] Tainted: [L]=SOFTLOCKUP [ 1461.547215][ T4518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1461.547229][ T4518] Call Trace: [ 1461.547237][ T4518] [ 1461.547245][ T4518] dump_stack_lvl+0xe8/0x150 [ 1461.547276][ T4518] should_fail_ex+0x412/0x560 [ 1461.547309][ T4518] prepare_alloc_pages+0x22a/0x650 [ 1461.547340][ T4518] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1461.547367][ T4518] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1461.547395][ T4518] ? __pfx_policy_nodemask+0x10/0x10 [ 1461.547429][ T4518] alloc_pages_mpol+0x232/0x4a0 [ 1461.547458][ T4518] vma_alloc_folio_noprof+0xea/0x210 [ 1461.547485][ T4518] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1461.547517][ T4518] do_wp_page+0x1204/0x5a00 [ 1461.547548][ T4518] ? __pfx_css_rstat_updated+0x10/0x10 [ 1461.547581][ T4518] ? __pfx_do_wp_page+0x10/0x10 [ 1461.547605][ T4518] ? do_raw_spin_lock+0x12b/0x2f0 [ 1461.547628][ T4518] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1461.547657][ T4518] handle_mm_fault+0x1520/0x3310 [ 1461.547697][ T4518] ? handle_mm_fault+0xee/0x3310 [ 1461.547732][ T4518] ? __pfx_handle_mm_fault+0x10/0x10 [ 1461.547782][ T4518] ? lock_mm_and_find_vma+0xa7/0x340 [ 1461.547806][ T4518] do_user_addr_fault+0x75b/0x1340 [ 1461.547850][ T4518] exc_page_fault+0x6a/0xc0 [ 1461.547873][ T4518] asm_exc_page_fault+0x26/0x30 [ 1461.547891][ T4518] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1461.547918][ T4518] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1461.547933][ T4518] RSP: 0018:ffffc90004d5fc48 EFLAGS: 00050246 [ 1461.547951][ T4518] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 0000000000000008 [ 1461.547962][ T4518] RDX: 0000000000000000 RSI: ffffc90004d5fce0 RDI: 0000200000001280 [ 1461.547974][ T4518] RBP: ffffc90004d5fd50 R08: ffffc90004d5fce7 R09: 1ffff920009abf9c [ 1461.547988][ T4518] R10: dffffc0000000000 R11: fffff520009abf9d R12: 0000200000001288 [ 1461.548007][ T4518] R13: 00007ffffffff000 R14: ffffc90004d5fce0 R15: 0000200000001280 [ 1461.548037][ T4518] _copy_to_user+0x8a/0xb0 [ 1461.548061][ T4518] sctp_getsockopt_auth_supported+0x413/0x580 [ 1461.548083][ T4518] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1461.548106][ T4518] ? __pfx_sctp_getsockopt_auth_supported+0x10/0x10 [ 1461.548124][ T4518] ? sctp_getsockopt+0x12f/0xb90 [ 1461.548146][ T4518] ? __local_bh_enable_ip+0xd0/0x130 [ 1461.548175][ T4518] sctp_getsockopt+0x6c6/0xb90 [ 1461.548193][ T4518] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1461.548223][ T4518] do_sock_getsockopt+0x2d3/0x3f0 [ 1461.548247][ T4518] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1461.548268][ T4518] ? __fget_files+0x3a0/0x420 [ 1461.548294][ T4518] ? __fget_files+0x2a/0x420 [ 1461.548327][ T4518] __x64_sys_getsockopt+0x1a4/0x240 [ 1461.548356][ T4518] do_syscall_64+0x14d/0xf80 [ 1461.548376][ T4518] ? trace_irq_disable+0x3b/0x150 [ 1461.548401][ T4518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.548420][ T4518] ? clear_bhb_loop+0x40/0x90 [ 1461.548442][ T4518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.548461][ T4518] RIP: 0033:0x7fb4eff9c799 [ 1461.548478][ T4518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1461.548493][ T4518] RSP: 002b:00007fb4f0ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1461.548510][ T4518] RAX: ffffffffffffffda RBX: 00007fb4f0215fa0 RCX: 00007fb4eff9c799 [ 1461.548523][ T4518] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000003 [ 1461.548534][ T4518] RBP: 00007fb4f0ebd090 R08: 00002000000000c0 R09: 0000000000000000 [ 1461.548547][ T4518] R10: 0000200000001280 R11: 0000000000000246 R12: 0000000000000001 [ 1461.548558][ T4518] R13: 00007fb4f0216038 R14: 00007fb4f0215fa0 R15: 00007fb4f033fa48 [ 1461.548588][ T4518] [ 1462.055390][ T5879] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1462.106714][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.124471][ T5879] usb 4-1: Product: syz [ 1462.128971][ T5879] usb 4-1: Manufacturer: syz [ 1462.134013][ T5879] usb 4-1: SerialNumber: syz [ 1462.141016][ T5879] usb 4-1: config 0 descriptor?? [ 1462.362781][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1462.372184][ T5879] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1462.388701][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1462.399333][ T5879] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1462.411137][ T5879] usb 4-1: media controller created [ 1462.423966][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1462.460641][ T5879] DVB: Unable to find symbol tda10046_attach() [ 1462.469497][ T5879] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1462.478840][ T5879] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1462.490029][ T5879] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1462.505880][ T5879] usb 4-1: USB disconnect, device number 92 [ 1462.582785][T29345] usb 3-1: USB disconnect, device number 72 [ 1462.593546][ T4492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.955861][T29345] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1463.078657][ T4537] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1463.099645][ T4537] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1463.135767][ T4537] ipvlan2: entered allmulticast mode [ 1463.141098][ T4537] syz_tun: entered allmulticast mode [ 1463.153031][ T4539] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10593'. [ 1463.202215][ T4540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10594'. [ 1463.213643][ T4540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10594'. [ 1463.271976][ T30] audit: type=1326 audit(1774274298.391:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4541 comm="syz.5.10595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4eff9c799 code=0x0 [ 1463.348074][ T4546] netlink: 388 bytes leftover after parsing attributes in process `syz.3.10596'. [ 1463.448189][T29345] usb 3-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.508750][T29345] usb 3-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1463.538467][T29345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.574049][T29345] usb 3-1: Product: syz [ 1463.578218][T29345] usb 3-1: Manufacturer: syz [ 1463.590308][T29345] usb 3-1: SerialNumber: syz [ 1463.601117][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10598'. [ 1463.617879][T29345] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1463.630498][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10598'. [ 1463.646339][T29345] dvb-usb: bulk message failed: -22 (3/0) [ 1463.691730][T29345] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1463.756164][T29345] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1463.765135][T29345] dvb_usb_umt_010 3-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1463.803018][ T5879] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1463.964403][ T5879] usb 6-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1463.984125][ T5879] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1464.007707][ T5879] usb 6-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1464.022918][T29345] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1464.037452][ T5879] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1464.058208][ T5879] usb 6-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1464.082026][ T5879] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1464.103212][ T5879] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1464.122737][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.144044][ T5879] usb 6-1: config 0 descriptor?? [ 1464.187828][T29345] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1464.208079][T29345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.225698][T29345] usb 4-1: Product: syz [ 1464.229889][T29345] usb 4-1: Manufacturer: syz [ 1464.245316][T29345] usb 4-1: SerialNumber: syz [ 1464.267591][T29345] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1464.287037][ T5879] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1464.844559][ T4576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.853899][ T4576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.943632][T19970] usb 3-1: USB disconnect, device number 73 [ 1465.358990][ T5879] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1465.366300][ T5879] ath9k_htc: Failed to initialize the device [ 1465.382885][T19970] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1465.399338][ T5879] usb 4-1: ath9k_htc: USB layer deinitialized [ 1465.537962][T19970] usb 3-1: config 0 has an invalid interface number: 22 but max is 0 [ 1465.546561][T19970] usb 3-1: config 0 has no interface number 0 [ 1465.552951][T19970] usb 3-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.573019][T19970] usb 3-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1465.588431][T19970] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1465.596514][ T4584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10608'. [ 1465.598273][T19970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.623708][T19970] usb 3-1: config 0 descriptor?? [ 1466.060063][T19970] elo 0003:04E7:0030.0026: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input22 [ 1466.118784][ T4560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1466.141800][ T5879] usb 4-1: USB disconnect, device number 93 [ 1466.287635][T27653] usb 3-1: USB disconnect, device number 74 [ 1466.591650][T27655] usb 6-1: USB disconnect, device number 50 [ 1467.063223][T27655] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1467.249973][T27655] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.288265][T27655] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1467.310657][T27655] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.341076][T27655] usb 6-1: Product: syz [ 1467.352990][T27655] usb 6-1: Manufacturer: syz [ 1467.357611][T27655] usb 6-1: SerialNumber: syz [ 1467.420460][T27655] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1467.464195][T27655] dvb-usb: bulk message failed: -22 (3/0) [ 1467.526669][T27655] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1467.597751][T27655] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1467.651557][T27655] dvb_usb_umt_010 6-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1468.406183][ T5886] usb 6-1: USB disconnect, device number 51 [ 1468.612852][ T4639] tipc: Enabling of bearer rejected, failed to enable media [ 1468.624987][ T4639] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1468.664810][ T4639] input: syz0 as /devices/virtual/input/input78 [ 1468.671138][ T4639] input: failed to attach handler leds to device input78, error: -6 [ 1468.703732][T19974] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1468.738756][ T4644] syzkaller0: entered promiscuous mode [ 1468.907186][T19974] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1468.918271][T19974] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1468.927345][T19974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.937175][T19974] usb 2-1: config 0 descriptor?? [ 1468.949235][T19974] smsusb:smsusb_probe: board id=8, interface number 0 [ 1468.976598][T19974] smsusb:smsusb_probe: Device initialized with return code -19 [ 1469.125737][ T4657] blktrace: Concurrent blktraces are not allowed on loop4 [ 1469.194397][T29345] usb 2-1: USB disconnect, device number 73 [ 1470.496845][ T4664] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.28.0.0 [ 1470.504643][ T4664] PKCS7: Only support pkcs7_signedData type [ 1470.692962][ T5886] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1470.885786][ T5886] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.905249][ T5886] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1470.916295][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.924614][ T5886] usb 6-1: Product: syz [ 1470.928916][ T5886] usb 6-1: Manufacturer: syz [ 1470.933925][ T5886] usb 6-1: SerialNumber: syz [ 1470.946252][ T5886] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1470.957151][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 1470.982961][T29345] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1470.993527][ T5886] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1471.008156][ T5886] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1471.017074][ T5886] dvb_usb_umt_010 6-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1471.134273][T29345] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1471.146355][T29345] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1471.158113][T29345] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 1471.169139][T29345] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1471.178123][T29345] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1471.187460][T29345] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1471.195845][T29345] usb 4-1: Product: syz [ 1471.200153][T29345] usb 4-1: Manufacturer: syz [ 1471.206225][T29345] usb 4-1: SerialNumber: syz [ 1471.215319][T29345] usb 4-1: config 0 descriptor?? [ 1471.221617][ T4689] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1471.232780][ T5886] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1471.246188][T29345] usb 4-1: selecting invalid altsetting 0 [ 1471.384065][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1471.395233][ T5886] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1471.404410][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.415536][ T5886] usb 3-1: config 0 descriptor?? [ 1471.426279][ T5886] smsusb:smsusb_probe: board id=8, interface number 0 [ 1471.435344][ T5886] smsusb:smsusb_probe: Device initialized with return code -19 [ 1471.476523][T29345] usb 4-1: USB disconnect, device number 94 [ 1471.640297][ T5886] usb 3-1: USB disconnect, device number 75 [ 1472.064931][T29345] usb 6-1: USB disconnect, device number 52 [ 1472.332784][ T5886] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1472.484298][ T4708] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1472.497464][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.517873][ T5886] usb 4-1: config 0 has no interfaces? [ 1472.530302][ T5886] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1472.541727][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.559043][ T5886] usb 4-1: config 0 descriptor?? [ 1472.783923][ T4702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10645'. [ 1472.795030][ T5879] usb 4-1: USB disconnect, device number 95 [ 1472.892798][T29345] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1473.042772][T29345] usb 3-1: Using ep0 maxpacket: 32 [ 1473.049309][T29345] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 1473.057614][T29345] usb 3-1: config 0 has no interface number 0 [ 1473.064006][T29345] usb 3-1: config 0 interface 10 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1473.075890][T29345] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 1473.089353][T29345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.103102][T29345] usb 3-1: Product: syz [ 1473.107291][T29345] usb 3-1: Manufacturer: syz [ 1473.111887][T29345] usb 3-1: SerialNumber: syz [ 1473.135526][T29345] usb 3-1: config 0 descriptor?? [ 1473.172439][ T4717] FAULT_INJECTION: forcing a failure. [ 1473.172439][ T4717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1473.185583][ T4717] CPU: 1 UID: 0 PID: 4717 Comm: syz.5.10651 Tainted: G L syzkaller #0 PREEMPT(full) [ 1473.185611][ T4717] Tainted: [L]=SOFTLOCKUP [ 1473.185618][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1473.185628][ T4717] Call Trace: [ 1473.185633][ T4717] [ 1473.185638][ T4717] dump_stack_lvl+0xe8/0x150 [ 1473.185660][ T4717] should_fail_ex+0x412/0x560 [ 1473.185677][ T4717] _copy_from_user+0x2d/0xb0 [ 1473.185690][ T4717] binder_ioctl_write_read+0x16a/0xa660 [ 1473.185765][ T4717] ? is_bpf_text_address+0x26/0x2b0 [ 1473.185779][ T4717] ? is_bpf_text_address+0x292/0x2b0 [ 1473.185789][ T4717] ? is_bpf_text_address+0x26/0x2b0 [ 1473.185801][ T4717] ? kernel_text_address+0xa5/0xe0 [ 1473.185812][ T4717] ? __kernel_text_address+0xd/0x30 [ 1473.185823][ T4717] ? unwind_get_return_address+0x4d/0x90 [ 1473.185837][ T4717] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1473.185848][ T4717] ? arch_stack_walk+0xfb/0x150 [ 1473.185868][ T4717] ? stack_trace_save+0xa9/0x100 [ 1473.185878][ T4717] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1473.185887][ T4717] ? kasan_save_free_info+0x46/0x50 [ 1473.185903][ T4717] ? stack_depot_save_flags+0x33/0x810 [ 1473.185918][ T4717] ? format_decode+0xd0/0xe10 [ 1473.185933][ T4717] ? kasan_save_track+0x4f/0x80 [ 1473.185943][ T4717] ? kasan_save_track+0x3e/0x80 [ 1473.185952][ T4717] ? kasan_save_free_info+0x46/0x50 [ 1473.185965][ T4717] ? __kasan_slab_free+0x5c/0x80 [ 1473.185978][ T4717] ? __lock_acquire+0x6b5/0x2cf0 [ 1473.185996][ T4717] ? binder_debug+0x155/0x1d0 [ 1473.186009][ T4717] ? __pfx_binder_debug+0x10/0x10 [ 1473.186017][ T4717] ? do_raw_spin_lock+0x12b/0x2f0 [ 1473.186035][ T4717] ? _raw_spin_unlock+0x28/0x50 [ 1473.186044][ T4717] ? binder_get_thread+0x177/0x6d0 [ 1473.186056][ T4717] binder_ioctl+0x423/0x1b70 [ 1473.186109][ T4717] ? tomoyo_path_number_perm+0x219/0x630 [ 1473.186124][ T4717] ? tomoyo_path_number_perm+0x219/0x630 [ 1473.186138][ T4717] ? do_vfs_ioctl+0x1166/0x1530 [ 1473.186157][ T4717] ? __pfx_binder_ioctl+0x10/0x10 [ 1473.186167][ T4717] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1473.186184][ T4717] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1473.186205][ T4717] ? __fget_files+0x2a/0x420 [ 1473.186221][ T4717] ? __fget_files+0x2a/0x420 [ 1473.186234][ T4717] ? __fget_files+0x3a0/0x420 [ 1473.186247][ T4717] ? __fget_files+0x2a/0x420 [ 1473.186262][ T4717] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1473.186276][ T4717] ? __pfx_binder_ioctl+0x10/0x10 [ 1473.186286][ T4717] __se_sys_ioctl+0xfc/0x170 [ 1473.186299][ T4717] do_syscall_64+0x14d/0xf80 [ 1473.186310][ T4717] ? trace_irq_disable+0x3b/0x150 [ 1473.186323][ T4717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.186333][ T4717] ? clear_bhb_loop+0x40/0x90 [ 1473.186345][ T4717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.186355][ T4717] RIP: 0033:0x7fb4eff9c799 [ 1473.186366][ T4717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.186374][ T4717] RSP: 002b:00007fb4f0ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1473.186386][ T4717] RAX: ffffffffffffffda RBX: 00007fb4f0215fa0 RCX: 00007fb4eff9c799 [ 1473.186393][ T4717] RDX: 0000200000000280 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1473.186400][ T4717] RBP: 00007fb4f0ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 1473.186406][ T4717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1473.186413][ T4717] R13: 00007fb4f0216038 R14: 00007fb4f0215fa0 R15: 00007fb4f033fa48 [ 1473.186427][ T4717] [ 1473.186433][ T4717] binder: 4716:4717 ioctl c0306201 200000000280 returned -14 [ 1473.428705][ T4721] netlink: 'syz.2.10648': attribute type 10 has an invalid length. [ 1473.681229][ T4724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1473.824968][ T5886] usb 3-1: USB disconnect, device number 76 [ 1474.063344][T19974] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1474.215939][T19974] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1474.227087][T19974] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1474.236983][T19974] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1474.246343][T19974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.271426][ T4728] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1474.278928][ T5886] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1474.302085][T19974] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1474.446653][ T5886] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.468415][ T5886] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1474.477791][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.486606][ T5886] usb 2-1: Product: syz [ 1474.490782][ T5886] usb 2-1: Manufacturer: syz [ 1474.504511][ T4728] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10654'. [ 1474.519708][ T5886] usb 2-1: SerialNumber: syz [ 1474.528350][ T4728] netem: unknown loss type 13 [ 1474.541519][ T5886] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1474.550038][ T5886] dvb-usb: bulk message failed: -22 (3/0) [ 1474.557900][ T4728] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10654'. [ 1474.599694][ T5886] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1474.615087][ T5886] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1474.620549][ T4739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10654'. [ 1474.625311][ T5886] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1474.693109][T29345] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1474.849629][T29345] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1474.860449][T29345] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1474.870485][T29345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.882476][T29345] usb 4-1: config 0 descriptor?? [ 1474.898171][T29345] smsusb:smsusb_probe: board id=8, interface number 0 [ 1474.908924][T29345] smsusb:smsusb_probe: Device initialized with return code -19 [ 1475.106065][T29345] usb 4-1: USB disconnect, device number 96 [ 1475.445818][T29345] usb 2-1: USB disconnect, device number 74 [ 1475.724722][ T4753] ksmbd: Unknown IPC event: 4, ignore. [ 1475.862817][T29345] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1476.016682][T29345] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.027930][T29345] usb 2-1: config 0 has no interfaces? [ 1476.035472][T29345] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1476.045767][T29345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.059254][T29345] usb 2-1: config 0 descriptor?? [ 1476.277678][ T4749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10662'. [ 1476.290891][ T5879] usb 2-1: USB disconnect, device number 75 [ 1476.910576][ T5879] usb 6-1: USB disconnect, device number 53 [ 1477.013758][ T30] audit: type=1326 audit(1774274312.131:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4769 comm="syz.0.10667" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fcc0fb96517 code=0x0 [ 1479.242812][ T5886] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1479.404808][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.443774][ T5886] usb 6-1: config 0 has no interfaces? [ 1479.454846][ T5886] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1479.475497][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.498459][ T5886] usb 6-1: config 0 descriptor?? [ 1479.705252][ T4820] FAULT_INJECTION: forcing a failure. [ 1479.705252][ T4820] name failslab, interval 1, probability 0, space 0, times 0 [ 1479.714947][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10678'. [ 1479.740392][ T4820] CPU: 1 UID: 0 PID: 4820 Comm: syz.2.10681 Tainted: G L syzkaller #0 PREEMPT(full) [ 1479.740423][ T4820] Tainted: [L]=SOFTLOCKUP [ 1479.740430][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1479.740441][ T4820] Call Trace: [ 1479.740449][ T4820] [ 1479.740457][ T4820] dump_stack_lvl+0xe8/0x150 [ 1479.740489][ T4820] should_fail_ex+0x412/0x560 [ 1479.740520][ T4820] should_failslab+0xa8/0x100 [ 1479.740546][ T4820] __kvmalloc_node_noprof+0x178/0x8a0 [ 1479.740569][ T4820] ? xt_alloc_table_info+0x40/0xb0 [ 1479.740599][ T4820] xt_alloc_table_info+0x40/0xb0 [ 1479.740620][ T4820] do_arpt_set_ctl+0x90a/0x1050 [ 1479.740643][ T4820] ? __mutex_trylock_common+0x158/0x260 [ 1479.740673][ T4820] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1479.740700][ T4820] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1479.740718][ T4820] ? rcu_is_watching+0x15/0xb0 [ 1479.740743][ T4820] ? trace_contention_end+0x3d/0x150 [ 1479.740785][ T4820] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1479.740809][ T4820] ? __pfx___mutex_lock+0x10/0x10 [ 1479.740830][ T4820] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1479.740858][ T4820] ? __pfx_aa_sk_perm+0x10/0x10 [ 1479.740888][ T4820] nf_setsockopt+0x26f/0x290 [ 1479.740912][ T4820] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1479.740940][ T4820] do_sock_setsockopt+0x17c/0x1b0 [ 1479.740965][ T4820] __x64_sys_setsockopt+0x13d/0x1b0 [ 1479.740990][ T4820] do_syscall_64+0x14d/0xf80 [ 1479.741010][ T4820] ? trace_irq_disable+0x3b/0x150 [ 1479.741035][ T4820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.741053][ T4820] ? clear_bhb_loop+0x40/0x90 [ 1479.741075][ T4820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.741092][ T4820] RIP: 0033:0x7f725959c799 [ 1479.741110][ T4820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1479.741125][ T4820] RSP: 002b:00007f725a4b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1479.741144][ T4820] RAX: ffffffffffffffda RBX: 00007f7259815fa0 RCX: 00007f725959c799 [ 1479.741158][ T4820] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 1479.741169][ T4820] RBP: 00007f725a4b0090 R08: 0000000000000418 R09: 0000000000000000 [ 1479.741181][ T4820] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1479.741192][ T4820] R13: 00007f7259816038 R14: 00007f7259815fa0 R15: 00007f725993fa48 [ 1479.741220][ T4820] [ 1479.744620][ T5886] usb 6-1: USB disconnect, device number 54 [ 1480.327045][ T4826] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10684'. [ 1480.339330][ T4826] syzkaller0: entered promiscuous mode [ 1480.346057][ T4826] syzkaller0: entered allmulticast mode [ 1480.352834][T27653] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1480.484627][ T4832] FAULT_INJECTION: forcing a failure. [ 1480.484627][ T4832] name failslab, interval 1, probability 0, space 0, times 0 [ 1480.498532][ T4832] CPU: 1 UID: 0 PID: 4832 Comm: syz.5.10687 Tainted: G L syzkaller #0 PREEMPT(full) [ 1480.498550][ T4832] Tainted: [L]=SOFTLOCKUP [ 1480.498554][ T4832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1480.498560][ T4832] Call Trace: [ 1480.498565][ T4832] [ 1480.498570][ T4832] dump_stack_lvl+0xe8/0x150 [ 1480.498589][ T4832] should_fail_ex+0x412/0x560 [ 1480.498607][ T4832] should_failslab+0xa8/0x100 [ 1480.498621][ T4832] __kmalloc_noprof+0xe8/0x760 [ 1480.498633][ T4832] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1480.498650][ T4832] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1480.498666][ T4832] genl_family_rcv_msg_doit+0xd9/0x330 [ 1480.498681][ T4832] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1480.498697][ T4832] ? apparmor_capable+0x126/0x170 [ 1480.498710][ T4832] ? bpf_lsm_capable+0x9/0x20 [ 1480.498726][ T4832] ? security_capable+0x7e/0x2c0 [ 1480.498744][ T4832] genl_rcv_msg+0x61c/0x7a0 [ 1480.498758][ T4832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1480.498769][ T4832] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1480.498781][ T4832] ? __pfx_nl80211_crit_protocol_start+0x10/0x10 [ 1480.498853][ T4832] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1480.498865][ T4832] ? __lock_acquire+0x6b5/0x2cf0 [ 1480.498883][ T4832] netlink_rcv_skb+0x232/0x4b0 [ 1480.498899][ T4832] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1480.498911][ T4832] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1480.498934][ T4832] ? down_read+0x272/0x2e0 [ 1480.498946][ T4832] ? genl_rcv+0xd/0x40 [ 1480.498957][ T4832] genl_rcv+0x28/0x40 [ 1480.498968][ T4832] netlink_unicast+0x80f/0x9b0 [ 1480.498985][ T4832] ? __pfx_netlink_unicast+0x10/0x10 [ 1480.498999][ T4832] ? netlink_sendmsg+0x650/0xb40 [ 1480.499008][ T4832] ? skb_put+0x11b/0x210 [ 1480.499020][ T4832] netlink_sendmsg+0x813/0xb40 [ 1480.499034][ T4832] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1480.499045][ T4832] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1480.499060][ T4832] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1480.499073][ T4832] ____sys_sendmsg+0x972/0x9f0 [ 1480.499089][ T4832] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1480.499105][ T4832] ? import_iovec+0x73/0xa0 [ 1480.499118][ T4832] ___sys_sendmsg+0x2a5/0x360 [ 1480.499133][ T4832] ? __pfx____sys_sendmsg+0x10/0x10 [ 1480.499161][ T4832] ? __fget_files+0x2a/0x420 [ 1480.499175][ T4832] ? __fget_files+0x3a0/0x420 [ 1480.499194][ T4832] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1480.499207][ T4832] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1480.499229][ T4832] ? __pfx_ksys_write+0x10/0x10 [ 1480.499246][ T4832] do_syscall_64+0x14d/0xf80 [ 1480.499257][ T4832] ? trace_irq_disable+0x3b/0x150 [ 1480.499271][ T4832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.499281][ T4832] ? clear_bhb_loop+0x40/0x90 [ 1480.499294][ T4832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1480.499304][ T4832] RIP: 0033:0x7fb4eff9c799 [ 1480.499315][ T4832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.499324][ T4832] RSP: 002b:00007fb4f0ebd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1480.499336][ T4832] RAX: ffffffffffffffda RBX: 00007fb4f0215fa0 RCX: 00007fb4eff9c799 [ 1480.499343][ T4832] RDX: 0000000000008000 RSI: 0000200000001d00 RDI: 0000000000000004 [ 1480.499350][ T4832] RBP: 00007fb4f0ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 1480.499357][ T4832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1480.499363][ T4832] R13: 00007fb4f0216038 R14: 00007fb4f0215fa0 R15: 00007fb4f033fa48 [ 1480.499378][ T4832] [ 1480.556069][T27653] usb 2-1: Using ep0 maxpacket: 16 [ 1480.632789][T29345] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1480.782824][T29345] usb 4-1: Using ep0 maxpacket: 32 [ 1480.834450][T27653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.865109][T29345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1480.874339][ T5886] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1480.889254][T29345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1480.894201][T27653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1480.915050][T27653] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1480.924436][T27653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.932906][T29345] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.936231][T27653] usb 2-1: config 0 descriptor?? [ 1480.965887][T29345] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1480.975491][T29345] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1480.984231][T29345] usb 4-1: Product: syz [ 1480.988594][T29345] usb 4-1: Manufacturer: syz [ 1480.993817][T29345] usb 4-1: SerialNumber: syz [ 1481.014804][T29345] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input80 [ 1481.092326][ T5886] usb 3-1: config 0 has no interfaces? [ 1481.143419][ T5886] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1481.152478][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.161371][ T5886] usb 3-1: Product: syz [ 1481.171199][ T4837] netlink: 'syz.1.10682': attribute type 30 has an invalid length. [ 1481.180167][ T5886] usb 3-1: Manufacturer: syz [ 1481.185639][ T5886] usb 3-1: SerialNumber: syz [ 1481.204282][ T5886] usb 3-1: config 0 descriptor?? [ 1481.267253][T27653] usbhid 2-1:0.0: can't add hid device: -71 [ 1481.293114][T27653] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1481.315464][T27653] usb 2-1: USB disconnect, device number 76 [ 1481.434321][ T5886] usb 4-1: USB disconnect, device number 97 [ 1481.462076][ T5886] appletouch 4-1:1.0: input: appletouch disconnected [ 1481.582904][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10693'. [ 1481.594567][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10693'. [ 1481.720088][ T4860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10695'. [ 1482.152780][T29345] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1482.312185][ T4868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10697'. [ 1482.328790][T29345] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.342806][ T4868] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10697'. [ 1482.360686][T29345] usb 6-1: config 0 has no interfaces? [ 1482.372755][T29345] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1482.391834][T29345] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.418795][T29345] usb 6-1: config 0 descriptor?? [ 1482.644352][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10696'. [ 1482.665782][T29345] usb 6-1: USB disconnect, device number 55 [ 1482.778342][ T4875] bridge_slave_1: entered promiscuous mode [ 1482.830884][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10700'. [ 1482.839953][ T4880] netlink: 'syz.0.10700': attribute type 5 has an invalid length. [ 1482.854759][T29721] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.854783][ T4880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10700'. [ 1482.872795][T29721] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.873184][ T4880] netlink: 'syz.0.10700': attribute type 5 has an invalid length. [ 1482.881674][T29721] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.916100][T29721] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1483.335164][ T4885] FAULT_INJECTION: forcing a failure. [ 1483.335164][ T4885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1483.350898][ T4885] CPU: 1 UID: 0 PID: 4885 Comm: syz.3.10702 Tainted: G L syzkaller #0 PREEMPT(full) [ 1483.350934][ T4885] Tainted: [L]=SOFTLOCKUP [ 1483.350940][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1483.350947][ T4885] Call Trace: [ 1483.350953][ T4885] [ 1483.350958][ T4885] dump_stack_lvl+0xe8/0x150 [ 1483.350977][ T4885] should_fail_ex+0x412/0x560 [ 1483.350995][ T4885] _copy_from_iter+0x1d3/0x1670 [ 1483.351012][ T4885] ? rcu_is_watching+0x15/0xb0 [ 1483.351029][ T4885] ? __pfx__copy_from_iter+0x10/0x10 [ 1483.351048][ T4885] ? netlink_sendmsg+0x650/0xb40 [ 1483.351057][ T4885] ? skb_put+0x11b/0x210 [ 1483.351070][ T4885] netlink_sendmsg+0x6c0/0xb40 [ 1483.351083][ T4885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1483.351094][ T4885] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1483.351110][ T4885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1483.351123][ T4885] ____sys_sendmsg+0x972/0x9f0 [ 1483.351138][ T4885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1483.351154][ T4885] ? import_iovec+0x73/0xa0 [ 1483.351166][ T4885] ___sys_sendmsg+0x2a5/0x360 [ 1483.351180][ T4885] ? __pfx____sys_sendmsg+0x10/0x10 [ 1483.351207][ T4885] ? __fget_files+0x2a/0x420 [ 1483.351222][ T4885] ? __fget_files+0x3a0/0x420 [ 1483.351240][ T4885] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1483.351253][ T4885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1483.351269][ T4885] ? __pfx_ksys_write+0x10/0x10 [ 1483.351285][ T4885] do_syscall_64+0x14d/0xf80 [ 1483.351297][ T4885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.351307][ T4885] ? clear_bhb_loop+0x40/0x90 [ 1483.351320][ T4885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.351330][ T4885] RIP: 0033:0x7fe63939c799 [ 1483.351341][ T4885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1483.351350][ T4885] RSP: 002b:00007fe63a2eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1483.351362][ T4885] RAX: ffffffffffffffda RBX: 00007fe639615fa0 RCX: 00007fe63939c799 [ 1483.351369][ T4885] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 1483.351376][ T4885] RBP: 00007fe63a2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1483.351382][ T4885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1483.351388][ T4885] R13: 00007fe639616038 R14: 00007fe639615fa0 R15: 00007fe63973fa48 [ 1483.351403][ T4885] [ 1483.642794][ T5886] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1483.668506][T29345] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 1483.677241][T29345] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1483.773640][ T5886] usb 6-1: device descriptor read/64, error -71 [ 1483.794350][ T4891] fido_id[4891]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1484.019322][T29345] usb 3-1: USB disconnect, device number 77 [ 1484.025813][ T5886] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1484.172844][ T5886] usb 6-1: device descriptor read/64, error -71 [ 1484.282969][ T5886] usb usb6-port1: attempt power cycle [ 1484.395793][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.411436][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.424647][T29345] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1484.499844][ T4916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1484.622776][ T5886] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1484.634927][T29345] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.643398][ T5886] usb 6-1: device descriptor read/8, error -71 [ 1484.655709][T29345] usb 3-1: config 0 has no interfaces? [ 1484.667870][T29345] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1484.686895][T29345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.717103][T29345] usb 3-1: config 0 descriptor?? [ 1484.763038][T19974] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1484.892916][ T5886] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1484.906965][ T4918] __nla_validate_parse: 2 callbacks suppressed [ 1484.906977][ T4918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10714'. [ 1484.922445][ T4918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10714'. [ 1484.935624][T19974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1484.952651][ T5886] usb 6-1: device descriptor read/8, error -71 [ 1484.959376][T19974] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1484.972772][T19974] usb 4-1: config 1 has no interface number 1 [ 1484.978899][T19974] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1484.992297][T19974] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1485.006547][T19974] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1485.015952][T19974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.027956][T19974] usb 4-1: Product: syz [ 1485.036812][T19974] usb 4-1: Manufacturer: syz [ 1485.041837][T19974] usb 4-1: SerialNumber: syz [ 1485.073436][ T5886] usb usb6-port1: unable to enumerate USB device [ 1485.080924][ T4916] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1485.094884][ T4911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10711'. [ 1485.107587][ T5886] usb 3-1: USB disconnect, device number 78 [ 1485.300507][ T4916] Cannot find add_set index 0 as target [ 1485.332353][T19974] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1485.346235][T19974] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1485.410707][T19974] usb 4-1: USB disconnect, device number 98 [ 1485.611242][ T4926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1485.817349][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10721'. [ 1486.502863][T19970] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1486.664682][T19970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.675062][T19970] usb 4-1: config 0 has no interfaces? [ 1486.683062][T19970] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1486.697014][T19970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.713889][T19970] usb 4-1: config 0 descriptor?? [ 1486.929459][ T4953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10728'. [ 1486.940589][T29345] usb 4-1: USB disconnect, device number 99 [ 1487.265904][ T4971] FAULT_INJECTION: forcing a failure. [ 1487.265904][ T4971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.279761][ T4971] CPU: 0 UID: 0 PID: 4971 Comm: syz.1.10733 Tainted: G L syzkaller #0 PREEMPT(full) [ 1487.279790][ T4971] Tainted: [L]=SOFTLOCKUP [ 1487.279797][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1487.279809][ T4971] Call Trace: [ 1487.279817][ T4971] [ 1487.279826][ T4971] dump_stack_lvl+0xe8/0x150 [ 1487.279858][ T4971] should_fail_ex+0x412/0x560 [ 1487.279888][ T4971] _copy_from_user+0x2d/0xb0 [ 1487.279910][ T4971] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 1487.279937][ T4971] ? __lock_acquire+0x6b5/0x2cf0 [ 1487.279962][ T4971] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1487.279982][ T4971] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1487.280025][ T4971] ? __task_pid_nr_ns+0x28/0x470 [ 1487.280062][ T4971] do_syscall_64+0x14d/0xf80 [ 1487.280082][ T4971] ? trace_irq_disable+0x3b/0x150 [ 1487.280105][ T4971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.280123][ T4971] ? clear_bhb_loop+0x40/0x90 [ 1487.280145][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.280163][ T4971] RIP: 0033:0x7f5f1273db19 [ 1487.280181][ T4971] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1487.280196][ T4971] RSP: 002b:00007f5f109f5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1487.280217][ T4971] RAX: ffffffffffffffda RBX: 00007f5f12a15fa0 RCX: 00007f5f1273db19 [ 1487.280230][ T4971] RDX: 00007f5f109f5a80 RSI: 00007f5f109f5bb0 RDI: 0000000000000021 [ 1487.280242][ T4971] RBP: 00007f5f109f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.280254][ T4971] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1487.280265][ T4971] R13: 00007f5f12a16038 R14: 00007f5f12a15fa0 R15: 00007f5f12b3fa48 [ 1487.280295][ T4971] [ 1487.611282][ T4981] FAULT_INJECTION: forcing a failure. [ 1487.611282][ T4981] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.626614][ T4981] CPU: 1 UID: 0 PID: 4981 Comm: syz.3.10737 Tainted: G L syzkaller #0 PREEMPT(full) [ 1487.626639][ T4981] Tainted: [L]=SOFTLOCKUP [ 1487.626647][ T4981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1487.626656][ T4981] Call Trace: [ 1487.626663][ T4981] [ 1487.626670][ T4981] dump_stack_lvl+0xe8/0x150 [ 1487.626698][ T4981] should_fail_ex+0x412/0x560 [ 1487.626727][ T4981] should_failslab+0xa8/0x100 [ 1487.626750][ T4981] __kmalloc_noprof+0xe8/0x760 [ 1487.626770][ T4981] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1487.626798][ T4981] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1487.626824][ T4981] genl_family_rcv_msg_doit+0xd9/0x330 [ 1487.626851][ T4981] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1487.626878][ T4981] ? apparmor_capable+0x126/0x170 [ 1487.626900][ T4981] ? bpf_lsm_capable+0x9/0x20 [ 1487.626922][ T4981] ? security_capable+0x7e/0x2c0 [ 1487.626960][ T4981] genl_rcv_msg+0x61c/0x7a0 [ 1487.626986][ T4981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.626999][ T4981] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1487.627012][ T4981] ? __pfx_nl80211_set_station+0x10/0x10 [ 1487.627024][ T4981] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1487.627036][ T4981] ? __lock_acquire+0x6b5/0x2cf0 [ 1487.627054][ T4981] netlink_rcv_skb+0x232/0x4b0 [ 1487.627069][ T4981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.627082][ T4981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1487.627104][ T4981] ? down_read+0x272/0x2e0 [ 1487.627116][ T4981] ? genl_rcv+0xd/0x40 [ 1487.627128][ T4981] genl_rcv+0x28/0x40 [ 1487.627138][ T4981] netlink_unicast+0x80f/0x9b0 [ 1487.627155][ T4981] ? __pfx_netlink_unicast+0x10/0x10 [ 1487.627170][ T4981] ? netlink_sendmsg+0x650/0xb40 [ 1487.627178][ T4981] ? skb_put+0x11b/0x210 [ 1487.627191][ T4981] netlink_sendmsg+0x813/0xb40 [ 1487.627215][ T4981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.627235][ T4981] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1487.627261][ T4981] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1487.627282][ T4981] ____sys_sendmsg+0x972/0x9f0 [ 1487.627298][ T4981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.627314][ T4981] ? import_iovec+0x73/0xa0 [ 1487.627327][ T4981] ___sys_sendmsg+0x2a5/0x360 [ 1487.627342][ T4981] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.627370][ T4981] ? __fget_files+0x2a/0x420 [ 1487.627384][ T4981] ? __fget_files+0x3a0/0x420 [ 1487.627403][ T4981] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1487.627416][ T4981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1487.627432][ T4981] ? __pfx_ksys_write+0x10/0x10 [ 1487.627452][ T4981] do_syscall_64+0x14d/0xf80 [ 1487.627463][ T4981] ? trace_irq_disable+0x3b/0x150 [ 1487.627478][ T4981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.627488][ T4981] ? clear_bhb_loop+0x40/0x90 [ 1487.627501][ T4981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.627510][ T4981] RIP: 0033:0x7fe63939c799 [ 1487.627521][ T4981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.627530][ T4981] RSP: 002b:00007fe63a2eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.627542][ T4981] RAX: ffffffffffffffda RBX: 00007fe639615fa0 RCX: 00007fe63939c799 [ 1487.627550][ T4981] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003 [ 1487.627556][ T4981] RBP: 00007fe63a2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.627563][ T4981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.627569][ T4981] R13: 00007fe639616038 R14: 00007fe639615fa0 R15: 00007fe63973fa48 [ 1487.627584][ T4981] [ 1488.642870][T27655] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1488.687400][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10742'. [ 1488.696649][ T5002] netlink: 'syz.1.10742': attribute type 5 has an invalid length. [ 1488.706487][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10742'. [ 1488.716317][ T5002] netlink: 'syz.1.10742': attribute type 5 has an invalid length. [ 1488.783290][T27655] usb 4-1: device descriptor read/64, error -71 [ 1488.995836][T29345] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1489.032887][T27655] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1489.172784][T27655] usb 4-1: device descriptor read/64, error -71 [ 1489.193143][T29345] usb 2-1: Using ep0 maxpacket: 32 [ 1489.200630][T29345] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1489.219686][T29345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.236993][T29345] usb 2-1: config 0 descriptor?? [ 1489.283278][T27655] usb usb4-port1: attempt power cycle [ 1489.326869][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10745'. [ 1489.447932][T29345] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1489.457514][T29345] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1489.478481][T29345] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1489.486101][T29345] usb 2-1: media controller created [ 1489.510051][T29345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1489.632756][T27655] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1489.656752][T27655] usb 4-1: device descriptor read/8, error -71 [ 1489.902833][T27655] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1489.933850][T27655] usb 4-1: device descriptor read/8, error -71 [ 1490.063097][T27655] usb usb4-port1: unable to enumerate USB device [ 1490.161076][T29345] az6027: usb out operation failed. (-71) [ 1490.180696][T29345] az6027: usb out operation failed. (-71) [ 1490.202764][T29345] stb0899_attach: Driver disabled by Kconfig [ 1490.220899][T29345] az6027: no front-end attached [ 1490.220899][T29345] [ 1490.242140][T29345] az6027: usb out operation failed. (-71) [ 1490.257806][T29345] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1490.282970][T29345] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input81 [ 1490.329715][T29345] dvb-usb: schedule remote query interval to 400 msecs. [ 1490.347897][T29345] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1490.380129][T29345] usb 2-1: USB disconnect, device number 77 [ 1490.450063][T29345] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1490.562587][ T5021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10750'. [ 1490.606968][ T5021] FAULT_INJECTION: forcing a failure. [ 1490.606968][ T5021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.620461][ T5021] CPU: 1 UID: 0 PID: 5021 Comm: syz.5.10750 Tainted: G L syzkaller #0 PREEMPT(full) [ 1490.620489][ T5021] Tainted: [L]=SOFTLOCKUP [ 1490.620496][ T5021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1490.620506][ T5021] Call Trace: [ 1490.620514][ T5021] [ 1490.620559][ T5021] dump_stack_lvl+0xe8/0x150 [ 1490.620579][ T5021] should_fail_ex+0x412/0x560 [ 1490.620597][ T5021] _copy_from_iter+0x1d3/0x1670 [ 1490.620614][ T5021] ? sock_alloc_send_pskb+0x896/0x990 [ 1490.620630][ T5021] ? __pfx__copy_from_iter+0x10/0x10 [ 1490.620648][ T5021] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1490.620661][ T5021] skb_copy_datagram_from_iter+0xf5/0x710 [ 1490.620677][ T5021] ? skb_put+0x11b/0x210 [ 1490.620689][ T5021] tun_get_user+0xc38/0x3dd0 [ 1490.620706][ T5021] ? aa_file_perm+0x192/0x15e0 [ 1490.620718][ T5021] ? aa_file_perm+0x50e/0x15e0 [ 1490.620727][ T5021] ? __pfx_tun_get_user+0x10/0x10 [ 1490.620736][ T5021] ? aa_file_perm+0x192/0x15e0 [ 1490.620748][ T5021] ? __lock_acquire+0x6b5/0x2cf0 [ 1490.620765][ T5021] ? ref_tracker_alloc+0x35c/0x4c0 [ 1490.620781][ T5021] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1490.620798][ T5021] ? tun_get+0x1c/0x2f0 [ 1490.620810][ T5021] ? tun_get+0x1c/0x2f0 [ 1490.620820][ T5021] ? tun_get+0x1c/0x2f0 [ 1490.620832][ T5021] tun_chr_write_iter+0x113/0x200 [ 1490.620843][ T5021] vfs_write+0x61d/0xb90 [ 1490.620858][ T5021] ? __pfx_vfs_write+0x10/0x10 [ 1490.620873][ T5021] ? __fget_files+0x2a/0x420 [ 1490.620892][ T5021] ksys_write+0x150/0x270 [ 1490.620904][ T5021] ? __pfx_ksys_write+0x10/0x10 [ 1490.620920][ T5021] do_syscall_64+0x14d/0xf80 [ 1490.620932][ T5021] ? trace_irq_disable+0x3b/0x150 [ 1490.620946][ T5021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.620956][ T5021] ? clear_bhb_loop+0x40/0x90 [ 1490.620968][ T5021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.620978][ T5021] RIP: 0033:0x7fb4eff9c799 [ 1490.620989][ T5021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.620998][ T5021] RSP: 002b:00007fb4f0ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1490.621009][ T5021] RAX: ffffffffffffffda RBX: 00007fb4f0215fa0 RCX: 00007fb4eff9c799 [ 1490.621017][ T5021] RDX: 0000000000000fce RSI: 0000200000000140 RDI: 0000000000000003 [ 1490.621024][ T5021] RBP: 00007fb4f0ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.621033][ T5021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.621039][ T5021] R13: 00007fb4f0216038 R14: 00007fb4f0215fa0 R15: 00007fb4f033fa48 [ 1490.621054][ T5021] [ 1490.978178][ T5028] FAULT_INJECTION: forcing a failure. [ 1490.978178][ T5028] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.991797][ T5028] CPU: 1 UID: 0 PID: 5028 Comm: syz.5.10753 Tainted: G L syzkaller #0 PREEMPT(full) [ 1490.991827][ T5028] Tainted: [L]=SOFTLOCKUP [ 1490.991834][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1490.991844][ T5028] Call Trace: [ 1490.991852][ T5028] [ 1490.991860][ T5028] dump_stack_lvl+0xe8/0x150 [ 1490.991890][ T5028] should_fail_ex+0x412/0x560 [ 1490.991921][ T5028] should_failslab+0xa8/0x100 [ 1490.991945][ T5028] __kmalloc_noprof+0xe8/0x760 [ 1490.991966][ T5028] ? iter_file_splice_write+0x1da/0x10f0 [ 1490.991998][ T5028] iter_file_splice_write+0x1da/0x10f0 [ 1490.992047][ T5028] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1490.992091][ T5028] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1490.992117][ T5028] direct_splice_actor+0x101/0x160 [ 1490.992147][ T5028] splice_direct_to_actor+0x53a/0xc70 [ 1490.992192][ T5028] ? __pfx_direct_splice_actor+0x10/0x10 [ 1490.992226][ T5028] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1490.992251][ T5028] ? get_pid_task+0x20/0x1f0 [ 1490.992273][ T5028] do_splice_direct+0x195/0x290 [ 1490.992299][ T5028] ? __pfx_do_splice_direct+0x10/0x10 [ 1490.992324][ T5028] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1490.992349][ T5028] ? rw_verify_area+0x255/0x4d0 [ 1490.992372][ T5028] do_sendfile+0x535/0x7d0 [ 1490.992404][ T5028] ? __pfx_do_sendfile+0x10/0x10 [ 1490.992432][ T5028] __se_sys_sendfile64+0xdf/0x1a0 [ 1490.992452][ T5028] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1490.992477][ T5028] do_syscall_64+0x14d/0xf80 [ 1490.992493][ T5028] ? trace_irq_disable+0x3b/0x150 [ 1490.992512][ T5028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.992526][ T5028] ? clear_bhb_loop+0x40/0x90 [ 1490.992543][ T5028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.992557][ T5028] RIP: 0033:0x7fb4eff9c799 [ 1490.992571][ T5028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.992583][ T5028] RSP: 002b:00007fb4f0ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1490.992599][ T5028] RAX: ffffffffffffffda RBX: 00007fb4f0215fa0 RCX: 00007fb4eff9c799 [ 1490.992610][ T5028] RDX: 0000200000000080 RSI: 0000000000000005 RDI: 0000000000000005 [ 1490.992619][ T5028] RBP: 00007fb4f0ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 1490.992628][ T5028] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 1490.992637][ T5028] R13: 00007fb4f0216038 R14: 00007fb4f0215fa0 R15: 00007fb4f033fa48 [ 1490.992664][ T5028] [ 1491.236819][T29345] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1491.395463][T29345] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 1491.407056][T29345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1491.420728][T29345] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1491.429935][T29345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.438078][T29345] usb 2-1: Product: syz [ 1491.442253][T29345] usb 2-1: Manufacturer: syz [ 1491.446922][T29345] usb 2-1: SerialNumber: syz [ 1491.454715][T29345] usb 2-1: config 0 descriptor?? [ 1491.477841][ T5041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1491.478982][ T5041] bond2: entered promiscuous mode [ 1491.480116][ T5041] team0: Port device bond2 added [ 1491.642349][ T5046] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10759'. [ 1491.666720][T29345] powermate: unknown product id 0240 [ 1491.681117][T29345] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input82 [ 1491.866768][ C1] powermate: config urb returned -71 [ 1491.867350][T27655] usb 2-1: USB disconnect, device number 78 [ 1491.872126][ C1] powermate: usb_submit_urb(config) failed [ 1491.878385][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1492.062794][T29345] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1492.227602][T29345] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1492.236857][T29345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.244986][T29345] usb 4-1: Product: syz [ 1492.249213][T29345] usb 4-1: Manufacturer: syz [ 1492.253999][T29345] usb 4-1: SerialNumber: syz [ 1492.260670][T29345] usb 4-1: config 0 descriptor?? [ 1492.327303][ T5054] FAULT_INJECTION: forcing a failure. [ 1492.327303][ T5054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1492.340446][ T5054] CPU: 1 UID: 0 PID: 5054 Comm: syz.5.10763 Tainted: G L syzkaller #0 PREEMPT(full) [ 1492.340475][ T5054] Tainted: [L]=SOFTLOCKUP [ 1492.340482][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1492.340493][ T5054] Call Trace: [ 1492.340501][ T5054] [ 1492.340509][ T5054] dump_stack_lvl+0xe8/0x150 [ 1492.340540][ T5054] should_fail_ex+0x412/0x560 [ 1492.340570][ T5054] _copy_to_user+0x31/0xb0 [ 1492.340593][ T5054] simple_read_from_buffer+0xe1/0x170 [ 1492.340625][ T5054] proc_fail_nth_read+0x1bb/0x230 [ 1492.340652][ T5054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1492.340680][ T5054] ? rw_verify_area+0x2a6/0x4d0 [ 1492.340700][ T5054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1492.340725][ T5054] vfs_read+0x20c/0xa70 [ 1492.340743][ T5054] ? fdget_pos+0x246/0x320 [ 1492.340763][ T5054] ? __pfx___mutex_lock+0x10/0x10 [ 1492.340786][ T5054] ? __pfx_vfs_read+0x10/0x10 [ 1492.340807][ T5054] ? __fget_files+0x2a/0x420 [ 1492.340836][ T5054] ? __fget_files+0x3a0/0x420 [ 1492.340860][ T5054] ? __fget_files+0x2a/0x420 [ 1492.340893][ T5054] ksys_read+0x150/0x270 [ 1492.340915][ T5054] ? __pfx_ksys_read+0x10/0x10 [ 1492.340934][ T5054] ? __pfx_drm_ioctl+0x10/0x10 [ 1492.341034][ T5054] do_syscall_64+0x14d/0xf80 [ 1492.341055][ T5054] ? trace_irq_disable+0x3b/0x150 [ 1492.341080][ T5054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.341099][ T5054] ? clear_bhb_loop+0x40/0x90 [ 1492.341122][ T5054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1492.341140][ T5054] RIP: 0033:0x7fb4eff5cfce [ 1492.341158][ T5054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1492.341175][ T5054] RSP: 002b:00007fb4f0ebcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1492.341195][ T5054] RAX: ffffffffffffffda RBX: 00007fb4f0ebd6c0 RCX: 00007fb4eff5cfce [ 1492.341208][ T5054] RDX: 000000000000000f RSI: 00007fb4f0ebd0a0 RDI: 0000000000000011 [ 1492.341221][ T5054] RBP: 00007fb4f0ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 1492.341233][ T5054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.341243][ T5054] R13: 00007fb4f0216038 R14: 00007fb4f0215fa0 R15: 00007fb4f033fa48 [ 1492.341273][ T5054] [ 1492.602006][T29345] usb 4-1: USB disconnect, device number 104 [ 1492.740938][ T5060] netlink: 'syz.5.10766': attribute type 3 has an invalid length. [ 1493.424836][T27655] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1493.587288][T27655] usb 6-1: config index 0 descriptor too short (expected 8192, got 36) [ 1493.612547][T27655] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.638398][T27655] usb 6-1: config 0 has no interfaces? [ 1493.651902][T27655] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1493.677922][T27655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.704005][T27655] usb 6-1: config 0 descriptor?? [ 1493.901861][ T5087] FAULT_INJECTION: forcing a failure. [ 1493.901861][ T5087] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.932359][ T5087] CPU: 1 UID: 0 PID: 5087 Comm: syz.1.10774 Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.932391][ T5087] Tainted: [L]=SOFTLOCKUP [ 1493.932397][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1493.932408][ T5087] Call Trace: [ 1493.932417][ T5087] [ 1493.932425][ T5087] dump_stack_lvl+0xe8/0x150 [ 1493.932456][ T5087] should_fail_ex+0x412/0x560 [ 1493.932488][ T5087] should_failslab+0xa8/0x100 [ 1493.932511][ T5087] ? skb_clone+0x212/0x3a0 [ 1493.932534][ T5087] kmem_cache_alloc_noprof+0x87/0x650 [ 1493.932553][ T5087] ? __netlink_lookup+0xc6/0x8b0 [ 1493.932579][ T5087] skb_clone+0x212/0x3a0 [ 1493.932604][ T5087] __netlink_deliver_tap+0x404/0x850 [ 1493.932644][ T5087] ? netlink_deliver_tap+0x2e/0x1b0 [ 1493.932671][ T5087] netlink_deliver_tap+0x19c/0x1b0 [ 1493.932696][ T5087] netlink_unicast+0x7e3/0x9b0 [ 1493.932727][ T5087] ? __pfx_netlink_unicast+0x10/0x10 [ 1493.932754][ T5087] ? netlink_sendmsg+0x650/0xb40 [ 1493.932770][ T5087] ? skb_put+0x11b/0x210 [ 1493.932793][ T5087] netlink_sendmsg+0x813/0xb40 [ 1493.932819][ T5087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1493.932839][ T5087] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1493.932865][ T5087] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1493.932889][ T5087] ____sys_sendmsg+0x972/0x9f0 [ 1493.932919][ T5087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1493.932947][ T5087] ? import_iovec+0x73/0xa0 [ 1493.932971][ T5087] ___sys_sendmsg+0x2a5/0x360 [ 1493.932997][ T5087] ? __pfx____sys_sendmsg+0x10/0x10 [ 1493.933050][ T5087] ? __fget_files+0x2a/0x420 [ 1493.933075][ T5087] ? __fget_files+0x3a0/0x420 [ 1493.933111][ T5087] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1493.933135][ T5087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1493.933163][ T5087] ? __pfx_ksys_write+0x10/0x10 [ 1493.933192][ T5087] do_syscall_64+0x14d/0xf80 [ 1493.933211][ T5087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.933229][ T5087] ? clear_bhb_loop+0x40/0x90 [ 1493.933250][ T5087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.933268][ T5087] RIP: 0033:0x7f5f1279c799 [ 1493.933286][ T5087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.933301][ T5087] RSP: 002b:00007f5f109f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1493.933321][ T5087] RAX: ffffffffffffffda RBX: 00007f5f12a15fa0 RCX: 00007f5f1279c799 [ 1493.933334][ T5087] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1493.933354][ T5087] RBP: 00007f5f109f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.933365][ T5087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.933375][ T5087] R13: 00007f5f12a16038 R14: 00007f5f12a15fa0 R15: 00007f5f12b3fa48 [ 1493.933403][ T5087] [ 1494.234477][ T5087] netlink: 'syz.1.10774': attribute type 3 has an invalid length. [ 1494.957775][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10779'. [ 1495.203079][ T5105] kvm: pic: non byte write [ 1495.317492][ T5107] syzkaller0: entered promiscuous mode [ 1495.345879][ T5107] syzkaller0: entered allmulticast mode [ 1495.742878][T27655] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1495.810124][ T5113] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10782'. [ 1495.904608][T27655] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1495.917171][T27655] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1495.939611][T27655] usb 2-1: config 1 has no interface number 1 [ 1495.955296][T27655] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1495.968422][T27655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.985521][T27655] usb 2-1: Product: syz [ 1495.994626][T27655] usb 2-1: Manufacturer: syz [ 1496.005450][T27655] usb 2-1: SerialNumber: syz [ 1496.129338][ T5117] netlink: 'syz.2.10781': attribute type 10 has an invalid length. [ 1496.141176][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.234275][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1496.246775][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1496.312631][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.319868][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.406385][ T5117] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1496.804325][ T5120] syzkaller0: entered promiscuous mode [ 1496.815086][ T5120] syzkaller0: entered allmulticast mode [ 1496.904023][ T5910] usb 6-1: USB disconnect, device number 60 [ 1497.019290][ T5125] FAULT_INJECTION: forcing a failure. [ 1497.019290][ T5125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1497.033229][ T5125] CPU: 0 UID: 0 PID: 5125 Comm: syz.3.10786 Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.033259][ T5125] Tainted: [L]=SOFTLOCKUP [ 1497.033266][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1497.033277][ T5125] Call Trace: [ 1497.033286][ T5125] [ 1497.033294][ T5125] dump_stack_lvl+0xe8/0x150 [ 1497.033324][ T5125] should_fail_ex+0x412/0x560 [ 1497.033354][ T5125] _copy_to_user+0x31/0xb0 [ 1497.033377][ T5125] simple_read_from_buffer+0xe1/0x170 [ 1497.033408][ T5125] proc_fail_nth_read+0x1bb/0x230 [ 1497.033436][ T5125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1497.033462][ T5125] ? rw_verify_area+0x2a6/0x4d0 [ 1497.033480][ T5125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1497.033504][ T5125] vfs_read+0x20c/0xa70 [ 1497.033520][ T5125] ? fdget_pos+0x246/0x320 [ 1497.033538][ T5125] ? __pfx___mutex_lock+0x10/0x10 [ 1497.033559][ T5125] ? __pfx_vfs_read+0x10/0x10 [ 1497.033579][ T5125] ? __fget_files+0x2a/0x420 [ 1497.033607][ T5125] ? __fget_files+0x3a0/0x420 [ 1497.033628][ T5125] ? __fget_files+0x2a/0x420 [ 1497.033660][ T5125] ksys_read+0x150/0x270 [ 1497.033681][ T5125] ? __pfx_ksys_read+0x10/0x10 [ 1497.033711][ T5125] do_syscall_64+0x14d/0xf80 [ 1497.033731][ T5125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.033748][ T5125] ? clear_bhb_loop+0x40/0x90 [ 1497.033771][ T5125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.033788][ T5125] RIP: 0033:0x7fe63935cfce [ 1497.033806][ T5125] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1497.033829][ T5125] RSP: 002b:00007fe63a2eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1497.033849][ T5125] RAX: ffffffffffffffda RBX: 00007fe63a2eb6c0 RCX: 00007fe63935cfce [ 1497.033862][ T5125] RDX: 000000000000000f RSI: 00007fe63a2eb0a0 RDI: 0000000000000018 [ 1497.033874][ T5125] RBP: 00007fe63a2eb090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.033885][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1497.033896][ T5125] R13: 00007fe639616038 R14: 00007fe639615fa0 R15: 00007fe63973fa48 [ 1497.033923][ T5125] [ 1497.319579][ T5131] FAULT_INJECTION: forcing a failure. [ 1497.319579][ T5131] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.335271][ T5131] CPU: 0 UID: 0 PID: 5131 Comm: syz.5.10787 Tainted: G L syzkaller #0 PREEMPT(full) [ 1497.335300][ T5131] Tainted: [L]=SOFTLOCKUP [ 1497.335307][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1497.335321][ T5131] Call Trace: [ 1497.335328][ T5131] [ 1497.335336][ T5131] dump_stack_lvl+0xe8/0x150 [ 1497.335366][ T5131] should_fail_ex+0x412/0x560 [ 1497.335395][ T5131] should_failslab+0xa8/0x100 [ 1497.335420][ T5131] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1497.335440][ T5131] ? __alloc_skb+0x186/0x7d0 [ 1497.335458][ T5131] ? __alloc_skb+0x1d0/0x7d0 [ 1497.335474][ T5131] ? __local_bh_enable_ip+0xd0/0x130 [ 1497.335498][ T5131] __alloc_skb+0x1d0/0x7d0 [ 1497.335515][ T5131] ? netlink_ack_tlv_len+0x6c/0x210 [ 1497.335542][ T5131] netlink_ack+0x146/0xa50 [ 1497.335578][ T5131] netlink_rcv_skb+0x2b6/0x4b0 [ 1497.335605][ T5131] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1497.335631][ T5131] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1497.335665][ T5131] ? bpf_lsm_capable+0x9/0x20 [ 1497.335687][ T5131] ? security_capable+0x7e/0x2c0 [ 1497.335718][ T5131] nfnetlink_rcv+0x2c0/0x27b0 [ 1497.335740][ T5131] ? is_bpf_text_address+0x26/0x2b0 [ 1497.335763][ T5131] ? is_bpf_text_address+0x292/0x2b0 [ 1497.335781][ T5131] ? is_bpf_text_address+0x26/0x2b0 [ 1497.335798][ T5131] ? kernel_text_address+0xa5/0xe0 [ 1497.335816][ T5131] ? __kernel_text_address+0xd/0x30 [ 1497.335831][ T5131] ? unwind_get_return_address+0x4d/0x90 [ 1497.335862][ T5131] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1497.335880][ T5131] ? arch_stack_walk+0xfb/0x150 [ 1497.335910][ T5131] ? __lock_acquire+0x6b5/0x2cf0 [ 1497.335930][ T5131] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1497.335950][ T5131] ? __pfx_stack_trace_save+0x10/0x10 [ 1497.335974][ T5131] ? __lock_acquire+0x6b5/0x2cf0 [ 1497.335999][ T5131] ? __lock_acquire+0x6b5/0x2cf0 [ 1497.336024][ T5131] ? __netlink_lookup+0xc6/0x8b0 [ 1497.336044][ T5131] ? __netlink_lookup+0x7e4/0x8b0 [ 1497.336066][ T5131] ? netlink_deliver_tap+0x2e/0x1b0 [ 1497.336094][ T5131] ? netlink_deliver_tap+0x2e/0x1b0 [ 1497.336123][ T5131] netlink_unicast+0x80f/0x9b0 [ 1497.336155][ T5131] ? __pfx_netlink_unicast+0x10/0x10 [ 1497.336180][ T5131] ? netlink_sendmsg+0x650/0xb40 [ 1497.336194][ T5131] ? skb_put+0x11b/0x210 [ 1497.336214][ T5131] netlink_sendmsg+0x813/0xb40 [ 1497.336238][ T5131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1497.336257][ T5131] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1497.336282][ T5131] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1497.336303][ T5131] ____sys_sendmsg+0x972/0x9f0 [ 1497.336321][ T5131] ? __lock_acquire+0x6b5/0x2cf0 [ 1497.336349][ T5131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1497.336378][ T5131] ? import_iovec+0x73/0xa0 [ 1497.336400][ T5131] ___sys_sendmsg+0x2a5/0x360 [ 1497.336424][ T5131] ? __pfx____sys_sendmsg+0x10/0x10 [ 1497.336449][ T5131] ? kstrtouint+0x6e/0xe0 [ 1497.336495][ T5131] ? __fget_files+0x2a/0x420 [ 1497.336518][ T5131] ? __fget_files+0x3a0/0x420 [ 1497.336553][ T5131] __sys_sendmmsg+0x27c/0x4e0 [ 1497.336579][ T5131] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1497.336598][ T5131] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1497.336642][ T5131] ? ksys_write+0x242/0x270 [ 1497.336664][ T5131] ? __pfx_ksys_write+0x10/0x10 [ 1497.336689][ T5131] __x64_sys_sendmmsg+0xa0/0xc0 [ 1497.336712][ T5131] do_syscall_64+0x14d/0xf80 [ 1497.336732][ T5131] ? trace_irq_disable+0x3b/0x150 [ 1497.336757][ T5131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.336776][ T5131] ? clear_bhb_loop+0x40/0x90 [ 1497.336798][ T5131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.336817][ T5131] RIP: 0033:0x7fb4eff9c799 [ 1497.336834][ T5131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1497.336859][ T5131] RSP: 002b:00007fb4f0ebd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1497.336879][ T5131] RAX: ffffffffffffffda RBX: 00007fb4f0215fa0 RCX: 00007fb4eff9c799 [ 1497.336892][ T5131] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1497.336904][ T5131] RBP: 00007fb4f0ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.336915][ T5131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1497.336926][ T5131] R13: 00007fb4f0216038 R14: 00007fb4f0215fa0 R15: 00007fb4f033fa48 [ 1497.336955][ T5131] [ 1497.996215][T27655] usb 2-1: 2:1: invalid format type 0x1022 is detected, processed as PCM [ 1498.004736][T27655] usb 2-1: 2:1 : sample bitwidth 43 in over sample bytes 4 [ 1498.014587][T27655] usb 2-1: failed to enable PITCH for EP 0x82 [ 1498.064391][T27655] usb 2-1: USB disconnect, device number 79 [ 1498.191710][ T7477] udevd[7477]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1498.525930][ T5147] bridge0: entered promiscuous mode [ 1498.541813][ T5147] bridge0: port 1(macvlan2) entered blocking state [ 1498.549915][ T5147] bridge0: port 1(macvlan2) entered disabled state [ 1498.564999][ T5147] macvlan2: entered allmulticast mode [ 1498.572816][ T5147] bridge0: entered allmulticast mode [ 1498.599602][ T5147] macvlan2: left allmulticast mode [ 1498.613121][ T5147] bridge0: left allmulticast mode [ 1498.626211][ T5147] bridge0: left promiscuous mode [ 1498.723243][ T5910] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1498.839424][ T5161] netlink: 'syz.3.10798': attribute type 3 has an invalid length. [ 1498.887067][ T5910] usb 2-1: config 0 has no interfaces? [ 1498.892582][ T5910] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1498.905772][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.929086][ T5910] usb 2-1: config 0 descriptor?? [ 1499.185460][ T5910] usb 2-1: USB disconnect, device number 80 [ 1499.766954][ T5188] netlink: 112 bytes leftover after parsing attributes in process `syz.1.10806'. [ 1499.984230][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10809'. [ 1500.035611][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10809'. [ 1500.132823][T27655] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1500.153467][ T5207] fuse: Bad value for 'group_id' [ 1500.158464][ T5207] fuse: Bad value for 'group_id' [ 1501.069325][ T30] audit: type=1326 audit(1774274336.191:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.5.10816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4eff9c799 code=0x0 [ 1501.652743][ T5910] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1501.702929][T29345] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1501.813857][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 1501.824493][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.836102][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.846805][ T5910] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1501.856471][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.866614][T29345] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1501.878357][ T5910] usb 6-1: config 0 descriptor?? [ 1501.883879][T29345] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1501.908848][T29345] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1501.925572][T29345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1501.939179][T29345] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1502.010915][T29345] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1502.046267][T29345] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1502.065639][T29345] usb 4-1: Product: syz [ 1502.075537][T29345] usb 4-1: Manufacturer: syz [ 1502.115913][T29345] cdc_wdm 4-1:1.0: skipping garbage [ 1502.153849][T29345] cdc_wdm 4-1:1.0: skipping garbage [ 1502.176652][T29345] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1502.189448][ T5230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1502.199818][T29345] cdc_wdm 4-1:1.0: Unknown control protocol [ 1502.374228][ T5910] ft260 0003:0403:6030.0028: unknown main item tag 0x7 [ 1502.569039][ T5910] ft260 0003:0403:6030.0028: failed to retrieve chip version [ 1502.576959][ T5910] ft260 0003:0403:6030.0028: probe with driver ft260 failed with error -5 [ 1502.942146][T27655] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1502.962278][T27655] usb 2-1: can't read configurations, error -71 [ 1503.117865][ T5240] dlm: no locking on control device [ 1503.126316][ T5886] usb 4-1: USB disconnect, device number 105 [ 1503.988452][T19970] usb 6-1: USB disconnect, device number 61 [ 1503.992379][ T5256] vlan2: entered promiscuous mode [ 1503.999569][ T5256] bridge0: entered promiscuous mode [ 1504.025377][ T30] audit: type=1326 audit(1774274339.151:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5255 comm="syz.1.10827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f1279c799 code=0x0 [ 1504.112814][ T5910] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 1504.264760][ T5910] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.276927][ T5910] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 1504.286140][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.294295][ T5910] usb 4-1: Product: syz [ 1504.298467][ T5910] usb 4-1: Manufacturer: syz [ 1504.303135][ T5910] usb 4-1: SerialNumber: syz [ 1504.316271][ T5910] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 1504.324634][ T5910] dvb-usb: bulk message failed: -22 (3/0) [ 1504.353161][ T5910] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1504.365810][ T5910] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 1504.374481][ T5910] dvb_usb_umt_010 4-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 1504.384291][T19970] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1504.512753][T19970] usb 6-1: device descriptor read/64, error -71 [ 1504.702884][ T5886] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1504.752851][T19970] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1504.883115][T19970] usb 6-1: device descriptor read/64, error -71 [ 1504.915533][ T5886] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1504.932321][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.955019][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1504.973938][ T5886] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1504.994112][T19970] usb usb6-port1: attempt power cycle [ 1505.031384][ T5886] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1505.041761][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1505.050276][ T5886] usb 3-1: Product: syz [ 1505.057063][ T5886] usb 3-1: Manufacturer: syz [ 1505.120094][ T5886] cdc_wdm 3-1:1.0: skipping garbage [ 1505.121350][ T5910] usb 4-1: USB disconnect, device number 106 [ 1505.132427][ T5886] cdc_wdm 3-1:1.0: skipping garbage [ 1505.142159][ T5886] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1505.336297][T19970] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1505.393183][T19970] usb 6-1: device descriptor read/8, error -71 [ 1505.442284][ T5274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10833'. [ 1505.633118][T19970] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1505.722938][T19970] usb 6-1: device descriptor read/8, error -71 [ 1505.796982][ T5282] FAULT_INJECTION: forcing a failure. [ 1505.796982][ T5282] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.811583][ T5282] CPU: 1 UID: 0 PID: 5282 Comm: syz.1.10837 Tainted: G L syzkaller #0 PREEMPT(full) [ 1505.811603][ T5282] Tainted: [L]=SOFTLOCKUP [ 1505.811607][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1505.811614][ T5282] Call Trace: [ 1505.811619][ T5282] [ 1505.811624][ T5282] dump_stack_lvl+0xe8/0x150 [ 1505.811644][ T5282] should_fail_ex+0x412/0x560 [ 1505.811662][ T5282] should_failslab+0xa8/0x100 [ 1505.811675][ T5282] ? skb_clone+0x212/0x3a0 [ 1505.811689][ T5282] kmem_cache_alloc_noprof+0x87/0x650 [ 1505.811704][ T5282] skb_clone+0x212/0x3a0 [ 1505.811717][ T5282] pfkey_sendmsg+0x4a3/0x1120 [ 1505.811732][ T5282] ? __lock_acquire+0x6b5/0x2cf0 [ 1505.811751][ T5282] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1505.811775][ T5282] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1505.811799][ T5282] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1505.811813][ T5282] ____sys_sendmsg+0x972/0x9f0 [ 1505.811825][ T5282] ? __lock_acquire+0x6b5/0x2cf0 [ 1505.811841][ T5282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.811857][ T5282] ? import_iovec+0x73/0xa0 [ 1505.811871][ T5282] ___sys_sendmsg+0x2a5/0x360 [ 1505.811885][ T5282] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.811900][ T5282] ? kstrtouint+0x6e/0xe0 [ 1505.811926][ T5282] ? __fget_files+0x2a/0x420 [ 1505.811941][ T5282] ? __fget_files+0x3a0/0x420 [ 1505.811960][ T5282] __sys_sendmmsg+0x27c/0x4e0 [ 1505.811975][ T5282] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1505.811986][ T5282] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1505.812010][ T5282] ? ksys_write+0x242/0x270 [ 1505.812023][ T5282] ? __pfx_ksys_write+0x10/0x10 [ 1505.812037][ T5282] __x64_sys_sendmmsg+0xa0/0xc0 [ 1505.812050][ T5282] do_syscall_64+0x14d/0xf80 [ 1505.812062][ T5282] ? trace_irq_disable+0x3b/0x150 [ 1505.812076][ T5282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.812087][ T5282] ? clear_bhb_loop+0x40/0x90 [ 1505.812099][ T5282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.812110][ T5282] RIP: 0033:0x7f5f1279c799 [ 1505.812121][ T5282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.812130][ T5282] RSP: 002b:00007f5f109f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1505.812143][ T5282] RAX: ffffffffffffffda RBX: 00007f5f12a15fa0 RCX: 00007f5f1279c799 [ 1505.812151][ T5282] RDX: 00000000000002c8 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1505.812158][ T5282] RBP: 00007f5f109f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.812164][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.812170][ T5282] R13: 00007f5f12a16038 R14: 00007f5f12a15fa0 R15: 00007f5f12b3fa48 [ 1505.812186][ T5282] [ 1506.079856][ T5265] openvswitch: netlink: Tunnel attr 42 out of range max 16 [ 1506.088776][T19970] usb usb6-port1: unable to enumerate USB device [ 1506.123734][T29345] usb 3-1: USB disconnect, device number 79 [ 1507.728031][ T5315] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10848'. [ 1508.557662][T19974] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1508.583347][ T5332] FAULT_INJECTION: forcing a failure. [ 1508.583347][ T5332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1508.596816][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.10853 Tainted: G L syzkaller #0 PREEMPT(full) [ 1508.596842][ T5332] Tainted: [L]=SOFTLOCKUP [ 1508.596849][ T5332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1508.596860][ T5332] Call Trace: [ 1508.596867][ T5332] [ 1508.596875][ T5332] dump_stack_lvl+0xe8/0x150 [ 1508.596906][ T5332] should_fail_ex+0x412/0x560 [ 1508.596929][ T5332] prepare_alloc_pages+0x22a/0x650 [ 1508.596947][ T5332] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1508.596962][ T5332] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1508.596976][ T5332] ? __pfx_policy_nodemask+0x10/0x10 [ 1508.596989][ T5332] ? __lock_acquire+0x6b5/0x2cf0 [ 1508.597010][ T5332] ? __lock_acquire+0x6b5/0x2cf0 [ 1508.597023][ T5332] alloc_pages_mpol+0x232/0x4a0 [ 1508.597039][ T5332] vma_alloc_folio_noprof+0xea/0x210 [ 1508.597053][ T5332] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1508.597071][ T5332] do_pte_missing+0x1656/0x3490 [ 1508.597091][ T5332] handle_mm_fault+0x1bec/0x3310 [ 1508.597113][ T5332] ? handle_mm_fault+0xee/0x3310 [ 1508.597131][ T5332] ? __pfx_handle_mm_fault+0x10/0x10 [ 1508.597169][ T5332] ? lock_mm_and_find_vma+0xa7/0x340 [ 1508.597189][ T5332] do_user_addr_fault+0x75b/0x1340 [ 1508.597210][ T5332] exc_page_fault+0x6a/0xc0 [ 1508.597223][ T5332] asm_exc_page_fault+0x26/0x30 [ 1508.597233][ T5332] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1508.597248][ T5332] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1508.597257][ T5332] RSP: 0018:ffffc900045a7b08 EFLAGS: 00050212 [ 1508.597267][ T5332] RAX: 0000000000000000 RBX: 0000000000000024 RCX: 0000000000000024 [ 1508.597274][ T5332] RDX: 0000000000000000 RSI: ffff8880369a3780 RDI: 0000200000001240 [ 1508.597281][ T5332] RBP: ffffc900045a7c90 R08: 0000000000000003 R09: 0000000000000004 [ 1508.597287][ T5332] R10: dffffc0000000000 R11: ffffed1006d346f4 R12: 0000200000001264 [ 1508.597294][ T5332] R13: 00007ffffffff000 R14: ffff8880369a3780 R15: 0000200000001240 [ 1508.597310][ T5332] _copy_to_user+0x8a/0xb0 [ 1508.597324][ T5332] sg_read+0x10a1/0x15b0 [ 1508.597343][ T5332] ? __pfx_sg_read+0x10/0x10 [ 1508.597356][ T5332] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1508.597368][ T5332] ? bpf_lsm_file_permission+0x9/0x20 [ 1508.597381][ T5332] ? security_file_permission+0x75/0x260 [ 1508.597394][ T5332] ? rw_verify_area+0x2a6/0x4d0 [ 1508.597406][ T5332] ? __pfx_sg_read+0x10/0x10 [ 1508.597419][ T5332] vfs_read+0x20c/0xa70 [ 1508.597429][ T5332] ? ksys_write+0x1e6/0x270 [ 1508.597443][ T5332] ? __pfx_vfs_read+0x10/0x10 [ 1508.597454][ T5332] ? __fget_files+0x2a/0x420 [ 1508.597470][ T5332] ? __fget_files+0x2a/0x420 [ 1508.597484][ T5332] ? __fget_files+0x3a0/0x420 [ 1508.597499][ T5332] ? __fget_files+0x2a/0x420 [ 1508.597517][ T5332] ksys_read+0x150/0x270 [ 1508.597529][ T5332] ? __pfx_ksys_read+0x10/0x10 [ 1508.597545][ T5332] do_syscall_64+0x14d/0xf80 [ 1508.597556][ T5332] ? trace_irq_disable+0x3b/0x150 [ 1508.597570][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.597580][ T5332] ? clear_bhb_loop+0x40/0x90 [ 1508.597593][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.597603][ T5332] RIP: 0033:0x7fcc0fb9c799 [ 1508.597613][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.597621][ T5332] RSP: 002b:00007fcc0ddd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1508.597630][ T5332] RAX: ffffffffffffffda RBX: 00007fcc0fe16090 RCX: 00007fcc0fb9c799 [ 1508.597638][ T5332] RDX: 0000000000002020 RSI: 0000200000001240 RDI: 0000000000000004 [ 1508.597644][ T5332] RBP: 00007fcc0ddd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.597650][ T5332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.597656][ T5332] R13: 00007fcc0fe16128 R14: 00007fcc0fe16090 R15: 00007fcc0ff3fa48 [ 1508.597671][ T5332] [ 1508.622861][T29345] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1508.732807][T19974] usb 2-1: Using ep0 maxpacket: 32 [ 1508.746589][ T5340] program syz.0.10856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1508.761843][T19974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1508.957732][T29345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.986905][T19974] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1509.007333][T29345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.052995][T19974] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1509.054550][T19970] usb 6-1: new full-speed USB device number 66 using dummy_hcd [ 1509.098876][T19974] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1509.108201][T19974] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1509.116623][T19974] usb 2-1: Product: syz [ 1509.120960][T19974] usb 2-1: Manufacturer: syz [ 1509.125645][T19974] usb 2-1: SerialNumber: syz [ 1509.171242][T19974] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input85 [ 1509.174310][T29345] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1509.199789][T29345] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1509.209332][T29345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.256166][T29345] usb 4-1: config 0 descriptor?? [ 1509.356455][T19970] usb 6-1: config 0 has an invalid interface number: 75 but max is 2 [ 1509.364767][T19970] usb 6-1: config 0 has an invalid interface number: 157 but max is 2 [ 1509.378498][T19970] usb 6-1: config 0 has an invalid interface number: 245 but max is 2 [ 1509.396477][T19970] usb 6-1: config 0 has no interface number 0 [ 1509.402626][T19970] usb 6-1: config 0 has no interface number 1 [ 1509.409436][T19970] usb 6-1: config 0 has no interface number 2 [ 1509.416344][T19970] usb 6-1: config 0 interface 75 has no altsetting 0 [ 1509.436705][T19970] usb 6-1: config 0 interface 157 has no altsetting 0 [ 1509.443864][T19970] usb 6-1: config 0 interface 245 has no altsetting 0 [ 1509.459574][T19974] usb 2-1: USB disconnect, device number 83 [ 1509.482855][T19970] usb 6-1: New USB device found, idVendor=0451, idProduct=8142, bcdDevice=48.a0 [ 1509.495975][T19970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.502099][T19974] appletouch 2-1:1.0: input: appletouch disconnected [ 1509.505145][T19970] usb 6-1: Product: syz [ 1509.517007][T19970] usb 6-1: Manufacturer: syz [ 1509.521650][T19970] usb 6-1: SerialNumber: syz [ 1509.532774][T19970] usb 6-1: config 0 descriptor?? [ 1509.651140][ T5354] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20004 [ 1509.660797][ T5354] netlink: 'syz.2.10863': attribute type 20 has an invalid length. [ 1509.716279][T29345] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1510.094868][T27655] usb 4-1: USB disconnect, device number 107 [ 1510.101257][ T5328] usb 4-1: string descriptor 0 read error: -19 [ 1510.182841][ T5886] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1510.471589][ T5886] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.482003][ T5886] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1510.512831][T27655] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1510.625906][ T5886] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1510.637943][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.647548][ T5886] usb 3-1: Product: syz [ 1510.652707][ T5886] usb 3-1: Manufacturer: syz [ 1510.661060][ T5886] usb 3-1: SerialNumber: syz [ 1510.732835][T27655] usb 4-1: device descriptor read/64, error -71 [ 1510.918126][ T5381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1510.930590][ T5381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1510.992933][T27655] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1511.023613][ T5886] usb 3-1: USB disconnect, device number 80 [ 1511.070056][ T7485] udevd[7485]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1511.152818][T27655] usb 4-1: device descriptor read/64, error -71 [ 1511.263129][T27655] usb usb4-port1: attempt power cycle [ 1511.612037][T19970] hub 6-1:0.75: Invalid hub with more than one config or interface [ 1511.627674][T19970] hub 6-1:0.75: probe with driver hub failed with error -22 [ 1511.638849][ T5390] FAULT_INJECTION: forcing a failure. [ 1511.638849][ T5390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1511.641728][T19970] hub 6-1:0.157: Invalid hub with more than one config or interface [ 1511.664288][T19970] hub 6-1:0.157: probe with driver hub failed with error -22 [ 1511.686211][ T5390] CPU: 0 UID: 0 PID: 5390 Comm: syz.1.10875 Tainted: G L syzkaller #0 PREEMPT(full) [ 1511.686240][ T5390] Tainted: [L]=SOFTLOCKUP [ 1511.686247][ T5390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1511.686259][ T5390] Call Trace: [ 1511.686267][ T5390] [ 1511.686275][ T5390] dump_stack_lvl+0xe8/0x150 [ 1511.686308][ T5390] should_fail_ex+0x412/0x560 [ 1511.686338][ T5390] _copy_from_iter+0x1d3/0x1670 [ 1511.686370][ T5390] ? rcu_is_watching+0x15/0xb0 [ 1511.686400][ T5390] ? __pfx__copy_from_iter+0x10/0x10 [ 1511.686435][ T5390] ? netlink_sendmsg+0x650/0xb40 [ 1511.686451][ T5390] ? skb_put+0x11b/0x210 [ 1511.686474][ T5390] netlink_sendmsg+0x6c0/0xb40 [ 1511.686500][ T5390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1511.686520][ T5390] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1511.686546][ T5390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1511.686568][ T5390] ____sys_sendmsg+0x972/0x9f0 [ 1511.686598][ T5390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1511.686627][ T5390] ? import_iovec+0x73/0xa0 [ 1511.686648][ T5390] ___sys_sendmsg+0x2a5/0x360 [ 1511.686674][ T5390] ? __pfx____sys_sendmsg+0x10/0x10 [ 1511.686727][ T5390] ? __fget_files+0x2a/0x420 [ 1511.686752][ T5390] ? __fget_files+0x3a0/0x420 [ 1511.686787][ T5390] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1511.686811][ T5390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1511.686841][ T5390] ? __pfx_ksys_write+0x10/0x10 [ 1511.686871][ T5390] do_syscall_64+0x14d/0xf80 [ 1511.686891][ T5390] ? trace_irq_disable+0x3b/0x150 [ 1511.686916][ T5390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.686934][ T5390] ? clear_bhb_loop+0x40/0x90 [ 1511.686957][ T5390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.686975][ T5390] RIP: 0033:0x7f5f1279c799 [ 1511.686992][ T5390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.687008][ T5390] RSP: 002b:00007f5f109f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1511.687028][ T5390] RAX: ffffffffffffffda RBX: 00007f5f12a15fa0 RCX: 00007f5f1279c799 [ 1511.687042][ T5390] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1511.687053][ T5390] RBP: 00007f5f109f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1511.687063][ T5390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.687074][ T5390] R13: 00007f5f12a16038 R14: 00007f5f12a15fa0 R15: 00007f5f12b3fa48 [ 1511.687103][ T5390] [ 1511.689965][T19970] hub 6-1:0.245: Invalid hub with more than one config or interface [ 1511.945826][T19970] hub 6-1:0.245: probe with driver hub failed with error -22 [ 1511.968580][T19970] usb 6-1: USB disconnect, device number 66 [ 1512.356759][ T5419] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1512.366044][ T5419] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1512.473047][T19970] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1512.622905][ T5910] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1512.635226][T19970] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1512.652789][T19970] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1512.677341][T19970] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1512.706272][T19970] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1512.734144][T19970] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1512.774974][T19970] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1512.798504][T19970] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1512.812969][T19970] usb 6-1: Product: syz [ 1512.827180][T19970] usb 6-1: Manufacturer: syz [ 1512.870084][T19970] cdc_wdm 6-1:1.0: skipping garbage [ 1512.881373][T19970] cdc_wdm 6-1:1.0: skipping garbage [ 1512.891593][T19970] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1512.903340][T19970] cdc_wdm 6-1:1.0: Unknown control protocol [ 1513.227720][ T5910] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1513.261905][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.286128][ T5910] usb 3-1: Product: syz [ 1513.290451][ T5910] usb 3-1: Manufacturer: syz [ 1513.294043][ T5437] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1513.332721][ T5910] usb 3-1: SerialNumber: syz [ 1513.389142][ T5910] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1513.411014][ T5437] bond2: (slave lo): Enslaving as an active interface with an up link [ 1513.436521][ T5437] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1513.471208][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10893'. [ 1513.487998][ T5441] netlink: 'syz.0.10893': attribute type 5 has an invalid length. [ 1513.517037][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10893'. [ 1513.551398][ T5441] netlink: 'syz.0.10893': attribute type 5 has an invalid length. [ 1513.745989][T29345] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1513.852848][ T5910] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1513.917240][T27655] usb 6-1: USB disconnect, device number 67 [ 1514.050068][ T5910] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1514.073033][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.081094][ T5910] usb 2-1: Product: syz [ 1514.102804][ T5910] usb 2-1: Manufacturer: syz [ 1514.107446][ T5910] usb 2-1: SerialNumber: syz [ 1514.153213][ T5910] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1514.194731][T19970] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1514.383494][ T5451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.404693][ T5451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1514.474337][ T5455] FAULT_INJECTION: forcing a failure. [ 1514.474337][ T5455] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.511152][ T5455] CPU: 0 UID: 0 PID: 5455 Comm: syz.5.10899 Tainted: G L syzkaller #0 PREEMPT(full) [ 1514.511183][ T5455] Tainted: [L]=SOFTLOCKUP [ 1514.511190][ T5455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1514.511201][ T5455] Call Trace: [ 1514.511209][ T5455] [ 1514.511218][ T5455] dump_stack_lvl+0xe8/0x150 [ 1514.511247][ T5455] should_fail_ex+0x412/0x560 [ 1514.511286][ T5455] should_failslab+0xa8/0x100 [ 1514.511310][ T5455] __kmalloc_noprof+0xe8/0x760 [ 1514.511331][ T5455] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1514.511361][ T5455] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1514.511391][ T5455] genl_family_rcv_msg_doit+0xd9/0x330 [ 1514.511415][ T5455] ? __asan_memcpy+0x40/0x70 [ 1514.511436][ T5455] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1514.511465][ T5455] ? apparmor_capable+0x126/0x170 [ 1514.511487][ T5455] ? bpf_lsm_capable+0x9/0x20 [ 1514.511511][ T5455] ? security_capable+0x7e/0x2c0 [ 1514.511542][ T5455] genl_rcv_msg+0x61c/0x7a0 [ 1514.511571][ T5455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1514.511592][ T5455] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 1514.511694][ T5455] ? __lock_acquire+0x6b5/0x2cf0 [ 1514.511728][ T5455] netlink_rcv_skb+0x232/0x4b0 [ 1514.511757][ T5455] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1514.511778][ T5455] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1514.511819][ T5455] ? down_read+0x272/0x2e0 [ 1514.511840][ T5455] ? genl_rcv+0xd/0x40 [ 1514.511862][ T5455] genl_rcv+0x28/0x40 [ 1514.511882][ T5455] netlink_unicast+0x80f/0x9b0 [ 1514.511915][ T5455] ? __pfx_netlink_unicast+0x10/0x10 [ 1514.511939][ T5455] ? netlink_sendmsg+0x650/0xb40 [ 1514.511954][ T5455] ? skb_put+0x11b/0x210 [ 1514.511976][ T5455] netlink_sendmsg+0x813/0xb40 [ 1514.512000][ T5455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.512022][ T5455] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1514.512050][ T5455] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1514.512073][ T5455] ____sys_sendmsg+0x972/0x9f0 [ 1514.512101][ T5455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1514.512130][ T5455] ? import_iovec+0x73/0xa0 [ 1514.512152][ T5455] ___sys_sendmsg+0x2a5/0x360 [ 1514.512179][ T5455] ? __pfx____sys_sendmsg+0x10/0x10 [ 1514.512235][ T5455] ? __fget_files+0x2a/0x420 [ 1514.512259][ T5455] ? __fget_files+0x3a0/0x420 [ 1514.512300][ T5455] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1514.512324][ T5455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1514.512355][ T5455] ? __pfx_ksys_write+0x10/0x10 [ 1514.512386][ T5455] do_syscall_64+0x14d/0xf80 [ 1514.512406][ T5455] ? trace_irq_disable+0x3b/0x150 [ 1514.512429][ T5455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.512447][ T5455] ? clear_bhb_loop+0x40/0x90 [ 1514.512468][ T5455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.512486][ T5455] RIP: 0033:0x7fb4eff9c799 [ 1514.512505][ T5455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1514.512521][ T5455] RSP: 002b:00007fb4f0ebd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1514.512542][ T5455] RAX: ffffffffffffffda RBX: 00007fb4f0215fa0 RCX: 00007fb4eff9c799 [ 1514.512555][ T5455] RDX: 0000000020048010 RSI: 0000200000000000 RDI: 0000000000000003 [ 1514.512568][ T5455] RBP: 00007fb4f0ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.512580][ T5455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.512590][ T5455] R13: 00007fb4f0216038 R14: 00007fb4f0215fa0 R15: 00007fb4f033fa48 [ 1514.512620][ T5455] [ 1514.842739][T29345] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1514.850099][T29345] ath9k_htc: Failed to initialize the device [ 1514.882481][T29345] usb 3-1: ath9k_htc: USB layer deinitialized [ 1515.153448][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.162499][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.173139][ T5464] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10894'. [ 1515.269520][ T5470] netlink: 'syz.5.10904': attribute type 1 has an invalid length. [ 1515.280965][T19970] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1515.291641][T19970] ath9k_htc: Failed to initialize the device [ 1515.323914][ T5470] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1515.337176][ T5470] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1515.351978][T19970] usb 2-1: ath9k_htc: USB layer deinitialized [ 1515.784031][T29345] usb 3-1: USB disconnect, device number 81 [ 1515.801894][ T5420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1515.860841][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10905'. [ 1515.880426][ T5475] team_slave_0 (unregistering): left promiscuous mode [ 1515.888368][ T5475] team0: Port device team_slave_0 removed [ 1516.667493][ T5503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10912'. [ 1516.862559][ T5886] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1517.052775][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 1517.069145][ T5886] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 1517.099613][ T5886] usb 6-1: config 0 has no interface number 0 [ 1517.124764][ T5886] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1517.177872][ T5886] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1517.216750][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.245735][ T5886] usb 6-1: Product: syz [ 1517.260961][ T5886] usb 6-1: Manufacturer: syz [ 1517.280689][ T5886] usb 6-1: SerialNumber: syz [ 1517.313061][ T5886] usb 6-1: config 0 descriptor?? [ 1517.345063][ T5886] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1517.386714][ T5886] em28xx 6-1:0.132: Video interface 132 found: [ 1517.753534][ T5886] em28xx 6-1:0.132: chip ID is em2884 [ 1518.103477][ T5502] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10911'. [ 1518.333776][T19970] usb 2-1: USB disconnect, device number 84 [ 1518.512523][ T5520] syzkaller1: entered promiscuous mode [ 1518.519715][ T5520] syzkaller1: entered allmulticast mode [ 1518.532389][ T5520] FAULT_INJECTION: forcing a failure. [ 1518.532389][ T5520] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.545066][ T5520] CPU: 0 UID: 0 PID: 5520 Comm: syz.1.10919 Tainted: G L syzkaller #0 PREEMPT(full) [ 1518.545090][ T5520] Tainted: [L]=SOFTLOCKUP [ 1518.545097][ T5520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1518.545108][ T5520] Call Trace: [ 1518.545115][ T5520] [ 1518.545122][ T5520] dump_stack_lvl+0xe8/0x150 [ 1518.545151][ T5520] should_fail_ex+0x412/0x560 [ 1518.545180][ T5520] should_failslab+0xa8/0x100 [ 1518.545200][ T5520] ? __nf_conntrack_alloc+0x81/0x3e0 [ 1518.545300][ T5520] kmem_cache_alloc_noprof+0x87/0x650 [ 1518.545319][ T5520] ? nf_ct_pernet+0x45/0x270 [ 1518.545348][ T5520] __nf_conntrack_alloc+0x81/0x3e0 [ 1518.545375][ T5520] init_conntrack+0x16f/0xf70 [ 1518.545407][ T5520] ? __pfx_init_conntrack+0x10/0x10 [ 1518.545436][ T5520] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 1518.545459][ T5520] ? __siphash_unaligned+0x22e/0x3b0 [ 1518.545486][ T5520] nf_conntrack_in+0xbd8/0x15e0 [ 1518.545529][ T5520] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1518.545559][ T5520] ? ipt_do_table+0x2b2/0x1630 [ 1518.545594][ T5520] ? lock_acquire+0xf0/0x2e0 [ 1518.545615][ T5520] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 1518.545634][ T5520] ? ip_sabotage_in+0x57/0x270 [ 1518.545657][ T5520] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 1518.545679][ T5520] nf_hook_slow+0xc5/0x220 [ 1518.545703][ T5520] NF_HOOK+0x21f/0x3c0 [ 1518.545729][ T5520] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1518.545753][ T5520] ? NF_HOOK+0x9e/0x3c0 [ 1518.545775][ T5520] ? __pfx_NF_HOOK+0x10/0x10 [ 1518.545801][ T5520] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1518.545831][ T5520] ? netif_receive_skb+0x102/0xc50 [ 1518.545864][ T5520] ? __pfx_ip_rcv+0x10/0x10 [ 1518.545886][ T5520] netif_receive_skb+0x45b/0xc50 [ 1518.545916][ T5520] ? __pfx_netif_receive_skb+0x10/0x10 [ 1518.545939][ T5520] ? __lock_acquire+0x6b5/0x2cf0 [ 1518.545966][ T5520] ? tun_rx_batched+0x185/0x790 [ 1518.545988][ T5520] tun_rx_batched+0x1de/0x790 [ 1518.546013][ T5520] ? __pfx_tun_rx_batched+0x10/0x10 [ 1518.546043][ T5520] ? tun_get_user+0x2354/0x3dd0 [ 1518.546062][ T5520] ? __local_bh_enable_ip+0xd0/0x130 [ 1518.546088][ T5520] ? tun_get_user+0x2669/0x3dd0 [ 1518.546106][ T5520] tun_get_user+0x2a78/0x3dd0 [ 1518.546136][ T5520] ? aa_file_perm+0x192/0x15e0 [ 1518.546158][ T5520] ? aa_file_perm+0x50e/0x15e0 [ 1518.546175][ T5520] ? __pfx_tun_get_user+0x10/0x10 [ 1518.546192][ T5520] ? aa_file_perm+0x192/0x15e0 [ 1518.546214][ T5520] ? __lock_acquire+0x6b5/0x2cf0 [ 1518.546246][ T5520] ? ref_tracker_alloc+0x35c/0x4c0 [ 1518.546275][ T5520] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1518.546307][ T5520] ? tun_get+0x1c/0x2f0 [ 1518.546331][ T5520] ? tun_get+0x1c/0x2f0 [ 1518.546349][ T5520] ? tun_get+0x1c/0x2f0 [ 1518.546371][ T5520] tun_chr_write_iter+0x113/0x200 [ 1518.546393][ T5520] vfs_write+0x61d/0xb90 [ 1518.546421][ T5520] ? __pfx_vfs_write+0x10/0x10 [ 1518.546451][ T5520] ? __fget_files+0x2a/0x420 [ 1518.546484][ T5520] ksys_write+0x150/0x270 [ 1518.546507][ T5520] ? __pfx_ksys_write+0x10/0x10 [ 1518.546538][ T5520] do_syscall_64+0x14d/0xf80 [ 1518.546558][ T5520] ? trace_irq_disable+0x3b/0x150 [ 1518.546582][ T5520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.546601][ T5520] ? clear_bhb_loop+0x40/0x90 [ 1518.546623][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.546642][ T5520] RIP: 0033:0x7f5f1279c799 [ 1518.546660][ T5520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.546673][ T5520] RSP: 002b:00007f5f109f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1518.546691][ T5520] RAX: ffffffffffffffda RBX: 00007f5f12a15fa0 RCX: 00007f5f1279c799 [ 1518.546704][ T5520] RDX: 000000000000003a RSI: 0000200000000100 RDI: 0000000000000004 [ 1518.546715][ T5520] RBP: 00007f5f109f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.546727][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.546738][ T5520] R13: 00007f5f12a16038 R14: 00007f5f12a15fa0 R15: 00007f5f12b3fa48 [ 1518.546767][ T5520] [ 1519.006961][ T5886] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1519.015943][ T5886] em28xx 6-1:0.132: board has no eeprom [ 1519.075684][ T5886] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1519.084158][ T5886] em28xx 6-1:0.132: analog set to bulk mode. [ 1519.090778][T19975] em28xx 6-1:0.132: Registering V4L2 extension [ 1519.220637][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1519.231219][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1519.240888][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1519.249913][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1519.335818][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1519.356274][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1519.367678][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1519.419489][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1519.729036][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1519.839155][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1519.913927][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1519.956734][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1520.008182][T19975] em28xx 6-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1520.068976][T19975] em28xx 6-1:0.132: Config register raw data: 0xfffffffb [ 1520.118350][T19975] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 1520.139810][T19975] em28xx 6-1:0.132: No AC97 audio processor [ 1520.183749][T19975] usb 6-1: Decoder not found [ 1520.210066][T19975] em28xx 6-1:0.132: failed to create media graph [ 1520.264699][T27655] usb 6-1: USB disconnect, device number 68 [ 1520.308575][T19975] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 1520.317479][T27655] em28xx 6-1:0.132: Disconnecting em28xx [ 1520.364734][T19975] em28xx 6-1:0.132: Remote control support is not available for this card. [ 1520.373664][ T5538] ================================================================== [ 1520.381752][ T5538] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 1520.389205][ T5538] Read of size 8 at addr ffff888032f04790 by task v4l_id/5538 [ 1520.393138][T27655] em28xx 6-1:0.132: Closing input extension [ 1520.396645][ T5538] [ 1520.396661][ T5538] CPU: 1 UID: 0 PID: 5538 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1520.396686][ T5538] Tainted: [L]=SOFTLOCKUP [ 1520.396693][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1520.396705][ T5538] Call Trace: [ 1520.396712][ T5538] [ 1520.396719][ T5538] dump_stack_lvl+0xe8/0x150 [ 1520.396743][ T5538] print_report+0xba/0x230 [ 1520.396762][ T5538] ? v4l2_fh_open+0xac/0x420 [ 1520.396779][ T5538] kasan_report+0x117/0x150 [ 1520.396796][ T5538] ? v4l2_fh_open+0xac/0x420 [ 1520.396815][ T5538] v4l2_fh_open+0xac/0x420 [ 1520.396831][ T5538] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1520.396851][ T5538] em28xx_v4l2_open+0x157/0x9a0 [ 1520.396917][ T5538] ? do_raw_spin_lock+0x12b/0x2f0 [ 1520.396936][ T5538] v4l2_open+0x1bf/0x3a0 [ 1520.396957][ T5538] chrdev_open+0x4cd/0x5e0 [ 1520.396979][ T5538] ? __pfx_chrdev_open+0x10/0x10 [ 1520.397000][ T5538] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1520.397020][ T5538] ? __pfx_chrdev_open+0x10/0x10 [ 1520.397041][ T5538] do_dentry_open+0x785/0x14e0 [ 1520.397070][ T5538] vfs_open+0x3b/0x340 [ 1520.397091][ T5538] ? path_openat+0x2df0/0x3860 [ 1520.397110][ T5538] path_openat+0x2e08/0x3860 [ 1520.397134][ T5538] ? __pfx_stack_trace_save+0x10/0x10 [ 1520.397153][ T5538] ? stack_depot_save_flags+0x33/0x810 [ 1520.397182][ T5538] ? __pfx_path_openat+0x10/0x10 [ 1520.397199][ T5538] ? __x64_sys_openat+0x138/0x170 [ 1520.397229][ T5538] ? do_syscall_64+0x14d/0xf80 [ 1520.397248][ T5538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.397269][ T5538] ? __lock_acquire+0x6b5/0x2cf0 [ 1520.397294][ T5538] do_file_open+0x23e/0x4a0 [ 1520.397314][ T5538] ? __pfx_do_file_open+0x10/0x10 [ 1520.397341][ T5538] ? _raw_spin_unlock+0x28/0x50 [ 1520.397357][ T5538] ? alloc_fd+0x64b/0x6c0 [ 1520.397384][ T5538] do_sys_openat2+0x113/0x200 [ 1520.397409][ T5538] ? __pfx_do_sys_openat2+0x10/0x10 [ 1520.397433][ T5538] ? exc_page_fault+0x6a/0xc0 [ 1520.397453][ T5538] ? do_user_addr_fault+0xc6f/0x1340 [ 1520.397477][ T5538] __x64_sys_openat+0x138/0x170 [ 1520.397502][ T5538] do_syscall_64+0x14d/0xf80 [ 1520.397521][ T5538] ? trace_irq_disable+0x3b/0x150 [ 1520.397545][ T5538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.397563][ T5538] ? clear_bhb_loop+0x40/0x90 [ 1520.397583][ T5538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.397600][ T5538] RIP: 0033:0x7f0255ea7407 [ 1520.397617][ T5538] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1520.397633][ T5538] RSP: 002b:00007ffea52ffc40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1520.397652][ T5538] RAX: ffffffffffffffda RBX: 00007f0256573880 RCX: 00007f0255ea7407 [ 1520.397666][ T5538] RDX: 0000000000000000 RSI: 00007ffea5301f1a RDI: ffffffffffffff9c [ 1520.397679][ T5538] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1520.397690][ T5538] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1520.397700][ T5538] R13: 00007ffea52ffe90 R14: 00007f0256678000 R15: 0000560f1d75f4d8 [ 1520.397720][ T5538] [ 1520.397727][ T5538] [ 1520.704374][ T5538] Allocated by task 19975: [ 1520.708769][ T5538] kasan_save_track+0x3e/0x80 [ 1520.713434][ T5538] __kasan_kmalloc+0x93/0xb0 [ 1520.718009][ T5538] __kmalloc_cache_noprof+0x31c/0x660 [ 1520.723362][ T5538] em28xx_v4l2_init+0x10b/0x2e70 [ 1520.728363][ T5538] em28xx_init_extension+0x120/0x1c0 [ 1520.733637][ T5538] process_scheduled_works+0xb6e/0x18c0 [ 1520.739174][ T5538] worker_thread+0xa53/0xfc0 [ 1520.743747][ T5538] kthread+0x388/0x470 [ 1520.747798][ T5538] ret_from_fork+0x51e/0xb90 [ 1520.752373][ T5538] ret_from_fork_asm+0x1a/0x30 [ 1520.757122][ T5538] [ 1520.759427][ T5538] Freed by task 19975: [ 1520.763473][ T5538] kasan_save_track+0x3e/0x80 [ 1520.768135][ T5538] kasan_save_free_info+0x46/0x50 [ 1520.773153][ T5538] __kasan_slab_free+0x5c/0x80 [ 1520.777906][ T5538] kfree+0x1c1/0x630 [ 1520.781784][ T5538] em28xx_v4l2_init+0x1683/0x2e70 [ 1520.786797][ T5538] em28xx_init_extension+0x120/0x1c0 [ 1520.792071][ T5538] process_scheduled_works+0xb6e/0x18c0 [ 1520.797601][ T5538] worker_thread+0xa53/0xfc0 [ 1520.802181][ T5538] kthread+0x388/0x470 [ 1520.806231][ T5538] ret_from_fork+0x51e/0xb90 [ 1520.810826][ T5538] ret_from_fork_asm+0x1a/0x30 [ 1520.815590][ T5538] [ 1520.817896][ T5538] The buggy address belongs to the object at ffff888032f04000 [ 1520.817896][ T5538] which belongs to the cache kmalloc-8k of size 8192 [ 1520.831928][ T5538] The buggy address is located 1936 bytes inside of [ 1520.831928][ T5538] freed 8192-byte region [ffff888032f04000, ffff888032f06000) [ 1520.845883][ T5538] [ 1520.848192][ T5538] The buggy address belongs to the physical page: [ 1520.854595][ T5538] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32f00 [ 1520.863337][ T5538] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1520.871812][ T5538] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1520.879342][ T5538] page_type: f5(slab) [ 1520.883307][ T5538] raw: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 1520.891871][ T5538] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1520.900434][ T5538] head: 00fff00000000040 ffff88813fea6280 dead000000000100 dead000000000122 [ 1520.909085][ T5538] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1520.917736][ T5538] head: 00fff00000000003 ffffea0000cbc001 00000000ffffffff 00000000ffffffff [ 1520.926391][ T5538] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1520.935036][ T5538] page dumped because: kasan: bad access detected [ 1520.941433][ T5538] page_owner tracks the page as allocated [ 1520.947125][ T5538] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 71689810758, free_ts 46983848373 [ 1520.968465][ T5538] post_alloc_hook+0x231/0x280 [ 1520.973217][ T5538] get_page_from_freelist+0x24dc/0x2580 [ 1520.978750][ T5538] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1520.984540][ T5538] allocate_slab+0x77/0x660 [ 1520.989027][ T5538] refill_objects+0x331/0x3c0 [ 1520.993689][ T5538] __pcs_replace_empty_main+0x2e6/0x730 [ 1520.999222][ T5538] __kmalloc_cache_noprof+0x392/0x660 [ 1521.004578][ T5538] macvlan_common_newlink+0x5e1/0x19e0 [ 1521.010083][ T5538] macvtap_newlink+0x13c/0x1b0 [ 1521.014862][ T5538] rtnl_newlink_create+0x329/0xb70 [ 1521.019987][ T5538] rtnl_newlink+0x1666/0x1be0 [ 1521.024646][ T5538] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1521.029574][ T5538] netlink_rcv_skb+0x232/0x4b0 [ 1521.034324][ T5538] netlink_unicast+0x80f/0x9b0 [ 1521.039071][ T5538] netlink_sendmsg+0x813/0xb40 [ 1521.043816][ T5538] __sys_sendto+0x672/0x710 [ 1521.048302][ T5538] page last free pid 5196 tgid 5196 stack trace: [ 1521.054605][ T5538] __free_frozen_pages+0xc2b/0xdb0 [ 1521.059699][ T5538] __slab_free+0x263/0x2b0 [ 1521.064096][ T5538] qlist_free_all+0x97/0x100 [ 1521.068669][ T5538] kasan_quarantine_reduce+0x148/0x160 [ 1521.074111][ T5538] __kasan_slab_alloc+0x22/0x80 [ 1521.078956][ T5538] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1521.084403][ T5538] do_getname+0x2e/0x250 [ 1521.088633][ T5538] __se_sys_unlink+0x1e/0x140 [ 1521.093293][ T5538] do_syscall_64+0x14d/0xf80 [ 1521.097864][ T5538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.103739][ T5538] [ 1521.106044][ T5538] Memory state around the buggy address: [ 1521.111652][ T5538] ffff888032f04680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1521.119693][ T5538] ffff888032f04700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1521.127741][ T5538] >ffff888032f04780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1521.135782][ T5538] ^ [ 1521.140348][ T5538] ffff888032f04800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1521.148389][ T5538] ffff888032f04880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1521.156427][ T5538] ================================================================== [ 1521.209968][ T5538] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1521.217206][ T5538] CPU: 1 UID: 0 PID: 5538 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1521.227719][ T5538] Tainted: [L]=SOFTLOCKUP [ 1521.232047][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1521.242106][ T5538] Call Trace: [ 1521.245397][ T5538] [ 1521.248330][ T5538] vpanic+0x56c/0xa60 [ 1521.252328][ T5538] ? __pfx_vpanic+0x10/0x10 [ 1521.256845][ T5538] panic+0xc5/0xd0 [ 1521.260567][ T5538] ? __pfx_panic+0x10/0x10 [ 1521.264977][ T5538] ? preempt_schedule_thunk+0x16/0x30 [ 1521.270370][ T5538] ? preempt_schedule_thunk+0x16/0x30 [ 1521.275753][ T5538] ? v4l2_fh_open+0xac/0x420 [ 1521.280351][ T5538] check_panic_on_warn+0x89/0xb0 [ 1521.285297][ T5538] ? v4l2_fh_open+0xac/0x420 [ 1521.289898][ T5538] end_report+0x73/0x180 [ 1521.294149][ T5538] ? v4l2_fh_open+0xac/0x420 [ 1521.298745][ T5538] kasan_report+0x128/0x150 [ 1521.303256][ T5538] ? v4l2_fh_open+0xac/0x420 [ 1521.307860][ T5538] v4l2_fh_open+0xac/0x420 [ 1521.312288][ T5538] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1521.318281][ T5538] em28xx_v4l2_open+0x157/0x9a0 [ 1521.323125][ T5538] ? do_raw_spin_lock+0x12b/0x2f0 [ 1521.328140][ T5538] v4l2_open+0x1bf/0x3a0 [ 1521.332372][ T5538] chrdev_open+0x4cd/0x5e0 [ 1521.336810][ T5538] ? __pfx_chrdev_open+0x10/0x10 [ 1521.341739][ T5538] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1521.348055][ T5538] ? __pfx_chrdev_open+0x10/0x10 [ 1521.352980][ T5538] do_dentry_open+0x785/0x14e0 [ 1521.357737][ T5538] vfs_open+0x3b/0x340 [ 1521.361800][ T5538] ? path_openat+0x2df0/0x3860 [ 1521.366553][ T5538] path_openat+0x2e08/0x3860 [ 1521.371134][ T5538] ? __pfx_stack_trace_save+0x10/0x10 [ 1521.376491][ T5538] ? stack_depot_save_flags+0x33/0x810 [ 1521.381947][ T5538] ? __pfx_path_openat+0x10/0x10 [ 1521.386871][ T5538] ? __x64_sys_openat+0x138/0x170 [ 1521.391888][ T5538] ? do_syscall_64+0x14d/0xf80 [ 1521.396641][ T5538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.402711][ T5538] ? __lock_acquire+0x6b5/0x2cf0 [ 1521.407647][ T5538] do_file_open+0x23e/0x4a0 [ 1521.412151][ T5538] ? __pfx_do_file_open+0x10/0x10 [ 1521.417174][ T5538] ? _raw_spin_unlock+0x28/0x50 [ 1521.422011][ T5538] ? alloc_fd+0x64b/0x6c0 [ 1521.426334][ T5538] do_sys_openat2+0x113/0x200 [ 1521.431003][ T5538] ? __pfx_do_sys_openat2+0x10/0x10 [ 1521.436186][ T5538] ? exc_page_fault+0x6a/0xc0 [ 1521.440851][ T5538] ? do_user_addr_fault+0xc6f/0x1340 [ 1521.446123][ T5538] __x64_sys_openat+0x138/0x170 [ 1521.450963][ T5538] do_syscall_64+0x14d/0xf80 [ 1521.455538][ T5538] ? trace_irq_disable+0x3b/0x150 [ 1521.460548][ T5538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.466598][ T5538] ? clear_bhb_loop+0x40/0x90 [ 1521.471259][ T5538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.477133][ T5538] RIP: 0033:0x7f0255ea7407 [ 1521.481549][ T5538] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1521.501142][ T5538] RSP: 002b:00007ffea52ffc40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1521.509540][ T5538] RAX: ffffffffffffffda RBX: 00007f0256573880 RCX: 00007f0255ea7407 [ 1521.517495][ T5538] RDX: 0000000000000000 RSI: 00007ffea5301f1a RDI: ffffffffffffff9c [ 1521.525452][ T5538] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1521.533405][ T5538] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1521.541354][ T5538] R13: 00007ffea52ffe90 R14: 00007f0256678000 R15: 0000560f1d75f4d8 [ 1521.549314][ T5538] [ 1521.552738][ T5538] Kernel Offset: disabled [ 1521.557059][ T5538] Rebooting in 86400 seconds..