last executing test programs: 14.832946552s ago: executing program 4 (id=2019): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7ffe, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000300004000"]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x64c546c48307211d) socket$qrtr(0x2a, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x6) syz_io_uring_setup(0x4d7, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r7, @ANYBLOB="11002a00dd0b6362636465666768696a6b00000010002d8002020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000080211000000080211000000080211000000000000000000000000006400010000060202020202fcfffe7f00000000000000"], 0x36) 12.462443634s ago: executing program 2 (id=2026): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc01c7c02, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) epoll_create(0x101) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r6, &(0x7f0000000400)="e1d906d69c5b05212f0fa56499a0cfdd4e1c54d95453b98bf2d31d1bbfbe5f5732bae821cfdfeb94438e070ff60536637b559c3686283223293e455c41352f5bb9ba61b3d87adfbf7cc00cfcc964af138e006085bd3fb3fdee923dc3c751b7cf2d4d7bb13307c5a59ca53dae939b6c9a2fe3710416aab6f35b1f34dbfa7603", 0x7f, 0xcad309fe1ffd1257, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet6_buf(r6, 0x29, 0x14, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KDDISABIO(r0, 0x4b37) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedb0300000000000000000028001a00ffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) 11.305201585s ago: executing program 4 (id=2028): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) r0 = fsopen(&(0x7f0000000100)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$pptp(0x18, 0x1, 0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x3) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r9 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r9, 0xffff) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x408, 0x0, "d7884a389e967b9e894705b077c135fd1c4a37d5988b14f336aefd5769361ced9d4ae3916383fc275e11f5bed4ec3469dd878bea99114e2f6bc329d7acd8a89b2b2917fdeb71d607edd3d677414d4e22f99e072d04ea919734bc15cbfbbf5004f18378a4cc482d747ef47e91ccbd3d62000000000000000000000000000000ac60"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) fcntl$addseals(r10, 0x409, 0x0) ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x8000}) 10.097169563s ago: executing program 2 (id=2030): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000101020d0000052406000105240000000d240f0100000000000000200006241a000000090581"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x2, @link_local, 'hsr0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) 9.900735448s ago: executing program 1 (id=2031): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1001, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(xtea)\x00'}, 0x58) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000086e051c0140000102030109022d000101000904002501"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40881) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2b", 0x13}], 0x1}, 0x0) unshare(0x2c060000) unshare(0x24020400) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='i', 0x1, 0x4050, 0x0, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r5, &(0x7f0000000000)=[{&(0x7f0000000500)="002e000000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) r6 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x81, 0x1, 0xf, [{@multicast2, 0x800}, {@multicast1, 0xe726}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x5013}]}]}}}], 0x30}}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24008435026e0000200001032cbd7000ffdbdf25020100000000000100000000080017004e244e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) socket$kcm(0x10, 0x2, 0x0) 9.39306055s ago: executing program 3 (id=2032): socket$inet6(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40080, 0x87) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xe72, 0x4b, 0x809}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffff8, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x4, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 8.863257391s ago: executing program 3 (id=2033): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r2, 0x0) accept4$unix(r2, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000000), 0x8) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmmsg(r0, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000480)="9c8687b4ad9b4e903a", 0x9}], 0x1}}], 0x1, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000780)=[{r6, 0x3230}], 0x1, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x8) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 8.709133415s ago: executing program 4 (id=2035): socket$inet(0x10, 0x3, 0x0) memfd_secret(0x6c2bd70012c39c6) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x6, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x28) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.987052819s ago: executing program 2 (id=2036): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="797cb557", @ANYRES16=0x0, @ANYBLOB], 0x44}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4a, 0xfec, &(0x7f0000006680)) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r4, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r5, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, 0x0, 0x1400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r6, &(0x7f0000000140)="b75b09032686a4d9627ac510959bf61fa159de0ceeb3a7ff4b77c67111bdcff99ea58a77547f3cebd71de9d506ecf4783cbe6dde764108"}, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000100fcffffff000000002abd7000043500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc010000000000000000000000000001005f09fbb83901071c4e230005000000003a00000083ff28abc6d8af6a00b46bd51610", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff0000000080000000003500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900030000007a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000000a140000001100010000000000000000000300000a"], 0xc4}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 7.91468784s ago: executing program 3 (id=2037): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r3, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r5, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r7, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="89577e73513db7ae0f078e41d22d204a4fc7c109bf29f1178e9f575e51ce4528c90827196bb2ceebef8d0251531e3306fc3342db66f5b542721b21e2300fd7099c3dd430ad30e5a07acd1783f5b25c19d2d1836e0556b54add4e0e8eb89f53d8d69386", 0x63}], 0x1}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="9107d082b0fc54f8f5dea831e1cbfb76de8794752b1d1288df3d78a986592bcf727497c1d76bb434eb4d60", 0x2b}, {&(0x7f0000000440)="e55c7e783bfa0a666e6116b9492a4e13bfcb286ff954ab9133a83aef138fb340f9f6a1874a9561b3b0da", 0x2a}, {&(0x7f0000000480)="e8c0031ecf445586d8e0bb4029da9b1fa7beba251a7dfc3a9c30dc609d1410b5a96220", 0x23}, {&(0x7f00000004c0)="ad531f68174a7025eceb2fdd946197760045b35147bb486481907a1133bc617005060dea888c98bc9ea60a632939bd796afd10230647bac16ba163c2bc62eb8992a516e990cb9aae630e308b0deb3a7b926997deb9edd96d82720a56f1ff053f25f32a4b4a30e26d06de7d712443ff33e357855a8293f3ae6bffa53c2f98a56fb1b6846c2a388aa920990b9cfa65f5f55d8067b2f3bfb0d1c0ba32c7edff42992beb60a20a21ebade62d8eedccd3630e580e3aac209b91d6e39d57fc86ab750ed28ec4296e46d438808fc1a9d49af3163657e81fc480833ae8532afd2c028941c923", 0xe2}, {&(0x7f0000000640)="bc53bef651bdb48c09767eeb00d65c012797b756361c99fb146fea526843343bdceb1128bead1ccb8deb48b534583721db7629147b4c4520521c2876b5ba25c7abdfda38a8fa2e8b13a41b56d4b764f5a9a76591ee1045b053cfdab1899ecb2ec30cf39742bd5f91ac8e2355ef36b4f2da2ee5ec7f743d30dc709a1d61c382015d0946f7daf07da72fb7b34e2c826c1d77502dbccda086304d349f8b41a95320d5e661291957a4", 0xa7}, {&(0x7f0000000ac0)="b5b4da7f8d9343a43c780c89999e4bb81329647c9af4cf25a687022d4de8d02f527134889d763acf1b9387a85b054fc915678fe10c2f8ea0e78b2e7ba50b15641526d460074f4578cbecd233fe59ff2cfae7b807e473bd7662e21935f5f893e011d53f4fa6782f9b9136a0d816e05c7bea15add741113612e518baaa477e5892e8254c73aaa39df2a55b520dc1db96b55a4109e0ea6bca16653ca32e8c3f17f4a4720b176dd5a21a5bfe2169fd4c5b58f9a12eb572a51f83428538adca6bcad1cb144dba7b2bccd81ca841a4dd7f2a8f3c7774584eff63001bd01b5d089fc85270e0d1b30a3d49c28ad771eb243a08a0bcb95c170af8b534eed4c731c9bfeec69f9c9b65af9adb9652028ddb1406a601065bcac310592ef2084aa9979684d9c64a7cc0433687cd3da81891591f4dee0f54469c7fd2ce59a8d5fa11f8cc9e0483ac6decea639f223d0ce7316aaa3eb08416cbab418b40d9ef9864f76f2d644ef58a7b4e6bfba3248f361d14e023f43b2d0bfc36e159c863dd82bfc58ea4ea436ad4f95059f7dda30cf68270b731f3f4666477ea75e1f177d573351cfce15ccfacecb22a28a56bef04feb867a14c8fc858bdc8fb71be29296011adbbd6f507c2d943fa788bb69a3cd6d979a2d2a8dedab423345882f65717de00db565d6f6b6a734470d0ac7a2a758c14961d617d5bbcf0c8269af77ab61d24fa33d2a07737de24f69071c00db4a01bc6dde40de11d8fc878293b679373a7ce2e94bfed6dc094ca56f6917fb6ea8713df87bee7c872f573e4ac4042459390143482090f014f04a25e81c8089d4a1f8665a29a982919d3a40fee163f0b38868367253ed52622b26539f04b38d5cee51568a5ed900d781c611eeff7e95fcac9ca16394b62c9f3248d9f4085d45893977e7109672093f4b359d164da5c88867e8a9824fe16c24657098d39d7f2c5276942c146681b55e188ca94a5b90e9c62e151e718ee5c99df6fd92efd17a1e9eec5bb97b185d1b65182adeef0d1ba9cecad21ef9424e9500171c3da70a70325934abd3952e917390621c5b54d50bb174441dac9b8c4aaa094506163d33e07cd1dd079221c9ccfecd290d8c62445e4652c37e3a1ff8aaf78acee5addc6e4b693604bc4776f389d6c9750d142cb4ee07f19eaa2e4fbe4c78790c46653b5604b808e551beca66e2d490aefc05cba99d301527f0e5b2cd3645817e07341ab53c5dae7cfd886f50152dccc23b8c004b45b9203c1ee60113c8315e73f67dede322d712d0772e3a8926aafb80379d33bbf57a2b13b6d79820233bf987760c6be4e3efcaac48a71c98fa85473cb6ed4387a62339e1602a6b9b5967fa4d61245e210b5b2c0f2176efcf91151d40d7bd664df706a4dcc477a5c402abcf9bc56a73f4ac9973ff9a4a45f4c55dc4467d63ac5e589f49c69bdf3564fcb7308b20d77df76f526064940933059113969ed0d295e45fd31f67de226ddf292d6afabd4d23eaffb7fa203115d43d1338e5360128e3648da0eaa3e4ba0cecda808d70b94411377c80af4a5ff38015d622343818c8ceeacdb019db2504ebe46e565282ee551ce7ba687a16e45ec3f3ab581e7df599d7c12e73881b6fd6c45e26e1371967aaf52846a451917a1761ff804f60b5a23141e2178c101423cf4ecb793b9b45b61fa9b435da2c238a00f131b2c4d933c864edcfd5a76822e2bafb09fb5ca07d9055f1f71503119b47ea7944ac30e9c05f4013ccc6f807c8b0951b95ec2057562acbb5c39370402cc3e50e17dd41e6f528eba829cd25016ca91c9a2760f9c344df40f12b7abb05ddf2a035c72a4acfcd247b231ee135807583058818df3f0a9431c0b41002eebf6b11594acafa9e4595d9ac5a4f94ce82cc3f2a6812d2234ff163b8236396e6e5868789e89e506ae2a9dc0e291ce8f0d4bcf6eb8fdacfdf773a5e460cbf679f8d217d46dea8d33b8f600f40a96b3e1d2bf85104476eeb3616f42bd1f8133a54784452d6da5e34e066342d945fd32038330bbfb9c5be67f95ba71aed87569a206171d2ee3631a019ea974b71b936f44af21d093cde37773432e067e32a2a2d742465ab420b1037b82eebf9a09137a0353f3071490e41760aa4d04e3d3346a3d9d88ee6eb1e3240e7b08ee35e87bb3dbe9406f45c153153d6c96cf194c09c0987d14a03c5b584aca8367a2212c8a75ea49c76085e4b8f2f148830e1829c2e7a0d34a1fc72d5193dec8fe241a81eab16a7cb83e2c71d4d66ba3a0b004d90f6d908ce1d06752f3d70a679cd5510068c02d0bd7165bcfed54590f6137149f5987f596568b639f120ee567e581ce43a5c8277076b43db2607c64e363cad333ba923283d5d1e25416aa7c06c281d1f3685c425085cfe5fb3b4deb2611f883ecbdc63df8292ff4fdf9bd0ac31647fe9c85506a40b9686bec2a498029cc8fc6869739f6e61e66bcd30899f95b2388a3fb4489db59f843c7fa021f17ec19686eec8e7ebf1c6b947e3388e80e6b05711902f4ac2c3fdfc5e35a6977dec2d66ae9d02bd8559e22e17e58dc7f63d0a91d1ef54964371bab3f50edfa0e15d15c6c01419edaa703fd4507192e7b018e4e781055f632681d5e5370818b1498542aaae076ba22b66c48f68f0defa8f5dbf62e6b8776e1bda657729a09c802733eb590e563b813708bea011ab741920155e1a8ea468d6cdffcef87e4e52c05ff8eaa018c0f43d4b31e228b49e9610960be41fe8f772c077b5e46c878648139df7c1cfe04082cd6ca9bb9fd6e6fe141fb15c3d1da15ba4dd389c798e7f1a9f7b57d68fba8c992ff483d578ed5557a5d01762ac19a5d39780cb56c2eab33c1bbfb699de0a7252eead15f9e26b16cdd51257a2ef2ae6c1f9101efd86631d91a087ec9dcb3498e6b96b3445c0ea847756b1588378e857d407088766eb5af62d050c392d7274fc19821a67d76606001f076900491f67615bba12e9a0b12d5eb318e264f92324b45bf33d0f00ccc0554a69a8fa1435f925c2a960cf6dc8db8e2232c158bab0f7b74470e5ed24794cef2549385dae1d6bd70d9a25d37eb6fe6d2a933db8564f9d2ad2d2e3f2a1bb6b435780bcefdb3c58277c1ae506c5c4efd1dbfcdad016e46d89ee5bd945c2fae1a6b3b8ca07b516dff6cc859e2a1b114cc5bc43b505c4dd871339cafe329142a37f9008e5e9aff373f4e91ba6fbef2944036d2df416540fef455ef6bfbe1874e82c2de3ec2bdea6fd31081713a572e8422ecbac9783773b2de6b325c892b1fcc632a9724cc9510db50cfded6d66cacc7fad290f595e217fd141cb73657a7dd2b88b7fcc9abe61a7a22944b737a9fc13d5a62200763a96c00e204937bbd992f89465ed43ffa2bc0ac3440f2ec72afb5f0276fcc845d660b2c30be3580342ed85be6946287fcbea9c905c5d97f290a119781c9006a64e247e3185b4a80a65b7df289144eabc12afe754ec8e0954b9e7e8c37404a1160f9a8943b3c9a771b9863ec5cecc6b4a8a330d9cd4e7fa364ebcfc9b8e36eafca550c36d1b77f38e4cca3cbcc0eeec6903205381efea07cacd3b0f91064ffff1d099b8b47822245d992493b7ea13f339d8263cf75215c6bca42aaffb304fbbdbadfbcee77ffe74b0cf3559cf4032db6de3b084dc799b906e551c306bd0d224ca23591b9a4e3ce26132dfa821d7530926bbfa3b15a4e95c3ecc3d6895e4a73f73349c6c2a0517e1cd219c572aa37b44682929b1b6d0296956b9500606361675308d7df093aa0d7a530cebd5e379ddae20c94f591a9712fbef7a3e387bdb6e42519d3e6f88a9de680fca06a7199723f906ef6d8bdf8d3fc791bb26d53debba374fa545c49ba0efbb086586b84e0dddadab2a3593bf066d3a66ef7261bcf7f18db4053b2ab4e155dde75ab809dbc0d76f48aac2cc9a6aa5adc70cf3c899e7641c94bf52cd7e54c2ddfa7c889642f8870cdfdd1ce1e03083173b236e046593e6fec340bc83c6e5adef0c8faf0c46bee909b390b4dbb5b3f58c9ecbe0821f8b83f7e122c137a8164499d2ffa7bfb00be9b80e6a16dd007369d3ee506c23bb8ef5472f7acbe98064ab990a57312594b3d8835b51db899d221c2b873019ee75e64002c7df6447986a05e1fc08a62648bfa8633e819b22fd91876ae12dd95b831c7926fc424920aae61a78665d4ce6c3eba80900b344e098dd5116120bdddc5d4ba7aa339dbf6bbc28b4eba134a3cb4b1b2fb9da0ba00918aacfb6d5f3c4893f3ac623740becf8afa26e607d446520cb03107149ae91db771279487e987420167bd77dbd6d18f4425f12b0037eec2c69ded2103f3496a7b9fc6e2797e2654c1a47999d0c7a5650a5b9d804c0c15223c331ff3178f65e4958aeefe42dc98c4a9a8d99e5bf046421e72da783d958f89d530e77fcfb11864327922e1f570e0f38b5fffbdb98a822db4532a7c77d02e4141ddf823f1f45b7c33b963b684d24f73c55e46fb4215710c2f99b96ccfacc89e92eb8c1adf6786440b1340a6437084911f71ad46286979d25713a73f8adc0d60b32d625afe2f68d5ed584324944a3c5d2db7b2b1b3d9d2f6ee5b0bf2e47be53087fc8900fd35d5f664bd5821ba5013ab9f15190503757fc43b3161522c3c1d9a7f30ce8e6fcc354f79fb29e4ddaab8cd10c3945621e880e2a85558a8912754f8dc74a64de6d1af8f8717216b46b3a541a08141621b575093248a9b7668d1e9aa359f7f534c7320e156702e44ef443231f1bc4bfa336b421133aae7cd73ed5c3680b61ece28071d0fe9c9ccb7e90dd218284c71b0cbc5ddef4a7fa60288bef9452214d0cdbb8a58a131bd849d2eadb1759a7f4ce558fdbd98ea8e97537e7ec314deb4eee2354e622c676ef283598db5ea974b2a0b2d0c7b00c5705cddd63eec7f91dd0d2e2ccad649da8eb1e624909e4818a282d452aaed00dc3811d3c9075c95a96a3fe866d1916cc90f1ec466e519cd8eecfdb57ef3794f7d041c77e144b27836999b4cee1d27ae9d53a80f6509d1d6cc47c23e52935f40fddba2b04ab278250cca44246255368a6f7e66b9c84e0419cd96ee4987c1c86b511366dc7e91ef59f2537cdf02d657e21ed18509d6a5197c9ee102b7930a43aadb7d57361835973fe122c460941d88fa825b3f6fb6fa305e9d3d2ef9a4f9976135dbf4cdefd7cf98b6156d74a4152f598f10611f80ae12bbea9caea09461f063fccf3dd1aa44cfeea9b9726375bde25322d88cda3016426cbcb8524ad27b90819f42e72f19e8178b1a7ecbfabc4571ae79e751524db63178df919bc6b8aff88a9c040a28b653d2df2511c673c9ad2721ba3fee96a6197b21f3ef6582fdd7dec105827ced712f84acb91b07dd1d04378562bdaa60e865d6d2e9e4dfc4b667f07fc1459333ec726984032ea1c06ebb694c9841ff36fa8710a6dcbf7bf7fd344b25e57b704b35ae7f8c165696ec7f5db82c29a934212d923c8e6e0c598054819a92137f23b145f43f99ac6d707184c95abda5056134e0d003a7027579e5491500304fda03d0960af30cd2438b14cb54891f7956463a8194187019f87889ccf5a954e32a87caf06a59485a6aeffb13b54246d42b132c15dd75c1aaf4b4a6ceb7ce15fe0aa500c78d4cc323da867a52f08b7a4a6bfad03deb0140d78c2f96bf9a35bc2d20ead91047fc548daf5f57511150294721a238d567c96c5f72f61e71864611b051936c146a2d59d5e2d29ad05f04462ff706d57b26191bf8e32635ea9905fdf5bf9a809ed5e568b0f6120c8e8cb1ca0d722bb8c38abb82278502f36b5cbb4684aa", 0x1000}, {&(0x7f00000005c0)="561cb9101ca7e2c98fa01535033fd7314e7c0d79140b15dff8ac353045211665e00a73280958479d7c3037e6bc8f88bb17ca0ce06fabc305e30a579848b5", 0x3e}], 0x7, &(0x7f0000000740)=[@op={0x10}, @assoc={0x10, 0x117, 0x4, 0xe0c}, @assoc={0x10, 0x117, 0x4, 0x3}, @assoc={0x10, 0x117, 0x4, 0x1}], 0x40, 0x2}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="c72568335d6f0ae6f7295d218305575f1ec42b612b62ad1c56e46f5548c457b151703d795cfbf8ebe90051d42b74e951c0553f39e9a70c83b7564500d4abeff3c5cd8e3f6a882302e6f03b4ff4b841744cf885f24c7ca5557226d1d66bdc53d968ea3d2cc48357d6e912272da51661e0a38917271fbd93b2349ac3dee37a5b477fe54711e737d04ec4fa4cbdcabb86174ece189be10b956ae193eef9cca1927d75857340bbe2ba7810a9769ea4baa850a597b1f1b006b5fb352980f22919177e0ef2dba50a7c3cb2f35707cd0faf8dfcf27c7aef7bfb25", 0xd7}], 0x1, &(0x7f00000008c0), 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000900)="33f7ffd2cfee3e980f86a585eb1f02c97b9e273a1739ad0d708ec0e8846701605708ff5c171d162cfcfab6eb46491a7851afa3936499cfa64d60140423256042fc66541ecc5d549e5ec487012c740d0f67ef05be2d8c669f7ffd08cb179c7aba7dbf7d9db0cececcc95443d6ef545930d4e26b5d50df3763a9fa8849780bb2082af1660067da78a522ab68d873903df451cf1afac398a27f95a1db2b0f83e7640abfd389c1", 0xa5}, {&(0x7f0000001ac0)="db735aa30fdc0bb05f6f71517049d502ca53890c6a52e7a42ec719df54250f134ef37b", 0x23}, {&(0x7f0000001b40)="ee809d9e876cd720d1f4194fb5dcc21f1474cd8d5c44df61a463ea69145c9c61570a65a732b306b6a7c3533d759c763ab5b54cad61bd0750b010ee76d00827b09bda892bf73318f7aca14e234e8d061cc4f12ea67e6740627b27667065b4a92c319da7d6d2d6901bbb8303105dd58a57b8ad4cd9d2489bf276c76566398e1efe3536b8c0402dab8bb0a880bb9f3d333fd83bab4a62462b6bcb413388482ef0a11c693f23b2c83abbda95ba72633dba09194c75d93714b546484a6fbc233c", 0xbe}], 0x3}, {0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001e00)="1fa8e72f32c6f6bdbe18a0b5c9ac1071fb7f2ac704d31216351196afe0507e3ec9dc00a4c739099af853b710da93121f977371d3144b3bebc4beb75cffd322775508e28e548ccd54d599fb20499ff8f4d113e7b21eba084624d71d0f88b8f8f9442918915c4856403c43911b7699b084564b4a5885a2ef3d337bcfa015fa7046fea7899157f0acb3bc86ab27f9b09f0e4c4deda2b3777415eb30bace2d90e556042115ec1bc9532e52c4fe5e715a45343986302c1f3362514f8c5ea207557c5b16451e", 0xc3}, {0x0}, {&(0x7f0000002000)="d9400390085ecc8b542b58092967857967a35d01a6c1279f4b5e53eb37876d7a2a673e0558114973491c7aa6a07ca96b57bb5eab4a4f0b6eea795b1dfc8faa6485f42795d9eee025ef9d2818a574d2f60828b110ac99e6c6202529941c6fd4c7a9524fc3b94c3dad6009c668d389f58cc6437a4ea3ac60bf525d8b81a3f47e673b72f467bb6fde2c1112f6634d436f854005e2fc04f18deb3d0104130b77ebe4d03b9c8d13823553619e54800a705b15ab8a78161e120fe4565dbb4f895cd2d407e9a697647b90d95d8565c91cdf599f80ee", 0xd2}, {&(0x7f0000002100)="5846f6b39ddf0508a160429891d1b63c8ba1b5f5408dde0d20cd3cf95bfa9843b53f70da6991bf26726d744821174b528bdb4346780136b2d8c6f4ee4fdab4155ea916e4", 0x44}, {&(0x7f0000002180)="475de3541a7d9ece48a468b130a24eff9ff40d19a12318dd13a45f3716fc94efbb8cad6439854c43024e71205a0643ae4c4f53a9c2f74e6dca137410520fd18a6af4003199107e2d", 0x48}, {&(0x7f0000002200)}], 0x6, &(0x7f0000002340)=[@op={0x10}, @assoc={0x10, 0x117, 0x4, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0x30, 0x8010}, {0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000002380)="6e68d5f71224ef92622a62d0324d82cc117b8e802fe11b9c1523aacfe782dd8ee128a154f57b76b7d5c7044ac5734a8bb6ba3e0fd9c21ecd694ba19ff31db07f21a424185221a3f274fe5e3400263bf840478dfe8084e8e570ef21ee365ebfb8ebb9ce98965702f198cd7b0c2d7cacafca6b5ced8efa4cf8ae90281597b5f75aff670e89de253765b1eb8a813905cbc7022a4255aef4b679fb20ac980198b07e98c2198015252438e29af5136666155239d05f71f9ad458f04a31ed5cf17c79739c9c8709ebaf3cd91f1d08ab3004c4b14330824657f6009d20294402068b9011dc57a6fd9b7b1480da713a08d0353", 0xef}, {&(0x7f0000002480)="68dad9301fd1704a05da712ab8", 0xd}, {&(0x7f00000024c0)="7bc57a9db575ad82a309f36058d64389", 0x10}, {&(0x7f0000002500)="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", 0xbd0}, {&(0x7f0000003500)="c77c5a48d2a4b3f4696fd219b4db1160e0fa5fac4d7ae469898856c42456bb6010b44afb86cef907a1160fad77546ebf338ba48048b5bc", 0x37}], 0x5, 0x0, 0x0, 0x1}], 0x6, 0x804) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003680)=@ipv4_getnetconf={0x1c, 0x52, 0x10, 0x270bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000001) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff000040720501cb65260102030109021200010000000009040000000100b70094e71e82977d127886172ff3e8fd457c9a1ba8c442591ef8d20c17fd01cd25b499fb502787435ffb"], 0x0) syz_usb_connect(0x6, 0x38a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x44, 0x5, 0x72, 0x20, 0x5e3, 0xf170, 0xe79a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x378, 0x1, 0x4e, 0x7, 0x40, 0x8, [{{0x9, 0x4, 0xfa, 0x3, 0x5, 0x8e, 0x78, 0x97, 0x4, [@generic={0x60, 0x9, "5a116719980cc9d2c9b8d0173fbcb726a67f5ebf63af3a041c68076dc5825676713449a5bc4aa81f7f46a3a34784292ba7e9ce94f876d77c7e1ee397d311a3e64b18306969c96beb2956bdd2e5f1778df17065b7184e5235cd7edda63a21"}], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x2, 0x78, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x8}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x0, 0xf, 0x0, [@generic={0x51, 0x11, "cc8f1e0ee88a49bf474dcae8e84201d3151714399d9b51e5cb7238b29789866b493a2427f055c46e105b8020f4fdb071760bbd63d6ec529064c7e2760b3c0ebe77db733e35f4c954cad4754285c3ee"}, @generic={0x6d, 0x7, "812a0c682de46186d802c3d7ba19ccdb3647c86303076146c3a9f650e4355611f04296eb370b9109a000620a9fd296cbb8267ac630c716b31068f2d4f3fd581fa09aa0f156c4397fea23699fb1527129d58a01d8fea899534e03a3cd6b747f2acfff3dcdc3d0d1263bd7ad"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x9, 0xe, 0xb8, [@generic={0x47, 0xa, "a34d771004896f84ea9219050573c17e38b6bd636859387995ad145baf400540159f7b5c3d46fa9f0bc27cc1731f31dec9e548fa60c9190308ff127e1a356d8d8fb5912cac"}, @generic={0xe9, 0x24, "e5019891c5ec3eecd0bc89740d8a898a854ee08b4e26d507d8602efabac4aa29abc464259edd1d7f5bf4de07e941b3d2685524f00cbdaa076d5948d7a313a64b2bf7610295697d8e6d73d52a4e80577d795af32acef40b31ff191d67f3e71678a61ad6e8fe551fc0cd5793874de65b16f02c696d69aa26db783ba14a0f1e1011d5d90f8e1e4006165ed6a57a1402b41a3b75771fbc14667319aa65025511a214490fe75c9bc64040f5be47c14be6ed035ee1ce2b4ca5acf374fa472d6384d24f3cff55a770cb54b63eab2690f904aa2cce3d34b94fd7aa0a64dee4836a84de4aa458a20a138a9a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x10, 0x8c}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x2, 0xe, 0xa, [@generic={0xdd, 0x6, "936dff93686bb93b52e1228a672e00e47f928e256daa0ddd21d6a0da3119f077f490a528dcdfcc70ee4c2a84190df945b0a7af9c0cb7981b38d29a4e0cadb47afe790429ebeb471ca2739225a14cd908ccf65e4959c60b7d0b6356c8a57013190c70a127a86ecc6f89ae8d63ddf4515eb11bb5493e0da3f981c08110de2bde9863e6dfb6f6fc24c6012da61965a805414ef3fc6e83d5fbce7b017c1fa8d0453b8c0d57ebd4775a84754a67bdab476a6a845b8b8658c0f7db8d257b5aaaf52fa014ee392dd3bcad9d735ccbe900b69398d5fe447ad0db0cd8889de9"}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x1, 0x2, 0x9, 0x20, 0x8}, 0x103, &(0x7f0000000480)={0x5, 0xf, 0x103, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x5, 0x5, 0x2, 0x2}, @generic={0xf3, 0x10, 0xa, "76e1097a1e71af55505188a430958d2948037501d74c9ae9636e750dbc0b459045567906fd52a28cab7417e2a91e37dc0fb30fc0ae321b77b6c6d221fea8d95761f9a48a3181ff57b89f4e88a3578803ac23aa4be5e5ff02105f2f390d66eb6aa7ec57677fe27305efc7cbd63455206dac2fc47fabbc62f5b088be4a73ed3815e392c27aaa3de11ffaff1d8642e01011a8fea006b12cd041798ab7a1c607dacb284e1ff077cd78730c7c10bc0244e4281fa03e61b929ce02efa79f194092d874936ba8e45611e31bd8e5e97550aac3c9c27e09b076fd9d17705eb1d9fc53f7126468e88b13230ebb1069cce381999d79"}]}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x801}}, {0x89, &(0x7f0000000600)=@string={0x89, 0x3, "537dcbf27a9a8c1bd56f9822f9bf0f8d999bc4ade16570ae6a6b7951a4453a7bb760a314496756e50ccb8d21c76826a9d51aafe9d876c92f996a5135f5162d53358a40c2433eb3f43f40c040e460d4af43d448b4897be91c7fc2262833986cbf77ef820c1db91ceffc8c959b0ec8f84a72df00397754a1d166f9e79cf0db0fe878a7e7460ff909"}}, {0x90, &(0x7f00000006c0)=@string={0x90, 0x3, "4f77933c55d64300bb54a6db871adf08c768cc8d0ff06e74ee9d4ffeb7cde11980862db0238688ebaa542cb8545dad2e6a09a1d7be30ebfd8dc8a680afad253c85c4a36d94410ff71d63b1e3706369cef050406deb9a1281750ae97435d189237030558d6722cf51bd599888a0015d3b8fcc166a57dd64877ad187fd375a1d6038272d6726f1662d36800c1a936c"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3c7bf515fdd4be43}}, {0x4d, &(0x7f00000007c0)=@string={0x4d, 0x3, "270d4e9f5f1e334368126b0039aed7abfb329fac5e17d14cc3dada6c6d53087f394e6675a0364d276943837f204c58a1397b293d4dcc5dd8f0d85ac218b3d1bf9693f5088d2e17777abc3c"}}, {0xb1, &(0x7f0000000840)=@string={0xb1, 0x3, "0f92bbf43c9676f80a84d5b556b870458ff05a9e240886921107beb807b084f7fa1fb9b7ff6719d072219892e42f2ea5fa60ded85c877297a816f170e597f41a9799e934e4b6cff279afc03a160ef130d701bbac9bc7629cf635dfd62dde9e982d5147513c12a3d6c5440e165acd57f38adfde5c21528263ce0ed6824efbabba7f15109aa1051302ae27d21c9441eef8a0dd4a0f56197569b79f8919af3c058327b9324027065c0c08d7416ef9fe65"}}]}) 6.753135382s ago: executing program 1 (id=2038): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x3, 0x0) getpeername$packet(r1, 0x0, &(0x7f00000041c0)) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x44010) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/14, 0xe}, {&(0x7f0000002840)=""/4096, 0x1000}], 0x2}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r7) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x2, 0x0, 0x5, 0xb, 0x0, 0x1, 0x8000, 0x0}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000340)={r9, 0x111}, 0x8) recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 5.879129307s ago: executing program 1 (id=2039): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x9, 0x480002) readv(r0, &(0x7f00000000c0), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x10008094) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000001a80)={0x6, 'rose0\x00', {0x2}, 0x869}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x2}) openat$nullb(0xffffff9c, &(0x7f0000000000), 0x100000, 0x0) 5.663008481s ago: executing program 2 (id=2040): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) memfd_secret(0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1000006a, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) write$binfmt_format(r5, 0x0, 0x0) syz_io_uring_setup(0x7f60, 0x0, &(0x7f0000000140), &(0x7f0000000200)) close_range(r5, 0xffffffffffffffff, 0x0) close(r3) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 5.626055571s ago: executing program 1 (id=2041): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) memfd_secret(0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1000006a, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r9 = fsopen(&(0x7f0000000040)='afs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0) write$binfmt_format(r5, 0x0, 0x0) syz_io_uring_setup(0x7f60, 0x0, &(0x7f0000000140), &(0x7f0000000200)) close_range(r5, 0xffffffffffffffff, 0x0) close(r3) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 5.520342513s ago: executing program 0 (id=2042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x28, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4004090) 5.35249586s ago: executing program 0 (id=2043): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x4f6, 0x10100, 0x1, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) set_mempolicy(0x2, &(0x7f0000000480)=0x2376, 0x5) set_mempolicy(0x0, 0x0, 0x1) fsopen(&(0x7f0000000100)='udf\x00', 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x59, 0x2df3, &(0x7f0000000380)=0x1) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$audio1(0xffffff9c, &(0x7f0000000340), 0x48000, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="40170000000021ad53d802d97196e92d7c7ba06a08a492c8fc92332cc68270ef2c8606e4f843c053ee74df0702810fef797d216e3177bf0d375f6e862d7811c013077b02b8d58c9371a56b1b093ac5a71cbbe2bdbd8702f5d09c744f051faab904d6ad4ec675f7e1a86a5b1563d9c07a797fd645b69a6fff4145e701ec98"], 0x0, 0x0, 0x0, 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 5.257143866s ago: executing program 4 (id=2044): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xd3, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1, 0x3, 0x1, 0x0, 0xe0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x18}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x9, 0x1000, 0xc0, "f634220376bf"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x2, 0x4, 0xff, '<\v', "9d82"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5a, 0x4a, "9517a0e208bc01a190"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x0, 0xf, {0x7, 0x25, 0x1, 0x0, 0x8d, 0x11}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xa0, 0x1}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8f, 0x1, 0xd, 0x36, "4a2e1a9922ab9444"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x9, 0x3}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x4, 0x5d, 0xf, "0d2b7d229dc7"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x1, 0xc, 0x2, "af4b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xec, 0xfe, 0x96, {0x7, 0x25, 0x1, 0x1, 0x3d, 0xb8eb}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x22, 0x6, 0x4, 0x10, 0x7c}, 0x118, &(0x7f0000000340)={0x5, 0xf, 0x118, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e00d28fb66e11eaf60ae60785b65410d"}, @generic={0xd7, 0x10, 0x3, "b14194023c102cf0c868eef5c327729d65b266415615b519ca9cbf224bc1a5033cbc58205a407f25f786d4592dc1b5b2bcc940b9207aa753474a862c2e33ec2d1e2910e0f3b21a63d0264158e63f031ba4338801d93359682e7460aaf444859f76724f75bc025853832b4869d224ccdf858cff8333ee234bf7a6c31506ef3dde86ea70d1d248221d5d19721bf7ea8090a55a8def6c5f2f53f38e23cb6189aeca42f30cb98b5f5f415583db1d589de9a55302d22af0d5ea56584a8fc6b5359e5ecbdaa0f73e00c7beb8ed481366d1f552fc4fd095"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xd, 0x3, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0xa, 0xa}, @ssp_cap={0x14, 0x10, 0xa, 0xf, 0x2, 0x204e, 0xf00, 0x5, [0xf, 0xff3f0f]}]}, 0x3, [{0x9c, &(0x7f00000000c0)=@string={0x9c, 0x3, "c96efc8901c0e594622653f982f6e2d7834961ba83a8101c6c2aabc33d2cafcb81e258d43eb3d29b0d311ba742537a4d2f2aa036ad25063ea23f8e10866019134dd8d5491501b9afb9e494870da184937c678c3f0b82af90df7888a31eef9139324ae8fac7aa8bddd8055f015e338199136a58a597ea720306f5521e78a00ffea81273b29e436847edc311beb0a9680dc45b7d600f5e8b55f0dc"}}, {0x1c, &(0x7f0000000480)=@string={0x1c, 0x3, "0e317ea26e1ff880d12f0e5d8605343736fc454f596a1fb30865"}}, {0xea, &(0x7f00000004c0)=@string={0xea, 0x3, "7cf6c2f197004bb62f052f98c60fc4404a521c7fa8c622579e5be3d4ced2dfb6a10a7be1b0f0ddf3dae846bd3c4a416d126fdfcafdad6cb7a494f9054d44c77d85ee0add47beb0d8761a90afe17780f4dff88f0a7b3b590ec21577cce0053b17f91ee8af392922729ed343dfc71176a46d06e037fb2370fed51e5db33457649b74d48eaf4f98bc817e34ff58f14adac719398df42b1d939b2de8e2a512b2b11d81774597ca5d654cda95d0e2942dd7a6f06b6c8cb3166f27547f215da5d574aea93e9c6cbedcd1df534427d3d5d7ab782443eccb5d6a5962586e362aa298a8207b3b55e678da7a81"}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/120, 0x78}, {&(0x7f0000000680)=""/205, 0xcd}, {&(0x7f0000000780)=""/72, 0x48}], 0x3, &(0x7f0000000840)=""/64, 0x40}, 0x9}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000880)=""/68, 0x44}, {&(0x7f0000000900)=""/173, 0xad}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001a00)=""/179, 0xb3}, 0xd}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)=""/112, 0x70}], 0x1, &(0x7f0000001b80)=""/20, 0x14}, 0x6}, {{&(0x7f0000001bc0)=@nfc, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/14, 0xe}, {&(0x7f0000002c80)=""/149, 0x95}], 0x3, &(0x7f0000002d80)=""/5, 0x5}, 0xec}], 0x4, 0x10162, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) 4.703585412s ago: executing program 0 (id=2045): socket$inet6(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40080, 0x87) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xe72, 0x4b, 0x809}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffff8, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x2, 0x4, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) 4.531522057s ago: executing program 0 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x2400, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c720000000000000000000002000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x53}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc8}}, 0x4048010) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x529100, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x80047437, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x3, 0x1000, 0x5}) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x49, 0x0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$inet6_int(r5, 0x29, 0x16, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r6, 0x0, 0x4044000) pipe(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r8) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES16, @ANYRES16]) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) 4.057628843s ago: executing program 3 (id=2047): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000001180)=""/109, 0xfffffffffffffffb, 0x0, 0x0, 0x2}}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$vcsa(&(0x7f0000000200), 0x5da23d53, 0x200300) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7b, &(0x7f0000000800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x3a, 0x6d, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0xc, 0x85, 0x0, 0x2, [0x6, 0xffffffff]}]}}, {{0x4e20, 0x4e23, 0x41424344, r5, 0x1, 0x0, 0x5, 0x80, 0x3c6, 0x0, 0x5}, {"039b218ba5d517d9ec736c16e7522792f0221c1017193f0fcb28f7199f19237c4e78519eafbf4c49f38695082a9f6afe7bb5abca134f9c0c35"}}}}}}, 0x0) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r5, @ANYBLOB="010810009078008efe06e2d4c3d9fe08aec5b4c6425f131248dcd5ebe8a9dadb2dd3b78e29682d487a2f84ed5f4522c0e1991aab080a00000005000000060000be9cf6d2dc4748e76f3285dc39b00af389023158caa1211ea01cb16f95d3ecdc3f7fabae97c270d2e62f8b7b4f108e9ad9fc7e49304734b911bd9a2eab1c4ff93f5519211d872e8db0482a"], 0x419) syz_extract_tcp_res(&(0x7f0000000140)={0x41424344}, 0x2, 0xe) syz_emit_ethernet(0x135, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x4, 0x127, 0x68, 0x0, 0x8, 0x6, 0x0, @empty, @remote}, {{0x4e22, 0x4e22, r5, r6, 0x0, 0x0, 0x6, 0x10, 0xb, 0x0, 0x5, {[@nop, @fastopen={0x22, 0x2}, @nop]}}, {"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"}}}}}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x62, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x80002, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r7, 0x80047456, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, 0x0, 0x0) r9 = fsopen(0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r10, &(0x7f0000000100)=@hat={'changehat ', 0x2, 0x5e, ['/dev/ttyS3\x00', ']\x99D!/ttyS3\x00', '\xce\xb5', '\x00']}, 0x36) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x383940, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.425120746s ago: executing program 1 (id=2048): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000040) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) epoll_create(0x52) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="ac1e0101000000000100000005000000e0000001e00006a88a3612438a6c00010a010100"], 0x24) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e25, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x80, 0x1, 0x4, 0x9, {{0x15, 0x4, 0x1, 0x3, 0x35, 0x66, 0x0, 0x0, 0x4, 0x0, @remote, @remote, {[@lsrr={0x83, 0x1b, 0xab, [@loopback, @loopback, @initdev={0xac, 0x1e, 0xc5, 0x0}, @local, @multicast2, @local]}, @timestamp_prespec={0x44, 0x24, 0x69, 0x3, 0x7, [{@remote, 0x3}, {@multicast2, 0xf}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}]}}}}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x81, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3eedb5a7bdb3d10f, 0x4000010, r4, 0x100000) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) 3.356513941s ago: executing program 2 (id=2049): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2) poll(&(0x7f0000000400)=[{r1, 0x40}], 0x1, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000040)={0xe5, 0x9, &(0x7f0000000900)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfc, 0xfcff, &(0x7f0000000780)="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"}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x111, 0x1}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009a000040"]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="006f84fe0aab4f0000007700f400"]) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000001940), 0x4) r7 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001000000082505a8a440000102240109021b00010100a00009040000010701010009050102000200fc00e078027affc54699390f3d4af7e683c81b8c2a89ff1f98ba57ec41927474fd199a01d61a94c523b694717713f7fd9f22daaae24dfee3c31098e127e5d88848280769db820329fb7b50a24e435a984abda4abe0cf9291ca529907647907a0cee91e28b41cccc9100298d3ba6078084d64aa26924f9a5f9c362d18ae76d7e573971259398fff2f00ada0dda13720394c42bea7f7585d858ced4d2684b879ad8c00000000000000056c8af2620518f5ab4c094fafd9a5eacf2f14375d"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000006c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x1}}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_read(r7, 0x1, 0x12, &(0x7f0000000080)=""/18) pwritev(r8, &(0x7f00000008c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x3, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120106000001000010120001000000000904000000ff7f880004004000ec5f557cdc9beca452d87d9820b542bf3d68d7e30738306a2eb4967b37855992b688e1d68124eee096a398300fdbaef2ad8553b33ed402919c"], 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00001c66e7a508004500001c2300000000119078ac1414ffac141416000000000008907819d2f8d1ecaca2dbb3d5ad4c5463ced8147b63fa4ff11de3c760"], 0x0) 3.081296155s ago: executing program 0 (id=2050): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x416400) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8004, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x1, 0x80000, 0xfffffffe) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(0x0, 0xffe9) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x60, 0x7, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xa}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) r11 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r11, 0x7003) 2.028016442s ago: executing program 4 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40881) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2b", 0x13}], 0x1}, 0x0) unshare(0x2c060000) unshare(0x24020400) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='i', 0x1, 0x4050, 0x0, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev2(r5, &(0x7f0000000000)=[{&(0x7f0000000500)="002e000000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0) r6 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r6, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=[@ip_retopts={{0x10, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x81, 0x1, 0xf}]}}}], 0x10}}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e24, 0x4e1c}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x24004880) 1.720457944s ago: executing program 3 (id=2052): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000001180)=""/109, 0xfffffffffffffffb, 0x0, 0x0, 0x2}}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000200), 0x5da23d53, 0x200300) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x7b, &(0x7f0000000800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x1, 0x3a, 0x6d, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0xc, 0x85, 0x0, 0x2, [0x6, 0xffffffff]}]}}, {{0x4e20, 0x4e23, 0x41424344, r4, 0x1, 0x0, 0x5, 0x80, 0x3c6, 0x0, 0x5}, {"039b218ba5d517d9ec736c16e7522792f0221c1017193f0fcb28f7199f19237c4e78519eafbf4c49f38695082a9f6afe7bb5abca134f9c0c35"}}}}}}, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=r4, @ANYBLOB="010810009078008efe06e2d4c3d9fe08aec5b4c6425f131248dcd5ebe8a9dadb2dd3b78e29682d487a2f84ed5f4522c0e1991aab080a00000005000000060000be9cf6d2dc47"], 0x419) syz_extract_tcp_res(&(0x7f0000000140), 0x2, 0xe) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r5, 0x80047456, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) r7 = fsopen(0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r8, &(0x7f0000000100)=@hat={'changehat ', 0x2, 0x5e, ['/dev/ttyS3\x00', ']\x99D!/ttyS3\x00', '\xce\xb5', '\x00']}, 0x36) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 571.465927ms ago: executing program 4 (id=2053): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000480)=[{0x1900, 0x9211, 0x0, 0x0}, {0x9, 0xa200, 0x0, 0x0}, {0x8001, 0x9001, 0x0, 0x0}], 0x3}) 545.933713ms ago: executing program 0 (id=2054): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mknod$loop(0x0, 0x8, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080}) ioctl$KVM_RUN(r5, 0xae80, 0x4b) sendmsg(r2, 0x0, 0x0) 50.447918ms ago: executing program 1 (id=2055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="b472701eba3b03125acc100202805121abb8f5c397d606e5d7abdc4db6f543ecebf7d6b09df697f9e3abbb86c8dd993b5e1c5b53ccf641e012d19d2080bcffe9c7e245898e6de475ae5f1c0744d6e494398c61cfec8f96697e5f12a50b6e352b03585cad3701f7ee13d9dea5b5ac065669991ae8d4efd8163956d8e1e1b04fe889bee3a4b4f7b5aab3e6d8e81b9d8d90c5fd78f3f1e4ddd9", @ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x4040850) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='attr\x00') process_vm_writev(0x0, &(0x7f0000001c80)=[{0x0}], 0x1, 0x0, 0x0, 0x0) pread64(r5, 0x0, 0x0, 0x3c) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r7, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000300)={0x1, @sliced={0x4, [0x0, 0x4, 0x2, 0x7, 0x0, 0x1, 0x1, 0x5, 0x8, 0x9, 0x1, 0x665, 0x4e, 0x200, 0x2f6, 0xfe01, 0x5, 0x9, 0x8, 0x643, 0x5, 0x1, 0x298b, 0x7, 0x7, 0x8000, 0x8, 0x639, 0x6, 0xfffd, 0xfff, 0xb, 0x8, 0x2, 0xa, 0x2, 0x8001, 0x7c, 0xc, 0x4, 0x1, 0xb, 0x1ff, 0x0, 0x7, 0x8, 0x948, 0xc], 0x8b}}) 21.395836ms ago: executing program 2 (id=2056): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x4f6, 0x10100, 0x1, 0x4}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) set_mempolicy(0x2, &(0x7f0000000480)=0x2376, 0x5) set_mempolicy(0x0, 0x0, 0x1) fsopen(&(0x7f0000000100)='udf\x00', 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x59, 0x2df3, &(0x7f0000000380)=0x1) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$audio1(0xffffff9c, &(0x7f0000000340), 0x48000, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000e80)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="40170000000021ad53d802d97196e92d7c7ba06a08a492c8fc92332cc68270ef2c8606e4f843c053ee74df0702810fef797d216e3177bf0d375f6e862d7811c013077b02b8d58c9371a56b1b093ac5a71cbbe2bdbd8702f5d09c744f051faab904d6ad4ec675f7e1a86a5b1563d9c07a797fd645b69a6fff4145e701ec98"], 0x0, 0x0, 0x0, 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 0s ago: executing program 3 (id=2057): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x1258c1, 0x60) preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r3, &(0x7f0000005b80)={0x2020}, 0x2020) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r5, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800ffffffff7bfbfcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r7, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="89577e73513db7ae0f078e41d22d204a4fc7c109bf29f1178e9f575e51ce4528c90827196bb2ceebef8d0251531e3306fc3342db66f5b542721b21e2300fd7099c3dd430ad30e5a07acd1783f5b25c19d2d1836e0556b54add4e0e8eb89f53d8d69386", 0x63}], 0x1}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000400)="9107d082b0fc54f8f5dea831e1cbfb76de8794752b1d1288df3d78a986592bcf727497c1d76bb434eb4d60", 0x2b}, {&(0x7f0000000440)="e55c7e783bfa0a666e6116b9492a4e13bfcb286ff954ab9133a83aef138fb340f9f6a1874a9561b3b0da", 0x2a}, {&(0x7f0000000480)="e8c0031ecf445586d8e0bb4029da9b1fa7beba251a7dfc3a9c30dc609d1410b5a96220", 0x23}, {&(0x7f00000004c0)="ad531f68174a7025eceb2fdd946197760045b35147bb486481907a1133bc617005060dea888c98bc9ea60a632939bd796afd10230647bac16ba163c2bc62eb8992a516e990cb9aae630e308b0deb3a7b926997deb9edd96d82720a56f1ff053f25f32a4b4a30e26d06de7d712443ff33e357855a8293f3ae6bffa53c2f98a56fb1b6846c2a388aa920990b9cfa65f5f55d8067b2f3bfb0d1c0ba32c7edff42992beb60a20a21ebade62d8eedccd3630e580e3aac209b91d6e39d57fc86ab750ed28ec4296e46d438808fc1a9d49af3163657e81fc480833ae8532afd2c028941c923", 0xe2}, {&(0x7f0000000640)="bc53bef651bdb48c09767eeb00d65c012797b756361c99fb146fea526843343bdceb1128bead1ccb8deb48b534583721db7629147b4c4520521c2876b5ba25c7abdfda38a8fa2e8b13a41b56d4b764f5a9a76591ee1045b053cfdab1899ecb2ec30cf39742bd5f91ac8e2355ef36b4f2da2ee5ec7f743d30dc709a1d61c382015d0946f7daf07da72fb7b34e2c826c1d77502dbccda086304d349f8b41a95320d5e661291957a4", 0xa7}, {&(0x7f0000000ac0)="b5b4da7f8d9343a43c780c89999e4bb81329647c9af4cf25a687022d4de8d02f527134889d763acf1b9387a85b054fc915678fe10c2f8ea0e78b2e7ba50b15641526d460074f4578cbecd233fe59ff2cfae7b807e473bd7662e21935f5f893e011d53f4fa6782f9b9136a0d816e05c7bea15add741113612e518baaa477e5892e8254c73aaa39df2a55b520dc1db96b55a4109e0ea6bca16653ca32e8c3f17f4a4720b176dd5a21a5bfe2169fd4c5b58f9a12eb572a51f83428538adca6bcad1cb144dba7b2bccd81ca841a4dd7f2a8f3c7774584eff63001bd01b5d089fc85270e0d1b30a3d49c28ad771eb243a08a0bcb95c170af8b534eed4c731c9bfeec69f9c9b65af9adb9652028ddb1406a601065bcac310592ef2084aa9979684d9c64a7cc0433687cd3da81891591f4dee0f54469c7fd2ce59a8d5fa11f8cc9e0483ac6decea639f223d0ce7316aaa3eb08416cbab418b40d9ef9864f76f2d644ef58a7b4e6bfba3248f361d14e023f43b2d0bfc36e159c863dd82bfc58ea4ea436ad4f95059f7dda30cf68270b731f3f4666477ea75e1f177d573351cfce15ccfacecb22a28a56bef04feb867a14c8fc858bdc8fb71be29296011adbbd6f507c2d943fa788bb69a3cd6d979a2d2a8dedab423345882f65717de00db565d6f6b6a734470d0ac7a2a758c14961d617d5bbcf0c8269af77ab61d24fa33d2a07737de24f69071c00db4a01bc6dde40de11d8fc878293b679373a7ce2e94bfed6dc094ca56f6917fb6ea8713df87bee7c872f573e4ac4042459390143482090f014f04a25e81c8089d4a1f8665a29a982919d3a40fee163f0b38868367253ed52622b26539f04b38d5cee51568a5ed900d781c611eeff7e95fcac9ca16394b62c9f3248d9f4085d45893977e7109672093f4b359d164da5c88867e8a9824fe16c24657098d39d7f2c5276942c146681b55e188ca94a5b90e9c62e151e718ee5c99df6fd92efd17a1e9eec5bb97b185d1b65182adeef0d1ba9cecad21ef9424e9500171c3da70a70325934abd3952e917390621c5b54d50bb174441dac9b8c4aaa094506163d33e07cd1dd079221c9ccfecd290d8c62445e4652c37e3a1ff8aaf78acee5addc6e4b693604bc4776f389d6c9750d142cb4ee07f19eaa2e4fbe4c78790c46653b5604b808e551beca66e2d490aefc05cba99d301527f0e5b2cd3645817e07341ab53c5dae7cfd886f50152dccc23b8c004b45b9203c1ee60113c8315e73f67dede322d712d0772e3a8926aafb80379d33bbf57a2b13b6d79820233bf987760c6be4e3efcaac48a71c98fa85473cb6ed4387a62339e1602a6b9b5967fa4d61245e210b5b2c0f2176efcf91151d40d7bd664df706a4dcc477a5c402abcf9bc56a73f4ac9973ff9a4a45f4c55dc4467d63ac5e589f49c69bdf3564fcb7308b20d77df76f526064940933059113969ed0d295e45fd31f67de226ddf292d6afabd4d23eaffb7fa203115d43d1338e5360128e3648da0eaa3e4ba0cecda808d70b94411377c80af4a5ff38015d622343818c8ceeacdb019db2504ebe46e565282ee551ce7ba687a16e45ec3f3ab581e7df599d7c12e73881b6fd6c45e26e1371967aaf52846a451917a1761ff804f60b5a23141e2178c101423cf4ecb793b9b45b61fa9b435da2c238a00f131b2c4d933c864edcfd5a76822e2bafb09fb5ca07d9055f1f71503119b47ea7944ac30e9c05f4013ccc6f807c8b0951b95ec2057562acbb5c39370402cc3e50e17dd41e6f528eba829cd25016ca91c9a2760f9c344df40f12b7abb05ddf2a035c72a4acfcd247b231ee135807583058818df3f0a9431c0b41002eebf6b11594acafa9e4595d9ac5a4f94ce82cc3f2a6812d2234ff163b8236396e6e5868789e89e506ae2a9dc0e291ce8f0d4bcf6eb8fdacfdf773a5e460cbf679f8d217d46dea8d33b8f600f40a96b3e1d2bf85104476eeb3616f42bd1f8133a54784452d6da5e34e066342d945fd32038330bbfb9c5be67f95ba71aed87569a206171d2ee3631a019ea974b71b936f44af21d093cde37773432e067e32a2a2d742465ab420b1037b82eebf9a09137a0353f3071490e41760aa4d04e3d3346a3d9d88ee6eb1e3240e7b08ee35e87bb3dbe9406f45c153153d6c96cf194c09c0987d14a03c5b584aca8367a2212c8a75ea49c76085e4b8f2f148830e1829c2e7a0d34a1fc72d5193dec8fe241a81eab16a7cb83e2c71d4d66ba3a0b004d90f6d908ce1d06752f3d70a679cd5510068c02d0bd7165bcfed54590f6137149f5987f596568b639f120ee567e581ce43a5c8277076b43db2607c64e363cad333ba923283d5d1e25416aa7c06c281d1f3685c425085cfe5fb3b4deb2611f883ecbdc63df8292ff4fdf9bd0ac31647fe9c85506a40b9686bec2a498029cc8fc6869739f6e61e66bcd30899f95b2388a3fb4489db59f843c7fa021f17ec19686eec8e7ebf1c6b947e3388e80e6b05711902f4ac2c3fdfc5e35a6977dec2d66ae9d02bd8559e22e17e58dc7f63d0a91d1ef54964371bab3f50edfa0e15d15c6c01419edaa703fd4507192e7b018e4e781055f632681d5e5370818b1498542aaae076ba22b66c48f68f0defa8f5dbf62e6b8776e1bda657729a09c802733eb590e563b813708bea011ab741920155e1a8ea468d6cdffcef87e4e52c05ff8eaa018c0f43d4b31e228b49e9610960be41fe8f772c077b5e46c878648139df7c1cfe04082cd6ca9bb9fd6e6fe141fb15c3d1da15ba4dd389c798e7f1a9f7b57d68fba8c992ff483d578ed5557a5d01762ac19a5d39780cb56c2eab33c1bbfb699de0a7252eead15f9e26b16cdd51257a2ef2ae6c1f9101efd86631d91a087ec9dcb3498e6b96b3445c0ea847756b1588378e857d407088766eb5af62d050c392d7274fc19821a67d76606001f076900491f67615bba12e9a0b12d5eb318e264f92324b45bf33d0f00ccc0554a69a8fa1435f925c2a960cf6dc8db8e2232c158bab0f7b74470e5ed24794cef2549385dae1d6bd70d9a25d37eb6fe6d2a933db8564f9d2ad2d2e3f2a1bb6b435780bcefdb3c58277c1ae506c5c4efd1dbfcdad016e46d89ee5bd945c2fae1a6b3b8ca07b516dff6cc859e2a1b114cc5bc43b505c4dd871339cafe329142a37f9008e5e9aff373f4e91ba6fbef2944036d2df416540fef455ef6bfbe1874e82c2de3ec2bdea6fd31081713a572e8422ecbac9783773b2de6b325c892b1fcc632a9724cc9510db50cfded6d66cacc7fad290f595e217fd141cb73657a7dd2b88b7fcc9abe61a7a22944b737a9fc13d5a62200763a96c00e204937bbd992f89465ed43ffa2bc0ac3440f2ec72afb5f0276fcc845d660b2c30be3580342ed85be6946287fcbea9c905c5d97f290a119781c9006a64e247e3185b4a80a65b7df289144eabc12afe754ec8e0954b9e7e8c37404a1160f9a8943b3c9a771b9863ec5cecc6b4a8a330d9cd4e7fa364ebcfc9b8e36eafca550c36d1b77f38e4cca3cbcc0eeec6903205381efea07cacd3b0f91064ffff1d099b8b47822245d992493b7ea13f339d8263cf75215c6bca42aaffb304fbbdbadfbcee77ffe74b0cf3559cf4032db6de3b084dc799b906e551c306bd0d224ca23591b9a4e3ce26132dfa821d7530926bbfa3b15a4e95c3ecc3d6895e4a73f73349c6c2a0517e1cd219c572aa37b44682929b1b6d0296956b9500606361675308d7df093aa0d7a530cebd5e379ddae20c94f591a9712fbef7a3e387bdb6e42519d3e6f88a9de680fca06a7199723f906ef6d8bdf8d3fc791bb26d53debba374fa545c49ba0efbb086586b84e0dddadab2a3593bf066d3a66ef7261bcf7f18db4053b2ab4e155dde75ab809dbc0d76f48aac2cc9a6aa5adc70cf3c899e7641c94bf52cd7e54c2ddfa7c889642f8870cdfdd1ce1e03083173b236e046593e6fec340bc83c6e5adef0c8faf0c46bee909b390b4dbb5b3f58c9ecbe0821f8b83f7e122c137a8164499d2ffa7bfb00be9b80e6a16dd007369d3ee506c23bb8ef5472f7acbe98064ab990a57312594b3d8835b51db899d221c2b873019ee75e64002c7df6447986a05e1fc08a62648bfa8633e819b22fd91876ae12dd95b831c7926fc424920aae61a78665d4ce6c3eba80900b344e098dd5116120bdddc5d4ba7aa339dbf6bbc28b4eba134a3cb4b1b2fb9da0ba00918aacfb6d5f3c4893f3ac623740becf8afa26e607d446520cb03107149ae91db771279487e987420167bd77dbd6d18f4425f12b0037eec2c69ded2103f3496a7b9fc6e2797e2654c1a47999d0c7a5650a5b9d804c0c15223c331ff3178f65e4958aeefe42dc98c4a9a8d99e5bf046421e72da783d958f89d530e77fcfb11864327922e1f570e0f38b5fffbdb98a822db4532a7c77d02e4141ddf823f1f45b7c33b963b684d24f73c55e46fb4215710c2f99b96ccfacc89e92eb8c1adf6786440b1340a6437084911f71ad46286979d25713a73f8adc0d60b32d625afe2f68d5ed584324944a3c5d2db7b2b1b3d9d2f6ee5b0bf2e47be53087fc8900fd35d5f664bd5821ba5013ab9f15190503757fc43b3161522c3c1d9a7f30ce8e6fcc354f79fb29e4ddaab8cd10c3945621e880e2a85558a8912754f8dc74a64de6d1af8f8717216b46b3a541a08141621b575093248a9b7668d1e9aa359f7f534c7320e156702e44ef443231f1bc4bfa336b421133aae7cd73ed5c3680b61ece28071d0fe9c9ccb7e90dd218284c71b0cbc5ddef4a7fa60288bef9452214d0cdbb8a58a131bd849d2eadb1759a7f4ce558fdbd98ea8e97537e7ec314deb4eee2354e622c676ef283598db5ea974b2a0b2d0c7b00c5705cddd63eec7f91dd0d2e2ccad649da8eb1e624909e4818a282d452aaed00dc3811d3c9075c95a96a3fe866d1916cc90f1ec466e519cd8eecfdb57ef3794f7d041c77e144b27836999b4cee1d27ae9d53a80f6509d1d6cc47c23e52935f40fddba2b04ab278250cca44246255368a6f7e66b9c84e0419cd96ee4987c1c86b511366dc7e91ef59f2537cdf02d657e21ed18509d6a5197c9ee102b7930a43aadb7d57361835973fe122c460941d88fa825b3f6fb6fa305e9d3d2ef9a4f9976135dbf4cdefd7cf98b6156d74a4152f598f10611f80ae12bbea9caea09461f063fccf3dd1aa44cfeea9b9726375bde25322d88cda3016426cbcb8524ad27b90819f42e72f19e8178b1a7ecbfabc4571ae79e751524db63178df919bc6b8aff88a9c040a28b653d2df2511c673c9ad2721ba3fee96a6197b21f3ef6582fdd7dec105827ced712f84acb91b07dd1d04378562bdaa60e865d6d2e9e4dfc4b667f07fc1459333ec726984032ea1c06ebb694c9841ff36fa8710a6dcbf7bf7fd344b25e57b704b35ae7f8c165696ec7f5db82c29a934212d923c8e6e0c598054819a92137f23b145f43f99ac6d707184c95abda5056134e0d003a7027579e5491500304fda03d0960af30cd2438b14cb54891f7956463a8194187019f87889ccf5a954e32a87caf06a59485a6aeffb13b54246d42b132c15dd75c1aaf4b4a6ceb7ce15fe0aa500c78d4cc323da867a52f08b7a4a6bfad03deb0140d78c2f96bf9a35bc2d20ead91047fc548daf5f57511150294721a238d567c96c5f72f61e71864611b051936c146a2d59d5e2d29ad05f04462ff706d57b26191bf8e32635ea9905fdf5bf9a809ed5e568b0f6120c8e8cb1ca0d722bb8c38abb82278502f36b5cbb4684aa", 0x1000}, {&(0x7f00000005c0)="561cb9101ca7e2c98fa01535033fd7314e7c0d79140b15dff8ac353045211665e00a73280958479d7c3037e6bc8f88bb17ca0ce06fabc305e30a579848b5", 0x3e}], 0x7, &(0x7f0000000740)=[@op={0x10}, @assoc={0x10, 0x117, 0x4, 0xe0c}, @assoc={0x10, 0x117, 0x4, 0x3}, @assoc={0x10, 0x117, 0x4, 0x1}], 0x40, 0x2}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="c72568335d6f0ae6f7295d218305575f1ec42b612b62ad1c56e46f5548c457b151703d795cfbf8ebe90051d42b74e951c0553f39e9a70c83b7564500d4abeff3c5cd8e3f6a882302e6f03b4ff4b841744cf885f24c7ca5557226d1d66bdc53d968ea3d2cc48357d6e912272da51661e0a38917271fbd93b2349ac3dee37a5b477fe54711e737d04ec4fa4cbdcabb86174ece189be10b956ae193eef9cca1927d75857340bbe2ba7810a9769ea4baa850a597b1f1b006b5fb352980f22919177e0ef2dba50a7c3cb2f35707cd0faf8dfcf27c7aef7bfb25", 0xd7}], 0x1, &(0x7f00000008c0), 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000900)="33f7ffd2cfee3e980f86a585eb1f02c97b9e273a1739ad0d708ec0e8846701605708ff5c171d162cfcfab6eb46491a7851afa3936499cfa64d60140423256042fc66541ecc5d549e5ec487012c740d0f67ef05be2d8c669f7ffd08cb179c7aba7dbf7d9db0cececcc95443d6ef545930d4e26b5d50df3763a9fa8849780bb2082af1660067da78a522ab68d873903df451cf1afac398a27f95a1db2b0f83e7640abfd389c1", 0xa5}, {&(0x7f0000001ac0)="db735aa30fdc0bb05f6f71517049d502ca53890c6a52e7a42ec719df54250f134ef37b", 0x23}, {&(0x7f0000001b40)="ee809d9e876cd720d1f4194fb5dcc21f1474cd8d5c44df61a463ea69145c9c61570a65a732b306b6a7c3533d759c763ab5b54cad61bd0750b010ee76d00827b09bda892bf73318f7aca14e234e8d061cc4f12ea67e6740627b27667065b4a92c319da7d6d2d6901bbb8303105dd58a57b8ad4cd9d2489bf276c76566398e1efe3536b8c0402dab8bb0a880bb9f3d333fd83bab4a62462b6bcb413388482ef0a11c693f23b2c83abbda95ba72633dba09194c75d93714b546484a6fbc233c", 0xbe}], 0x3}, {0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001e00)="1fa8e72f32c6f6bdbe18a0b5c9ac1071fb7f2ac704d31216351196afe0507e3ec9dc00a4c739099af853b710da93121f977371d3144b3bebc4beb75cffd322775508e28e548ccd54d599fb20499ff8f4d113e7b21eba084624d71d0f88b8f8f9442918915c4856403c43911b7699b084564b4a5885a2ef3d337bcfa015fa7046fea7899157f0acb3bc86ab27f9b09f0e4c4deda2b3777415eb30bace2d90e556042115ec1bc9532e52c4fe5e715a45343986302c1f3362514f8c5ea207557c5b16451e", 0xc3}, {0x0}, {&(0x7f0000002000)="d9400390085ecc8b542b58092967857967a35d01a6c1279f4b5e53eb37876d7a2a673e0558114973491c7aa6a07ca96b57bb5eab4a4f0b6eea795b1dfc8faa6485f42795d9eee025ef9d2818a574d2f60828b110ac99e6c6202529941c6fd4c7a9524fc3b94c3dad6009c668d389f58cc6437a4ea3ac60bf525d8b81a3f47e673b72f467bb6fde2c1112f6634d436f854005e2fc04f18deb3d0104130b77ebe4d03b9c8d13823553619e54800a705b15ab8a78161e120fe4565dbb4f895cd2d407e9a697647b90d95d8565c91cdf599f80ee", 0xd2}, {&(0x7f0000002100)="5846f6b39ddf0508a160429891d1b63c8ba1b5f5408dde0d20cd3cf95bfa9843b53f70da6991bf26726d744821174b528bdb4346780136b2d8c6f4ee4fdab4155ea916e4", 0x44}, {&(0x7f0000002180)="475de3541a7d9ece48a468b130a24eff9ff40d19a12318dd13a45f3716fc94efbb8cad6439854c43024e71205a0643ae4c4f53a9c2f74e6dca137410520fd18a6af4003199107e2d", 0x48}, {&(0x7f0000002200)}], 0x6, &(0x7f0000002340)=[@op={0x10}, @assoc={0x10, 0x117, 0x4, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0x30, 0x8010}, {0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000002380)="6e68d5f71224ef92622a62d0324d82cc117b8e802fe11b9c1523aacfe782dd8ee128a154f57b76b7d5c7044ac5734a8bb6ba3e0fd9c21ecd694ba19ff31db07f21a424185221a3f274fe5e3400263bf840478dfe8084e8e570ef21ee365ebfb8ebb9ce98965702f198cd7b0c2d7cacafca6b5ced8efa4cf8ae90281597b5f75aff670e89de253765b1eb8a813905cbc7022a4255aef4b679fb20ac980198b07e98c2198015252438e29af5136666155239d05f71f9ad458f04a31ed5cf17c79739c9c8709ebaf3cd91f1d08ab3004c4b14330824657f6009d20294402068b9011dc57a6fd9b7b1480da713a08d0353", 0xef}, {&(0x7f0000002480)="68dad9301fd1704a05da712ab8", 0xd}, {&(0x7f00000024c0)="7bc57a9db575ad82a309f36058d64389", 0x10}, {&(0x7f0000002500)="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", 0xbd0}, {&(0x7f0000003500)="c77c5a48d2a4b3f4696fd219b4db1160e0fa5fac4d7ae469898856c42456bb6010b44afb86cef907a1160fad77546ebf338ba48048b5bc", 0x37}], 0x5, 0x0, 0x0, 0x1}], 0x6, 0x804) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003680)=@ipv4_getnetconf={0x1c, 0x52, 0x10, 0x270bd2b, 0x25dfdbfb, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000001) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff000040720501cb65260102030109021200010000000009040000000100b70094e71e82977d127886172ff3e8fd457c9a1ba8c442591ef8d20c17fd01cd25b499fb502787435ffb"], 0x0) syz_usb_connect(0x6, 0x38a, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x44, 0x5, 0x72, 0x20, 0x5e3, 0xf170, 0xe79a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x378, 0x1, 0x4e, 0x7, 0x40, 0x8, [{{0x9, 0x4, 0xfa, 0x3, 0x5, 0x8e, 0x78, 0x97, 0x4, [@generic={0x60, 0x9, "5a116719980cc9d2c9b8d0173fbcb726a67f5ebf63af3a041c68076dc5825676713449a5bc4aa81f7f46a3a34784292ba7e9ce94f876d77c7e1ee397d311a3e64b18306969c96beb2956bdd2e5f1778df17065b7184e5235cd7edda63a21"}], [{{0x9, 0x5, 0xc, 0x8, 0x8, 0x2, 0x78, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x8}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x0, 0xf, 0x0, [@generic={0x51, 0x11, "cc8f1e0ee88a49bf474dcae8e84201d3151714399d9b51e5cb7238b29789866b493a2427f055c46e105b8020f4fdb071760bbd63d6ec529064c7e2760b3c0ebe77db733e35f4c954cad4754285c3ee"}, @generic={0x6d, 0x7, "812a0c682de46186d802c3d7ba19ccdb3647c86303076146c3a9f650e4355611f04296eb370b9109a000620a9fd296cbb8267ac630c716b31068f2d4f3fd581fa09aa0f156c4397fea23699fb1527129d58a01d8fea899534e03a3cd6b747f2acfff3dcdc3d0d1263bd7ad"}]}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x9, 0xe, 0xb8, [@generic={0x47, 0xa, "a34d771004896f84ea9219050573c17e38b6bd636859387995ad145baf400540159f7b5c3d46fa9f0bc27cc1731f31dec9e548fa60c9190308ff127e1a356d8d8fb5912cac"}, @generic={0xe9, 0x24, "e5019891c5ec3eecd0bc89740d8a898a854ee08b4e26d507d8602efabac4aa29abc464259edd1d7f5bf4de07e941b3d2685524f00cbdaa076d5948d7a313a64b2bf7610295697d8e6d73d52a4e80577d795af32acef40b31ff191d67f3e71678a61ad6e8fe551fc0cd5793874de65b16f02c696d69aa26db783ba14a0f1e1011d5d90f8e1e4006165ed6a57a1402b41a3b75771fbc14667319aa65025511a214490fe75c9bc64040f5be47c14be6ed035ee1ce2b4ca5acf374fa472d6384d24f3cff55a770cb54b63eab2690f904aa2cce3d34b94fd7aa0a64dee4836a84de4aa458a20a138a9a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x10, 0x8c}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x2, 0xe, 0xa, [@generic={0xdd, 0x6, "936dff93686bb93b52e1228a672e00e47f928e256daa0ddd21d6a0da3119f077f490a528dcdfcc70ee4c2a84190df945b0a7af9c0cb7981b38d29a4e0cadb47afe790429ebeb471ca2739225a14cd908ccf65e4959c60b7d0b6356c8a57013190c70a127a86ecc6f89ae8d63ddf4515eb11bb5493e0da3f981c08110de2bde9863e6dfb6f6fc24c6012da61965a805414ef3fc6e83d5fbce7b017c1fa8d0453b8c0d57ebd4775a84754a67bdab476a6a845b8b8658c0f7db8d257b5aaaf52fa014ee392dd3bcad9d735ccbe900b69398d5fe447ad0db0cd8889de9"}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0x1, 0x2, 0x9, 0x20, 0x8}, 0x103, &(0x7f0000000480)={0x5, 0xf, 0x103, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x5, 0x5, 0x2, 0x2}, @generic={0xf3, 0x10, 0xa, "76e1097a1e71af55505188a430958d2948037501d74c9ae9636e750dbc0b459045567906fd52a28cab7417e2a91e37dc0fb30fc0ae321b77b6c6d221fea8d95761f9a48a3181ff57b89f4e88a3578803ac23aa4be5e5ff02105f2f390d66eb6aa7ec57677fe27305efc7cbd63455206dac2fc47fabbc62f5b088be4a73ed3815e392c27aaa3de11ffaff1d8642e01011a8fea006b12cd041798ab7a1c607dacb284e1ff077cd78730c7c10bc0244e4281fa03e61b929ce02efa79f194092d874936ba8e45611e31bd8e5e97550aac3c9c27e09b076fd9d17705eb1d9fc53f7126468e88b13230ebb1069cce381999d79"}]}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x801}}, {0x89, &(0x7f0000000600)=@string={0x89, 0x3, "537dcbf27a9a8c1bd56f9822f9bf0f8d999bc4ade16570ae6a6b7951a4453a7bb760a314496756e50ccb8d21c76826a9d51aafe9d876c92f996a5135f5162d53358a40c2433eb3f43f40c040e460d4af43d448b4897be91c7fc2262833986cbf77ef820c1db91ceffc8c959b0ec8f84a72df00397754a1d166f9e79cf0db0fe878a7e7460ff909"}}, {0x90, &(0x7f00000006c0)=@string={0x90, 0x3, "4f77933c55d64300bb54a6db871adf08c768cc8d0ff06e74ee9d4ffeb7cde11980862db0238688ebaa542cb8545dad2e6a09a1d7be30ebfd8dc8a680afad253c85c4a36d94410ff71d63b1e3706369cef050406deb9a1281750ae97435d189237030558d6722cf51bd599888a0015d3b8fcc166a57dd64877ad187fd375a1d6038272d6726f1662d36800c1a936c"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3c7bf515fdd4be43}}, {0x4d, &(0x7f00000007c0)=@string={0x4d, 0x3, "270d4e9f5f1e334368126b0039aed7abfb329fac5e17d14cc3dada6c6d53087f394e6675a0364d276943837f204c58a1397b293d4dcc5dd8f0d85ac218b3d1bf9693f5088d2e17777abc3c"}}, {0xb1, &(0x7f0000000840)=@string={0xb1, 0x3, "0f92bbf43c9676f80a84d5b556b870458ff05a9e240886921107beb807b084f7fa1fb9b7ff6719d072219892e42f2ea5fa60ded85c877297a816f170e597f41a9799e934e4b6cff279afc03a160ef130d701bbac9bc7629cf635dfd62dde9e982d5147513c12a3d6c5440e165acd57f38adfde5c21528263ce0ed6824efbabba7f15109aa1051302ae27d21c9441eef8a0dd4a0f56197569b79f8919af3c058327b9324027065c0c08d7416ef9fe65"}}]}) kernel console output (not intermixed with test programs): 26][T11530] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 677.543883][T11530] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 677.558160][T11530] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 677.566238][T11530] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 677.581669][T11530] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 677.738552][T12738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.838820][T11530] usb 1-1: USB disconnect, device number 76 [ 677.909550][T11530] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 677.948580][T11530] keyspan 1-1:0.133: device disconnected [ 678.996362][T12750] netlink: 'syz.0.1724': attribute type 1 has an invalid length. [ 679.204377][ T5978] usb 4-1: 0:2 : does not exist [ 679.422257][ T5978] usb 4-1: USB disconnect, device number 75 [ 679.438716][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 679.523997][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 679.625807][ T9] [drm] Initialized udl on minor 2 [ 679.638670][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 679.681016][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 679.973027][ T5978] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 679.993118][T11530] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 680.005456][ T9] usb 2-1: USB disconnect, device number 67 [ 680.019230][T11530] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 680.097662][ T5969] net_ratelimit: 3 callbacks suppressed [ 680.097679][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.259185][T12767] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1728'. [ 680.502835][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 680.511890][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 680.540044][ T5978] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 680.554811][ T5978] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 681.073090][ T5978] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 681.086670][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.112721][T11530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.132641][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.679242][T12755] kAFS: unable to lookup cell '.,' [ 681.948972][ T9] usb 4-1: USB disconnect, device number 76 [ 682.142921][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.300153][T12813] input: syz0 as /devices/virtual/input/input90 [ 682.458709][T12816] fuse: Bad value for 'fd' [ 682.545233][ T8486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.563786][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.576441][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.693170][ T30] audit: type=1400 audit(1758832822.296:445): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12818 comm="syz.1.1733" [ 683.112781][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 683.183458][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.406591][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 683.417067][ T9] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 683.498291][T12837] sit1: entered allmulticast mode [ 683.881380][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.922792][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.970131][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 683.985456][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.372416][T12829] kAFS: unable to lookup cell '.,' [ 684.383746][ T5969] usb 3-1: USB disconnect, device number 70 [ 684.949439][T12810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.343282][ T5969] net_ratelimit: 11 callbacks suppressed [ 685.343298][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.448645][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.766203][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.772690][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.780247][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 685.826060][T12844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.015338][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 686.041773][T12867] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1743'. [ 686.066763][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 686.119678][ T9] usb 2-1: config 0 has an invalid interface number: 208 but max is 0 [ 686.154798][ T9] usb 2-1: config 0 has no interface number 0 [ 686.171145][ T9] usb 2-1: config 0 interface 208 altsetting 1 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 686.197091][ T9] usb 2-1: config 0 interface 208 has no altsetting 0 [ 686.212131][ T9] usb 2-1: Dual-Role OTG device on HNP port [ 686.226423][ T9] usb 2-1: New USB device found, idVendor=3340, idProduct=0e3a, bcdDevice=d1.be [ 686.235929][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.244193][ T9] usb 2-1: Product: syz [ 686.248495][ T9] usb 2-1: Manufacturer: syz [ 686.253359][ T9] usb 2-1: SerialNumber: syz [ 686.263901][ T9] usb 2-1: config 0 descriptor?? [ 686.468314][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.487698][ T9] usb 2-1: USB disconnect, device number 68 [ 686.579993][T12873] input: syz0 as /devices/virtual/input/input91 [ 687.204493][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.559478][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.060830][T12921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1748'. [ 688.718228][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.744920][ T30] audit: type=1400 audit(1758832828.206:446): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12917 comm="syz.0.1749" [ 689.460542][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 689.469519][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 689.562684][ T5978] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 689.641599][T12938] fuse: Bad value for 'fd' [ 689.778423][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.839159][ T5978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 690.028827][ T30] audit: type=1400 audit(1758832829.666:447): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12935 comm="syz.4.1752" [ 690.159538][ T5978] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 690.183817][ T5978] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 690.212647][ T5978] usb 3-1: config 1 interface 0 has no altsetting 0 [ 690.225498][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.237939][ T5978] usb 3-1: string descriptor 0 read error: -22 [ 690.253488][ T5978] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 690.660713][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.771503][T12928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 690.785412][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.806032][T12928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 690.817107][ T5978] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 691.047909][T12950] input: syz0 as /devices/virtual/input/input92 [ 691.443717][ T5953] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 691.602761][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 691.627579][ T5953] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 691.637573][ T5953] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 691.645957][ T5978] usb 3-1: USB disconnect, device number 71 [ 691.656962][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 691.687387][ T5953] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.696705][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.706598][ T5953] usb 2-1: Product: —뙋ԯ頯࿆䃄削缜욨圢实퓣틎뛟ડ뵆䨼流漒쫟귽띬钤׹䑍緇빇᩶꾐矡એ㭻๙ᗂ챷נ᜻ỹ꿨⤹爢펞ᇇꑶ٭㟠⏻ﹰổ덝圴魤푴꾎顏膼㑾壿䫱쟚㤙ᴫ鮓ꗢ눒ᶱ瞁靅巊䱥闚ⶔꛗ毰豬ᚳ❯罔崡향깴㺩沜䑓팧ퟕ碫䌤쯬橝扙湘⨶颢₨㭻腺 [ 691.839773][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.915807][ T5953] usb 2-1: Manufacturer: ㄎꉾὮ胸⿑崎ֆ㜴ﰶ佅橙댟攈 [ 691.925081][ T5953] usb 2-1: SerialNumber: syz [ 691.992022][ T30] audit: type=1400 audit(1758832831.626:448): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12961 comm="syz.2.1760" [ 692.311015][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.863631][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.893325][T12959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.252613][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 693.263690][T11530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.413540][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 693.426380][ T9] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 693.465390][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 693.505373][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.778608][T12974] kAFS: unable to lookup cell '.,' [ 693.840327][ T9] usb 4-1: USB disconnect, device number 77 [ 693.904157][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.235290][ T5953] usb 2-1: 0:2 : does not exist [ 694.332683][ T30] audit: type=1400 audit(1758832833.946:449): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12985 comm="syz.1.1764" [ 694.736851][ T5953] usb 2-1: USB disconnect, device number 69 [ 694.943181][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.331453][T13010] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 695.592138][T13010] bond1: entered promiscuous mode [ 695.776067][T13010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 695.901940][T13024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 695.924083][T13024] bond1: (slave bond2): making interface the new active one [ 695.934456][T13024] bond2: entered promiscuous mode [ 695.941049][T13024] bond1: (slave bond2): Enslaving as an active interface with an up link [ 696.000428][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 696.092644][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.101544][T13026] tc_dump_action: action bad kind [ 696.172965][T13034] FAULT_INJECTION: forcing a failure. [ 696.172965][T13034] name failslab, interval 1, probability 0, space 0, times 0 [ 696.208992][T13034] CPU: 1 UID: 0 PID: 13034 Comm: syz.2.1770 Not tainted syzkaller #0 PREEMPT(full) [ 696.209017][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 696.209028][T13034] Call Trace: [ 696.209036][T13034] [ 696.209045][T13034] dump_stack_lvl+0x189/0x250 [ 696.209070][T13034] ? __pfx____ratelimit+0x10/0x10 [ 696.209089][T13034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.209109][T13034] ? __pfx__printk+0x10/0x10 [ 696.209134][T13034] ? __pfx___might_resched+0x10/0x10 [ 696.209152][T13034] ? fs_reclaim_acquire+0x7d/0x100 [ 696.209175][T13034] should_fail_ex+0x414/0x560 [ 696.209204][T13034] should_failslab+0xa8/0x100 [ 696.209229][T13034] __kmalloc_noprof+0xcb/0x4f0 [ 696.209251][T13034] ? tomoyo_encode+0x28b/0x550 [ 696.209274][T13034] tomoyo_encode+0x28b/0x550 [ 696.209300][T13034] tomoyo_realpath_from_path+0x58d/0x5d0 [ 696.209334][T13034] tomoyo_path2_perm+0x265/0x680 [ 696.209359][T13034] ? tomoyo_path2_perm+0x235/0x680 [ 696.209387][T13034] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 696.209467][T13034] tomoyo_path_rename+0x141/0x190 [ 696.209485][T13034] ? __d_lookup+0x6df/0x780 [ 696.209507][T13034] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 696.209543][T13034] security_path_rename+0x250/0x490 [ 696.209568][T13034] do_renameat2+0x52b/0xa80 [ 696.209610][T13034] ? __pfx_do_renameat2+0x10/0x10 [ 696.209644][T13034] ? strncpy_from_user+0x150/0x290 [ 696.209671][T13034] ? getname_flags+0x1e5/0x540 [ 696.209693][T13034] __ia32_sys_renameat2+0xce/0xe0 [ 696.209720][T13034] __do_fast_syscall_32+0xb6/0x2b0 [ 696.209740][T13034] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.209764][T13034] do_fast_syscall_32+0x34/0x80 [ 696.209783][T13034] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 696.209803][T13034] RIP: 0023:0xf705e539 [ 696.209818][T13034] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 696.209833][T13034] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 696.209852][T13034] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000600 [ 696.209865][T13034] RDX: 00000000ffffff9c RSI: 0000000080000640 RDI: 0000000000000002 [ 696.209877][T13034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 696.209893][T13034] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 696.209903][T13034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.209934][T13034] [ 696.210036][T13034] ERROR: Out of memory at tomoyo_realpath_from_path. [ 696.460003][ T5978] usb 5-1: new low-speed USB device number 72 using dummy_hcd [ 696.468675][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.592711][ T43] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 696.623268][ T5978] usb 5-1: Invalid ep0 maxpacket: 32 [ 696.646606][T13041] fuse: Bad value for 'fd' [ 696.669294][T13042] FAULT_INJECTION: forcing a failure. [ 696.669294][T13042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.685827][T13042] CPU: 1 UID: 0 PID: 13042 Comm: syz.1.1781 Not tainted syzkaller #0 PREEMPT(full) [ 696.685858][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 696.685869][T13042] Call Trace: [ 696.685877][T13042] [ 696.685885][T13042] dump_stack_lvl+0x189/0x250 [ 696.685908][T13042] ? __pfx____ratelimit+0x10/0x10 [ 696.685928][T13042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.685947][T13042] ? __pfx__printk+0x10/0x10 [ 696.685970][T13042] ? __might_fault+0xb0/0x130 [ 696.686003][T13042] should_fail_ex+0x414/0x560 [ 696.686031][T13042] _copy_from_user+0x2d/0xb0 [ 696.686053][T13042] get_compat_msghdr+0xad/0x4a0 [ 696.686079][T13042] ? __pfx_get_compat_msghdr+0x10/0x10 [ 696.686101][T13042] ? rcu_is_watching+0x15/0xb0 [ 696.686117][T13042] ? ___sys_recvmsg+0x1c4/0x510 [ 696.686148][T13042] ___sys_recvmsg+0x17f/0x510 [ 696.686174][T13042] ? __pfx____sys_recvmsg+0x10/0x10 [ 696.686220][T13042] ? __fget_files+0x3a0/0x420 [ 696.686247][T13042] do_recvmmsg+0x36a/0x770 [ 696.686277][T13042] ? __pfx_do_recvmmsg+0x10/0x10 [ 696.686310][T13042] ? __pfx_vfs_write+0x10/0x10 [ 696.686348][T13042] __sys_recvmmsg+0x19d/0x280 [ 696.686371][T13042] ? __pfx___sys_recvmmsg+0x10/0x10 [ 696.686390][T13042] ? ksys_write+0x22a/0x250 [ 696.686421][T13042] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 696.686445][T13042] __do_fast_syscall_32+0xb6/0x2b0 [ 696.686465][T13042] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.686488][T13042] do_fast_syscall_32+0x34/0x80 [ 696.686506][T13042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 696.686527][T13042] RIP: 0023:0xf70be539 [ 696.686542][T13042] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 696.686557][T13042] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 696.686576][T13042] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 696.686588][T13042] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 696.686599][T13042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 696.686610][T13042] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 696.686621][T13042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.686648][T13042] [ 696.934970][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 696.946356][ T43] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 696.957475][ T43] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 696.969755][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 696.977369][ T5978] usb 5-1: new low-speed USB device number 73 using dummy_hcd [ 697.013978][ T43] usb 1-1: string descriptor 0 read error: -22 [ 697.020375][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 697.029641][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.054995][T13032] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 697.116456][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.130707][T13032] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 697.144373][ T5978] usb 5-1: Invalid ep0 maxpacket: 32 [ 697.150365][ T5978] usb usb5-port1: attempt power cycle [ 697.160765][ T43] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 697.201501][T13050] netlink: 368 bytes leftover after parsing attributes in process `syz.3.1772'. [ 697.201653][T13052] tipc: Enabling of bearer rejected, already enabled [ 697.229948][T13052] netlink: 'syz.1.1783': attribute type 10 has an invalid length. [ 697.240272][T13052] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1783'. [ 697.245562][T13050] openvswitch: netlink: Flow key attr not present in new flow. [ 697.261197][T13051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.503047][ T5978] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 697.522774][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 697.523592][ T5978] usb 5-1: Invalid ep0 maxpacket: 32 [ 697.672791][ T5978] usb 5-1: new low-speed USB device number 75 using dummy_hcd [ 697.684471][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 697.693724][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.709340][ T9] usb 4-1: config 0 descriptor?? [ 697.714515][ T5978] usb 5-1: Invalid ep0 maxpacket: 32 [ 697.714756][ T5978] usb usb5-port1: unable to enumerate USB device [ 697.886015][ T5953] usb 1-1: USB disconnect, device number 77 [ 697.931468][ T9] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 698.142994][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.288413][T13064] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1774'. [ 699.194840][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.217359][T13071] bond0 (unregistering): Released all slaves [ 699.505935][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.531203][T13079] fuse: Unknown parameter '' [ 699.775038][ T5953] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 699.932638][ T5953] usb 2-1: Using ep0 maxpacket: 16 [ 699.953927][ T5953] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 700.023402][ T5953] usb 2-1: config 0 has no interface number 0 [ 700.039435][ T5953] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 700.052307][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.074949][ T5953] usb 2-1: Product: syz [ 700.080849][ T5953] usb 2-1: Manufacturer: syz [ 700.089671][ T5953] usb 2-1: SerialNumber: syz [ 700.101290][ T5953] usb 2-1: config 0 descriptor?? [ 700.192694][ T30] audit: type=1400 audit(1758832839.816:450): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13090 comm="syz.2.1784" [ 700.240338][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.248733][ T5978] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 700.359750][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 700.399309][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 700.421195][ T9] [drm] Initialized udl on minor 2 [ 700.443008][ T5978] usb 5-1: Using ep0 maxpacket: 16 [ 700.460504][ T5978] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 700.475550][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 700.481741][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.501029][ T5953] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 700.508386][ T5953] gspca_spca1528: reg_w err -71 [ 700.535965][ T5978] usb 5-1: config 0 descriptor?? [ 700.536969][ T5953] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 700.564756][ T5978] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 700.646681][T13097] tipc: Enabling of bearer rejected, already enabled [ 700.661526][T13097] netlink: 'syz.3.1785': attribute type 10 has an invalid length. [ 700.679643][T13097] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1785'. [ 700.792378][T13096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 700.825305][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 700.974452][ T5951] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 700.993758][ T5953] usb 2-1: USB disconnect, device number 70 [ 701.004209][ T9] usb 4-1: USB disconnect, device number 78 [ 701.014218][ T5951] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 701.269410][T13076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 701.279423][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.312806][ T5978] gspca_sonixj: reg_r err -110 [ 701.317744][ T5978] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 701.743283][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.902902][ T5953] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 702.062643][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 702.070007][ T5953] usb 2-1: unable to get BOS descriptor or descriptor too short [ 702.080881][ T5953] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 702.091121][ T5953] usb 2-1: config 4 has no interface number 0 [ 702.110551][T13120] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1789'. [ 702.119886][ T5953] usb 2-1: config 4 interface 30 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 702.239735][ T5953] usb 2-1: config 4 interface 30 has no altsetting 0 [ 702.265613][ T5953] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 702.275524][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.287642][ T5953] usb 2-1: Product: syz [ 702.294593][ T5953] usb 2-1: Manufacturer: syz [ 702.302786][ T5953] usb 2-1: SerialNumber: syz [ 702.312857][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.565060][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.585750][ T5953] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 702.595507][ T5953] dw2102: su3000_power_ctrl: 1, initialized 0 [ 702.602788][ T5953] dvb-usb: bulk message failed: -22 (2/0) [ 702.615707][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 702.627272][ T5953] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 702.646393][ T5953] usb 2-1: media controller created [ 702.671864][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 702.753081][ T5953] dw2102: i2c transfer failed. [ 702.768225][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 702.781883][ T5953] dw2102: i2c transfer failed. [ 702.787303][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 702.794385][ T5953] dw2102: i2c transfer failed. [ 702.805843][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 702.811867][ T5953] dw2102: i2c transfer failed. [ 702.821219][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 702.825931][T13129] fuse: Bad value for 'fd' [ 702.835032][ T5953] dw2102: i2c transfer failed. [ 702.845006][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 702.856349][ T5953] dw2102: i2c transfer failed. [ 702.869024][ T5953] dvb-usb: MAC address: 02:02:02:02:02:02 [ 703.096497][ T5978] usb 5-1: USB disconnect, device number 76 [ 703.201618][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 703.268451][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 703.275631][ T5953] dw2102: command 0x0e transfer failed. [ 703.282093][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 703.352999][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.439288][ T5953] dw2102: command 0x0e transfer failed. [ 703.739697][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 703.748817][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 703.859861][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 703.869566][ T5953] dw2102: command 0x0e transfer failed. [ 703.928963][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 703.935897][ T5953] dw2102: command 0x0e transfer failed. [ 703.945879][ T5953] dvb-usb: bulk message failed: -22 (1/0) [ 703.958949][ T5953] dw2102: command 0x51 transfer failed. [ 703.966783][ T5953] dvb-usb: bulk message failed: -22 (5/0) [ 703.972718][ T5953] dw2102: i2c probe for address 0x68 failed. [ 703.981595][ T5953] dvb-usb: bulk message failed: -22 (5/0) [ 704.362978][T13150] netlink: 'syz.2.1798': attribute type 10 has an invalid length. [ 704.371789][T13150] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1798'. [ 704.382756][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.571850][ T5953] dw2102: i2c probe for address 0x69 failed. [ 704.620827][ T5953] dvb-usb: bulk message failed: -22 (5/0) [ 704.628516][ T5953] dw2102: i2c probe for address 0x6a failed. [ 704.708455][ T30] audit: type=1400 audit(1758832844.336:451): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13149 comm="syz.1.1799" [ 704.789862][ T5953] dw2102: probing for demodulator failed. Is the external power switched on? [ 704.808318][ T5953] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 704.892827][ T5953] rc_core: IR keymap rc-tt-1500 not found [ 704.917512][ T5953] Registered IR keymap rc-empty [ 704.928060][ T5953] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 704.996768][ T5953] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input93 [ 705.062196][T13147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.095084][ T5953] dvb-usb: schedule remote query interval to 250 msecs. [ 705.107396][ T5953] dw2102: su3000_power_ctrl: 0, initialized 1 [ 705.131559][ T5953] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 705.157449][ T5953] usb 2-1: USB disconnect, device number 71 [ 705.231594][ T5953] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 705.451184][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.663067][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.844497][ T30] audit: type=1400 audit(1758832845.326:452): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13160 comm="syz.3.1801" [ 706.107007][ T30] audit: type=1400 audit(1758832845.746:453): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13164 comm="syz.0.1803" [ 706.213681][ T30] audit: type=1400 audit(1758832845.826:454): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13167 comm="syz.2.1802" [ 706.232833][ C1] vkms_vblank_simulate: vblank timer overrun [ 706.468343][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.502932][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.193280][ T5969] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 708.444067][T13205] tipc: Enabling of bearer rejected, already enabled [ 708.651158][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.664480][ T5969] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 708.676145][ T5969] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 708.677643][T13203] netlink: 'syz.1.1812': attribute type 10 has an invalid length. [ 708.685733][ T5969] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 708.712726][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.750978][T13204] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1812'. [ 708.776346][ T5969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.013067][T13202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.186442][T13211] fuse: Bad value for 'fd' [ 709.283613][T13194] kAFS: unable to lookup cell '.,' [ 709.305779][ T5953] usb 3-1: USB disconnect, device number 72 [ 709.874126][ T5969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.949997][T13214] FAULT_INJECTION: forcing a failure. [ 709.949997][T13214] name failslab, interval 1, probability 0, space 0, times 0 [ 709.995590][T13214] CPU: 1 UID: 0 PID: 13214 Comm: syz.3.1815 Not tainted syzkaller #0 PREEMPT(full) [ 709.995615][T13214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 709.995626][T13214] Call Trace: [ 709.995640][T13214] [ 709.995649][T13214] dump_stack_lvl+0x189/0x250 [ 709.995673][T13214] ? __pfx____ratelimit+0x10/0x10 [ 709.995693][T13214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.995712][T13214] ? __pfx__printk+0x10/0x10 [ 709.995738][T13214] ? __pfx___might_resched+0x10/0x10 [ 709.995754][T13214] ? fs_reclaim_acquire+0x7d/0x100 [ 709.995775][T13214] should_fail_ex+0x414/0x560 [ 709.995804][T13214] should_failslab+0xa8/0x100 [ 709.995829][T13214] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 709.995851][T13214] ? __pfx_nf_tables_abort+0x10/0x10 [ 709.995870][T13214] ? __alloc_skb+0x112/0x2d0 [ 709.995893][T13214] __alloc_skb+0x112/0x2d0 [ 709.995915][T13214] netlink_ack+0x146/0xa50 [ 709.995939][T13214] ? __kasan_kmalloc+0x93/0xb0 [ 709.995971][T13214] nfnetlink_rcv+0x2290/0x2520 [ 709.996026][T13214] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 709.996065][T13214] ? ref_tracker_free+0x63a/0x7d0 [ 709.996110][T13214] ? __netlink_deliver_tap+0x807/0x850 [ 709.996133][T13214] ? netlink_deliver_tap+0x2e/0x1b0 [ 709.996169][T13214] netlink_unicast+0x82c/0x9e0 [ 709.996202][T13214] ? __pfx_netlink_unicast+0x10/0x10 [ 709.996227][T13214] ? netlink_sendmsg+0x642/0xb30 [ 709.996245][T13214] ? skb_put+0x11b/0x210 [ 709.996267][T13214] netlink_sendmsg+0x805/0xb30 [ 709.996294][T13214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.996314][T13214] ? __import_iovec+0x5d4/0x7f0 [ 709.996333][T13214] ? aa_sock_msg_perm+0xf1/0x1d0 [ 709.996354][T13214] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 709.996372][T13214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.996392][T13214] __sock_sendmsg+0x21c/0x270 [ 709.996420][T13214] ____sys_sendmsg+0x505/0x830 [ 709.996446][T13214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.996483][T13214] ___sys_sendmsg+0x21f/0x2a0 [ 709.996506][T13214] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.996560][T13214] ? __fget_files+0x2a/0x420 [ 709.996575][T13214] ? __fget_files+0x3a0/0x420 [ 709.996599][T13214] __sys_sendmsg+0x164/0x220 [ 709.996621][T13214] ? __pfx___sys_sendmsg+0x10/0x10 [ 709.996662][T13214] ? lockdep_hardirqs_on+0x9c/0x150 [ 709.996684][T13214] __do_fast_syscall_32+0xb6/0x2b0 [ 709.996703][T13214] ? lockdep_hardirqs_on+0x9c/0x150 [ 709.996723][T13214] do_fast_syscall_32+0x34/0x80 [ 709.996742][T13214] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 709.996762][T13214] RIP: 0023:0xf70ae539 [ 709.996778][T13214] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 709.996793][T13214] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 709.996812][T13214] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 709.996825][T13214] RDX: 0000000004048010 RSI: 0000000000000000 RDI: 0000000000000000 [ 709.996836][T13214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.996846][T13214] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 709.996857][T13214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.996884][T13214] [ 710.894434][T13225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 710.903761][T13225] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1818'. [ 710.950436][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.961277][T13225] syz.1.1818(13225): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 710.975691][T13225] netlink: 'syz.1.1818': attribute type 30 has an invalid length. [ 711.238112][ T30] audit: type=1400 audit(1758832850.876:455): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13230 comm="syz.1.1820" [ 711.349547][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.762701][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.838168][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 711.847354][T13241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 712.006283][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.582658][ T5953] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 712.632242][T13254] input: syz0 as /devices/virtual/input/input94 [ 713.036763][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.072642][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.095794][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.106796][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 713.175541][ T5953] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 713.223769][T13259] tipc: Enabling of bearer rejected, already enabled [ 713.234481][T13259] netlink: 'syz.4.1826': attribute type 10 has an invalid length. [ 713.245050][T13259] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1826'. [ 713.256402][T13258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.282853][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.409650][ T5953] usb 1-1: config 0 descriptor?? [ 713.755603][T13235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.156054][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.220182][ T5953] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 714.229035][ T5953] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 714.244292][ T5953] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 714.253968][ T5953] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 714.276297][ T5953] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 714.294750][ T5953] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 714.302294][ T5953] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 714.311644][ T5953] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 714.362731][ T5953] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 714.422070][ T5953] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 714.556134][ T5953] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 714.723630][ T30] audit: type=1326 audit(1758832854.366:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 714.755532][ T30] audit: type=1326 audit(1758832854.396:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 714.782892][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.796945][ T5953] usb 1-1: USB disconnect, device number 78 [ 714.802239][ T30] audit: type=1326 audit(1758832854.396:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=11 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 714.829904][ T30] audit: type=1326 audit(1758832854.396:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 714.859477][ T30] audit: type=1326 audit(1758832854.396:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 714.924086][ T30] audit: type=1326 audit(1758832854.396:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 714.952604][ T979] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 714.992435][ T30] audit: type=1326 audit(1758832854.396:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 715.015748][ T30] audit: type=1326 audit(1758832854.396:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13267 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 715.132813][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 715.140274][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 715.162104][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 715.200440][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.271111][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 33203, setting to 1024 [ 715.328344][ T979] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 715.388996][ T979] usb 2-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 715.412600][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.486247][ T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 715.654890][ T979] usb 2-1: config 0 descriptor?? [ 715.706206][ T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 715.721186][ T9] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 715.731585][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 715.752234][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.008574][T13284] kAFS: unable to lookup cell '.,' [ 716.034342][ T9] usb 4-1: USB disconnect, device number 79 [ 716.233218][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.382098][ T979] usbhid 2-1:0.0: can't add hid device: -71 [ 716.388697][ T979] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 716.400508][ T979] usb 2-1: USB disconnect, device number 72 [ 716.954766][T13305] input: syz0 as /devices/virtual/input/input95 [ 717.291329][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.307393][ T30] audit: type=1400 audit(1758832856.826:464): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13298 comm="syz.2.1837" [ 717.362731][ T979] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 717.929625][T13314] tipc: Enabling of bearer rejected, already enabled [ 717.939457][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.984781][T13314] netlink: 'syz.1.1840': attribute type 10 has an invalid length. [ 718.063022][T13314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1840'. [ 718.120555][T13313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.306556][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.088206][ T5953] hid-generic 0002:0004:0009.0010: hidraw0: HID v0.04 Device [syz0] on syz0 [ 719.190751][ T5978] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 719.332600][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 719.348483][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.466131][ T5978] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 719.482730][ T5978] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 719.492819][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 719.501104][ T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 719.512343][ T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 719.521982][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 719.551460][ T9] usb 2-1: config 1 has no interface number 0 [ 719.562665][ T5978] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 719.571799][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.592052][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 719.604475][ T9] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 719.642668][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 719.663200][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.707483][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 719.818223][T13322] kAFS: unable to lookup cell '.,' [ 719.843199][ T5951] usb 3-1: USB disconnect, device number 73 [ 719.905497][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 719.912347][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805967c000: rx timeout, send abort [ 719.922130][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805967c000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 719.980299][T13333] FAULT_INJECTION: forcing a failure. [ 719.980299][T13333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.003851][T13333] CPU: 0 UID: 0 PID: 13333 Comm: syz.4.1844 Not tainted syzkaller #0 PREEMPT(full) [ 720.003879][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 720.003889][T13333] Call Trace: [ 720.003896][T13333] [ 720.003903][T13333] dump_stack_lvl+0x189/0x250 [ 720.003925][T13333] ? __pfx____ratelimit+0x10/0x10 [ 720.003944][T13333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 720.003970][T13333] ? __pfx__printk+0x10/0x10 [ 720.003999][T13333] should_fail_ex+0x414/0x560 [ 720.004025][T13333] _copy_to_user+0x31/0xb0 [ 720.004046][T13333] simple_read_from_buffer+0xe1/0x170 [ 720.004072][T13333] proc_fail_nth_read+0x1b3/0x220 [ 720.004095][T13333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 720.004117][T13333] ? rw_verify_area+0x2a6/0x4d0 [ 720.004135][T13333] ? __lock_acquire+0xab9/0xd20 [ 720.004154][T13333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 720.004174][T13333] vfs_read+0x1fd/0xa30 [ 720.004193][T13333] ? fdget_pos+0x247/0x320 [ 720.004212][T13333] ? __pfx___mutex_lock+0x10/0x10 [ 720.004232][T13333] ? __pfx_vfs_read+0x10/0x10 [ 720.004252][T13333] ? __fget_files+0x2a/0x420 [ 720.004271][T13333] ? __fget_files+0x3a0/0x420 [ 720.004285][T13333] ? __fget_files+0x2a/0x420 [ 720.004308][T13333] ksys_read+0x145/0x250 [ 720.004329][T13333] ? __pfx_ksys_read+0x10/0x10 [ 720.004351][T13333] ? lockdep_hardirqs_on+0x9c/0x150 [ 720.004371][T13333] __do_fast_syscall_32+0xb6/0x2b0 [ 720.004390][T13333] ? lockdep_hardirqs_on+0x9c/0x150 [ 720.004411][T13333] do_fast_syscall_32+0x34/0x80 [ 720.004428][T13333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 720.004448][T13333] RIP: 0023:0xf7f74539 [ 720.004464][T13333] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 720.004479][T13333] RSP: 002b:00000000f5466590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 720.004498][T13333] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5466620 [ 720.004510][T13333] RDX: 000000000000000f RSI: 00000000f7405ff4 RDI: 0000000000000000 [ 720.004521][T13333] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 720.004531][T13333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 720.004542][T13333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 720.004569][T13333] [ 720.398033][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.426753][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 720.503372][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 720.549159][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 720.563051][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1846'. [ 720.572425][ T43] usb 2-1: USB disconnect, device number 73 [ 720.581933][ T43] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 720.949801][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.958222][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.435715][ T30] audit: type=1400 audit(1758832861.046:465): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13342 comm="syz.2.1848" [ 721.530843][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.641855][ T30] audit: type=1400 audit(1758832861.226:466): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13348 comm="syz.1.1850" [ 722.610738][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.677796][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.023985][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.092719][ T5951] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 724.254833][ T5951] usb 3-1: unable to get BOS descriptor or descriptor too short [ 724.265132][ T5951] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 724.275956][ T5951] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x3 is Bulk; changing to Interrupt [ 724.545518][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 724.559532][T13391] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1860'. [ 724.572349][T13391] netlink: 'syz.1.1860': attribute type 3 has an invalid length. [ 724.753046][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.908082][ T5951] usb 3-1: config 1 interface 0 has no altsetting 0 [ 724.959003][ T5951] usb 3-1: string descriptor 0 read error: -22 [ 724.966405][ T5951] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.984807][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.998740][T13382] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 725.006313][T13382] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 725.036379][ T5951] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 725.162689][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 725.359448][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 725.371691][ T9] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 725.388272][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 725.417845][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.662635][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 725.707258][T13394] kAFS: unable to lookup cell '.,' [ 725.720593][ T5953] usb 5-1: USB disconnect, device number 77 [ 725.783055][ T5951] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 725.800487][T11530] usb 3-1: USB disconnect, device number 74 [ 725.829761][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.687997][ T30] audit: type=1400 audit(1758832866.316:467): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13409 comm="syz.3.1863" [ 726.867753][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.103146][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.521176][T13414] FAULT_INJECTION: forcing a failure. [ 727.521176][T13414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.559606][T13414] CPU: 1 UID: 0 PID: 13414 Comm: syz.2.1864 Not tainted syzkaller #0 PREEMPT(full) [ 727.559633][T13414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 727.559644][T13414] Call Trace: [ 727.559651][T13414] [ 727.559656][T13414] dump_stack_lvl+0x189/0x250 [ 727.559673][T13414] ? __pfx____ratelimit+0x10/0x10 [ 727.559684][T13414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.559700][T13414] ? __pfx__printk+0x10/0x10 [ 727.559722][T13414] ? __might_fault+0xb0/0x130 [ 727.559756][T13414] should_fail_ex+0x414/0x560 [ 727.559785][T13414] _copy_from_user+0x2d/0xb0 [ 727.559801][T13414] binder_ioctl_write_read+0x124/0xa040 [ 727.559821][T13414] ? is_bpf_text_address+0x292/0x2b0 [ 727.559835][T13414] ? is_bpf_text_address+0x26/0x2b0 [ 727.559855][T13414] ? kernel_text_address+0xa5/0xe0 [ 727.559879][T13414] ? __kernel_text_address+0xd/0x40 [ 727.559899][T13414] ? unwind_get_return_address+0x4d/0x90 [ 727.559918][T13414] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 727.559938][T13414] ? arch_stack_walk+0xfc/0x150 [ 727.559956][T13414] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 727.559968][T13414] ? stack_trace_save+0x9c/0xe0 [ 727.559979][T13414] ? __pfx_stack_trace_save+0x10/0x10 [ 727.559991][T13414] ? stack_depot_save_flags+0x40/0x860 [ 727.560021][T13414] ? kasan_save_track+0x4f/0x80 [ 727.560047][T13414] ? kasan_save_track+0x3e/0x80 [ 727.560065][T13414] ? kasan_save_free_info+0x46/0x50 [ 727.560081][T13414] ? __kasan_slab_free+0x5b/0x80 [ 727.560094][T13414] ? kfree+0x18e/0x440 [ 727.560106][T13414] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 727.560119][T13414] ? security_file_ioctl_compat+0xcb/0x2d0 [ 727.560132][T13414] ? __ia32_compat_sys_ioctl+0x128/0x840 [ 727.560146][T13414] ? __do_fast_syscall_32+0xb6/0x2b0 [ 727.560163][T13414] ? do_fast_syscall_32+0x34/0x80 [ 727.560181][T13414] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 727.560211][T13414] ? __lock_acquire+0xab9/0xd20 [ 727.560232][T13414] ? binder_debug+0x13f/0x1b0 [ 727.560247][T13414] ? __pfx_binder_debug+0x10/0x10 [ 727.560257][T13414] ? do_raw_spin_lock+0x121/0x290 [ 727.560277][T13414] ? _raw_spin_unlock+0x28/0x50 [ 727.560295][T13414] ? binder_get_thread+0x178/0x6d0 [ 727.560319][T13414] binder_ioctl+0x3e0/0x19c0 [ 727.560340][T13414] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 727.560363][T13414] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 727.560386][T13414] ? do_vfs_ioctl+0xbe8/0x1430 [ 727.560398][T13414] ? __pfx_binder_ioctl+0x10/0x10 [ 727.560410][T13414] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 727.560432][T13414] ? __lock_acquire+0xab9/0xd20 [ 727.560476][T13414] ? __fget_files+0x2a/0x420 [ 727.560497][T13414] ? __fget_files+0x3a0/0x420 [ 727.560511][T13414] ? __fget_files+0x2a/0x420 [ 727.560530][T13414] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 727.560548][T13414] __ia32_compat_sys_ioctl+0x543/0x840 [ 727.560562][T13414] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 727.560575][T13414] ? __fget_files+0x3a0/0x420 [ 727.560587][T13414] ? fput+0xa0/0xd0 [ 727.560600][T13414] ? ksys_write+0x22a/0x250 [ 727.560629][T13414] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.560651][T13414] __do_fast_syscall_32+0xb6/0x2b0 [ 727.560671][T13414] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.560690][T13414] do_fast_syscall_32+0x34/0x80 [ 727.560702][T13414] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 727.560714][T13414] RIP: 0023:0xf705e539 [ 727.560723][T13414] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 727.560732][T13414] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 727.560744][T13414] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 727.560755][T13414] RDX: 0000000080000640 RSI: 0000000000000000 RDI: 0000000000000000 [ 727.560766][T13414] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 727.560777][T13414] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 727.560788][T13414] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 727.560815][T13414] [ 727.562021][T13414] binder: 13413:13414 ioctl c0306201 80000640 returned -14 [ 727.986904][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.299815][ T30] audit: type=1400 audit(1758832867.936:468): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13415 comm="syz.4.1865" [ 728.506634][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 728.515945][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 728.561340][T13427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1866'. [ 729.353617][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.831476][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 730.166425][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 730.178137][T13442] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1872'. [ 730.189395][T13442] netlink: 'syz.4.1872': attribute type 3 has an invalid length. [ 730.206902][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.212641][ T979] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 730.237910][ T9] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 730.252560][ T9] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 730.279627][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 730.296924][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 730.313709][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.321802][ T9] usb 1-1: Product: syz [ 730.374108][ T9] usb 1-1: Manufacturer: syz [ 730.379766][ T9] usb 1-1: SerialNumber: syz [ 730.388406][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.424547][ T979] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 730.438736][ T979] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 730.515457][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.533226][ T979] usb 2-1: Product: syz [ 730.537438][ T979] usb 2-1: Manufacturer: syz [ 730.539609][T13435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 730.550764][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.563236][T13435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 730.586246][ T979] usb 2-1: SerialNumber: syz [ 730.613786][ T979] usb 2-1: config 0 descriptor?? [ 730.663458][ T979] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 730.673915][ T979] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 730.802616][ T43] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 730.998353][T13435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.067062][ T43] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 731.078963][ T43] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 731.089017][T13435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.102671][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 731.113503][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.222390][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 731.239067][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 731.292694][T13457] tipc: Enabling of bearer rejected, already enabled [ 731.300572][ T9] usb 1-1: USB disconnect, device number 81 [ 731.306140][T13457] netlink: 'syz.4.1876': attribute type 10 has an invalid length. [ 731.431039][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.457059][T13457] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1876'. [ 731.530814][T13456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.372672][ T43] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 732.386689][T13467] tipc: Enabling of bearer rejected, already enabled [ 732.545899][T13467] netlink: 'syz.2.1880': attribute type 10 has an invalid length. [ 732.557840][T13467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1880'. [ 732.562696][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.844126][ T979] usb 2-1: USB disconnect, device number 75 [ 732.853501][ T43] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 732.864029][ T43] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 732.880447][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 732.931937][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.999527][T13466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.360105][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.381590][ T43] usb 4-1: USB disconnect, device number 80 [ 733.422705][T13461] kAFS: unable to lookup cell '.,' [ 733.483460][ T5951] usb 1-1: USB disconnect, device number 82 [ 733.648068][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.708414][T13483] input: syz0 as /devices/virtual/input/input96 [ 734.707921][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.742931][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.937692][T13504] tipc: Enabling of bearer rejected, already enabled [ 735.957144][T13504] netlink: 'syz.2.1890': attribute type 10 has an invalid length. [ 735.966549][T13504] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1890'. [ 735.980038][T13503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.384491][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.576058][T13495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.798707][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.047310][T13526] tipc: Enabling of bearer rejected, already enabled [ 737.089952][T13524] netlink: 'syz.4.1894': attribute type 10 has an invalid length. [ 737.102771][ T5951] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 737.237357][T13499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.400746][T13524] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1894'. [ 737.432948][T13523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.564319][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 737.615999][ T5951] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 737.642665][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.660915][ T5951] usb 3-1: Product: syz [ 737.666829][ T5951] usb 3-1: Manufacturer: syz [ 737.685218][ T5951] usb 3-1: SerialNumber: syz [ 737.720301][ T5951] usb 3-1: config 0 descriptor?? [ 737.753923][ T5951] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 737.783036][ T5951] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 737.829154][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.861997][T13531] input: syz0 as /devices/virtual/input/input97 [ 738.147747][ T30] audit: type=1400 audit(1758832877.776:469): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13532 comm="syz.3.1897" [ 738.222983][ T30] audit: type=1400 audit(1758832877.856:470): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13534 comm="syz.1.1898" [ 738.489162][ T5951] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 738.952673][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.243798][T13551] input: syz0 as /devices/virtual/input/input98 [ 739.309826][ T5951] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 739.331446][ T5951] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 739.353077][ T5951] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 739.366526][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.423969][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.618896][T13544] kAFS: unable to lookup cell '.,' [ 739.651897][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1902'. [ 739.662678][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1902'. [ 740.087823][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.112346][ T979] usb 3-1: USB disconnect, device number 75 [ 740.147643][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.552990][ T5951] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 740.602626][ T979] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 740.809919][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1905'. [ 740.825119][ T979] usb 3-1: Using ep0 maxpacket: 32 [ 740.834023][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1905'. [ 740.906343][ T979] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 740.926774][ T979] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 740.958467][ T979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 741.130789][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.215045][ T979] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 741.224479][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.232997][ T979] usb 3-1: Product: —뙋ԯ頯࿆䃄削缜욨圢实퓣틎뛟ડ뵆䨼流漒쫟귽띬钤׹䑍緇빇᩶꾐矡એ㭻๙ᗂ챷נ᜻ỹ꿨⤹爢펞ᇇꑶ٭㟠⏻ﹰổ덝圴魤푴꾎顏膼㑾壿䫱쟚㤙ᴫ鮓ꗢ눒ᶱ瞁靅巊䱥闚ⶔꛗ毰豬ᚳ❯罔崡향깴㺩沜䑓팧ퟕ碫䌤쯬橝扙湘⨶颢₨㭻腺 [ 741.340539][ T979] usb 3-1: Manufacturer: ㄎꉾὮ胸⿑崎ֆ㜴ﰶ佅橙댟攈 [ 741.526215][ T979] usb 3-1: SerialNumber: syz [ 741.626859][ T43] usb 5-1: USB disconnect, device number 78 [ 742.101249][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 742.110259][T13574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1907'. [ 742.150856][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.637144][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.105442][T13577] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1908'. [ 743.187842][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.422667][ T5978] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 743.541621][T13581] input: syz0 as /devices/virtual/input/input99 [ 743.604420][ T5978] usb 1-1: not running at top speed; connect to a high speed hub [ 743.652466][ T5978] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 743.700128][ T5978] usb 1-1: config 95 has no interface number 0 [ 743.749574][ T979] usb 3-1: 0:2 : does not exist [ 743.791644][ T5978] usb 1-1: config 95 interface 1 has no altsetting 0 [ 743.847817][ T5978] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 743.864336][ T979] usb 3-1: USB disconnect, device number 76 [ 743.886125][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.920359][ T5978] usb 1-1: Product: ᠌ [ 743.927909][ T5978] usb 1-1: Manufacturer: И [ 743.934313][ T5978] usb 1-1: SerialNumber: ㉄ῢ▴⩤傲ëﰖ霄Ꙍꌅౣ흻⸌࿸䉠詐ꬲ栐օ䘸輭燛욑Ḏ盕桤ǵ뤧뫳㼨댡쯾碖曞緤䁶̯⎆ [ 743.969578][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 744.167850][ T30] audit: type=1400 audit(1758832883.806:471): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13586 comm="syz.3.1912" [ 744.230085][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 744.243027][T13593] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1910'. [ 744.254883][T13593] netlink: 'syz.1.1910': attribute type 3 has an invalid length. [ 744.271673][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.301985][ T30] audit: type=1400 audit(1758832883.936:472): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13588 comm="syz.4.1913" [ 744.333201][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.432468][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.474826][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.506653][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.536327][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.595611][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.620941][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.639127][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.659173][T13577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.726216][T13577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.013109][ T5978] usb 1-1: USB disconnect, device number 83 [ 745.353118][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.637856][T13603] FAULT_INJECTION: forcing a failure. [ 745.637856][T13603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.672937][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.723509][T13605] capability: warning: `syz.0.1916' uses deprecated v2 capabilities in a way that may be insecure [ 745.738535][T13603] CPU: 0 UID: 0 PID: 13603 Comm: syz.1.1915 Not tainted syzkaller #0 PREEMPT(full) [ 745.738551][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 745.738558][T13603] Call Trace: [ 745.738563][T13603] [ 745.738568][T13603] dump_stack_lvl+0x189/0x250 [ 745.738585][T13603] ? __pfx____ratelimit+0x10/0x10 [ 745.738597][T13603] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.738609][T13603] ? __pfx__printk+0x10/0x10 [ 745.738631][T13603] should_fail_ex+0x414/0x560 [ 745.738649][T13603] _copy_to_user+0x31/0xb0 [ 745.738664][T13603] simple_read_from_buffer+0xe1/0x170 [ 745.738682][T13603] proc_fail_nth_read+0x1b3/0x220 [ 745.738695][T13603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.738708][T13603] ? rw_verify_area+0x2a6/0x4d0 [ 745.738720][T13603] ? __lock_acquire+0xab9/0xd20 [ 745.738734][T13603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.738745][T13603] vfs_read+0x1fd/0xa30 [ 745.738758][T13603] ? fdget_pos+0x247/0x320 [ 745.738769][T13603] ? __pfx___mutex_lock+0x10/0x10 [ 745.738781][T13603] ? __pfx_vfs_read+0x10/0x10 [ 745.738794][T13603] ? __fget_files+0x2a/0x420 [ 745.738805][T13603] ? __fget_files+0x3a0/0x420 [ 745.738813][T13603] ? __fget_files+0x2a/0x420 [ 745.738826][T13603] ksys_read+0x145/0x250 [ 745.738840][T13603] ? __pfx_ksys_read+0x10/0x10 [ 745.738855][T13603] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.738867][T13603] __do_fast_syscall_32+0xb6/0x2b0 [ 745.738879][T13603] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.738891][T13603] do_fast_syscall_32+0x34/0x80 [ 745.738903][T13603] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 745.738914][T13603] RIP: 0023:0xf70be539 [ 745.738928][T13603] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 745.738942][T13603] RSP: 002b:00000000f54ae590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 745.738960][T13603] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f54ae620 [ 745.738972][T13603] RDX: 000000000000000f RSI: 00000000f7455ff4 RDI: 0000000000000000 [ 745.738982][T13603] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 745.738992][T13603] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 745.739003][T13603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 745.739030][T13603] [ 746.383061][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.517737][T13627] input: syz0 as /devices/virtual/input/input100 [ 746.618270][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 746.650947][T13623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 746.789130][T13633] FAULT_INJECTION: forcing a failure. [ 746.789130][T13633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.845450][T13633] CPU: 0 UID: 0 PID: 13633 Comm: syz.3.1922 Not tainted syzkaller #0 PREEMPT(full) [ 746.845474][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 746.845480][T13633] Call Trace: [ 746.845485][T13633] [ 746.845490][T13633] dump_stack_lvl+0x189/0x250 [ 746.845507][T13633] ? __pfx____ratelimit+0x10/0x10 [ 746.845518][T13633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 746.845529][T13633] ? __pfx__printk+0x10/0x10 [ 746.845550][T13633] ? __might_fault+0xb0/0x130 [ 746.845570][T13633] should_fail_ex+0x414/0x560 [ 746.845588][T13633] _copy_from_iter+0x1de/0x1790 [ 746.845603][T13633] ? rcu_is_watching+0x15/0xb0 [ 746.845614][T13633] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 746.845629][T13633] ? __pfx__copy_from_iter+0x10/0x10 [ 746.845641][T13633] ? __build_skb_around+0x257/0x3e0 [ 746.845654][T13633] ? netlink_sendmsg+0x642/0xb30 [ 746.845664][T13633] ? skb_put+0x11b/0x210 [ 746.845677][T13633] netlink_sendmsg+0x6b2/0xb30 [ 746.845692][T13633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.845704][T13633] ? __import_iovec+0x5d4/0x7f0 [ 746.845716][T13633] ? aa_sock_msg_perm+0xf1/0x1d0 [ 746.845727][T13633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 746.845738][T13633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.845749][T13633] __sock_sendmsg+0x21c/0x270 [ 746.845766][T13633] ____sys_sendmsg+0x505/0x830 [ 746.845781][T13633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.845801][T13633] ___sys_sendmsg+0x21f/0x2a0 [ 746.845815][T13633] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.845845][T13633] ? __fget_files+0x2a/0x420 [ 746.845854][T13633] ? __fget_files+0x3a0/0x420 [ 746.845867][T13633] __sys_sendmsg+0x164/0x220 [ 746.845880][T13633] ? __pfx___sys_sendmsg+0x10/0x10 [ 746.845901][T13633] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.845913][T13633] __do_fast_syscall_32+0xb6/0x2b0 [ 746.845925][T13633] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.845937][T13633] do_fast_syscall_32+0x34/0x80 [ 746.845948][T13633] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.845960][T13633] RIP: 0023:0xf70ae539 [ 746.845970][T13633] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 746.845978][T13633] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 746.845990][T13633] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800012c0 [ 746.845997][T13633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 746.846002][T13633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 746.846008][T13633] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 746.846014][T13633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 746.846027][T13633] [ 747.390621][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.426009][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.453874][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.887077][T13646] FAULT_INJECTION: forcing a failure. [ 747.887077][T13646] name failslab, interval 1, probability 0, space 0, times 0 [ 747.953741][ T5978] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 748.003874][T13646] CPU: 1 UID: 0 PID: 13646 Comm: syz.0.1927 Not tainted syzkaller #0 PREEMPT(full) [ 748.003905][T13646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 748.003916][T13646] Call Trace: [ 748.003924][T13646] [ 748.003932][T13646] dump_stack_lvl+0x189/0x250 [ 748.003958][T13646] ? __pfx____ratelimit+0x10/0x10 [ 748.003977][T13646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 748.003996][T13646] ? __pfx__printk+0x10/0x10 [ 748.004023][T13646] ? __pfx___might_resched+0x10/0x10 [ 748.004045][T13646] should_fail_ex+0x414/0x560 [ 748.004074][T13646] should_failslab+0xa8/0x100 [ 748.004099][T13646] kmem_cache_alloc_noprof+0x73/0x3c0 [ 748.004121][T13646] ? getname_flags+0xb8/0x540 [ 748.004142][T13646] getname_flags+0xb8/0x540 [ 748.004164][T13646] user_path_at+0x24/0x60 [ 748.004185][T13646] __se_sys_inotify_add_watch+0x182/0xf10 [ 748.004217][T13646] ? fput+0xa0/0xd0 [ 748.004235][T13646] ? ksys_write+0x22a/0x250 [ 748.004259][T13646] ? __pfx___se_sys_inotify_add_watch+0x10/0x10 [ 748.004284][T13646] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.004305][T13646] __do_fast_syscall_32+0xb6/0x2b0 [ 748.004326][T13646] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.004347][T13646] do_fast_syscall_32+0x34/0x80 [ 748.004367][T13646] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 748.004386][T13646] RIP: 0023:0xf701e539 [ 748.004403][T13646] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 748.004417][T13646] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000124 [ 748.004436][T13646] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 748.004448][T13646] RDX: 0000000080000006 RSI: 0000000000000000 RDI: 0000000000000000 [ 748.004459][T13646] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 748.004469][T13646] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 748.004480][T13646] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 748.004506][T13646] [ 748.484335][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.706839][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.838425][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1926'. [ 748.850483][T13650] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1926'. [ 748.863174][T13650] netlink: 'syz.1.1926': attribute type 3 has an invalid length. [ 749.503096][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.636250][ T30] audit: type=1400 audit(1758832889.266:473): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13656 comm="syz.2.1930" [ 749.782148][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.971214][T13670] fuse: Bad value for 'fd' [ 750.101697][T13673] input: syz0 as /devices/virtual/input/input101 [ 750.335586][T13679] input: syz0 as /devices/virtual/input/input102 [ 750.634587][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.893029][ T9] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 751.102124][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 751.122450][ T9] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 751.132261][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.144051][ T9] usb 2-1: Product: syz [ 751.148229][ T9] usb 2-1: Manufacturer: syz [ 751.227905][ T9] usb 2-1: SerialNumber: syz [ 751.390762][ T9] usb 2-1: config 0 descriptor?? [ 751.401023][ T9] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 751.409878][ T9] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 751.731877][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.744508][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.494710][T13706] bridge2: entered allmulticast mode [ 752.782824][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.683198][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 753.692058][T13713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1942'. [ 753.703045][ T5978] usb 2-1: USB disconnect, device number 76 [ 753.832889][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.398884][ T5978] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 754.678181][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 754.690235][T13734] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1946'. [ 754.701662][T13734] netlink: 'syz.0.1946': attribute type 3 has an invalid length. [ 754.772908][ T5978] usb 4-1: Using ep0 maxpacket: 8 [ 754.804270][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.842109][ T5978] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 754.853486][ T5978] usb 4-1: config 179 has no interface number 0 [ 754.902614][ T5978] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 754.913816][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.061686][ T5978] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 755.213163][ T5978] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 755.322630][ T5978] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 755.354378][ T5978] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 755.368457][ T5978] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 755.380226][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.391791][T13726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 755.552316][T13703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 755.882905][ T5953] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 755.993092][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.032651][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 756.076507][ T5953] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 756.102648][ T5953] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 756.122585][ T5953] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 756.132725][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 756.147240][ T5953] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.157654][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.170096][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 756.170102][T11530] usb 4-1: USB disconnect, device number 82 [ 756.170143][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 756.197348][ T5953] usb 5-1: Product: —뙋ԯ頯࿆䃄削缜욨圢实퓣틎뛟ડ뵆䨼流漒쫟귽띬钤׹䑍緇빇᩶꾐矡એ㭻๙ᗂ챷נ᜻ỹ꿨⤹爢펞ᇇꑶ٭㟠⏻ﹰổ덝圴魤푴꾎顏膼㑾壿䫱쟚㤙ᴫ鮓ꗢ눒ᶱ瞁靅巊䱥闚ⶔꛗ毰豬ᚳ❯罔崡향깴㺩沜䑓팧ퟕ碫䌤쯬橝扙湘⨶颢₨㭻腺 [ 756.300996][ T5953] usb 5-1: Manufacturer: ㄎꉾὮ胸⿑崎ֆ㜴ﰶ佅橙댟攈 [ 756.315352][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 756.324860][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 756.350382][ T9] usb 1-1: config 179 has no interface number 0 [ 756.374510][ T5953] usb 5-1: SerialNumber: syz [ 756.379304][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 756.393847][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 756.406319][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 756.419834][T13745] netlink: 'syz.1.1950': attribute type 10 has an invalid length. [ 756.422203][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 756.431807][T13745] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1950'. [ 756.439429][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 756.467349][T13744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.476935][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 756.486387][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.501518][T13743] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 756.723103][ T5951] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 756.910086][ T30] audit: type=1400 audit(1758832896.546:474): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13749 comm="syz.3.1952" [ 756.915580][ T5951] usb 3-1: Using ep0 maxpacket: 8 [ 757.022807][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.092729][ T5951] usb 3-1: unable to get BOS descriptor or descriptor too short [ 757.109415][ T5951] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 757.121752][ T5951] usb 3-1: config 4 has no interface number 0 [ 757.134660][T13743] FAULT_INJECTION: forcing a failure. [ 757.134660][T13743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.146086][ T5951] usb 3-1: config 4 interface 30 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 757.173584][T13743] CPU: 0 UID: 0 PID: 13743 Comm: syz.0.1949 Not tainted syzkaller #0 PREEMPT(full) [ 757.173609][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 757.173623][T13743] Call Trace: [ 757.173631][T13743] [ 757.173639][T13743] dump_stack_lvl+0x189/0x250 [ 757.173664][T13743] ? __pfx____ratelimit+0x10/0x10 [ 757.173683][T13743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.173703][T13743] ? __pfx__printk+0x10/0x10 [ 757.173725][T13743] ? __might_fault+0xb0/0x130 [ 757.173758][T13743] should_fail_ex+0x414/0x560 [ 757.173786][T13743] _copy_from_user+0x2d/0xb0 [ 757.173808][T13743] copy_bpf_fprog_from_user+0x197/0x2b0 [ 757.173834][T13743] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 757.173867][T13743] fanout_set_data+0x217/0x3c0 [ 757.173887][T13743] ? __pfx_fanout_set_data+0x10/0x10 [ 757.173921][T13743] packet_setsockopt+0x7ee/0x12c0 [ 757.173945][T13743] ? __pfx_packet_setsockopt+0x10/0x10 [ 757.173974][T13743] ? __lock_acquire+0xab9/0xd20 [ 757.174003][T13743] ? aa_sk_perm+0x81e/0x950 [ 757.174031][T13743] ? __pfx_aa_sk_perm+0x10/0x10 [ 757.174056][T13743] ? aa_sock_opt_perm+0xff/0x1b0 [ 757.174077][T13743] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 757.174095][T13743] ? __pfx_packet_setsockopt+0x10/0x10 [ 757.174119][T13743] do_sock_setsockopt+0x17c/0x1b0 [ 757.174143][T13743] __ia32_sys_setsockopt+0x13f/0x1b0 [ 757.174169][T13743] __do_fast_syscall_32+0xb6/0x2b0 [ 757.174188][T13743] ? lockdep_hardirqs_on+0x9c/0x150 [ 757.174209][T13743] do_fast_syscall_32+0x34/0x80 [ 757.174226][T13743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 757.174244][T13743] RIP: 0023:0xf701e539 [ 757.174258][T13743] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 757.174272][T13743] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 757.174290][T13743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 757.174302][T13743] RDX: 0000000000000016 RSI: 0000000080000200 RDI: 0000000000000008 [ 757.174313][T13743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 757.174323][T13743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 757.174332][T13743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 757.174365][T13743] [ 757.177195][ T9] usb 1-1: USB disconnect, device number 84 [ 757.186794][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 757.186847][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 757.309127][T13754] fuse: Bad value for 'fd' [ 757.356203][ T5951] usb 3-1: config 4 interface 30 has no altsetting 0 [ 757.600494][ T5951] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 757.621117][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.803084][ T5951] usb 3-1: Product: syz [ 757.825609][ T5951] usb 3-1: Manufacturer: syz [ 757.842705][ T5951] usb 3-1: SerialNumber: syz [ 757.854477][T11530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.063023][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.091782][ T5951] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 758.099622][ T5951] dw2102: su3000_power_ctrl: 1, initialized 0 [ 758.108259][ T5951] dvb-usb: bulk message failed: -22 (2/0) [ 758.144519][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 758.180154][ T5951] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 758.198804][ T5951] usb 3-1: media controller created [ 758.245290][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 758.267547][ T5951] dw2102: i2c transfer failed. [ 758.279801][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 758.292963][ T5951] dw2102: i2c transfer failed. [ 758.301103][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 758.307392][ T5951] dw2102: i2c transfer failed. [ 758.312267][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 758.318421][ T5951] dw2102: i2c transfer failed. [ 758.323419][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 758.329159][ T5951] dw2102: i2c transfer failed. [ 758.334158][ T5951] dvb-usb: bulk message failed: -22 (6/0) [ 758.339900][ T5951] dw2102: i2c transfer failed. [ 758.344763][ T5951] dvb-usb: MAC address: 02:02:02:02:02:02 [ 758.734404][ T5953] usb 5-1: 0:2 : does not exist [ 758.772263][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 758.889862][ T5953] usb 5-1: USB disconnect, device number 80 [ 758.960934][T13769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.970335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.015497][T13776] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1957'. [ 759.287048][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'. [ 759.299714][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.301986][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 759.333155][ T5951] dw2102: command 0x0e transfer failed. [ 759.341707][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 759.347973][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.366326][ T5951] dw2102: command 0x0e transfer failed. [ 759.372297][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1959'. [ 759.382483][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.542650][T13783] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1958'. [ 759.752057][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 759.779877][ T5951] dw2102: command 0x0e transfer failed. [ 760.082606][ T5951] dvb-usb: bulk message failed: -22 (3/0) [ 760.089568][ T5951] dw2102: command 0x0e transfer failed. [ 760.095525][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 760.101379][ T5951] dw2102: command 0x51 transfer failed. [ 760.107200][ T5951] dvb-usb: bulk message failed: -22 (5/0) [ 760.113113][ T5951] dw2102: i2c probe for address 0x68 failed. [ 760.119837][ T5951] dvb-usb: bulk message failed: -22 (5/0) [ 760.127888][ T5951] dw2102: i2c probe for address 0x69 failed. [ 760.136285][ T5951] dvb-usb: bulk message failed: -22 (5/0) [ 760.145933][ T5951] dw2102: i2c probe for address 0x6a failed. [ 760.154265][ T5951] dw2102: probing for demodulator failed. Is the external power switched on? [ 760.172612][ T5951] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 760.284089][ T5951] rc_core: IR keymap rc-tt-1500 not found [ 760.314206][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.334935][ T5951] Registered IR keymap rc-empty [ 760.431248][ T5951] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 760.450670][ T5951] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input103 [ 760.465900][ T5951] dvb-usb: schedule remote query interval to 250 msecs. [ 760.484041][ T5951] dw2102: su3000_power_ctrl: 0, initialized 1 [ 760.490108][ T5951] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 760.557537][ T5951] usb 3-1: USB disconnect, device number 77 [ 760.728126][ T5951] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 760.968575][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.138066][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 761.147161][T13794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 761.352988][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.593875][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 761.603113][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 762.047226][T13786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.382767][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.746137][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 762.770126][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 763.112330][T13817] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1967'. [ 763.127518][T13817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1967'. [ 763.577318][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.625819][T13822] FAULT_INJECTION: forcing a failure. [ 763.625819][T13822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.642138][T13822] CPU: 1 UID: 0 PID: 13822 Comm: syz.2.1969 Not tainted syzkaller #0 PREEMPT(full) [ 763.642163][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 763.642174][T13822] Call Trace: [ 763.642182][T13822] [ 763.642190][T13822] dump_stack_lvl+0x189/0x250 [ 763.642216][T13822] ? __pfx____ratelimit+0x10/0x10 [ 763.642236][T13822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 763.642256][T13822] ? __pfx__printk+0x10/0x10 [ 763.642291][T13822] should_fail_ex+0x414/0x560 [ 763.642321][T13822] _copy_to_user+0x31/0xb0 [ 763.642345][T13822] simple_read_from_buffer+0xe1/0x170 [ 763.642374][T13822] proc_fail_nth_read+0x1b3/0x220 [ 763.642397][T13822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.642419][T13822] ? rw_verify_area+0x2a6/0x4d0 [ 763.642438][T13822] ? __lock_acquire+0xab9/0xd20 [ 763.642459][T13822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.642480][T13822] vfs_read+0x1fd/0xa30 [ 763.642503][T13822] ? fdget_pos+0x247/0x320 [ 763.642522][T13822] ? __pfx___mutex_lock+0x10/0x10 [ 763.642540][T13822] ? __pfx_vfs_read+0x10/0x10 [ 763.642561][T13822] ? __fget_files+0x2a/0x420 [ 763.642579][T13822] ? __fget_files+0x3a0/0x420 [ 763.642593][T13822] ? __fget_files+0x2a/0x420 [ 763.642614][T13822] ksys_read+0x145/0x250 [ 763.642637][T13822] ? __pfx_ksys_read+0x10/0x10 [ 763.642662][T13822] ? lockdep_hardirqs_on+0x9c/0x150 [ 763.642684][T13822] __do_fast_syscall_32+0xb6/0x2b0 [ 763.642705][T13822] ? lockdep_hardirqs_on+0x9c/0x150 [ 763.642728][T13822] do_fast_syscall_32+0x34/0x80 [ 763.642747][T13822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 763.642767][T13822] RIP: 0023:0xf705e539 [ 763.642782][T13822] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 763.642796][T13822] RSP: 002b:00000000f544e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 763.642815][T13822] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f544e620 [ 763.642827][T13822] RDX: 000000000000000f RSI: 00000000f73f5ff4 RDI: 0000000000000000 [ 763.642838][T13822] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 763.642849][T13822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 763.642858][T13822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 763.642886][T13822] [ 764.036396][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.124480][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'. [ 764.165718][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'. [ 764.655845][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.366523][T13852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 765.393277][ T5951] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 765.691918][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.703158][T13850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 765.827960][T13808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.383114][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 766.707110][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.103207][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.422646][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 767.742728][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.934483][T13871] netlink: 'syz.2.1978': attribute type 10 has an invalid length. [ 768.106283][T13871] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1978'. [ 768.188707][T13870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.383395][T13874] netlink: 'syz.1.1979': attribute type 10 has an invalid length. [ 768.392371][T13874] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1979'. [ 768.415836][T13873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.782924][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.945218][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.063154][ T5978] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 769.112635][T13889] input: syz0 as /devices/virtual/input/input104 [ 769.290108][T13893] FAULT_INJECTION: forcing a failure. [ 769.290108][T13893] name failslab, interval 1, probability 0, space 0, times 0 [ 769.342652][T13893] CPU: 0 UID: 0 PID: 13893 Comm: syz.1.1984 Not tainted syzkaller #0 PREEMPT(full) [ 769.342679][T13893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 769.342691][T13893] Call Trace: [ 769.342699][T13893] [ 769.342708][T13893] dump_stack_lvl+0x189/0x250 [ 769.342733][T13893] ? __pfx____ratelimit+0x10/0x10 [ 769.342753][T13893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.342772][T13893] ? __pfx__printk+0x10/0x10 [ 769.342793][T13893] ? __pfx___might_resched+0x10/0x10 [ 769.342806][T13893] ? fs_reclaim_acquire+0x7d/0x100 [ 769.342818][T13893] should_fail_ex+0x414/0x560 [ 769.342836][T13893] should_failslab+0xa8/0x100 [ 769.342857][T13893] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 769.342879][T13893] ? __alloc_skb+0x112/0x2d0 [ 769.342903][T13893] __alloc_skb+0x112/0x2d0 [ 769.342926][T13893] sock_wmalloc+0xb2/0x130 [ 769.342945][T13893] pppoe_sendmsg+0x2a8/0x790 [ 769.342960][T13893] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 769.342970][T13893] ? __import_iovec+0x40e/0x7f0 [ 769.342982][T13893] ? aa_sock_msg_perm+0xf1/0x1d0 [ 769.342994][T13893] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 769.343010][T13893] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 769.343030][T13893] __sock_sendmsg+0x21c/0x270 [ 769.343056][T13893] ____sys_sendmsg+0x52d/0x830 [ 769.343083][T13893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 769.343106][T13893] ___sys_sendmsg+0x21f/0x2a0 [ 769.343119][T13893] ? __pfx____sys_sendmsg+0x10/0x10 [ 769.343155][T13893] ? __fget_files+0x2a/0x420 [ 769.343170][T13893] ? __fget_files+0x3a0/0x420 [ 769.343197][T13893] __sys_sendmmsg+0x28e/0x430 [ 769.343224][T13893] ? __pfx___sys_sendmmsg+0x10/0x10 [ 769.343245][T13893] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 769.343273][T13893] ? ksys_write+0x22a/0x250 [ 769.343293][T13893] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 769.343314][T13893] __do_fast_syscall_32+0xb6/0x2b0 [ 769.343335][T13893] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.343357][T13893] do_fast_syscall_32+0x34/0x80 [ 769.343376][T13893] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 769.343392][T13893] RIP: 0023:0xf70be539 [ 769.343402][T13893] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 769.343410][T13893] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 769.343421][T13893] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002340 [ 769.343428][T13893] RDX: 00000000000003e8 RSI: 0000000000000000 RDI: 0000000000000000 [ 769.343434][T13893] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 769.343440][T13893] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 769.343446][T13893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 769.343472][T13893] [ 770.037940][T13868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.134392][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.152696][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.187065][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.322310][ T5953] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 771.495740][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 771.509653][ T5953] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 771.518908][ T5953] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 771.562858][ T5953] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 771.590673][ T5953] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 771.610556][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.619593][ T5953] usb 5-1: Product: —뙋ԯ頯࿆䃄削缜욨圢实퓣틎뛟ડ뵆䨼流漒쫟귽띬钤׹䑍緇빇᩶꾐矡એ㭻๙ᗂ챷נ᜻ỹ꿨⤹爢펞ᇇꑶ٭㟠⏻ﹰổ덝圴魤푴꾎顏膼㑾壿䫱쟚㤙ᴫ鮓ꗢ눒ᶱ瞁靅巊䱥闚ⶔꛗ毰豬ᚳ❯罔崡향깴㺩沜䑓팧ퟕ碫䌤쯬橝扙湘⨶颢₨㭻腺 [ 771.708154][ T5953] usb 5-1: Manufacturer: ㄎꉾὮ胸⿑崎ֆ㜴ﰶ佅橙댟攈 [ 771.745784][ T5953] usb 5-1: SerialNumber: syz [ 772.046147][T13912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.223135][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.366843][T13897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 772.453815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.502767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.959738][ T5978] usb 1-1: device descriptor read/64, error -71 [ 773.193056][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.212614][ T5978] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 773.268371][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.512753][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.932703][ T5974] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 774.094915][ T5974] usb 4-1: Using ep0 maxpacket: 8 [ 774.111590][ T5974] usb 4-1: unable to get BOS descriptor or descriptor too short [ 774.123618][ T5974] usb 4-1: config 4 interface 0 has no altsetting 0 [ 774.138161][ T5974] usb 4-1: string descriptor 0 read error: -22 [ 774.147138][ T5974] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 774.174041][ T5953] usb 5-1: 0:2 : does not exist [ 774.175259][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.192657][ T43] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 774.267281][ T5953] usb 5-1: USB disconnect, device number 81 [ 774.312340][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.397645][ T5974] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 774.437999][ T5974] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 774.438525][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 774.506973][ T5974] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 774.548861][ T5974] usb 4-1: media controller created [ 774.635950][ T5974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 774.805712][ T5974] zl10353_read_register: readreg error (reg=127, ret==0) [ 774.821884][T13947] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1998'. [ 775.033618][ T5974] usb 4-1: USB disconnect, device number 84 [ 775.349073][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.357551][ T5974] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 775.527185][ T5974] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 65, using maximum allowed: 30 [ 775.559101][ T5974] usb 4-1: config 0 interface 0 altsetting 48 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.571459][ T5974] usb 4-1: config 0 interface 0 altsetting 48 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.581554][ T5974] usb 4-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 775.594941][ T5974] usb 4-1: config 0 interface 0 has no altsetting 0 [ 775.601724][ T5974] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 775.630461][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.671619][ T5974] usb 4-1: config 0 descriptor?? [ 775.872058][T13952] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1999'. [ 776.108398][ T5974] uclogic 0003:5543:0522.0011: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 776.225883][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.808793][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.854842][T13958] netlink: 'syz.0.2000': attribute type 10 has an invalid length. [ 776.879918][ T5953] usb 4-1: USB disconnect, device number 85 [ 777.017679][T13963] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2000'. [ 777.043745][T13955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.273847][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2002'. [ 777.291037][T13965] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2002'. [ 777.331056][T13965] netlink: 'syz.3.2002': attribute type 3 has an invalid length. [ 777.812596][ T5978] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 777.832109][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.012563][ T5978] usb 2-1: Using ep0 maxpacket: 32 [ 778.024638][ T5978] usb 2-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 778.038308][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.068572][ T5978] usb 2-1: config 0 descriptor?? [ 778.094716][ T5978] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 778.109364][ T5978] gspca_mr97310a: reg write [21] error -22 [ 778.118019][ T5978] mr97310a 2-1:0.0: probe with driver mr97310a failed with error -22 [ 778.273254][T13982] input: syz0 as /devices/virtual/input/input105 [ 778.441750][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 778.453583][T13985] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2015'. [ 778.464361][T13985] netlink: 'syz.0.2015': attribute type 3 has an invalid length. [ 778.472263][ T5951] usb 2-1: USB disconnect, device number 77 [ 778.739250][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.884000][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.092810][ T5953] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 779.252613][ T5953] usb 4-1: Using ep0 maxpacket: 8 [ 779.269646][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.360643][ T5953] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 779.374540][T13998] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2009'. [ 779.488946][T14003] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.498021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.534009][T14005] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2010'. [ 779.833348][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.860268][ T5953] usb 4-1: config 0 descriptor?? [ 780.005193][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.139832][ T5978] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 780.332800][T13990] netlink: 'syz.3.2006': attribute type 6 has an invalid length. [ 780.861542][T13978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.088659][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.463078][T14018] netlink: 'syz.4.2016': attribute type 10 has an invalid length. [ 781.623919][T14022] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2016'. [ 781.803895][T14016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.186981][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.448409][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.544421][ T43] usb 4-1: USB disconnect, device number 86 [ 783.081247][T14036] input: syz0 as /devices/virtual/input/input106 [ 783.277577][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.602310][T14044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2021'. [ 783.614337][T14044] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2021'. [ 783.625801][T14044] netlink: 'syz.0.2021': attribute type 3 has an invalid length. [ 783.969937][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2023'. [ 783.979068][T14052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2023'. [ 784.303184][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.395421][T14057] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2024'. [ 784.662700][T14033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.252794][ T5978] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 785.362658][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.623184][ T5952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.685767][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 785.709215][ T30] audit: type=1400 audit(1758832925.346:475): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14065 comm="syz.1.2027" [ 785.743074][ T5978] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 785.890548][ T5978] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 786.017274][T14038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.381247][T14073] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2026'. [ 786.431488][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.472318][ T5978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 786.945518][ T5978] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 786.955150][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.992555][ T5978] usb 1-1: Product: —뙋ԯ頯࿆䃄削缜욨圢实퓣틎뛟ડ뵆䨼流漒쫟귽띬钤׹䑍緇빇᩶꾐矡એ㭻๙ᗂ챷נ᜻ỹ꿨⤹爢펞ᇇꑶ٭㟠⏻ﹰổ덝圴魤푴꾎顏膼㑾壿䫱쟚㤙ᴫ鮓ꗢ눒ᶱ瞁靅巊䱥闚ⶔꛗ毰豬ᚳ❯罔崡향깴㺩沜䑓팧ퟕ碫䌤쯬橝扙湘⨶颢₨㭻腺 [ 787.120306][ T5978] usb 1-1: Manufacturer: ㄎꉾὮ胸⿑崎ֆ㜴ﰶ佅橙댟攈 [ 787.141761][ T5978] usb 1-1: SerialNumber: syz [ 787.277263][T14081] netlink: 'syz.3.2029': attribute type 10 has an invalid length. [ 787.287678][T14081] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2029'. [ 787.299811][T14080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.506131][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.632632][ T43] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 787.808516][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.819019][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 788.022561][ T43] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.042685][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 788.167489][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.176136][ T5952] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 788.182244][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 788.200597][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.332667][ T43] usb 3-1: Product: syz [ 788.336876][ T43] usb 3-1: Manufacturer: syz [ 788.341560][ T43] usb 3-1: SerialNumber: syz [ 788.472673][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 788.484987][T14093] input: syz0 as /devices/virtual/input/input107 [ 788.506779][ T5952] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 788.525055][ T5952] usb 2-1: config 0 has no interface number 0 [ 788.605545][ T5952] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 788.606935][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.625384][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.654217][ T5952] usb 2-1: Product: syz [ 788.668597][ T5952] usb 2-1: Manufacturer: syz [ 788.675698][ T5978] usb 1-1: 0:2 : does not exist [ 788.703314][ T5952] usb 2-1: SerialNumber: syz [ 788.716493][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.748413][ T5978] usb 1-1: USB disconnect, device number 87 [ 788.751195][ T5952] usb 2-1: config 0 descriptor?? [ 788.791470][ T43] usb 3-1: USB disconnect, device number 79 [ 788.793750][T12788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.810402][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.820147][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.854879][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 789.027051][ T30] audit: type=1400 audit(1758832928.666:476): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14101 comm="syz.0.2034" [ 789.167986][T14111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.897562][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 789.906691][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.919084][T14118] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2036'. [ 789.931289][T14118] netlink: 'syz.2.2036': attribute type 3 has an invalid length. [ 790.442222][ T5978] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 790.719889][ T5952] usb 2-1: selecting invalid altsetting 1 [ 790.732960][ T5952] speedtch 2-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 790.756887][ T5952] speedtch 2-1:0.1: usbatm_usb_probe: bind failed: -22! [ 790.766012][ T5952] speedtch 2-1:0.1: probe with driver speedtch failed with error -22 [ 790.808163][ T5952] usb 2-1: USB disconnect, device number 79 [ 790.943562][T12318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.111915][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 791.209523][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 792.272791][ T43] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 792.302837][T12318] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 792.426583][ T43] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 792.517218][T12318] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 792.535127][ T43] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 792.553149][T12318] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 792.579081][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 792.602117][T12318] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 792.615434][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.628351][T12318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.672667][ T979] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 792.795124][T14154] input: syz0 as /devices/virtual/input/input108 [ 792.822911][ T979] usb 5-1: Using ep0 maxpacket: 32 [ 792.830212][ T979] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 792.889916][ T979] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 792.901260][T14144] kAFS: unable to lookup cell '.,' [ 792.958033][T12318] usb 3-1: USB disconnect, device number 80 [ 792.993379][ T979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 793.008861][ T979] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 793.019381][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.027674][ T5974] net_ratelimit: 2 callbacks suppressed [ 793.027685][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.062234][ T979] usb 5-1: Product: —뙋ԯ頯࿆䃄削缜욨圢实퓣틎뛟ડ뵆䨼流漒쫟귽띬钤׹䑍緇빇᩶꾐矡એ㭻๙ᗂ챷נ᜻ỹ꿨⤹爢펞ᇇꑶ٭㟠⏻ﹰổ덝圴魤푴꾎顏膼㑾壿䫱쟚㤙ᴫ鮓ꗢ눒ᶱ瞁靅巊䱥闚ⶔꛗ毰豬ᚳ❯罔崡향깴㺩沜䑓팧ퟕ碫䌤쯬橝扙湘⨶颢₨㭻腺 [ 793.208497][ T979] usb 5-1: Manufacturer: ㄎꉾὮ胸⿑崎ֆ㜴ﰶ佅橙댟攈 [ 793.221503][ T979] usb 5-1: SerialNumber: syz [ 793.227218][T14145] kAFS: unable to lookup cell '.,' [ 793.271704][T12318] usb 2-1: USB disconnect, device number 80 [ 793.609763][ T30] audit: type=1400 audit(1758832933.246:477): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14158 comm="syz.3.2047" [ 793.910113][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.919151][T12318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.928145][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.062887][T12318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.407994][T14171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 794.629252][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 794.638242][ T9] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 794.646048][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2050'. [ 794.792697][ T9] usb 3-1: device descriptor read/64, error -71 [ 795.033507][ T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 795.103342][T12318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.177132][ T9] usb 3-1: device descriptor read/64, error -71 [ 795.293570][ T9] usb usb3-port1: attempt power cycle [ 795.356795][ T979] usb 5-1: 0:2 : does not exist [ 795.398584][ T979] usb 5-1: USB disconnect, device number 82 [ 795.502632][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 795.588366][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 795.768289][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 795.795990][ T9] usb 3-1: device descriptor read/8, error -71 [ 795.911053][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2051'. [ 796.105231][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 796.142783][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.152171][T12791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.212971][ T30] audit: type=1400 audit(1758832935.806:478): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14182 comm="syz.3.2052" [ 796.213385][T12318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.263728][ T9] usb 3-1: device descriptor read/8, error -71 [ 796.302930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.422905][ T9] usb usb3-port1: unable to enumerate USB device [ 796.542638][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.288642][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 797.463101][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 797.474416][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 797.484729][ T9] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 797.498826][ T9] usb 5-1: config 4 has no interface number 0 [ 797.534484][ T9] usb 5-1: config 4 interface 30 has no altsetting 0 [ 797.555592][ T9] usb 5-1: string descriptor 0 read error: -22 [ 797.562262][ T9] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 797.571612][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.592107][T14201] syzkaller0: entered promiscuous mode [ 797.599858][T14201] syzkaller0: entered allmulticast mode [ 797.632896][ T9] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 797.644700][ T9] dw2102: su3000_power_ctrl: 1, initialized 0 [ 797.651038][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 797.660961][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 797.692459][ T9] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 797.807657][ T9] usb 5-1: media controller created [ 797.821344][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 797.840334][ T9] dw2102: i2c transfer failed. [ 797.853339][T14189] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 797.865213][T14189] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 797.873611][T14189] CPU: 0 UID: 0 PID: 14189 Comm: syz.4.2053 Not tainted syzkaller #0 PREEMPT(full) [ 797.882999][T14189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 797.893051][T14189] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 797.899039][T14189] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 2d 19 3c fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 797.918646][T14189] RSP: 0018:ffffc9001ab0f8e8 EFLAGS: 00010202 [ 797.924714][T14189] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 797.932684][T14189] RDX: ffffffff87e711b5 RSI: ffffffff8f0d52f0 RDI: 0000000000001900 [ 797.940655][T14189] RBP: 0000000000000000 R08: ffff88802d060000 R09: 0000000000000002 [ 797.948624][T14189] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 797.956592][T14189] R13: 1ffff11005da42d0 R14: 0000000000000003 R15: ffff88802ed21688 [ 797.964578][T14189] FS: 0000000000000000(0000) GS:ffff888125c12000(0063) knlGS:00000000f5466b40 [ 797.973505][T14189] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 797.980089][T14189] CR2: 00000000800bf018 CR3: 00000000576c4000 CR4: 00000000003526f0 [ 797.988064][T14189] Call Trace: [ 797.991343][T14189] [ 797.994280][T14189] __i2c_transfer+0x871/0x2170 [ 797.999051][T14189] ? i2c_transfer+0x120/0x3a0 [ 798.003731][T14189] ? __pfx___i2c_transfer+0x10/0x10 [ 798.008938][T14189] ? rt_mutex_lock_nested+0x172/0x1e0 [ 798.014311][T14189] ? i2c_transfer+0x120/0x3a0 [ 798.019009][T14189] i2c_transfer+0x25b/0x3a0 [ 798.023514][T14189] ? __pfx_i2c_transfer+0x10/0x10 [ 798.028540][T14189] ? _copy_from_user+0x94/0xb0 [ 798.033307][T14189] i2cdev_ioctl_rdwr+0x460/0x740 [ 798.038249][T14189] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 798.043361][T14189] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 798.048998][T14189] ? __fget_files+0x3a0/0x420 [ 798.053683][T14189] ? __fget_files+0x2a/0x420 [ 798.058270][T14189] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 798.063823][T14189] __ia32_compat_sys_ioctl+0x543/0x840 [ 798.069289][T14189] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 798.075277][T14189] ? __se_sys_futex_time32+0x360/0x3e0 [ 798.080750][T14189] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.085947][T14189] __do_fast_syscall_32+0xb6/0x2b0 [ 798.091061][T14189] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.096258][T14189] do_fast_syscall_32+0x34/0x80 [ 798.101113][T14189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.107440][T14189] RIP: 0023:0xf7f74539 [ 798.111505][T14189] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 798.131108][T14189] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 798.139529][T14189] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 798.147499][T14189] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.155466][T14189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.163434][T14189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 798.171401][T14189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.179379][T14189] [ 798.182403][T14189] Modules linked in: [ 798.186953][T14189] ---[ end trace 0000000000000000 ]--- [ 798.278192][T14189] RIP: 0010:su3000_i2c_transfer+0x1ad/0x1040 [ 798.282566][ T979] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 798.284337][T14189] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 2d 19 3c fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 5f 09 00 00 0f b6 1b 48 8b 44 24 38 42 [ 798.371702][T14189] RSP: 0018:ffffc9001ab0f8e8 EFLAGS: 00010202 [ 798.380271][T14189] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 798.388738][T14189] RDX: ffffffff87e711b5 RSI: ffffffff8f0d52f0 RDI: 0000000000001900 [ 798.397638][T14189] RBP: 0000000000000000 R08: ffff88802d060000 R09: 0000000000000002 [ 798.405929][T14189] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 798.414150][T14189] R13: 1ffff11005da42d0 R14: 0000000000000003 R15: ffff88802ed21688 [ 798.422240][T14189] FS: 0000000000000000(0000) GS:ffff888125c12000(0063) knlGS:00000000f5466b40 [ 798.432270][T14189] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 798.439179][T14189] CR2: 0000000080106018 CR3: 00000000576c4000 CR4: 00000000003526f0 [ 798.447576][T14189] Kernel panic - not syncing: Fatal exception [ 798.453904][T14189] Kernel Offset: disabled [ 798.458217][T14189] Rebooting in 86400 seconds..