last executing test programs: 2m44.692824808s ago: executing program 1 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x82}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b80)=@delchain={0x128, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xc}, {0x0, 0x10}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_bpf={{0x8}, {0xe4, 0x2, [@TCA_BPF_FD={0x17}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_ACT={0xd0, 0x1, [@m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x98, 0x1d, 0x0, 0x0, {{0xf}, {0x4}, {0x68, 0x6, "309e7046678cfa85254c612d61e3d2c3e3b6590ca2f3e70c7fcdf5868b95845dfa60edad38b3b8c47659e35d235cfa416f9d81db4b5bb82e527e794cf9c32a539860aa592d929cecb48c76df399b49231fc0de0b4c4b5e510bd82e77a2a017326f355f49"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x2000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40020}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="04005b"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f00000000c0)={0x2, @pix={0x7ff, 0x25, 0x4c47504a, 0x4, 0x9, 0x9, 0x9, 0x3, 0x1, 0x2, 0x2, 0x3}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000108000300", @ANYRES32=r9, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 2m43.352301082s ago: executing program 1 (id=1429): pivot_root(&(0x7f0000000300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_pidfd_open(0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) inotify_add_watch(r2, 0x0, 0x21000900) setsockopt$inet6_tcp_int(r2, 0x6, 0x6337cffbbea7b20e, &(0x7f0000000180)=0xd, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x521000) ioctl$CEC_ADAP_S_PHYS_ADDR(r3, 0x40026102, &(0x7f0000000080)=0x33fc) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7c82d684cb3b4396}}, 0x10) r4 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r4, &(0x7f0000000040)="e46f4343", 0x4, 0x400000c, 0x0, 0x0) sendto$inet(r4, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r5, 0x0, 0x7ffff000, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 2m41.936603957s ago: executing program 1 (id=1433): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300090a00000000000000000400000300060000000e0002000000fb0000090000000000000000020001000000000000e0000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) 2m41.566570662s ago: executing program 1 (id=1437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000003c0)="28e4", 0x2}], 0x2}}], 0x1, 0x40815) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {0x4, 0x7, 0x6}, 0x40, [0x3, 0x5, 0xbaf4, 0x6, 0x7fff, 0xf, 0xfffffff9, 0x2, 0x7, 0x6, 0x5, 0x57, 0x4, 0x8, 0x8, 0x7ff, 0x8abb, 0x8, 0x80000000, 0x0, 0x188e, 0x3, 0x1, 0x7f, 0x0, 0x4, 0xe, 0x4, 0x1, 0x906, 0x200, 0x4, 0x3, 0x1, 0x7, 0x40, 0x2, 0x7, 0x6, 0x2, 0x4, 0xfffffbff, 0x799, 0xf6, 0x5, 0x4, 0x1, 0x8, 0x101, 0x1, 0xa0, 0xaad, 0x8, 0x1c90524f, 0x9, 0x2, 0xdd, 0x2, 0x2, 0x7706, 0x0, 0x5, 0x101, 0x3ff], [0x78, 0x2, 0x8, 0x482, 0x6c3acb2b, 0x2, 0x3, 0xffff, 0xc, 0x6, 0x5, 0xe3e0, 0x8, 0x80, 0xd65, 0x7, 0x1, 0x5, 0x98c, 0x8, 0x100, 0x5, 0x1800000, 0x1, 0x6, 0x1, 0xce42, 0x6, 0x3e43d0b0, 0xc0a9, 0x1, 0x6, 0x3, 0x81, 0x80000001, 0x33c, 0x5, 0x90, 0x0, 0x400, 0x2, 0x0, 0x9, 0xa3, 0x7, 0x8, 0xba, 0x6, 0x4, 0xd7df, 0x3, 0x8, 0x67b4, 0x6, 0x10000000, 0x2, 0x5, 0x2, 0x2, 0x5, 0x80000001, 0x4, 0xfffffff3, 0xff], [0xa, 0x8001, 0xffffffff, 0x6, 0x1, 0x6, 0x3, 0x3, 0x5e, 0x400, 0x4, 0x0, 0x5, 0xffff9506, 0x9, 0x5, 0x5, 0x1, 0xc, 0x5, 0xfff, 0x9, 0xe362, 0x6, 0x7fff, 0x2d62, 0x0, 0xffff, 0x100000, 0x800, 0x80000000, 0x3, 0x2015, 0x3, 0x0, 0x8, 0x200, 0x5, 0x0, 0x5, 0x81, 0x23ca, 0x1, 0x7ff, 0x3, 0x9, 0xc9a, 0x6d41, 0x1, 0xfffffff9, 0x4, 0x6, 0xfffff168, 0x2, 0xfff, 0x2000000, 0xa, 0x10000, 0x5, 0x9, 0xfffffff9, 0x4, 0x9, 0xfffffffc], [0x1, 0x3, 0x9fb8, 0xfffffffe, 0x2, 0x6, 0x8, 0x100, 0x8, 0x1, 0x7, 0xd31, 0x2, 0x6, 0x3, 0x1, 0x925, 0xb, 0x7, 0x4, 0x2, 0x4, 0x5, 0x8, 0xffffffff, 0xfffffff8, 0x9, 0x8904, 0x1, 0x6, 0x10001, 0x2, 0x0, 0x96d, 0xe2c7, 0x6, 0x80000000, 0x77a, 0x2, 0x5, 0x3, 0xfffff000, 0x3, 0x80000000, 0x6, 0x8, 0x1, 0x2, 0x9, 0x0, 0xfffff394, 0x5, 0x6, 0x2, 0xa, 0x8, 0x3, 0xb, 0x2, 0x4, 0xe, 0x6, 0xc, 0x80000000]}, 0x45c) 2m41.342724474s ago: executing program 1 (id=1440): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000f40)="000000ffffa88800000000000000", 0xe}], 0x1}, 0x44000) 2m41.179448321s ago: executing program 1 (id=1442): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d00), 0xa0a80) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{}, 0x1, 0x0, 0x0, {0x1}, 0x0, 0x1a}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x0, 0x3, {0x1, 0x2, 0x1, 0x2, 0x6}, 0x7}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, &(0x7f0000000180), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a9, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4) tee(r1, r0, 0x400, 0xa) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000380)=[{{&(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/71, 0x47}], 0x2, &(0x7f0000001900)=""/249, 0xf9}, 0x1}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000480)=ANY=[@ANYBLOB="100000a38aec2c56b683b0adfc550002001f89e8f6f5c778bd3dab6975ab65c827a9d9e611ba7f277d94f12d83a61fd4f65a1e8e27bdc6f07c568154a62e193d65226b7adc4d6d648b28ec8297ab7898c168dcc78b8a1b9e90e81fcae878e484fe7d7b4334dfc21290a35d5e9089a5bd838ae9c2841b2932f863f896362d98d60e06c654afabf665c06da632", @ANYRES64=0x0], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000001c0)={r11, 0x78, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x2eda, @mcast2, 0x7}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0xe, @private1, 0x4}]}, &(0x7f0000000200)=0x10) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSBRKP(r12, 0x5425, 0x3) r13 = epoll_create(0x4000100) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000300)={0xb0000004}) 2m26.036400417s ago: executing program 32 (id=1442): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001d00), 0xa0a80) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{}, 0x1, 0x0, 0x0, {0x1}, 0x0, 0x1a}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000540)={0x0, 0x3, {0x1, 0x2, 0x1, 0x2, 0x6}, 0x7}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, &(0x7f0000000180), &(0x7f0000000040)) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a9, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r4) tee(r1, r0, 0x400, 0xa) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000380)=[{{&(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/71, 0x47}], 0x2, &(0x7f0000001900)=""/249, 0xf9}, 0x1}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000480)=ANY=[@ANYBLOB="100000a38aec2c56b683b0adfc550002001f89e8f6f5c778bd3dab6975ab65c827a9d9e611ba7f277d94f12d83a61fd4f65a1e8e27bdc6f07c568154a62e193d65226b7adc4d6d648b28ec8297ab7898c168dcc78b8a1b9e90e81fcae878e484fe7d7b4334dfc21290a35d5e9089a5bd838ae9c2841b2932f863f896362d98d60e06c654afabf665c06da632", @ANYRES64=0x0], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000001c0)={r11, 0x78, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x2eda, @mcast2, 0x7}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0xe, @private1, 0x4}]}, &(0x7f0000000200)=0x10) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TCSBRKP(r12, 0x5425, 0x3) r13 = epoll_create(0x4000100) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000300)={0xb0000004}) 2m26.010110172s ago: executing program 2 (id=1490): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="210329bd7000fbdbdf25010000002c0001801400020073797a5f74756e0000000000000000001400020064756d6d793000000000000000000000ac00028024000180080001000700000008000100040000000800010005000000b6ff010004000000060001800800010005000000080001000800000008000100070000004c000180080001000000000008000100060000000800010005000000d8fe010004000000080001000400000008000100010000000800010001000000080001000600000008000100030000001c000180080001000100000008000100020000000800010007000000"], 0xec}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990002000000250000000800260080090000080048f5a3002d301b38a1b460d6c74ff22b9f00010000000800a00005000000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x8}, @void, @val={0xc, 0x99, {0x2, 0x1e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x60000000) r5 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) fsmount(r6, 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x0, 0xfd}) 2m25.666666558s ago: executing program 2 (id=1495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a30002100001400078008001240400000000800134000000000140003"], 0x60}}, 0x0) 2m25.326006496s ago: executing program 2 (id=1499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001000210400000000fcdbdf2500120000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000500012800e0001006970366772657461700000003c000280080014000e000000060003000700000008000d0005000000060002001ef7000005000b000f00000006000200030000000800010026"], 0x70}}, 0x0) 2m25.114502161s ago: executing program 2 (id=1501): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m24.006617145s ago: executing program 2 (id=1504): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040014001c000180180010"], 0x34}}, 0x84) 2m23.280344567s ago: executing program 2 (id=1505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4001af84, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0xffffffff, 0x8, 0xdeb9, 0x8, 0x5, 0x6, 0x3, 0x5, 0x6736, 0x2, 0x80c, 0x7, 0xfffffffffffffff9, 0xa7, 0xa9], 0xdddd0000, 0x82200}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000008c0)={0x0, {{0xa, 0x4e22, 0x400, @ipv4={'\x00', '\xff\xff', @rand_addr=0x41a}, 0x6}}, {{0xa, 0x4e20, 0x40000007, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}, 0x108) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bind$packet(r5, &(0x7f0000000100)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @random="27db15cb9e2f"}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r7, 0x1, 0x0, @random="1cd00c00"}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @broadcast}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r10], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m22.02571775s ago: executing program 33 (id=1505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4001af84, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x3, 0xffffffff, 0x8, 0xdeb9, 0x8, 0x5, 0x6, 0x3, 0x5, 0x6736, 0x2, 0x80c, 0x7, 0xfffffffffffffff9, 0xa7, 0xa9], 0xdddd0000, 0x82200}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000008c0)={0x0, {{0xa, 0x4e22, 0x400, @ipv4={'\x00', '\xff\xff', @rand_addr=0x41a}, 0x6}}, {{0xa, 0x4e20, 0x40000007, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}, 0x108) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bind$packet(r5, &(0x7f0000000100)={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @random="27db15cb9e2f"}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r7, 0x1, 0x0, @random="1cd00c00"}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @broadcast}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r10], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.698681251s ago: executing program 5 (id=1996): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0x6000, 0x1, 0x8081006, 0xd000], 0x7, 0x4, 0x1}) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x44055) (async, rerun: 32) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000002c0)=0x2) (async, rerun: 32) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="ab96a43a5d7a69fc06b4163aa0bf857bb93e3e7e9831", 0x16}, {&(0x7f0000000340)="86ecb96bad621d02cd02da18846d03fafce977f7e9912b93309dd6ca42a9d9058b91bf9ae82260e2bb1cdb0d30baf7b5d929a6487abc7aba20d8af4af4e4944335421bcb746e60f1d5993517ece1b1b0b1fa3f468c333df7a4bd7f3ab904c4dc4cea76", 0x63}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="727bf13456ee5f6414d8f425d2b881e488ca7ccfc372f151a51f10334209e0dbe8476e6dc89bf2148ec95ab18801b7a75bffa7925ff651bad91bdf52db53628b60acbc1949af69900bbb9127e727028ee0d9c6f7748e91ff6f090aba9f451fdc4101449eea684bf77780a69748e60eeb5cc16933c7c9b90c1459", 0x7a}], 0x4, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x96}}, @ip_retopts={{0x98, 0x0, 0x7, {[@cipso={0x86, 0x10, 0x0, [{0x0, 0x5, "591c77"}, {0x6, 0x5, "88dd5a"}]}, @cipso={0x86, 0x59, 0x0, [{0x0, 0x10, "7c5acc14f26ac47941982699677c"}, {0x7, 0x12, "ca42f89cf244cb2ed61c4289c3a647ad"}, {0x7, 0x8, "0acdf4b26364"}, {0x2, 0xf, "7befc0b1433558eb6f736d6d80"}, {0x7, 0x8, "2a004653c3d9"}, {0x0, 0x12, "67d45ddf4930109212b5c0415084daf5"}]}, @timestamp_prespec={0x44, 0x1c, 0x8, 0x3, 0x2, [{@rand_addr=0x64010101, 0x46f}, {@local, 0x6}, {@loopback, 0x3}]}, @end]}}}, @ip_tos_u8={{0x11}}], 0xe0}, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000600), 0x101380) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1c1ef3b2560c9b3, &(0x7f0000000640)=0xfffffffc, 0x4) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000680)) r5 = getpid() ptrace$ARCH_GET_CPUID(0x1e, r5, 0x0, 0x1011) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000006c0)={0x3, r4}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r1) (async) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000780)=@req={0x28, &(0x7f0000000740)={'erspan0\x00', @ifru_mtu}}) (async) sendmsg$rds(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000007c0)=""/194, 0xc2}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/211, 0xd3}, {&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f0000000b40)=""/191, 0xbf}, {&(0x7f0000000c00)=""/90, 0x5a}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/4, 0x4}, {&(0x7f0000001cc0)=""/77, 0x4d}, {&(0x7f0000001d40)=""/4096, 0x1000}], 0xa, 0x0, 0x0, 0xe0}, 0x800) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000002e40)={0x2, 0x9, 0x40c, 0x10000, 0xac}) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x28, 0x1404, 0x400, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x14, 0x1d, 0x20, 0x70bd29, 0x25dfdbfe, {0x1}}, 0x14}}, 0x4080) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r1) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000004c80)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004c40)={&(0x7f0000003100)={0x1b04, r6, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x21}}}}, [@NL80211_ATTR_NAN_FUNC={0x14fc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x7d8}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x9}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "9dd35a85e8e4"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x14cc, 0xd, 0x0, 0x1, [{0xe7, 0x0, "b82e6877b4c55a5e6f3b6b0d8a319a01f871304223dc35c6f8ea5cccf8c6b47df19e7483af5ecc8316740919ab65b07c5a3a8c8b05b760085751a43da8a23f761ec8cd63a3dc6a26f1b44a5db58450ef9bb42b3eddb396ed45877eb67a45118d677b38b25bdb635a72641c66e28d226992b141909903baaa101db2179630f5e85a264a1cc43abe74f3466d66d71fe34b33c28f14c79981c3f45311f031fe0b0ff97544110dd717b369563cc1b954d2425e64a0e537b7359dc34c4b24be3d2c97372ae5d99251929e02db07539ce1ee75cb44b9b4e4539d3b5356d13e7818cdd2e3fd7a"}, {0x4e, 0x0, "34536e4da7e7f9a433bdca50b2f97b2d3a04e1fe182afa8a1486d55b1c5116a0758e06042d6f1be966dc13362e61efa33b7cfeea539aa20bdf6fd99bacf98148befc026e94cfd74aeaa3"}, {0xc7, 0x0, "6b8ddd2b2115d0a4f1c965a526f6fc84b5baab5ac12d2800ec96cb89d221865ce5e0bc09230b470a54b25e78584a3cd4fb67e67ffd17335dfcc88cbccdc8f78a0206acc65106ccd5a735dc667515ab81bd5235f7419dd03540e5420271809ec110bc3b9e849fe4a984fa607f69d26d7a076607937ace870622ff80ac6ab9bc8ce316a3ca7394ad8b2fb57dc31ac20c5cfba4dd73f39e6d22680c9533a97a020560d019ec0b040082e540b02ecb618e36688cc03071c5f77f5faa26767cf4dfb1a6dc84"}, {0xda, 0x0, "695b47db6ee72fcba35fc5edffe6af93acabbdb27cda2983ff815ac68b99c2bfc088e6972ba0622f7ac1503718591404df90ae50057f57684df41e7b8663da2f467d742150f501ff6cd5c67aff7c9bb9887ac3ede52d9deff38776cc5791820bb81bff433d977be4cb204cc99354a64903c5e2a19b358002cde6c4b278c4ccb14e9b3d0f6c2b947aa07710c671b7b7492fe1c2686b2c76b4d90ef772a0e3dc475308b2a6a64debc5b2c506985409efd44538259f5d1c695bbf8ee5bd0dbfe0156e9e373307461c17fe48330aad00b7171de1f60d5c1e"}, {0x5a, 0x0, "f40a2493557c8e57b2f7e33977f8a63e80c42ae74cb5a7d0c4f564e3512abb9eb06170d10779d4ee3884530b931bfd19467f9daf0335cefc2d13261dcc8ff0aae9ab3c1346cad7919745ce6cc785db89ad626d88388b"}, {0x83, 0x0, "3e9e83d1938faf3027e7e8dc0b060333e1a29da1626c236d5d7e630348c4d34a712f3970b7c5922a7625ce0f501f0a37443d65818e7bf9c7ac6c72952e35729f871f20481f361d2df7b128729f7e4e95b7c8c1c9e83247489b169cf2f175844aefff077ea332db425ba9129486e85f68b02b6e8469b8a0c8e4c9de1f9285c7"}, {0x1004, 0x0, "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"}, {0x5d, 0x0, "d532c6032e31ff8c1d248e763f768ba41bfe06b45ced8f115140b39ebab84c529f26cf97af015f61c6e430eb15116f2115d4b735441d3f7146eadaced6370bf590746887741772dd74f118913c1adc993991a0f381965fe6a6"}, {0xa8, 0x0, "75791f2619263659a4935e54f452948de37f58b1aaff731afb6ef903233d1d1719a10692b61f42cf7c151d42bace75c001b3c9f493bb1ce21f793fe44613590400946a71069e69b14d03e676164931baa7b50afe37591c30a1952ca27023c15ba1f76915f7393536b075eb3cec68312233cb4044d01fdbf1638a6c6b601d14ba85d2a6b8e5b17d05395556f6e10d6383f9a931a1bda1e09e16c4752f810d304afed5314a"}]}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x28, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "8ec33f4ae228"}, @NL80211_NAN_FUNC_SERVICE_INFO={0x5, 0xb, "97"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x110, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0xf6, 0xb, "fcd731dabeecc1b65ae148e43b0aaa4f60eea6b3d9ace480f623c44d6376bd80f0826b84e74d25102cb6eba094a396ae30f82df03d972070653304ce7e616c8b814ec0d9a3d80a19b2ade434c0c7677a85915f71277ae9bffdcf3ff66f33ca77de552ed7699038dd14c3228d30be1ae2b18c0dafb779670ec1373f2416bf2abf506761eb3afc5f3cd3780a6b260ec17f8a3aa381b97ab896fc24d102c7be3ca012b01430baf916e87661b530578a38ed064a85d0eeb59aa90a5ffa9162e34de92d68e44ceaf39cfbb471211f2ee31534c7152298d5f03c4c878df0ab311b523edb79806987dcf2f36c5a5a93c50d5f0c0e67"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}]}, @NL80211_ATTR_NAN_FUNC={0x210, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x1}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1ec, 0xd, 0x0, 0x1, [{0x92, 0x0, "5da67a02ac816fb3d2b9abafc1b58ae4c5c2f6ef1738990599badbbf62c8555fb5235c1c214660091c18ae200d6c1e08ced33a4cfe6c956e71e203eb68f4f4a0f6c2ae8f2bcd0b4de7fec11e18efb4657a0f77a37c27f0a06ea6e4724d4e32fba7ad4ff7b5cab4435000ea5fc7aa4f6986ee2710740034b7d2db0cdecaa746324e56643d68e37c72c47872cd8e21"}, {0x76, 0x0, "3eb12ed03920da6c41a8dcb7a1ddbb71896ecbcb2790bf6f9d7b36c2bd56e7bcddd69f3e6182bf3f4db7d550ad070857808618da04df601b6e1c6b187ae253c04631be9169d2fbf1549fefb0ea940c3df2428ca4866bfc284c06fdd3d415c98fc8b3f42b60e7bf295e2bb654e4665a23afca"}, {0xdb, 0x0, "da05a6f53da25efd54319d8062b37b7b486eef0c98b2a9ebd2791f7c3a302bd5eb329be4a3b1e387a940624a63f4c5419faf4c2c7009ab08e876167ef02bb764dfdb1c42b3e062ad1c8fd80f0816f7375eb0c4ccc9604afb059a68ca8b675eee9766ded2367f20b8da05e3555f58dafe31e28cb7e7e689f6545b14427f95245d5d5a9fa34a1e3c670811229ca343d93ffd042cff489481c2a9427da89d040398b9c26f7f4647d9bbcf35abfbfc89427271fbaa2aee3b2565a8f31dfab6fe8b4110a6aea20f4d0c44dccf8bf23ee9c65fea55129e249232"}]}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xb0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x9c, 0xd, 0x0, 0x1, [{0x95, 0x0, "4278a04880610e95d0e94c4f17ff9ef0273eca2ddfab85e12149b17d06b957c2ef589374a59d572cd3b241479037e453bb03050b5885118afadb3a84b7b365b3cc9cd8ea33c3cda2cddd04281fece7ec048ed11087dcafc91147c2dad0a3e620654fb08f2340eb1dd301cf252239aef92e3331eba27cd4fb4c435e7b70881e3e4eabc0b6b9c44353c8a9b1f0782749c64f"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x74}]}, @NL80211_ATTR_NAN_FUNC={0x1c0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_SRF={0x194, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x5}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x28, 0x4, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}]}]}, 0x1b04}, 0x1, 0x0, 0x0, 0x1}, 0x4800) (async) preadv(r1, &(0x7f0000004d80)=[{&(0x7f0000004cc0)=""/160, 0xa0}], 0x1, 0xd, 0x8) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000004dc0)={0x40, r4, 0x2a, {0x3, 0x4}, 0xdc}, 0x1) (async, rerun: 32) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004e40), r4) (rerun: 32) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000005040)={&(0x7f0000004e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005000)={&(0x7f0000004e80)={0x160, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x542d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x108, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcb0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd97b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28000000}]}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000004}, 0x6000) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000005080)={0x10}) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000050c0), 0x103000) (async, rerun: 32) recvfrom$packet(r1, &(0x7f0000005100)=""/247, 0xf7, 0x40000001, &(0x7f0000005200)={0x11, 0xd, r2, 0x1, 0xfd, 0x6, @remote}, 0x14) (async, rerun: 32) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000005300)={&(0x7f0000005240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000052c0)={&(0x7f0000005280)={0x34, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x41000) 10.425846812s ago: executing program 5 (id=1998): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000001c0)={0x80}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0xc0046209, 0x0) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0xc0046209, 0x0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 9.921248409s ago: executing program 5 (id=2000): syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000a1d8ff20f20c506242460102030109021200e7ff031000d9f714634dc2a2572df1a3c0da600904361000c703e8083a0f4124c926ca13e997dd9a840ade4489b67f30137018242713725b37c60efc8d71109c5f7773b11863c242f0b5a3492571b767f764c5ad7e"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000000000002004e24ac1e00010000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004"], 0x290) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{}], 0x0, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000880)="2665660f2ba6130066b8fbffffff0f23d80f21f8663580000090663626660f3a0eec0766b830960f070f23d80f21f86635000000b00f23f80fc7230f870300660f3882ad0080baf80c66b8ea89408e66efbafc0cb80600ef260f01c90f06855103", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x97d082c5b67cf4a) 9.190105325s ago: executing program 4 (id=2001): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0xffffff80}}}, 0xb8}}, 0x2c000010) 8.950573132s ago: executing program 4 (id=2003): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='stack :://'], 0xf4) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7fffffff, 0x6}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x5}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup2(r3, r4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) dup(0xffffffffffffffff) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) umount2(&(0x7f0000000140)='./file0\x00', 0xa) socket$inet6(0xa, 0x2, 0x0) 8.583199021s ago: executing program 0 (id=2006): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x8d2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x2b4}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000300)={0x2, 0x3}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x50}, 0x1, 0xba01}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@generic={0x0}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) r5 = signalfd(r2, &(0x7f00000000c0)={[0x80]}, 0x8) io_uring_register$IORING_UNREGISTER_NAPI(r5, 0x1c, &(0x7f0000000100), 0x1) 8.184741471s ago: executing program 5 (id=2007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) r2 = openat(r0, &(0x7f0000000580)='./file0\x00', 0x2a5943, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$cgroup_ro(r2, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r1, &(0x7f0000001fc0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x80000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) io_setup(0x7, &(0x7f0000000100)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0xe7660fde, 0x114}}, './file0\x00'}) io_submit(r4, 0x4, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x400, r0, &(0x7f0000000200)="58eecc4467f5ff1533e4238d9bae689636bb9dce489b820f5d86cb4154a9dd81cd74471968b7d1cd55fa29b3d924a04ddb4c5da81f9d394af83da9689a926388e706de0c247d6be575fbed2146a77bdf5fe7d0045589989b2e0801", 0x5b, 0x246, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0xfff9, r0, &(0x7f0000000280)="0e4640a12b5bf185fc007599876b99911d6967a5861de2cf3ea63eee7ab46282d33638b48f16d97cb9b5", 0x2a, 0xe, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x1, r5, &(0x7f00000003c0)="611549028d7cd258493c1945d861f51ad2ed4c27fc28e65aab56270d534cfb3f607509c8134c41392137313a567c4e13bc65f21b3bcd6b681a3a34ce495752696c79890e98608673a2c66d5fe1e607458501300c14a150a16746662679dbb818c90fb4d0334772", 0x67, 0x3ff, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000480)="74d4ea1019770c0a60b03ac5bfc076ae8a8fe907c2490ccf7a4de7d6a63692", 0x1f, 0x14f08217}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 7.686021001s ago: executing program 4 (id=2010): syz_emit_ethernet(0x2e, &(0x7f0000002ac0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @dev={0xac, 0x14, 0x14, 0x16}, {[@end, @ssrr={0x89, 0x3, 0xbc}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6.654568421s ago: executing program 3 (id=2013): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x2, 0xfffc, @loopback}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000100)='_', 0x1}], 0x1}, 0x20040010) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000240), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff1}, {0x1f}, {0x7}}}, 0x24}}, 0x0) 6.305699356s ago: executing program 4 (id=2014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) (fail_nth: 4) 5.442230667s ago: executing program 5 (id=2015): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000dc0), 0x101, 0x800) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) fcntl$getown(r4, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r5 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = getpgid(0x0) kcmp(r6, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r5}, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r7, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc00) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) syz_pidfd_open(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') 5.347840144s ago: executing program 0 (id=2017): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000040)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f0000ffa000/0x4000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) dup(r4) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r6, @ANYRES64=r5, @ANYBLOB="ed"], 0x20) 5.28613831s ago: executing program 3 (id=2018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000180)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fd4000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009"], 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x60, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x40c5}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) (async) syz_usb_connect(0x2, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101efff020dbc"], 0x0) (async, rerun: 64) pipe2(&(0x7f0000000040)={0x0, 0x0}, 0x0) (rerun: 64) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r9, 0x80045518, &(0x7f0000000000)=0x1) (async) close_range(r8, 0xffffffffffffffff, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r10, &(0x7f0000001ac0)=[{0x0}], 0x1, 0x5f, 0xfffffffc) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x40, 0x7f, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x3d, {0x9, 0x21, 0x41, 0x0, 0x1, {0x22, 0xebc}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x2, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x2f, 0x9, 0x3}}]}}}]}}]}}, 0x0) (async) close(0xffffffffffffffff) (async) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000002c0)={{0x0}, 0x0, 0x88}, 0x20) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) 4.751984706s ago: executing program 3 (id=2019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001000210400000000fcdbdf250000003f", @ANYRES32=0x0, @ANYBLOB="adffa88800000000500012800e0001006970366772657461700000003c000280080014000e000000060003000700000008000d0005000000060002001ef7000005000b000f00000006000200030000000800010026"], 0x70}}, 0x0) 4.345611968s ago: executing program 3 (id=2020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='timerslack_ns\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) ioctl$KDADDIO(r2, 0x4b34, 0xffffffff) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744250012de000000ff1c24", 0x45}], 0x1, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x600800, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000040)="e2628541a5401bc6f1da26a1dbac00565f8f9403ac3a91fe0aa8de45682de039778e8ff9936df59762ba8bc569222fc27b434da9a4629cb7b5bea21f4b8125077b7db08f19e56577c2fd35e15784ecc422f1ab5b38a4098b5237aab541e4d7cbd2bb496aabbf061af6e07c53822355ce") ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x5, 0xa, 0x9, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x33a, 0x3, 0xffffffff, 0x4, 0x9, 0x800005, 0x6c], 0x2000, 0x1000d6}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="040012000400000000000000e9ffffffff200580", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.669045468s ago: executing program 0 (id=2022): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18002e000000000000000000ab02000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x9, 0xff7, &(0x7f0000001840)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.270654876s ago: executing program 0 (id=2023): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x4, 0x300, {0x0, 0x0, 0x0, 0x0, 0x20111}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x4c}, 0x1, 0xba01}, 0x8810) 3.010341246s ago: executing program 0 (id=2024): pivot_root(&(0x7f0000000300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_pidfd_open(0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) inotify_add_watch(r2, 0x0, 0x21000900) setsockopt$inet6_tcp_int(r2, 0x6, 0x6337cffbbea7b20e, &(0x7f0000000180)=0xd, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x521000) ioctl$CEC_ADAP_S_PHYS_ADDR(r3, 0x40026102, &(0x7f0000000080)=0x33fc) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x7c82d684cb3b4396}}, 0x10) r4 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r4, &(0x7f0000000040)="e46f4343", 0x4, 0x400000c, 0x0, 0x0) sendto$inet(r4, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r5, 0x0, 0x7ffff000, 0xfb) socket$nl_sock_diag(0x10, 0x3, 0x4) 2.601626269s ago: executing program 5 (id=2025): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x202400, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r3 = syz_open_pts(r2, 0x141601) fcntl$setstatus(r3, 0x4, 0x102800) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, &(0x7f0000000140)) close_range(r4, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="400100001000010028bd7000ffdbdf25ff0100000000000000000000000000017f0000010000000000000000000000004e23000020008000000020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001a0000000000000000000000000001000000206c000000ff020000000000000000000000000001feffffffffffffff00000000000000000000000000004b8d0100000000000008c802000000000100060000000000000000000000000004000000000000000000ffffffffff1f000008000000000000000000000000000000040000000000000000000000090000000000000000000000000000000200010003000000000000000800180009000000480003006465666c61746500"/248], 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f001020301090200"/36], 0x0) 2.494582539s ago: executing program 4 (id=2026): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000080)={0x7fffffff}) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) (fail_nth: 45) 2.326830741s ago: executing program 6 (id=2027): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1000001}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/180, 0xb4}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000006080)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000003f40)=""/4110, 0x100e}, {&(0x7f0000001ac0)=""/4109, 0x100d}], 0x4}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 2.321453608s ago: executing program 0 (id=2028): r0 = memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf85}, 0x94) syz_usb_connect(0x4, 0xbbb, &(0x7f0000000e80)={{0x12, 0x1, 0x300, 0xc6, 0x29, 0xca, 0xff, 0x12d1, 0xe198, 0x3bf8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba9, 0x4, 0x0, 0xe, 0x40, 0x8, [{{0x9, 0x4, 0x12, 0x7, 0xe, 0xff, 0x5, 0x4a, 0x2, [@generic={0x64, 0x8, "59ba3c6d6e1b4907a8dad05f378b0d6612255b8e14d0d7c9987ed90ce36293fe5e2aa98213d5fb150c24d217f5fb428e3a11dfc0408cb272bbead17e8fe570cd7d981db2a545378920b1bbadc080bcbd177b9c3e8fd9ae8be3002141b93a09ead1f5"}], [{{0x9, 0x5, 0x80, 0x3, 0x8, 0x9, 0x0, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x8}]}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x3f, 0x0, 0x3}}, {{0x9, 0x5, 0x2, 0x1d, 0x20, 0x8, 0x5, 0xfc, [@generic={0x8b, 0x9, "b5a06360d5c88502fe1dc429cd20da75ef724327adc54c32fc4de4b541a2a72726ca0c4aba93b6df9b2d5c90d56bdd33e42008599809a3b269564a8e3404751dde84dfcde87b304fc1310d62b6d4c70f52e9726775c36a58405e22e4f36c7b2496eba83a645be624e8047eebadab42ac575dc3acb87dccf13f3c63773930b85f19ed24a98041ba2b6b"}, @generic={0xec, 0x11, "15da199098f0b28c81496e7e4995cbb0490d20b6980cbc7f3bf138bd6455c53cb53efe1e3c865784e18cb7bf99c023ca243feb63bbb276b62ee1de52a8bad9097fa7f617d77a24be9954ccd6e876807c376b7a41997ec34493e94ca0bf427ed878ba7546c3d02570780f445023a245ca2e4a2744f016f0ce482c1e21ac4a6a4341ecb50b20a56eacba61a1410f2c09da5c3bc171063ffd8e66163cf0ef425b1712625a357d06898554da9c973256b845bb381797d093e1d26a19eee62713dae96d1a50ecf6cdc047171fdbbf0de8925712ff1d5bad7d96c62facee785cb33254843902f4a0c95540310b"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0xd0, 0x2, 0x10}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xd, 0xc0, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x1, 0x3, 0xf, [@generic={0x18, 0x23, "c20f9c7ca38a51996f6d4471d966f6f6fe18a66bbb42"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x3, 0x7, 0x5}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x5}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x4, 0x5, 0x40, [@generic={0x47, 0x5, "9c60d884b2a5c97b4ccef01972f8ccdd0b41edfc9983d8059a39ade2a8df7ae3aae5ed902083dafd61cef495aa7f64829cc1e092a3b0ef9a40bd5ddf75c575360ca53aff6b"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x7f, 0x42, 0x6, [@generic={0xc7, 0x22, "bd2c25687308a42bd446adba5295aaa7a06f40f567827e8f519a65e5388eb655f572b245b157bd1aea8922fac6bb48e5408bcac8ef79dcf830098d6cbc13270ec3db2f7bfcbaf9d63374706fb0034ecfcafbc1831e9ed51f89b604e98ae278e8d12bbd523db36bae30960fce8db551c07b948d74ddb2bce5468ab59296e9a2032b1659d6ddd431844dd5b6c7f2f670804b19cb0b6983ce01e5e302b6e5bdba8185cf1ce80b6701d910bee0a5873eac83fc28a35d34405caab321a56ee0f9e6d5ddd37c9bec"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc0, 0x110}]}}, {{0x9, 0x5, 0x4, 0xb3b4bde0406609d0, 0x8, 0x2, 0xc3, 0x9}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x8, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x8, 0x3, 0xf4}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x8f, 0x7, 0x1}}]}}, {{0x9, 0x4, 0x89, 0x8, 0x9, 0x86, 0x20, 0x26, 0x9, [], [{{0x9, 0x5, 0x4, 0x4, 0x6af, 0x7, 0xac, 0x7}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x3, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc1, 0xe, 0x2}, @generic={0xeb, 0x21, "1b31e985afde5423949c67c82566160fe8344029803e07dcc165572a0adac399a3ccde0ce6220f4f490476545ee4a6d11039ad29dfbdc7fe032bb13ef1fa9b1377d527a2390ca0b7409e8a95beeb05565e7c7793900be9f82ba41e260457329a6973167fd75368f8dbfd9e6f457e53dd4ac15ea13173aa66c1d64481e934c5b0700fc5f4e33dad3d647e189be5b93e69dc374cc41474f19bdca2d5bc0151bee9757490050d945d267990b4e2ef8e4098a13cf0d9ecd3895d2a720c187bc2449fc7eaa8f60b029ce55a8fca6b00940da85430acd2f1a7e08730c9cb43db899402c9e6c964b8572222cb"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x3, 0x9, 0x7}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x2, 0x2, 0xd8}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x4, 0x42, 0x7, [@generic={0xd9, 0x7, "b33963eb62e6b5b08d2fa1ccd50e80b52168966213f5dec331429d36ae7703f5a3520281659586f1d11df237895e9e0b4e97d134827ada359babe2a58610fbe4567974490b32949d9829fe1632b62ee4abe40b0a9c5c8edac5e1ae3b34c7ec7ef27ff43e2ea8287516ba243676bd315cdbc7fce4cffd9d6c3349a1d25bfd900ef48405463076a1e5f77cd3c24910b97ee0f31159c9a03dfdae1eb04b72a4b183981d01df5e78829cdfc67adc7afeea0f991e5c1892e2ce6f8f90559734a3c3f0e2991899cae7147568fe2916a1d78db4fb2ede81ac37a8"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0xc3, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x3}, @generic={0x77, 0x30, "30d8f670db33e0ecd0ba164ba64a77a34ad3b65abe5f0944fd33cadb1b45d9412bd176d8f841fd801368d890a060b46ac0bf159544c11b9ee1d6abd7d9bfdc6cbc1c53aff0b9ac557d9ffa4a248e39aca1d33ed4f03b856325a995321a7adf1b3f2ab2c757f868ebab985c55ad7fa8b023984cf594"}]}}, {{0x9, 0x5, 0x7, 0x11, 0x200, 0xfb, 0x3, 0x3}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x4, 0x2, 0x3, [@generic={0xeb, 0x7, "c48ba6e362d6b908c514be97e39051e0886d4b18383c5a188da999dd2bf56a5c0c9e21f446c78cc91253e7d746724aa0a86118dbda3bc94bbcf40ec202a21066874d691baebb109f5fbf3e3e00ac3d91043b42c5823b9506ac5d75202a880969d1159d328924afa636d1c03887479cee673bd009cc6a1c1d8aa238779e528789226b36ccdf5949f01fc63cd7b6a3f20f40df86b0fab2bdda7976e2bf8912a31cc6389f74f54cbd7c52eda2b6bdfb4a6b6c112de2467e9d9be7adf6eb01e21b970825745d74dec7a3b61a722ce1857e2da4520e1e50f800a9bf1f9ab6229edb3729f5eb003f4cd8ea53"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x8, 0x43, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xffc0}]}}]}}, {{0x9, 0x4, 0x3f, 0x68, 0xa, 0x83, 0x95, 0xd8, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x1}}], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0xbb, 0xfc, 0x2, [@generic={0x5c, 0x5, "12f1730df4b797c4a9ff63debe8280db2a506c1cc4a85fdc600625203df12556fe28e619b01c567b699c2f37967fe4ff8aeafe79c81536170b9690c2c9562b2cfb725508ae2fd0a11e9257a14f9013babace8de94ec9c69af7bb"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xa, 0x0, 0x7}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x2, 0x9, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x8, 0x3, 0x0, [@generic={0xc7, 0x26, "a7611f74034170524c176f41e2dcf1abb8948152ff56f2fb360770d6f70c0ff2859176edefcaf5120d5d5154a0299486af1544fa91feb26bfd27682c2300b3a73597544a1f7f4e7398795d43dd64895ec9aa286d0901b68d95c3b9135b707de077c6a2b7197e70ab7fa54eaba6cd8155ccff91c874a20ebfde591e7903b684ff9b92ba9a895d38075337c4482894fe0c1cad67907902662350fb2928fb28b6edc39dde6975c4bb0f014de294a9e399a34f6e385f1873009274e18d33a5a368a47fdca76641"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xdc, 0xff01}, @generic={0xab, 0x21, "39c40ed9841b0b4d45cb5527596d439c0283b4692ff75a1f1dc2600b086eb64b790bd1ddacf7e05a3c5286a17febb3163f69355bcf1622046def7ca0b0ea4598be44917ff0911bea4c8c8c418419ac83aba9f5b5f0fef2a8d8e98d73ebae3ee1a617b797e8e09184786c0004d7f687cd7f98db948409ec31bdbf0bc27d6685e0525f08c53c17685ce85793a590913d5ba20308b97d2ba974d53e5ecfd346339f633b4570f82e9fdb9d"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xd, 0x0, 0x10}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x7, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x70, 0xc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x40, 0x4}]}}, {{0x9, 0x5, 0x7, 0x1b, 0x40, 0x80, 0x7, 0x5}}, {{0x9, 0x5, 0x4, 0x2, 0x50, 0x22, 0x6, 0x5}}]}}, {{0x9, 0x4, 0xa4, 0x80, 0x4, 0xff, 0xff, 0xff, 0x2, [@generic={0x8f, 0x22, "54fa4fc0a10e56fd849b21fd6ca507c9f5e5ecbf3a0dfad5373ba1be8a160ac187886eb02d578172ef3bbede5ea450041811d3b8d8343f2b99748eb4e8db813dda369ee32b030c1dee011cea185660a4dcfa851a33481a61bfff98723654d8d459c19a83d7196b46a34bf8e7ce08adc11b00b6a091179839732472e88148e61ed7fb7dd13391da8186d9fe1537"}, @uac_as={[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x8, 0x6, "dc46a97a7d690a51"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0xe, 0x3, 0xf, [@generic={0x90, 0x30, "9d63c6d5b86253451a5f5addfc78b927e7ff61542d19ffee88fa847aa8b9ea87d27a8f63e8e419eb77987a700a6cbc54c379eef6d71e98ddb80ac7c725cb0ad763dc9a11f6e6e86d3bfd00367ef9e60855cda164b1d077019384a869efee02ae75e8b7409c14a3b828b300ab7aa5bdf1bcbcf86cbffd59e127c8efdbd314eb0117809e87445ac8a429eaed97cd6d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0xc, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x8}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0xff, 0xd, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x83, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x40, 0x5, 0x0, 0x0, [@generic={0x9f, 0xf, "fca0cde94697c0a634b68f62e92337afdf2dd27ffeb620f56810353cd73c84fd12175429d262fdcf820574e427ce4ca7ff7901c81354ecd7f7544c74392f8d9872f9962f0ba3285dee44b6f0f7bd2d4162bb5d980c5e8e11bf8baaed303fa3311103db144c38b673ffeceeb93682f19a6ed0b17f893c4469199b49e6a4d48d0efc8fc728f6701ed13a7c799df59e91f53159aec9501461a9bd598ebd0a"}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x3, 0xf, 0x2, 0x40, 0x2}, 0x12, &(0x7f0000000080)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x8, 0x5, 0x7}]}, 0x6, [{0xb2, &(0x7f0000000340)=@string={0xb2, 0x3, "b0024736e0ffb927d4243509966fd3316e127e26ba8bdf2e34238fa782140ed413a5038ae251fc3b55c2ee31b490646cfc746b8243d25086c907801c9d11561f218edce9ad2d40647072c557e0f683501161f06d4da481e167b50cdcbb0195911dfdcc547ff4ccc90fc0c129e71747f8ffb3688de4c43a49f7a856dea83931668326114d932cf46d1c1947c48b61c549caf4fc87255051469929574db1e0a0a975d0e0f32419b98b94abf05b2ae8753c"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x5a, &(0x7f0000000280)=@string={0x5a, 0x3, "15bb59eadaa876f7a83ca50682fc4b48eaeb729806c86b694dd973045d95c2cbe998f00e14e5515dc1424964303c6dd11b455b7933d1709aac9d6f83a48524aa95bd645ff6f48bea2c5254277cf3971c258075a2746b49f0"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x443}}, {0x20, &(0x7f0000000440)=@string={0x20, 0x3, "9011b0ee90938cd49fa6774f9cc9e79e36d56c293ef262156066609b0385"}}, {0x8b, &(0x7f0000000480)=@string={0x8b, 0x3, "9699517d55909f6b1a3737162973a6e5c0d0361bc3d13cdff587457d6c4f80f1df4a36050d4ab597f717f600f3b174bfef7cca0aa0ea35da44fc98656c145a0f54dd3befe193bd4f6b8c7eacf4e030df84ef25a28004ecc1698e80f418fa38436024072a4ead408a501a4e0ade220365d369ed52b22a78163f99219bce19873f0f5336b91549fdcaa0"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x40, 0xa, 0xc, {0xc, 0x6, "0a5d9e6d6c149bbe536b"}}, 0x0, 0x0, 0x0}, 0x0) 2.076710087s ago: executing program 6 (id=2029): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300090a0000feff000000000000000300060000000e0002000000fb0000090000000000000000020001000000000000e0000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) 1.671304518s ago: executing program 3 (id=2030): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}, 0x1, 0xfdffffff}, 0x84) 1.400116921s ago: executing program 6 (id=2031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173683a6e6574"], 0x64}}, 0x7000000) 1.192028081s ago: executing program 6 (id=2032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000030000000000000000bbfe80000000000000002f97d5921279cc00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 1.082227043s ago: executing program 3 (id=2033): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0xc4, 0x5, [{{@in6=@empty, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@mcast1, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x17c}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x7c61d607c6d94c11, 0x0) socket(0x2, 0x80805, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x201, 0x20, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000003dd60000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240"], 0x8c}, 0x1, 0x0, 0x0, 0x10000182}, 0x4000080) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x1f, 0xcd, 0x1b, 0x8, 0x10cf, 0x5503, 0x75af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x9, 0x10, 0x3, [{{0x9, 0x4, 0x18, 0x2, 0x1, 0xb4, 0x1d, 0x3f, 0x1, [], [{{0x9, 0x5, 0x85, 0x3, 0x20, 0xff, 0xa, 0x40}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000040)=0x101, 0x4) dup(r0) 1.014457546s ago: executing program 6 (id=2034): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [], {0x14}}, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002800018014000400000000000000021fff00ffffac1414aa060001000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) 0s ago: executing program 6 (id=2035): openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000dc0), 0x101, 0x800) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) fcntl$getown(r3, 0x9) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r4 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = getpgid(0x0) kcmp(r5, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/ [ 484.140610][T11384] dump_stack_lvl+0x189/0x250 [ 484.140632][T11384] ? __pfx____ratelimit+0x10/0x10 [ 484.140654][T11384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.140671][T11384] ? __pfx__printk+0x10/0x10 [ 484.140690][T11384] ? __might_fault+0xb0/0x130 [ 484.140718][T11384] should_fail_ex+0x414/0x560 [ 484.140740][T11384] _copy_from_iter+0x1de/0x1790 [ 484.140754][T11384] ? __lock_acquire+0xab9/0xd20 [ 484.140775][T11384] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 484.140795][T11384] ? policy_nodemask+0x27c/0x720 [ 484.140814][T11384] ? __pfx__copy_from_iter+0x10/0x10 [ 484.140832][T11384] ? set_page_refcounted+0xa0/0x1e0 [ 484.140852][T11384] ? page_copy_sane+0x4e/0x280 [ 484.140867][T11384] copy_page_from_iter+0xdd/0x170 [ 484.140885][T11384] tun_get_user+0x1d7b/0x3e20 [ 484.140905][T11384] ? tun_get_user+0x6f6/0x3e20 [ 484.140924][T11384] ? aa_file_perm+0x44d/0x1550 [ 484.140938][T11384] ? __pfx_tun_get_user+0x10/0x10 [ 484.140951][T11384] ? _parse_integer_limit+0x1ae/0x1f0 [ 484.140978][T11384] ? __lock_acquire+0xab9/0xd20 [ 484.141002][T11384] ? ref_tracker_alloc+0x318/0x460 [ 484.141021][T11384] ? __lock_acquire+0xab9/0xd20 [ 484.141042][T11384] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 484.141066][T11384] ? tun_get+0x1c/0x2f0 [ 484.141083][T11384] ? tun_get+0x1c/0x2f0 [ 484.141095][T11384] ? tun_get+0x1c/0x2f0 [ 484.141111][T11384] tun_chr_write_iter+0x113/0x200 [ 484.141127][T11384] vfs_write+0x5c9/0xb30 [ 484.141150][T11384] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 484.141164][T11384] ? __pfx_vfs_write+0x10/0x10 [ 484.141196][T11384] ? __fget_files+0x2a/0x420 [ 484.141223][T11384] ksys_write+0x145/0x250 [ 484.141244][T11384] ? __pfx_ksys_write+0x10/0x10 [ 484.141260][T11384] ? rcu_is_watching+0x15/0xb0 [ 484.141278][T11384] ? do_syscall_64+0xbe/0x3b0 [ 484.141293][T11384] do_syscall_64+0xfa/0x3b0 [ 484.141305][T11384] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.141325][T11384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.141338][T11384] ? clear_bhb_loop+0x60/0xb0 [ 484.141355][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.141369][T11384] RIP: 0033:0x7f0956f8d69f [ 484.141382][T11384] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 484.141394][T11384] RSP: 002b:00007f0957e1d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 484.141410][T11384] RAX: ffffffffffffffda RBX: 00007f09571c6090 RCX: 00007f0956f8d69f [ 484.141420][T11384] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 484.141429][T11384] RBP: 00007f0957e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 484.141437][T11384] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 484.141446][T11384] R13: 00007f09571c6128 R14: 00007f09571c6090 R15: 00007f09572efa28 [ 484.141467][T11384] [ 484.441854][ C0] vkms_vblank_simulate: vblank timer overrun [ 484.988058][T11393] loop2: detected capacity change from 0 to 7 [ 485.028621][T11393] Dev loop2: unable to read RDB block 7 [ 485.037498][T11393] loop2: unable to read partition table [ 485.043418][T11393] loop2: partition table beyond EOD, truncated [ 485.049849][T11393] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 485.235740][ T24] usb 4-1: USB disconnect, device number 73 [ 485.260322][T11402] tipc: Failed to remove unknown binding: 66,1,1/0:1076511431/1076511433 [ 485.273470][T11402] tipc: Failed to remove unknown binding: 66,1,1/0:1076511431/1076511433 [ 485.346965][T11397] fuse: Bad value for 'fd' [ 485.366410][ T30] audit: type=1326 audit(1756578635.267:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.6.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ead38ebe9 code=0x7ffc0000 [ 485.408549][T11403] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 485.511430][ T30] audit: type=1326 audit(1756578635.267:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.6.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f4ead38ebe9 code=0x7ffc0000 [ 485.536966][T11406] loop6: detected capacity change from 0 to 524287999 [ 485.667890][ T30] audit: type=1326 audit(1756578635.267:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.6.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ead38ebe9 code=0x7ffc0000 [ 485.895009][ T30] audit: type=1326 audit(1756578635.267:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.6.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ead38ebe9 code=0x7ffc0000 [ 486.033084][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 486.290489][T11427] loop8: detected capacity change from 0 to 8 [ 486.365932][T11427] Dev loop8: unable to read RDB block 8 [ 486.404681][ T24] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 486.430050][T11427] loop8: unable to read partition table [ 486.437820][T11427] loop8: partition table beyond EOD, truncated [ 486.450267][T11427] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 486.634099][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 486.667283][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.700198][ T24] usb 1-1: Product: syz [ 486.710555][ T24] usb 1-1: Manufacturer: syz [ 486.736339][ T24] usb 1-1: SerialNumber: syz [ 486.793206][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 486.880705][ T7365] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 488.180173][ T7365] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 488.365889][ T7365] ath9k_htc: Failed to initialize the device [ 488.396691][ T7182] usb 1-1: USB disconnect, device number 53 [ 488.611289][ T7182] usb 1-1: ath9k_htc: USB layer deinitialized [ 489.901592][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1604'. [ 490.926983][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1608'. [ 491.107111][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'. [ 491.116361][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'. [ 491.125973][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'. [ 491.618140][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'. [ 491.627392][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'. [ 491.636577][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'. [ 492.182111][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'. [ 492.192771][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'. [ 492.219075][T11493] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1609'. [ 492.245672][T11516] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.252154][T11516] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 492.483629][T11523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1617'. [ 492.594702][ T7182] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 492.614854][ T5954] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 492.762614][ T7182] usb 1-1: config 0 has no interfaces? [ 492.777431][ T5954] usb 4-1: device descriptor read/64, error -71 [ 492.806159][ T7182] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 492.844656][ T7182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.893680][ T7182] usb 1-1: Product: syz [ 492.921740][ T7182] usb 1-1: Manufacturer: syz [ 492.954240][ T7182] usb 1-1: SerialNumber: syz [ 493.019688][ T7182] usb 1-1: config 0 descriptor?? [ 493.034962][ T5954] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 493.194957][ T5954] usb 4-1: device descriptor read/64, error -71 [ 493.304954][ T6013] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 493.305439][T11541] loop8: detected capacity change from 0 to 8 [ 493.365226][ T5954] usb usb4-port1: attempt power cycle [ 493.382350][T11541] Dev loop8: unable to read RDB block 8 [ 493.417434][T11541] loop8: unable to read partition table [ 493.451594][T11541] loop8: partition table beyond EOD, truncated [ 493.467015][ T6013] usb 7-1: Using ep0 maxpacket: 8 [ 493.474153][ T6013] usb 7-1: config index 0 descriptor too short (expected 30, got 18) [ 493.485895][ T6013] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 493.495417][ T6013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.508390][ T6013] usb 7-1: Product: syz [ 493.522677][T11541] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 493.554700][ T6013] usb 7-1: Manufacturer: syz [ 493.574802][ T6013] usb 7-1: SerialNumber: syz [ 493.596443][ T6013] usb 7-1: config 0 descriptor?? [ 493.620612][ T6013] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 493.665222][ T6013] usb 7-1: setting power ON [ 493.682508][ T6013] dvb-usb: bulk message failed: -22 (2/0) [ 493.704663][ T5954] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 493.768520][ T5954] usb 4-1: device descriptor read/8, error -71 [ 494.152929][ T6013] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 494.225101][ T6013] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 494.236553][ T5954] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 494.279751][ T5954] usb 4-1: device descriptor read/8, error -71 [ 494.300385][ T6013] usb 7-1: media controller created [ 494.415258][ T5954] usb usb4-port1: unable to enumerate USB device [ 494.445453][ T6013] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.524415][ T6013] usb 7-1: selecting invalid altsetting 6 [ 494.532832][ T6013] usb 7-1: digital interface selection failed (-22) [ 494.541059][ T6013] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 494.563732][ T6013] usb 7-1: setting power OFF [ 494.573816][ T6013] dvb-usb: bulk message failed: -22 (2/0) [ 494.591194][ T6013] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 494.609997][ T6013] (NULL device *): no alternate interface [ 494.679121][ T6013] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 494.684875][ T7182] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 494.773387][ T7365] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 494.926707][ T7182] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 494.939410][ T7182] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 494.950024][ T7365] usb 6-1: Using ep0 maxpacket: 32 [ 494.962086][ T7182] usb 5-1: config 220 has no interface number 2 [ 494.970005][ T7365] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 494.988697][ T7365] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.001293][ T7182] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 495.020644][ T7365] usb 6-1: config 0 has no interface number 0 [ 495.027398][ T7182] usb 5-1: config 220 interface 0 has no altsetting 0 [ 495.038624][ T7182] usb 5-1: config 220 interface 76 has no altsetting 0 [ 495.046847][ T7365] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 495.061083][ T7365] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.069667][ T7182] usb 5-1: config 220 interface 1 has no altsetting 0 [ 495.076994][ T7365] usb 6-1: Product: syz [ 495.081447][ T7365] usb 6-1: Manufacturer: syz [ 495.088723][ T7365] usb 6-1: SerialNumber: syz [ 495.095004][ T7182] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 495.110528][ T7182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.134183][ T7182] usb 5-1: Product: syz [ 495.146812][ T7365] usb 6-1: config 0 descriptor?? [ 495.189769][ T7182] usb 5-1: Manufacturer: syz [ 495.221363][ T7181] usb 1-1: USB disconnect, device number 54 [ 495.244507][ T7182] usb 5-1: SerialNumber: syz [ 495.253498][ T7365] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 495.267625][ T7365] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 495.583066][ T7182] usb 5-1: selecting invalid altsetting 0 [ 495.630652][ T7182] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 495.655901][ T7182] usb 5-1: No valid video chain found. [ 495.703538][ T7182] usb 5-1: selecting invalid altsetting 0 [ 495.717989][ T7182] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 495.752947][ T7182] usb 5-1: USB disconnect, device number 45 [ 495.934818][T11575] FAULT_INJECTION: forcing a failure. [ 495.934818][T11575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.951202][T11575] CPU: 1 UID: 0 PID: 11575 Comm: syz.3.1629 Not tainted syzkaller #0 PREEMPT(full) [ 495.951227][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 495.951238][T11575] Call Trace: [ 495.951246][T11575] [ 495.951261][T11575] dump_stack_lvl+0x189/0x250 [ 495.951289][T11575] ? __pfx____ratelimit+0x10/0x10 [ 495.951317][T11575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.951340][T11575] ? __pfx__printk+0x10/0x10 [ 495.951366][T11575] ? __might_fault+0xb0/0x130 [ 495.951403][T11575] should_fail_ex+0x414/0x560 [ 495.951434][T11575] _copy_from_user+0x2d/0xb0 [ 495.951457][T11575] ___sys_recvmsg+0x12e/0x510 [ 495.951485][T11575] ? __pfx____sys_recvmsg+0x10/0x10 [ 495.951536][T11575] ? __might_fault+0xb0/0x130 [ 495.951565][T11575] do_recvmmsg+0x307/0x770 [ 495.951595][T11575] ? __pfx_do_recvmmsg+0x10/0x10 [ 495.951629][T11575] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 495.951675][T11575] __x64_sys_recvmmsg+0x190/0x240 [ 495.951700][T11575] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 495.951720][T11575] ? rcu_is_watching+0x15/0xb0 [ 495.951744][T11575] ? do_syscall_64+0xbe/0x3b0 [ 495.951765][T11575] do_syscall_64+0xfa/0x3b0 [ 495.951781][T11575] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.951807][T11575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.951826][T11575] ? clear_bhb_loop+0x60/0xb0 [ 495.951849][T11575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.951868][T11575] RIP: 0033:0x7f8ffa38ebe9 [ 495.951885][T11575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.951901][T11575] RSP: 002b:00007f8ffb207038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 495.951921][T11575] RAX: ffffffffffffffda RBX: 00007f8ffa5c6180 RCX: 00007f8ffa38ebe9 [ 495.951935][T11575] RDX: 00000000000005df RSI: 0000200000000b40 RDI: 0000000000000003 [ 495.951947][T11575] RBP: 00007f8ffb207090 R08: 0000000000000000 R09: 0000000000000000 [ 495.951958][T11575] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 495.951969][T11575] R13: 00007f8ffa5c6218 R14: 00007f8ffa5c6180 R15: 00007f8ffa6efa28 [ 495.951998][T11575] [ 496.244048][ T5957] usb 7-1: USB disconnect, device number 2 [ 496.265247][ T7365] usb 6-1: USB disconnect, device number 3 [ 497.296299][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1635'. [ 497.361317][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1636'. [ 498.149749][T11609] bond0: option mode: unable to set because the bond device is up [ 498.188439][T11613] bond0: (slave macvlan3): Opening slave failed [ 498.430666][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 499.230455][T11633] loop8: detected capacity change from 0 to 8 [ 499.398996][T11633] Dev loop8: unable to read RDB block 8 [ 499.404833][T11633] loop8: unable to read partition table [ 499.417197][T11633] loop8: partition table beyond EOD, truncated [ 499.447070][T11633] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 499.755591][ T5957] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 499.924637][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 499.975986][ T5957] usb 6-1: unable to get BOS descriptor or descriptor too short [ 500.063487][ T5957] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 10 [ 500.092620][ T5957] usb 6-1: can't read configurations, error -22 [ 500.244670][ T5957] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 500.344918][ T7181] IPVS: starting estimator thread 0... [ 500.434856][T11651] IPVS: using max 45 ests per chain, 108000 per kthread [ 500.452288][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 500.469880][ T5957] usb 6-1: unable to get BOS descriptor or descriptor too short [ 500.480250][ T5957] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 10 [ 500.489749][ T5957] usb 6-1: can't read configurations, error -22 [ 500.498163][ T5957] usb usb6-port1: attempt power cycle [ 500.544668][ T6013] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 500.701751][ T6013] usb 5-1: Using ep0 maxpacket: 16 [ 500.755335][ T6013] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 500.780194][ T6013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.822399][ T6013] usb 5-1: Product: syz [ 500.831294][ T6013] usb 5-1: Manufacturer: syz [ 500.831362][T11658] loop8: detected capacity change from 0 to 8 [ 500.846428][ T5957] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 500.856931][T11658] Dev loop8: unable to read RDB block 8 [ 500.862548][T11658] loop8: unable to read partition table [ 500.875046][T11658] loop8: partition table beyond EOD, truncated [ 500.879225][ T6013] usb 5-1: SerialNumber: syz [ 500.884287][T11658] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 500.926025][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 500.932220][ T6013] usb 5-1: config 0 descriptor?? [ 500.941303][ T6013] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 500.951338][ T5957] usb 6-1: unable to get BOS descriptor or descriptor too short [ 500.982277][ T5957] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 10 [ 501.001143][ T5957] usb 6-1: can't read configurations, error -22 [ 501.265216][ T5957] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 501.285805][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 501.293463][ T5957] usb 6-1: unable to get BOS descriptor or descriptor too short [ 501.309604][ T5957] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 10 [ 501.329054][ T5957] usb 6-1: can't read configurations, error -22 [ 501.344267][ T5957] usb usb6-port1: unable to enumerate USB device [ 501.542279][T11677] usb usb8: usbfs: process 11677 (syz.3.1657) did not claim interface 0 before use [ 502.578739][ T30] audit: type=1326 audit(1756578652.497:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5038ebe9 code=0x7ffc0000 [ 502.627148][ T30] audit: type=1326 audit(1756578652.497:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz.5.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5038ebe9 code=0x7ffc0000 [ 503.404666][ T5957] usb 5-1: USB disconnect, device number 46 [ 503.971954][T11686] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 504.821745][T11721] fuse: Unknown parameter '000000000000000000050x0000000000000009' [ 504.949979][T11725] FAULT_INJECTION: forcing a failure. [ 504.949979][T11725] name failslab, interval 1, probability 0, space 0, times 0 [ 504.963218][T11725] CPU: 1 UID: 0 PID: 11725 Comm: syz.6.1674 Not tainted syzkaller #0 PREEMPT(full) [ 504.963246][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.963268][T11725] Call Trace: [ 504.963276][T11725] [ 504.963283][T11725] dump_stack_lvl+0x189/0x250 [ 504.963304][T11725] ? __pfx____ratelimit+0x10/0x10 [ 504.963332][T11725] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.963362][T11725] ? __pfx__printk+0x10/0x10 [ 504.963385][T11725] ? __pfx___might_resched+0x10/0x10 [ 504.963397][T11725] ? fs_reclaim_acquire+0x7d/0x100 [ 504.963421][T11725] should_fail_ex+0x414/0x560 [ 504.963442][T11725] should_failslab+0xa8/0x100 [ 504.963463][T11725] __kmalloc_noprof+0xcb/0x4f0 [ 504.963480][T11725] ? copy_splice_read+0x143/0xa50 [ 504.963497][T11725] ? trace_contention_end+0x39/0x120 [ 504.963514][T11725] copy_splice_read+0x143/0xa50 [ 504.963532][T11725] ? __pfx_aa_file_perm+0x10/0x10 [ 504.963551][T11725] ? splice_file_to_pipe+0x2e/0x440 [ 504.963570][T11725] ? __pfx_copy_splice_read+0x10/0x10 [ 504.963588][T11725] ? __pfx___mutex_lock+0x10/0x10 [ 504.963605][T11725] ? wait_for_space+0x24d/0x2d0 [ 504.963630][T11725] splice_file_to_pipe+0x2b8/0x440 [ 504.963652][T11725] do_splice+0xdc0/0x1660 [ 504.963688][T11725] ? __pfx_do_splice+0x10/0x10 [ 504.963713][T11725] __se_sys_splice+0x2e1/0x460 [ 504.963747][T11725] ? __pfx___se_sys_splice+0x10/0x10 [ 504.963764][T11725] ? rcu_is_watching+0x15/0xb0 [ 504.963779][T11725] ? __x64_sys_splice+0x21/0xf0 [ 504.963799][T11725] do_syscall_64+0xfa/0x3b0 [ 504.963810][T11725] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.963827][T11725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.963839][T11725] ? clear_bhb_loop+0x60/0xb0 [ 504.963854][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.963866][T11725] RIP: 0033:0x7f4ead38ebe9 [ 504.963878][T11725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.963888][T11725] RSP: 002b:00007f4eae1b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 504.963901][T11725] RAX: ffffffffffffffda RBX: 00007f4ead5c5fa0 RCX: 00007f4ead38ebe9 [ 504.963910][T11725] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 504.963917][T11725] RBP: 00007f4eae1b8090 R08: 000000007ffff000 R09: 0000000000000000 [ 504.963925][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.963932][T11725] R13: 00007f4ead5c6038 R14: 00007f4ead5c5fa0 R15: 00007f4ead6efa28 [ 504.963951][T11725] [ 505.571596][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1676'. [ 505.902692][T11734] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1677'. [ 506.197114][ T6013] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 506.357230][ T6013] usb 7-1: Using ep0 maxpacket: 32 [ 506.380011][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 506.406411][ T6013] usb 7-1: config index 0 descriptor too short (expected 36, got 31) [ 506.427661][ T6013] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 506.458168][ T6013] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.499593][ T6013] usb 7-1: config 0 has no interface number 0 [ 506.528682][ T6013] usb 7-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 506.587856][ T6013] usb 7-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 506.676008][ T6013] usb 7-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 506.724470][ T6013] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 506.740487][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.743872][ T6013] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=232 [ 506.747427][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.819325][T11742] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1679'. [ 506.876303][ T6013] usb 7-1: Product: syz [ 506.899670][ T6013] usb 7-1: Manufacturer: syz [ 506.925682][ T6013] usb 7-1: SerialNumber: syz [ 506.977579][ T6013] usb 7-1: config 0 descriptor?? [ 507.064704][ T7365] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 507.065899][ T6013] redrat3 7-1:0.83: Couldn't find all endpoints [ 507.189107][ T6013] usb 7-1: USB disconnect, device number 3 [ 507.330212][T11750] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1681'. [ 507.373246][ T7365] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 507.392311][ T7365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.411206][ T7365] usb 1-1: Product: syz [ 507.419711][ T7365] usb 1-1: Manufacturer: syz [ 507.428402][ T7365] usb 1-1: SerialNumber: syz [ 507.435409][ T7365] usb 1-1: config 0 descriptor?? [ 507.444479][ T7365] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 509.134691][ T5938] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 509.353470][ T5938] usb 7-1: Using ep0 maxpacket: 8 [ 509.405257][ T7365] gspca_sunplus: reg_r err -71 [ 509.410150][ T7365] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 509.427709][ T7365] usb 1-1: USB disconnect, device number 55 [ 509.480411][ T5938] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 509.711899][ T5938] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 509.822962][ T5938] usb 7-1: New USB device found, idVendor=0000, idProduct=0200, bcdDevice=4e.d1 [ 509.844638][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.894438][ T5938] usb 7-1: Product: syz [ 509.914823][ T7181] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 509.915618][ T5938] usb 7-1: Manufacturer: syz [ 509.933004][ T5938] usb 7-1: SerialNumber: syz [ 509.989656][ T5938] usb 7-1: config 0 descriptor?? [ 510.094924][ T7181] usb 5-1: Using ep0 maxpacket: 8 [ 510.394895][ T5938] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 510.416853][ T7181] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 510.550135][ T7181] usb 5-1: config 179 has no interface number 0 [ 510.556648][ T7181] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 510.582710][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 510.634776][ T5957] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 510.656573][ T7181] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 510.670794][ T5938] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 510.680400][ T5938] usb 1-1: config 0 has no interface number 0 [ 510.699453][ T5938] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 510.713461][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.728384][ T7181] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 510.731750][ T5938] usb 1-1: Product: syz [ 510.752089][ T7181] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 510.772953][ T5938] usb 1-1: Manufacturer: syz [ 510.782260][ T5938] usb 1-1: SerialNumber: syz [ 510.787319][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 510.795796][ T5957] usb 4-1: config 255 has too many interfaces: 231, using maximum allowed: 32 [ 510.805503][ T5957] usb 4-1: config 255 has an invalid descriptor of length 217, skipping remainder of the config [ 510.819260][ T7181] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 510.849058][ T7181] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 510.858778][ T5957] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 231 [ 510.881100][ T5957] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 510.892812][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.901699][ T5957] usb 4-1: Product: syz [ 510.908805][ T5957] usb 4-1: Manufacturer: syz [ 510.913480][ T5957] usb 4-1: SerialNumber: syz [ 510.920868][T11811] netlink: 'syz.6.1689': attribute type 10 has an invalid length. [ 510.944437][ T5938] usb 1-1: config 0 descriptor?? [ 510.962210][ T7181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.993367][T11788] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 511.079341][T11811] dummy0: entered promiscuous mode [ 511.100436][T11811] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 511.111093][ T5938] smsc95xx v2.0.0 [ 511.313538][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 511.314868][T11814] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 511.359368][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1689'. [ 511.468647][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 511.605229][ T5938] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 511.616430][ T5957] usb 4-1: USB disconnect, device number 78 [ 511.651537][ T5938] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 511.691432][ T5938] usb 1-1: USB disconnect, device number 56 [ 512.074802][ T5938] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 512.124378][ T7181] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 512.190884][T11825] FAULT_INJECTION: forcing a failure. [ 512.190884][T11825] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 512.210769][T11825] CPU: 1 UID: 0 PID: 11825 Comm: syz.3.1704 Not tainted syzkaller #0 PREEMPT(full) [ 512.210796][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 512.210807][T11825] Call Trace: [ 512.210815][T11825] [ 512.210822][T11825] dump_stack_lvl+0x189/0x250 [ 512.210848][T11825] ? __pfx____ratelimit+0x10/0x10 [ 512.210871][T11825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.210887][T11825] ? __pfx__printk+0x10/0x10 [ 512.210907][T11825] ? fs_reclaim_acquire+0x7d/0x100 [ 512.210933][T11825] should_fail_ex+0x414/0x560 [ 512.210955][T11825] prepare_alloc_pages+0x213/0x610 [ 512.210972][T11825] __alloc_frozen_pages_noprof+0x123/0x370 [ 512.210988][T11825] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 512.211013][T11825] alloc_pages_bulk_noprof+0x560/0x710 [ 512.211026][T11825] ? rcu_is_watching+0x15/0xb0 [ 512.211041][T11825] ? trace_kmalloc+0x1f/0xd0 [ 512.211056][T11825] ? __kmalloc_noprof+0x29b/0x4f0 [ 512.211073][T11825] ? copy_splice_read+0x143/0xa50 [ 512.211094][T11825] copy_splice_read+0x173/0xa50 [ 512.211112][T11825] ? __pfx_aa_file_perm+0x10/0x10 [ 512.211130][T11825] ? splice_file_to_pipe+0x2e/0x440 [ 512.211149][T11825] ? __pfx_copy_splice_read+0x10/0x10 [ 512.211167][T11825] ? __pfx___mutex_lock+0x10/0x10 [ 512.211184][T11825] ? wait_for_space+0x24d/0x2d0 [ 512.211209][T11825] splice_file_to_pipe+0x2b8/0x440 [ 512.211231][T11825] do_splice+0xdc0/0x1660 [ 512.211266][T11825] ? __pfx_do_splice+0x10/0x10 [ 512.211292][T11825] __se_sys_splice+0x2e1/0x460 [ 512.211315][T11825] ? __pfx___se_sys_splice+0x10/0x10 [ 512.211333][T11825] ? rcu_is_watching+0x15/0xb0 [ 512.211349][T11825] ? __x64_sys_splice+0x21/0xf0 [ 512.211370][T11825] do_syscall_64+0xfa/0x3b0 [ 512.211381][T11825] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.211400][T11825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.211412][T11825] ? clear_bhb_loop+0x60/0xb0 [ 512.211428][T11825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.211441][T11825] RIP: 0033:0x7f8ffa38ebe9 [ 512.211453][T11825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.211464][T11825] RSP: 002b:00007f8ffb249038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 512.211479][T11825] RAX: ffffffffffffffda RBX: 00007f8ffa5c5fa0 RCX: 00007f8ffa38ebe9 [ 512.211488][T11825] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 512.211496][T11825] RBP: 00007f8ffb249090 R08: 000000007ffff000 R09: 0000000000000000 [ 512.211515][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.211523][T11825] R13: 00007f8ffa5c6038 R14: 00007f8ffa5c5fa0 R15: 00007f8ffa6efa28 [ 512.211543][T11825] [ 512.477035][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.944671][ T7181] usb 6-1: device descriptor read/64, error -71 [ 513.116275][ T5938] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 513.135060][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.184784][ T7181] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 513.192465][ T5938] usb 1-1: config 0 descriptor?? [ 513.224207][ T7182] usb 7-1: USB disconnect, device number 4 [ 513.435021][ T7181] usb 6-1: device descriptor read/64, error -71 [ 513.555256][ T7181] usb usb6-port1: attempt power cycle [ 513.692257][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.718294][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.880452][ T5954] usb 5-1: USB disconnect, device number 47 [ 513.880539][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 513.894861][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 513.923809][ T7181] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 514.103457][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 514.155703][ T7181] usb 6-1: device descriptor read/8, error -71 [ 514.529680][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.560613][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.594760][ T7181] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 514.617504][ T7181] usb 6-1: device descriptor read/8, error -71 [ 514.726497][ T7181] usb usb6-port1: unable to enumerate USB device [ 515.013232][ T5938] usb 1-1: Cannot set autoneg [ 515.066704][ T5938] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 515.074310][T11845] loop8: detected capacity change from 0 to 8 [ 515.095884][ T6011] Dev loop8: unable to read RDB block 8 [ 515.103409][ T5938] usb 1-1: USB disconnect, device number 57 [ 515.117475][ T6011] loop8: unable to read partition table [ 515.159333][ T6011] loop8: partition table beyond EOD, truncated [ 515.200181][T11847] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 515.202854][T11845] Dev loop8: unable to read RDB block 8 [ 515.215225][T11845] loop8: unable to read partition table [ 515.221129][T11845] loop8: partition table beyond EOD, truncated [ 515.299283][T11845] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 515.716644][T11862] FAULT_INJECTION: forcing a failure. [ 515.716644][T11862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.747882][T11862] CPU: 0 UID: 0 PID: 11862 Comm: syz.6.1716 Not tainted syzkaller #0 PREEMPT(full) [ 515.747921][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.747933][T11862] Call Trace: [ 515.747946][T11862] [ 515.747954][T11862] dump_stack_lvl+0x189/0x250 [ 515.747981][T11862] ? __pfx____ratelimit+0x10/0x10 [ 515.748008][T11862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.748030][T11862] ? __pfx__printk+0x10/0x10 [ 515.748067][T11862] should_fail_ex+0x414/0x560 [ 515.748096][T11862] _copy_to_user+0x31/0xb0 [ 515.748120][T11862] simple_read_from_buffer+0xe1/0x170 [ 515.748153][T11862] proc_fail_nth_read+0x1b3/0x220 [ 515.748176][T11862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.748198][T11862] ? rw_verify_area+0x2a6/0x4d0 [ 515.748219][T11862] ? __lock_acquire+0xab9/0xd20 [ 515.748243][T11862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 515.748264][T11862] vfs_read+0x1fd/0xa30 [ 515.748287][T11862] ? fdget_pos+0x247/0x320 [ 515.748307][T11862] ? __pfx___mutex_lock+0x10/0x10 [ 515.748325][T11862] ? __pfx_vfs_read+0x10/0x10 [ 515.748350][T11862] ? __fget_files+0x2a/0x420 [ 515.748380][T11862] ? __fget_files+0x3a0/0x420 [ 515.748405][T11862] ? __fget_files+0x2a/0x420 [ 515.748441][T11862] ksys_read+0x145/0x250 [ 515.748468][T11862] ? __pfx_ksys_read+0x10/0x10 [ 515.748490][T11862] ? rcu_is_watching+0x15/0xb0 [ 515.748514][T11862] ? do_syscall_64+0xbe/0x3b0 [ 515.748535][T11862] do_syscall_64+0xfa/0x3b0 [ 515.748550][T11862] ? lockdep_hardirqs_on+0x9c/0x150 [ 515.748575][T11862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.748594][T11862] ? clear_bhb_loop+0x60/0xb0 [ 515.748615][T11862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.748633][T11862] RIP: 0033:0x7f4ead38d5fc [ 515.748651][T11862] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 515.748666][T11862] RSP: 002b:00007f4eae197030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 515.748685][T11862] RAX: ffffffffffffffda RBX: 00007f4ead5c6090 RCX: 00007f4ead38d5fc [ 515.748700][T11862] RDX: 000000000000000f RSI: 00007f4eae1970a0 RDI: 0000000000000005 [ 515.748712][T11862] RBP: 00007f4eae197090 R08: 0000000000000000 R09: 0000000000000000 [ 515.748724][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.748735][T11862] R13: 00007f4ead5c6128 R14: 00007f4ead5c6090 R15: 00007f4ead6efa28 [ 515.748765][T11862] [ 517.008117][ T7365] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 517.315962][ T7365] usb 6-1: Using ep0 maxpacket: 8 [ 517.403003][ T7365] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 517.411829][ T7365] usb 6-1: config 179 has no interface number 0 [ 517.442274][ T7365] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 517.554500][ T7365] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 517.635194][ T7365] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.695755][ T7365] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 517.703752][T11884] loop2: detected capacity change from 0 to 7 [ 517.794675][ T7365] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 517.814785][T11884] Dev loop2: unable to read RDB block 7 [ 517.834875][T11886] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 517.854319][T11884] loop2: unable to read partition table [ 517.903969][ T7365] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 517.948106][T11884] loop2: partition table beyond EOD, truncated [ 517.950189][ T7365] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.004936][T11884] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 518.169048][T11873] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 520.439562][ T5938] usb 6-1: USB disconnect, device number 12 [ 520.439579][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 520.454406][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 520.688097][T11906] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 520.840829][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1732'. [ 521.869705][T11924] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 522.214654][ T7365] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 522.414186][ T7365] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 522.430334][ T7365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.460551][ T7365] usb 1-1: config 0 descriptor?? [ 522.742720][T11945] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 522.767554][T11946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.912322][T11946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.344923][ T7181] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 523.505094][ T7181] usb 5-1: Using ep0 maxpacket: 8 [ 523.526566][ T7181] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 523.537504][ T7181] usb 5-1: config 179 has no interface number 0 [ 523.550162][ T7181] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 523.613165][ T7181] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 523.661928][ T7181] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.743028][ T7181] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 523.792025][ T7181] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 523.907752][ T7181] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 523.965664][ T7181] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.004760][ T7182] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 524.039738][T11950] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 524.167548][ T7182] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 524.177921][ T7182] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 524.224835][ T7182] usb 7-1: config 220 has no interface number 2 [ 524.382645][ T7182] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 524.500564][ T7182] usb 7-1: config 220 interface 0 has no altsetting 0 [ 524.539821][ T7182] usb 7-1: config 220 interface 76 has no altsetting 0 [ 524.568131][ T7182] usb 7-1: config 220 interface 1 has no altsetting 0 [ 524.632997][ T7182] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 524.769117][ T7182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.875121][ T7182] usb 7-1: Product: syz [ 524.890962][ T7182] usb 7-1: Manufacturer: syz [ 524.935541][ T7182] usb 7-1: SerialNumber: syz [ 525.073448][T11962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1746'. [ 525.113409][ T7365] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 525.207104][ T7182] usb 7-1: selecting invalid altsetting 0 [ 525.237034][T11963] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.295653][ T7365] asix 1-1:0.0: probe with driver asix failed with error -71 [ 525.307105][ T7182] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 525.327731][ T7182] usb 7-1: No valid video chain found. [ 525.435428][ T7365] usb 1-1: USB disconnect, device number 58 [ 525.671442][ T7182] usb 7-1: selecting invalid altsetting 0 [ 525.684188][ T7182] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 525.753360][ T7182] usb 7-1: USB disconnect, device number 5 [ 526.198499][T11973] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 526.246392][ T5954] usb 5-1: USB disconnect, device number 48 [ 526.246463][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 526.260780][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 526.486950][T11980] openvswitch: netlink: Message has 24 unknown bytes. [ 526.703592][T11985] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1754'. [ 526.751628][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1754'. [ 526.806696][T11985] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1754'. [ 527.213717][T12000] netlink: 'syz.3.1757': attribute type 21 has an invalid length. [ 527.223301][T12000] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1757'. [ 527.233222][T12000] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1757'. [ 527.300404][T12002] netlink: 'syz.4.1758': attribute type 1 has an invalid length. [ 527.422752][ T30] audit: type=1326 audit(1756578677.337:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa38ebe9 code=0x7ffc0000 [ 527.547508][ T30] audit: type=1326 audit(1756578677.337:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ffa38ebe9 code=0x7ffc0000 [ 527.574922][ T30] audit: type=1326 audit(1756578677.337:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa38ebe9 code=0x7ffc0000 [ 527.597824][ T30] audit: type=1326 audit(1756578677.337:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8ffa38ebe9 code=0x7ffc0000 [ 527.764730][ T30] audit: type=1326 audit(1756578677.667:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa38ebe9 code=0x7ffc0000 [ 527.803925][ T30] audit: type=1326 audit(1756578677.667:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ffa38ebe9 code=0x7ffc0000 [ 527.846145][T12008] gretap1: entered promiscuous mode [ 527.890734][T12008] bond1: (slave gretap1): making interface the new active one [ 527.940084][T12008] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 527.966001][T12012] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 528.165462][T12002] macvlan3: entered promiscuous mode [ 528.171008][T12002] macvlan3: entered allmulticast mode [ 528.178938][T12002] bond1: entered promiscuous mode [ 528.184946][T12002] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 528.193824][T12002] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 528.211044][T12002] bond1: left promiscuous mode [ 528.992847][ T5938] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 529.112978][ T7182] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 529.180567][ T5938] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 529.204808][ T5938] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 529.239218][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1770'. [ 529.253607][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1770'. [ 529.271782][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1770'. [ 529.309487][ T5938] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 529.347801][ T7182] usb 1-1: Using ep0 maxpacket: 16 [ 529.374855][ T7182] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.405088][ T7182] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 529.418311][ T7182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.457922][ T7182] usb 1-1: Product: syz [ 529.467642][ T7182] usb 1-1: Manufacturer: syz [ 529.482513][ T7182] usb 1-1: SerialNumber: syz [ 529.523244][ T7182] usb 1-1: config 0 descriptor?? [ 529.540109][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.565499][ T7182] CoreChips 1-1:0.0: probe with driver CoreChips failed with error -22 [ 529.729480][T12021] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 529.740891][ T5938] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 530.551484][T12048] vlan3: entered promiscuous mode [ 530.804375][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 531.204457][T12056] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1777'. [ 532.853252][T12065] openvswitch: netlink: Key 32 has unexpected len 20 expected 2 [ 532.915903][ T5938] usb 6-1: USB disconnect, device number 13 [ 533.163919][ T24] usb 1-1: USB disconnect, device number 59 [ 533.613825][ T30] audit: type=1326 audit(1756578683.527:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12076 comm="syz.4.1785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4cd8ebe9 code=0x0 [ 533.674923][T12080] vivid-003: disconnect [ 533.739032][T12083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1787'. [ 533.860822][T12089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.877704][T12089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.933870][ T7182] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 533.984842][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 534.084895][T12091] loop6: detected capacity change from 0 to 524287999 [ 534.091838][ T7181] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 534.124768][ T7182] usb 1-1: Using ep0 maxpacket: 8 [ 534.139551][ T7182] usb 1-1: unable to get BOS descriptor or descriptor too short [ 534.147425][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 534.157677][ T7182] usb 1-1: config 8 has an invalid interface number: 24 but max is 0 [ 534.166142][ T24] usb 6-1: config 255 has too many interfaces: 231, using maximum allowed: 32 [ 534.185941][ T7182] usb 1-1: config 8 has no interface number 0 [ 534.193418][ T24] usb 6-1: config 255 has an invalid descriptor of length 217, skipping remainder of the config [ 534.209494][ T7182] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 534.221384][ T24] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 231 [ 534.234281][ T7182] usb 1-1: config 8 interface 24 has no altsetting 0 [ 534.244815][ T7181] usb 4-1: device descriptor read/64, error -71 [ 534.253409][ T24] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 534.279022][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.291769][ T24] usb 6-1: Product: syz [ 534.297653][ T7182] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 534.307592][ T7182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.316832][ T7182] usb 1-1: Product: syz [ 534.321653][ T24] usb 6-1: Manufacturer: syz [ 534.328653][ T7182] usb 1-1: Manufacturer: syz [ 534.333586][ T24] usb 6-1: SerialNumber: syz [ 534.339685][ T7182] usb 1-1: SerialNumber: syz [ 534.417990][T12076] vivid-003: reconnect [ 534.515529][ T7181] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 534.793289][T12097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1791'. [ 534.802495][T12097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1791'. [ 534.974457][ T7181] usb 4-1: device descriptor read/64, error -71 [ 535.163493][T12097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1791'. [ 535.353692][ T7181] usb usb4-port1: attempt power cycle [ 535.517959][ T24] usb 6-1: USB disconnect, device number 14 [ 535.662280][T12097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1791'. [ 535.718160][T12097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1791'. [ 535.774747][ T7181] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 535.784742][T12097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1791'. [ 535.808899][ T7181] usb 4-1: device descriptor read/8, error -71 [ 536.064800][ T7181] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 536.128943][ T7181] usb 4-1: device descriptor read/8, error -71 [ 536.163230][T12097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1791'. [ 536.241330][T12097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1791'. [ 536.267432][ T7181] usb usb4-port1: unable to enumerate USB device [ 536.284881][T12097] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1791'. [ 536.856799][ T7182] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 536.884794][ T7181] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 536.922059][ T7182] usb 1-1: USB disconnect, device number 60 [ 537.074260][ T7181] usb 6-1: Using ep0 maxpacket: 8 [ 537.090713][ T7181] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 537.099190][ T7181] usb 6-1: config 179 has no interface number 0 [ 537.107252][ T7181] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 537.128546][ T7181] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 537.128649][T12125] openvswitch: netlink: Flow key attribute not present in set flow. [ 537.156689][ T7181] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 537.260859][ T7181] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 537.303248][ T7181] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 537.354851][ T7181] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 537.389780][ T7181] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.425187][ T7182] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 537.438538][T12116] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 537.574709][ T7182] usb 1-1: Using ep0 maxpacket: 32 [ 537.594983][ T7182] usb 1-1: unable to get BOS descriptor or descriptor too short [ 537.622766][ T7182] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 537.741102][ T7182] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 537.764348][ T7182] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.805983][ T7182] usb 1-1: Product: syz [ 537.820050][ T7182] usb 1-1: Manufacturer: 桬趎쑟ꖐ㧿룭ᜈ缀蜯㋅菙뷅癘븞葉ൃᛷ쬷幑蘮ㆩ椮믁鉫꓿瞟瓅獤즶넛♊矴⤓꒙ᥩኔ굊柣苷⊿ᔥ [ 538.037157][ T7182] usb 1-1: SerialNumber: syz [ 538.664880][ T7181] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 538.697179][ T7182] usb 1-1: Cannot retrieve CPort count: -71 [ 538.707992][ T7182] usb 1-1: Cannot retrieve CPort count: -71 [ 538.714104][ T7182] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 538.778407][ T7182] usb 1-1: USB disconnect, device number 61 [ 538.950854][ T7181] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 538.959475][ T7181] usb 4-1: config 0 has no interface number 0 [ 538.972298][ T7181] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 539.039708][ T7181] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 539.049974][ T7181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.069503][ T7181] usb 4-1: Product: syz [ 539.073987][ T7181] usb 4-1: Manufacturer: syz [ 539.098458][ T7181] usb 4-1: SerialNumber: syz [ 539.173304][T12138] ucma_write: process 145 (syz.6.1803) changed security contexts after opening file descriptor, this is not allowed. [ 539.212559][ T7181] usb 4-1: config 0 descriptor?? [ 539.255836][T12135] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 539.269960][ T7181] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 539.435262][ T7181] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 539.511248][ T7181] usb 4-1: USB disconnect, device number 83 [ 540.489272][ T5938] usb 6-1: USB disconnect, device number 15 [ 540.489278][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 540.489321][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 540.511933][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.553211][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1807'. [ 540.833132][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 541.037567][T12163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.016476][T12188] input: syz1 as /devices/virtual/input/input37 [ 543.428081][T12196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 543.734922][ T5954] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 543.748427][T12202] program syz.4.1821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 543.935745][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 543.968320][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.001731][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.060422][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.078086][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1822'. [ 544.129970][ T5954] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 544.177059][ T5954] usb 1-1: New USB device strings: Mfr=225, Product=0, SerialNumber=0 [ 544.233309][ T5954] usb 1-1: Manufacturer: syz [ 544.296505][ T5954] usb 1-1: config 0 descriptor?? [ 544.599572][T12212] loop8: detected capacity change from 0 to 8 [ 544.653612][T12212] Dev loop8: unable to read RDB block 8 [ 544.685347][T12212] loop8: unable to read partition table [ 544.694462][T12212] loop8: partition table beyond EOD, truncated [ 544.723973][T12212] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 544.738613][ T5954] ryos 0003:1E7D:3138.0013: unknown main item tag 0x0 [ 544.771004][ T5954] ryos 0003:1E7D:3138.0013: unknown main item tag 0x0 [ 544.798805][ T5954] ryos 0003:1E7D:3138.0013: unknown main item tag 0x0 [ 544.834090][ T5954] ryos 0003:1E7D:3138.0013: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 545.104230][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1826'. [ 545.399184][T12214] vlan4: entered promiscuous mode [ 545.510177][ T7181] usb 1-1: USB disconnect, device number 62 [ 545.607419][T12229] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 546.682829][ T7182] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 546.915773][ T7182] usb 5-1: config 2 has an invalid interface number: 108 but max is 0 [ 546.934661][ T7182] usb 5-1: config 2 has no interface number 0 [ 546.954599][ T7182] usb 5-1: config 2 interface 108 has no altsetting 0 [ 546.988452][ T7182] usb 5-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=1b.d8 [ 546.997749][ T7182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.024687][ T7182] usb 5-1: Product: syz [ 547.049252][ T7182] usb 5-1: Manufacturer: syz [ 547.054020][ T7182] usb 5-1: SerialNumber: syz [ 547.206274][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 547.437329][ T7182] usb 5-1: Could not find all expected endpoints [ 547.477439][ T7182] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.537919][ T7182] usb 5-1: MIDIStreaming interface descriptor not found [ 547.652708][ T7182] usb 5-1: USB disconnect, device number 49 [ 547.958891][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 548.210693][T12252] veth0_macvtap: left promiscuous mode [ 548.494150][ T7182] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 548.675871][ T7182] usb 5-1: Using ep0 maxpacket: 32 [ 548.689742][ T7182] usb 5-1: config 0 has an invalid interface number: 15 but max is 1 [ 548.698822][ T7182] usb 5-1: config 0 has an invalid interface number: 100 but max is 1 [ 548.730427][ T7182] usb 5-1: config 0 has no interface number 0 [ 548.771006][ T7182] usb 5-1: config 0 has no interface number 1 [ 548.832180][ T7182] usb 5-1: config 0 interface 100 altsetting 250 bulk endpoint 0xD has invalid maxpacket 1023 [ 549.015033][ T7182] usb 5-1: config 0 interface 100 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 549.085534][ T7182] usb 5-1: config 0 interface 15 has no altsetting 0 [ 549.160383][ T7182] usb 5-1: config 0 interface 100 has no altsetting 0 [ 549.189599][ T7182] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 549.200882][ T7182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.247553][ T7182] usb 5-1: Product: syz [ 549.251782][ T7182] usb 5-1: Manufacturer: syz [ 549.321666][ T7182] usb 5-1: SerialNumber: syz [ 549.347971][ T7182] usb 5-1: config 0 descriptor?? [ 549.552372][T12276] netlink: 'syz.6.1846': attribute type 1 has an invalid length. [ 549.571923][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.585076][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.649831][ T7182] go7007 5-1:0.15: probe with driver go7007 failed with error -12 [ 549.727693][ T7182] go7007 5-1:0.100: probe with driver go7007 failed with error -12 [ 549.808933][ T7182] usb 5-1: USB disconnect, device number 50 [ 550.184701][ T7181] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 550.434705][ T7181] usb 7-1: device descriptor read/64, error -71 [ 550.449088][ T30] audit: type=1326 audit(1756578700.367:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12277 comm="syz.0.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0956f8ebe9 code=0x7fc00000 [ 550.486029][T12283] bond0: option mode: unable to set because the bond device is up [ 550.499737][T12283] bond0: (slave macvlan3): Opening slave failed [ 550.714692][ T7181] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 550.929260][ T7181] usb 7-1: device descriptor read/64, error -71 [ 550.935609][ T24] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 551.169732][ T7181] usb usb7-port1: attempt power cycle [ 551.198759][T12292] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 551.208057][T12292] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 551.215929][T12292] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 551.223071][T12292] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 551.232363][T12292] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 551.239782][T12292] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 551.255669][T12292] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 551.290402][T12292] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 551.299896][T12292] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 551.325879][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 551.387693][T12292] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 551.455302][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.525388][ T24] usb 1-1: Product: syz [ 551.544749][ T7181] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 551.568116][ T24] usb 1-1: Manufacturer: syz [ 551.572774][ T24] usb 1-1: SerialNumber: syz [ 551.597342][ T7181] usb 7-1: device descriptor read/8, error -71 [ 551.834812][ T7181] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 551.865526][ T7181] usb 7-1: device descriptor read/8, error -71 [ 551.987528][ T7181] usb usb7-port1: unable to enumerate USB device [ 552.995782][T12310] bond1: option mode: unable to set because the bond device has slaves [ 553.017406][T12310] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 553.053982][T12310] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 553.080392][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 553.095736][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 553.113432][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 553.213933][ T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 553.294744][ T5875] Bluetooth: hci3: command 0x0c1a tx timeout [ 553.300795][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 553.306899][ T5871] Bluetooth: hci5: command 0x0c1a tx timeout [ 553.307331][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 553.312945][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 553.319701][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 554.028558][ T5954] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 554.196675][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 554.202478][T12335] netlink: 'syz.3.1863': attribute type 14 has an invalid length. [ 554.246514][ T5954] usb 5-1: config 1 interface 0 altsetting 90 bulk endpoint 0x1 has invalid maxpacket 16 [ 554.270926][ T5954] usb 5-1: config 1 interface 0 has no altsetting 0 [ 554.325054][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1864'. [ 554.567301][T12340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1865'. [ 554.671883][T12340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.255907][ T5938] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 555.280173][ T6013] usb 1-1: USB disconnect, device number 63 [ 555.375234][T12316] Bluetooth: hci3: command 0x0c1a tx timeout [ 555.375247][T12315] Bluetooth: hci5: command 0x0c1a tx timeout [ 555.394668][ T5938] usb 6-1: device descriptor read/64, error -71 [ 555.634923][ T5938] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 555.663831][T12358] netlink: 'syz.6.1872': attribute type 1 has an invalid length. [ 555.824837][ T5938] usb 6-1: device descriptor read/64, error -71 [ 555.924640][ T6013] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 555.969947][ T5938] usb usb6-port1: attempt power cycle [ 556.027956][ T24] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 556.064782][ T6013] usb 1-1: device descriptor read/64, error -71 [ 556.206943][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 556.215730][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 556.253969][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.267175][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 556.279757][ T24] usb 4-1: config 1 has no interface number 1 [ 556.287352][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 556.308888][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 556.324658][ T5938] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 556.340809][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.352374][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.364674][ T24] usb 4-1: Product: syz [ 556.368929][ T24] usb 4-1: Manufacturer: syz [ 556.370080][ T6013] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 556.373803][ T24] usb 4-1: SerialNumber: syz [ 556.390778][ T5938] usb 6-1: device descriptor read/8, error -71 [ 556.524646][ T5957] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 556.544773][ T6013] usb 1-1: device descriptor read/64, error -71 [ 556.603220][ T24] hub 4-1:1.0: Invalid hub with more than one config or interface [ 556.615101][ T24] hub 4-1:1.0: probe with driver hub failed with error -22 [ 556.627827][ T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 556.645442][ T5938] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 556.656014][ T6013] usb usb1-port1: attempt power cycle [ 556.674716][ T5957] usb 7-1: Using ep0 maxpacket: 32 [ 556.729939][ T24] usb 4-1: USB disconnect, device number 84 [ 556.748209][ T5954] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 556.757658][ T5957] usb 7-1: config 255 has too many interfaces: 231, using maximum allowed: 32 [ 556.770956][ T5938] usb 6-1: device descriptor read/8, error -71 [ 556.794684][ T5957] usb 7-1: config 255 has an invalid descriptor of length 217, skipping remainder of the config [ 556.814669][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.822714][ T5954] usb 5-1: Product: ట [ 556.838787][ T5957] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 231 [ 556.875664][ T5957] usb 7-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 556.886062][ T5954] usb 5-1: can't set config #1, error -71 [ 556.895432][ T5938] usb usb6-port1: unable to enumerate USB device [ 556.905524][ T5954] usb 5-1: USB disconnect, device number 51 [ 556.906243][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.912051][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.079952][T12378] fuse: Bad value for 'fd' [ 557.095871][ T6013] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 557.104152][ T30] audit: type=1326 audit(1756578707.007:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 557.132656][ T5957] usb 7-1: Product: syz [ 557.137433][ T5957] usb 7-1: Manufacturer: syz [ 557.142582][ T5957] usb 7-1: SerialNumber: syz [ 557.148377][ T30] audit: type=1326 audit(1756578707.007:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 557.172558][ T6013] usb 1-1: device descriptor read/8, error -71 [ 557.245398][ T30] audit: type=1326 audit(1756578707.007:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 557.359471][T12380] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1879'. [ 557.369030][ T30] audit: type=1326 audit(1756578707.007:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 557.471487][ T6013] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 557.471487][T12316] Bluetooth: hci5: command 0x0c1a tx timeout [ 557.485867][T12315] Bluetooth: hci3: command 0x0c1a tx timeout [ 557.502228][ T30] audit: type=1326 audit(1756578707.007:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 557.533287][ T6013] usb 1-1: device descriptor read/8, error -71 [ 557.545261][ T30] audit: type=1326 audit(1756578707.007:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 557.568380][ T30] audit: type=1326 audit(1756578707.007:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 557.591323][ T30] audit: type=1326 audit(1756578707.007:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.4.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 557.613726][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.675397][ T24] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 557.708729][ T6013] usb usb1-port1: unable to enumerate USB device [ 557.781214][ T5957] usb 7-1: USB disconnect, device number 10 [ 557.857202][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 557.880321][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.893037][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.935861][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 557.949247][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 557.959214][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.971208][ T24] usb 4-1: config 0 descriptor?? [ 558.082478][T12383] loop6: detected capacity change from 0 to 7 [ 558.102883][T12383] Dev loop6: unable to read RDB block 7 [ 558.134867][T12383] loop6: unable to read partition table [ 558.143632][T12383] loop6: partition table beyond EOD, truncated [ 558.186588][T12383] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 558.430675][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 558.470112][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0014/input/input38 [ 558.537619][ T24] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 558.620580][T12380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.716181][T12380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.785716][ T6013] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 559.022120][ T6013] usb 6-1: config 3 has an invalid interface number: 61 but max is 0 [ 559.044293][ T6013] usb 6-1: config 3 has no interface number 0 [ 559.380600][T12399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1884'. [ 559.390583][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 559.679205][ T6013] usb 6-1: config 3 interface 61 has no altsetting 0 [ 559.794665][ T24] usb 4-1: reset high-speed USB device number 85 using dummy_hcd [ 560.024709][ T5957] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 560.034016][ T6013] usb 6-1: string descriptor 0 read error: -22 [ 560.046291][ T6013] usb 6-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26 [ 560.067044][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.103588][ T6013] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.216817][ T5957] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.603388][ T5957] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.615686][T12385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.642558][ T5957] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 560.651890][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.662587][ T5957] usb 5-1: SerialNumber: syz [ 560.676750][ T6013] snd-usb-audio 6-1:3.61: probe with driver snd-usb-audio failed with error -2 [ 560.688593][T12385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.814018][T12385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.829840][T12385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.870022][ T5947] usb 6-1: USB disconnect, device number 20 [ 560.928830][ T5957] usb 5-1: 0:2 : does not exist [ 560.951811][ T5957] usb 5-1: unit 5 not found! [ 561.031175][ T5957] usb 5-1: USB disconnect, device number 52 [ 561.120701][T10068] udevd[10068]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 561.735731][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1886'. [ 561.805858][T12408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1886'. [ 562.276980][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1895'. [ 562.303528][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1895'. [ 562.350452][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1895'. [ 562.354719][ T24] usb 4-1: device descriptor read/64, error -71 [ 562.797139][T12437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 562.806901][ T24] usb 4-1: reset high-speed USB device number 85 using dummy_hcd [ 562.852619][T12439] loop6: detected capacity change from 0 to 524287999 [ 562.994736][ T24] usb 4-1: device descriptor read/64, error -71 [ 563.209642][T12443] loop8: detected capacity change from 0 to 8 [ 563.217113][T12441] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1900'. [ 563.227575][T12443] Dev loop8: unable to read RDB block 8 [ 563.233206][T12443] loop8: unable to read partition table [ 563.249552][T12443] loop8: partition table beyond EOD, truncated [ 563.256320][ T24] usb 4-1: reset high-speed USB device number 85 using dummy_hcd [ 563.295009][T12443] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 563.335594][ T24] usb 4-1: device descriptor read/8, error -71 [ 563.504669][ T5947] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 563.624716][ T24] usb 4-1: reset high-speed USB device number 85 using dummy_hcd [ 563.665410][ T24] usb 4-1: device descriptor read/8, error -71 [ 563.687632][ T5947] usb 6-1: Using ep0 maxpacket: 16 [ 563.700423][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 563.711797][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 563.723916][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 563.787432][ T7182] usb 4-1: USB disconnect, device number 85 [ 563.885958][ T5947] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 563.898789][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.941697][ T5947] usb 6-1: config 0 descriptor?? [ 563.984783][ T7182] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 564.014358][T12460] FAULT_INJECTION: forcing a failure. [ 564.014358][T12460] name failslab, interval 1, probability 0, space 0, times 0 [ 564.050657][T12460] CPU: 1 UID: 0 PID: 12460 Comm: syz.4.1906 Not tainted syzkaller #0 PREEMPT(full) [ 564.050685][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.050699][T12460] Call Trace: [ 564.050708][T12460] [ 564.050718][T12460] dump_stack_lvl+0x189/0x250 [ 564.050749][T12460] ? __pfx____ratelimit+0x10/0x10 [ 564.050783][T12460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.050807][T12460] ? __pfx__printk+0x10/0x10 [ 564.050842][T12460] ? __pfx___might_resched+0x10/0x10 [ 564.050867][T12460] should_fail_ex+0x414/0x560 [ 564.050907][T12460] should_failslab+0xa8/0x100 [ 564.050936][T12460] __kmalloc_node_noprof+0xd1/0x4e0 [ 564.050974][T12460] ? alloc_slab_obj_exts+0x39/0xa0 [ 564.051003][T12460] alloc_slab_obj_exts+0x39/0xa0 [ 564.051027][T12460] __memcg_slab_post_alloc_hook+0x31e/0x7f0 [ 564.051069][T12460] kmem_cache_alloc_noprof+0x2bf/0x3c0 [ 564.051094][T12460] ? alloc_buffer_head+0x2a/0x270 [ 564.051118][T12460] alloc_buffer_head+0x2a/0x270 [ 564.051135][T12460] ? folio_alloc_buffers+0x3ad/0x640 [ 564.051156][T12460] folio_alloc_buffers+0x32d/0x640 [ 564.051182][T12460] create_empty_buffers+0x3a/0x530 [ 564.051210][T12460] __block_write_full_folio+0xc5/0xe10 [ 564.051236][T12460] ? __pfx_blkdev_get_block+0x10/0x10 [ 564.051260][T12460] blkdev_writepages+0xd1/0x170 [ 564.051279][T12460] ? __pfx_blkdev_writepages+0x10/0x10 [ 564.051312][T12460] ? do_raw_spin_unlock+0x122/0x240 [ 564.051336][T12460] ? __pfx_blkdev_writepages+0x10/0x10 [ 564.051355][T12460] do_writepages+0x32b/0x550 [ 564.051391][T12460] ? do_raw_spin_unlock+0x122/0x240 [ 564.051419][T12460] filemap_write_and_wait_range+0x21f/0x320 [ 564.051452][T12460] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 564.051555][T12460] ? set_page_refcounted+0x76/0x160 [ 564.051586][T12460] ? alloc_pages_bulk_noprof+0x570/0x710 [ 564.051602][T12460] ? kiocb_write_and_wait+0xad/0x1b0 [ 564.051624][T12460] blkdev_read_iter+0x199/0x440 [ 564.051650][T12460] copy_splice_read+0x5d4/0xa50 [ 564.051676][T12460] ? __pfx_aa_file_perm+0x10/0x10 [ 564.051701][T12460] ? splice_file_to_pipe+0x2e/0x440 [ 564.051728][T12460] ? __pfx_copy_splice_read+0x10/0x10 [ 564.051793][T12460] splice_file_to_pipe+0x2b8/0x440 [ 564.051827][T12460] do_splice+0xdc0/0x1660 [ 564.051881][T12460] ? __pfx_do_splice+0x10/0x10 [ 564.051961][T12460] __se_sys_splice+0x2e1/0x460 [ 564.051998][T12460] ? __pfx___se_sys_splice+0x10/0x10 [ 564.052025][T12460] ? rcu_is_watching+0x15/0xb0 [ 564.052051][T12460] ? __x64_sys_splice+0x21/0xf0 [ 564.052093][T12460] do_syscall_64+0xfa/0x3b0 [ 564.052109][T12460] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.052141][T12460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.052161][T12460] ? clear_bhb_loop+0x60/0xb0 [ 564.052204][T12460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.052223][T12460] RIP: 0033:0x7f2c4cd8ebe9 [ 564.052242][T12460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.052260][T12460] RSP: 002b:00007f2c4dcba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 564.052282][T12460] RAX: ffffffffffffffda RBX: 00007f2c4cfc5fa0 RCX: 00007f2c4cd8ebe9 [ 564.052297][T12460] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 564.052309][T12460] RBP: 00007f2c4dcba090 R08: 000000007ffff000 R09: 0000000000000000 [ 564.052322][T12460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 564.052334][T12460] R13: 00007f2c4cfc6038 R14: 00007f2c4cfc5fa0 R15: 00007f2c4d0efa28 [ 564.052367][T12460] [ 564.065952][T12462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1907'. [ 564.164722][ T7182] usb 4-1: device descriptor read/64, error -71 [ 564.556239][ T5947] HID 045e:07da: Invalid code 65791 type 1 [ 564.577545][ T5947] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0015/input/input39 [ 564.621725][ T5947] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 564.724771][T12441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.734654][T12441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.854641][ T7182] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 565.057528][T12476] netlink: 'syz.4.1912': attribute type 1 has an invalid length. [ 565.075988][ T30] audit: type=1800 audit(1756578714.987:923): pid=12475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1913" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 565.229581][T12485] fuse: Bad value for 'group_id' [ 565.235048][T12485] fuse: Bad value for 'group_id' [ 565.585889][T12490] netlink: 'syz.3.1915': attribute type 10 has an invalid length. [ 565.633077][T12490] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 565.864611][ T5957] usb 6-1: reset high-speed USB device number 21 using dummy_hcd [ 566.123019][T12497] __nla_validate_parse: 1 callbacks suppressed [ 566.123044][T12497] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1918'. [ 567.099402][T12517] loop6: detected capacity change from 0 to 524287999 [ 567.236935][ T7182] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 567.454790][ T7182] usb 7-1: Using ep0 maxpacket: 32 [ 567.483015][ T7182] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 567.489833][T12522] loop8: detected capacity change from 0 to 8 [ 567.508202][ T7182] usb 7-1: config 0 has no interface number 0 [ 567.514370][ T7182] usb 7-1: config 0 interface 2 has no altsetting 0 [ 567.529027][T12522] Dev loop8: unable to read RDB block 8 [ 567.562510][T12522] loop8: unable to read partition table [ 567.574079][ T7182] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 567.579577][T12522] loop8: partition table beyond EOD, [ 567.603300][ T7182] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.613408][T12522] truncated [ 567.641328][T12522] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 567.659536][ T6013] usb 6-1: USB disconnect, device number 21 [ 567.710830][ T7182] usb 7-1: Product: syz [ 567.724598][ T7182] usb 7-1: Manufacturer: syz [ 567.729238][ T7182] usb 7-1: SerialNumber: syz [ 567.828880][ T7182] usb 7-1: config 0 descriptor?? [ 568.148162][T12542] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1935'. [ 568.180209][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.186735][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.254133][T12545] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1936'. [ 568.327754][ T7182] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 568.374667][ T5947] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 568.427703][T12548] bond1: option mode: unable to set because the bond device has slaves [ 568.445886][T12548] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 568.501001][ T7182] usb 7-1: USB disconnect, device number 11 [ 568.555523][ T6013] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 568.577545][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.610272][ T5947] usb 1-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 568.675868][ T5947] usb 1-1: config 0 interface 0 has no altsetting 0 [ 568.706966][ T5947] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 568.735871][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.736069][ T6013] usb 6-1: Using ep0 maxpacket: 16 [ 568.754248][ T5947] usb 1-1: Product: syz [ 568.809867][ T6013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.827010][ T5947] usb 1-1: Manufacturer: syz [ 568.842798][ T5947] usb 1-1: SerialNumber: syz [ 568.853942][ T6013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.936945][ T5947] usb 1-1: config 0 descriptor?? [ 569.059961][ T6013] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 569.084639][ T6013] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 569.104083][ T6013] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.135158][ T6013] usb 6-1: config 0 descriptor?? [ 569.306295][T12537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.344771][ T7182] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 569.370269][T12537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.494625][ T7182] usb 7-1: Using ep0 maxpacket: 8 [ 569.512522][ T7182] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 569.522585][ T7182] usb 7-1: config 179 has no interface number 0 [ 569.529002][ T7182] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 569.554883][ T6013] HID 045e:07da: Invalid code 65791 type 1 [ 569.565855][ T5947] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 569.584383][ T6013] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0016/input/input40 [ 569.604638][ T7182] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 569.638931][ T6013] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 569.676325][ T7182] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 569.700503][ T7181] usb 1-1: USB disconnect, device number 68 [ 569.714671][ T5947] usb 5-1: device descriptor read/64, error -71 [ 569.735336][ T7182] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 569.748218][T12545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.786731][T12545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.814789][ T7182] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 569.849044][ T7182] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 569.886257][ T7182] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.922332][T12556] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 569.977536][ T5947] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 570.144653][ T5947] usb 5-1: device descriptor read/64, error -71 [ 570.192672][ T6013] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 570.265060][ T5947] usb usb5-port1: attempt power cycle [ 570.519916][ T6013] usb 4-1: device descriptor read/64, error -71 [ 570.614652][ T5947] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 570.635619][ T5947] usb 5-1: device descriptor read/8, error -71 [ 570.764752][ T6013] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 570.874862][ T5947] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 570.916798][ T5957] usb 6-1: reset high-speed USB device number 22 using dummy_hcd [ 570.925109][ T6013] usb 4-1: device descriptor read/64, error -71 [ 570.955752][ T5947] usb 5-1: device descriptor read/8, error -71 [ 571.065263][ T6013] usb usb4-port1: attempt power cycle [ 571.075356][ T5947] usb usb5-port1: unable to enumerate USB device [ 571.404673][ T6013] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 571.516761][ T6013] usb 4-1: device descriptor read/8, error -71 [ 571.804741][ T6013] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 571.915520][ T6013] usb 4-1: device descriptor read/8, error -71 [ 571.948580][ T5947] usb 7-1: USB disconnect, device number 12 [ 571.948630][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 571.948666][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 572.025490][ T6013] usb usb4-port1: unable to enumerate USB device [ 572.812492][ T30] audit: type=1326 audit(1756578722.297:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12580 comm="syz.6.1946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ead38ebe9 code=0x0 [ 573.551437][T12597] tipc: Enabling of bearer rejected, already enabled [ 573.767643][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1951'. [ 574.010318][T12609] loop6: detected capacity change from 0 to 524287999 [ 574.187032][ T5938] usb 6-1: USB disconnect, device number 22 [ 574.932852][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1960'. [ 574.973546][T12629] netlink: 'syz.4.1960': attribute type 7 has an invalid length. [ 574.995214][T12629] netlink: 'syz.4.1960': attribute type 8 has an invalid length. [ 575.023519][ T5947] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 575.152245][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 575.389384][ T5947] usb 6-1: Using ep0 maxpacket: 8 [ 575.437193][ T5947] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 575.460960][ T5947] usb 6-1: config 179 has no interface number 0 [ 575.472502][T12639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1962'. [ 575.482405][ T5947] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 575.508870][ T5947] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 575.553268][ T5947] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 575.650669][ T5947] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 575.692361][ T5947] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 575.768814][ T5947] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 575.794587][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.478859][T12619] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 576.516042][T12650] ip6gretap1: entered promiscuous mode [ 576.529380][T12650] ip6gretap1: entered allmulticast mode [ 576.683902][T12656] tipc: Failed to remove unknown binding: 66,1,1/729878869:2310585111/2310585113 [ 576.693419][T12656] tipc: Failed to remove unknown binding: 66,1,1/729878869:2310585111/2310585113 [ 576.708181][T12656] fuse: Bad value for 'fd' [ 576.724860][ T30] audit: type=1326 audit(1756578726.637:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0956f8ebe9 code=0x7ffc0000 [ 576.868205][ T30] audit: type=1326 audit(1756578726.637:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0956f8ebe9 code=0x7ffc0000 [ 577.050789][ T30] audit: type=1326 audit(1756578726.637:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f0956f8ebe9 code=0x7ffc0000 [ 577.317888][ T30] audit: type=1326 audit(1756578726.637:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0956f8ebe9 code=0x7ffc0000 [ 577.477362][ T30] audit: type=1326 audit(1756578726.637:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12651 comm="syz.0.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0956f8ebe9 code=0x7ffc0000 [ 577.974736][ T5938] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 578.154733][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 578.190740][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.256313][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.343481][ T5938] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 578.395555][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.436975][T12671] fuse: Bad value for 'fd' [ 578.443125][T12672] fuse: Bad value for 'fd' [ 578.448849][ T5938] usb 5-1: config 0 descriptor?? [ 578.583713][ T5938] hub 5-1:0.0: USB hub found [ 578.670314][T12662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.774354][T12662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.033915][ T5938] hub 5-1:0.0: 2 ports detected [ 579.247786][ T5938] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 579.264653][ T5938] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 579.360516][ T5938] usbhid 5-1:0.0: can't add hid device: -71 [ 579.409334][ T5938] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 579.517344][ T5938] usb 5-1: USB disconnect, device number 57 [ 579.570799][ T7182] usb 6-1: USB disconnect, device number 23 [ 579.570839][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 579.585031][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 579.604803][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1974'. [ 579.768528][T12676] FAULT_INJECTION: forcing a failure. [ 579.768528][T12676] name failslab, interval 1, probability 0, space 0, times 0 [ 579.844346][T12676] CPU: 1 UID: 0 PID: 12676 Comm: syz.5.1975 Not tainted syzkaller #0 PREEMPT(full) [ 579.844372][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.844384][T12676] Call Trace: [ 579.844392][T12676] [ 579.844401][T12676] dump_stack_lvl+0x189/0x250 [ 579.844429][T12676] ? __pfx____ratelimit+0x10/0x10 [ 579.844458][T12676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 579.844489][T12676] ? __pfx__printk+0x10/0x10 [ 579.844525][T12676] ? __pfx___might_resched+0x10/0x10 [ 579.844542][T12676] ? fs_reclaim_acquire+0x7d/0x100 [ 579.844574][T12676] should_fail_ex+0x414/0x560 [ 579.844603][T12676] ? alloc_netdev_mqs+0x8a0/0x11b0 [ 579.844625][T12676] should_failslab+0xa8/0x100 [ 579.844654][T12676] __kvmalloc_node_noprof+0x161/0x5f0 [ 579.844682][T12676] ? alloc_netdev_mqs+0x8a0/0x11b0 [ 579.844711][T12676] alloc_netdev_mqs+0x8a0/0x11b0 [ 579.844742][T12676] rtnl_create_link+0x31f/0xd10 [ 579.844774][T12676] rtnl_newlink_create+0x25c/0xb00 [ 579.844800][T12676] ? __lock_acquire+0xab9/0xd20 [ 579.844826][T12676] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 579.844845][T12676] ? __pfx___mutex_lock+0x10/0x10 [ 579.844867][T12676] ? ns_capable+0x8a/0xf0 [ 579.844885][T12676] rtnl_newlink+0x16d6/0x1c70 [ 579.844910][T12676] ? netlink_sendmsg+0x805/0xb30 [ 579.844933][T12676] ? __pfx_rtnl_newlink+0x10/0x10 [ 579.844973][T12676] ? kasan_quarantine_put+0xdd/0x220 [ 579.844992][T12676] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.845018][T12676] ? nlmon_xmit+0xb0/0x100 [ 579.845032][T12676] ? kmem_cache_free+0x18f/0x400 [ 579.845058][T12676] ? __local_bh_enable_ip+0x12d/0x1c0 [ 579.845073][T12676] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.845096][T12676] ? __local_bh_enable_ip+0x12d/0x1c0 [ 579.845110][T12676] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 579.845128][T12676] ? __dev_queue_xmit+0x27b/0x3b50 [ 579.845146][T12676] ? __dev_queue_xmit+0x27b/0x3b50 [ 579.845163][T12676] ? __dev_queue_xmit+0x27b/0x3b50 [ 579.845183][T12676] ? __dev_queue_xmit+0x1d79/0x3b50 [ 579.845205][T12676] ? __lock_acquire+0xab9/0xd20 [ 579.845246][T12676] ? __pfx_rtnl_newlink+0x10/0x10 [ 579.845268][T12676] rtnetlink_rcv_msg+0x7cc/0xb70 [ 579.845294][T12676] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 579.845316][T12676] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.845338][T12676] ? ref_tracker_free+0x63a/0x7d0 [ 579.845360][T12676] ? __asan_memcpy+0x40/0x70 [ 579.845376][T12676] ? __pfx_ref_tracker_free+0x10/0x10 [ 579.845396][T12676] ? __skb_clone+0x63/0x7a0 [ 579.845419][T12676] netlink_rcv_skb+0x205/0x470 [ 579.845444][T12676] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.845475][T12676] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.845507][T12676] ? netlink_deliver_tap+0x2e/0x1b0 [ 579.845535][T12676] netlink_unicast+0x82c/0x9e0 [ 579.845563][T12676] ? __pfx_netlink_unicast+0x10/0x10 [ 579.845595][T12676] ? netlink_sendmsg+0x642/0xb30 [ 579.845607][T12676] ? skb_put+0x11b/0x210 [ 579.845623][T12676] netlink_sendmsg+0x805/0xb30 [ 579.845643][T12676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.845658][T12676] ? aa_sock_msg_perm+0xf1/0x1d0 [ 579.845673][T12676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 579.845689][T12676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.845703][T12676] __sock_sendmsg+0x219/0x270 [ 579.845725][T12676] ____sys_sendmsg+0x505/0x830 [ 579.845744][T12676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.845766][T12676] ? import_iovec+0x74/0xa0 [ 579.845786][T12676] ___sys_sendmsg+0x21f/0x2a0 [ 579.845803][T12676] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.845844][T12676] ? __fget_files+0x2a/0x420 [ 579.845865][T12676] ? __fget_files+0x3a0/0x420 [ 579.845893][T12676] __x64_sys_sendmsg+0x19b/0x260 [ 579.845911][T12676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 579.845933][T12676] ? __pfx_ksys_write+0x10/0x10 [ 579.845950][T12676] ? rcu_is_watching+0x15/0xb0 [ 579.845986][T12676] ? do_syscall_64+0xbe/0x3b0 [ 579.846003][T12676] do_syscall_64+0xfa/0x3b0 [ 579.846015][T12676] ? lockdep_hardirqs_on+0x9c/0x150 [ 579.846037][T12676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.846052][T12676] ? clear_bhb_loop+0x60/0xb0 [ 579.846070][T12676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.846085][T12676] RIP: 0033:0x7efd5038ebe9 [ 579.846099][T12676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.846113][T12676] RSP: 002b:00007efd4e5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.846130][T12676] RAX: ffffffffffffffda RBX: 00007efd505c5fa0 RCX: 00007efd5038ebe9 [ 579.846141][T12676] RDX: 0000000000008810 RSI: 0000200000000280 RDI: 0000000000000003 [ 579.846151][T12676] RBP: 00007efd4e5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 579.846161][T12676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.846170][T12676] R13: 00007efd505c6038 R14: 00007efd505c5fa0 R15: 00007efd506efa28 [ 579.846194][T12676] [ 580.498342][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1976'. [ 580.564641][ T5947] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 580.694628][ T5947] usb 4-1: device descriptor read/64, error -71 [ 580.764648][ T5938] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 580.936123][ T5947] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 581.125023][ T5947] usb 4-1: device descriptor read/64, error -71 [ 581.154663][ T5938] usb 5-1: device descriptor read/64, error -71 [ 581.245720][ T5947] usb usb4-port1: attempt power cycle [ 581.674664][ T5947] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 581.674878][ T5938] usb 5-1: new low-speed USB device number 59 using dummy_hcd [ 581.695475][ T5947] usb 4-1: device descriptor read/8, error -71 [ 581.944627][ T5947] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 581.944752][ T5938] usb 5-1: device descriptor read/64, error -71 [ 581.975613][ T5947] usb 4-1: device descriptor read/8, error -71 [ 581.976547][T12701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1984'. [ 581.991487][T12701] netlink: 'syz.0.1984': attribute type 7 has an invalid length. [ 582.001642][T12701] netlink: 'syz.0.1984': attribute type 8 has an invalid length. [ 582.044717][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1984'. [ 582.066754][ T5938] usb usb5-port1: attempt power cycle [ 582.085023][ T5947] usb usb4-port1: unable to enumerate USB device [ 582.434629][ T5938] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 582.503791][ T5938] usb 5-1: device descriptor read/8, error -71 [ 582.541781][T12714] warning: `syz.5.1988' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 582.773421][ T5938] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 582.835916][ T5938] usb 5-1: device descriptor read/8, error -71 [ 583.005565][T12726] FAULT_INJECTION: forcing a failure. [ 583.005565][T12726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.019025][T12726] CPU: 0 UID: 0 PID: 12726 Comm: syz.0.1992 Not tainted syzkaller #0 PREEMPT(full) [ 583.019053][T12726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.019066][T12726] Call Trace: [ 583.019075][T12726] [ 583.019084][T12726] dump_stack_lvl+0x189/0x250 [ 583.019112][T12726] ? __pfx____ratelimit+0x10/0x10 [ 583.019140][T12726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.019164][T12726] ? __pfx__printk+0x10/0x10 [ 583.019192][T12726] ? __might_fault+0xb0/0x130 [ 583.019223][T12726] should_fail_ex+0x414/0x560 [ 583.019249][T12726] _copy_from_user+0x2d/0xb0 [ 583.019269][T12726] ___sys_recvmsg+0x12e/0x510 [ 583.019292][T12726] ? __pfx____sys_recvmsg+0x10/0x10 [ 583.019335][T12726] ? __might_fault+0xb0/0x130 [ 583.019359][T12726] do_recvmmsg+0x307/0x770 [ 583.019385][T12726] ? __pfx_do_recvmmsg+0x10/0x10 [ 583.019413][T12726] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 583.019452][T12726] __x64_sys_recvmmsg+0x190/0x240 [ 583.019473][T12726] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 583.019490][T12726] ? rcu_is_watching+0x15/0xb0 [ 583.019510][T12726] ? do_syscall_64+0xbe/0x3b0 [ 583.019528][T12726] do_syscall_64+0xfa/0x3b0 [ 583.019542][T12726] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.019565][T12726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.019581][T12726] ? clear_bhb_loop+0x60/0xb0 [ 583.019601][T12726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.019617][T12726] RIP: 0033:0x7f0956f8ebe9 [ 583.019632][T12726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.019646][T12726] RSP: 002b:00007f0957dfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 583.019663][T12726] RAX: ffffffffffffffda RBX: 00007f09571c6180 RCX: 00007f0956f8ebe9 [ 583.019675][T12726] RDX: 00000000000005df RSI: 0000200000000b40 RDI: 0000000000000003 [ 583.019686][T12726] RBP: 00007f0957dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 583.019697][T12726] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 583.019706][T12726] R13: 00007f09571c6218 R14: 00007f09571c6180 R15: 00007f09572efa28 [ 583.019731][T12726] [ 583.044691][ T5947] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 583.270312][ T5938] usb usb5-port1: unable to enumerate USB device [ 583.756701][ T5947] usb 7-1: device descriptor read/64, error -71 [ 584.023511][T12743] binder: 12742:12743 ioctl 400c620e 0 returned -14 [ 584.040675][ T5947] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 584.040908][T12743] binder: 12742:12743 ioctl c0046209 0 returned -22 [ 584.070844][T12744] binder: 12742:12744 ioctl c0046209 0 returned -22 [ 584.434718][ T5947] usb 7-1: device descriptor read/64, error -71 [ 584.524788][ T7181] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 584.565025][ T5947] usb usb7-port1: attempt power cycle [ 584.694700][ T7181] usb 6-1: Using ep0 maxpacket: 32 [ 584.712137][ T7181] usb 6-1: config 255 has too many interfaces: 231, using maximum allowed: 32 [ 584.723609][ T7181] usb 6-1: config 255 has an invalid descriptor of length 217, skipping remainder of the config [ 584.748430][ T7181] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 231 [ 584.792330][ T7181] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 584.807439][ T7181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.840969][ T7181] usb 6-1: Product: syz [ 584.857384][ T7181] usb 6-1: Manufacturer: syz [ 584.891514][ T7181] usb 6-1: SerialNumber: syz [ 584.905149][ T5947] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 584.964296][ T5947] usb 7-1: device descriptor read/8, error -71 [ 585.064075][T12751] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2001'. [ 585.264962][ T5947] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 585.300470][ T5947] usb 7-1: device descriptor read/8, error -71 [ 585.342803][ T7181] usb 6-1: USB disconnect, device number 24 [ 585.421063][ T5947] usb usb7-port1: unable to enumerate USB device [ 585.556477][T12759] tipc: Failed to remove unknown binding: 66,1,1/1677159220:1976246713/1976246715 [ 585.572099][T12759] tipc: Failed to remove unknown binding: 66,1,1/1677159220:1976246713/1976246715 [ 585.673028][T12759] fuse: Bad value for 'fd' [ 585.735477][ T30] audit: type=1326 audit(1756578735.597:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 585.893119][ T30] audit: type=1326 audit(1756578735.597:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 585.915536][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.929133][T12766] bond1: (slave macvlan0): Releasing backup interface [ 586.098859][ T30] audit: type=1326 audit(1756578735.687:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 586.269000][ T30] audit: type=1326 audit(1756578735.687:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 586.422159][ T30] audit: type=1326 audit(1756578735.687:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12755 comm="syz.4.2003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4cd8ebe9 code=0x7ffc0000 [ 587.585301][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2012'. [ 587.718985][T12793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.737371][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 587.868970][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2007'. [ 587.922527][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2007'. [ 588.201194][T12797] FAULT_INJECTION: forcing a failure. [ 588.201194][T12797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.265221][T12797] CPU: 1 UID: 0 PID: 12797 Comm: syz.4.2014 Not tainted syzkaller #0 PREEMPT(full) [ 588.265251][T12797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.265263][T12797] Call Trace: [ 588.265272][T12797] [ 588.265282][T12797] dump_stack_lvl+0x189/0x250 [ 588.265312][T12797] ? __pfx____ratelimit+0x10/0x10 [ 588.265343][T12797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.265367][T12797] ? __pfx__printk+0x10/0x10 [ 588.265396][T12797] ? __might_fault+0xb0/0x130 [ 588.265435][T12797] should_fail_ex+0x414/0x560 [ 588.265468][T12797] _copy_from_iter+0x1de/0x1790 [ 588.265508][T12797] ? rcu_is_watching+0x15/0xb0 [ 588.265529][T12797] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 588.265557][T12797] ? __pfx__copy_from_iter+0x10/0x10 [ 588.265578][T12797] ? __build_skb_around+0x257/0x3e0 [ 588.265600][T12797] ? netlink_sendmsg+0x642/0xb30 [ 588.265616][T12797] ? skb_put+0x11b/0x210 [ 588.265644][T12797] netlink_sendmsg+0x6b2/0xb30 [ 588.265671][T12797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.265692][T12797] ? aa_sock_msg_perm+0xf1/0x1d0 [ 588.265712][T12797] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 588.265732][T12797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.265751][T12797] __sock_sendmsg+0x219/0x270 [ 588.265781][T12797] ____sys_sendmsg+0x505/0x830 [ 588.265826][T12797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.265858][T12797] ? import_iovec+0x74/0xa0 [ 588.265885][T12797] ___sys_sendmsg+0x21f/0x2a0 [ 588.265911][T12797] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.265970][T12797] ? __fget_files+0x2a/0x420 [ 588.266000][T12797] ? __fget_files+0x3a0/0x420 [ 588.266041][T12797] __x64_sys_sendmsg+0x19b/0x260 [ 588.266067][T12797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.266099][T12797] ? __pfx_ksys_write+0x10/0x10 [ 588.266123][T12797] ? rcu_is_watching+0x15/0xb0 [ 588.266147][T12797] ? do_syscall_64+0xbe/0x3b0 [ 588.266170][T12797] do_syscall_64+0xfa/0x3b0 [ 588.266188][T12797] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.266216][T12797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.266239][T12797] ? clear_bhb_loop+0x60/0xb0 [ 588.266264][T12797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.266283][T12797] RIP: 0033:0x7f2c4cd8ebe9 [ 588.266302][T12797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.266319][T12797] RSP: 002b:00007f2c4dcba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.266341][T12797] RAX: ffffffffffffffda RBX: 00007f2c4cfc5fa0 RCX: 00007f2c4cd8ebe9 [ 588.266356][T12797] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 588.266369][T12797] RBP: 00007f2c4dcba090 R08: 0000000000000000 R09: 0000000000000000 [ 588.266382][T12797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.266394][T12797] R13: 00007f2c4cfc6038 R14: 00007f2c4cfc5fa0 R15: 00007f2c4d0efa28 [ 588.266425][T12797] [ 589.334708][ T7181] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 589.501163][ T7181] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 589.511631][ T7181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.533192][ T7181] usb 1-1: Product: syz [ 589.548742][ T7181] usb 1-1: Manufacturer: syz [ 589.566443][ T7181] usb 1-1: SerialNumber: syz [ 589.593072][ T7181] usb 1-1: config 0 descriptor?? [ 589.832936][ T7181] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 589.887846][ T7181] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 590.003981][ T7181] usb 1-1: USB disconnect, device number 69 [ 590.334766][ T5938] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 590.476221][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2021'. [ 590.491085][ T5938] usb 4-1: Using ep0 maxpacket: 32 [ 590.499824][ T5938] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 590.509081][ T5938] usb 4-1: config 0 has no interface number 0 [ 590.577607][ T5938] usb 4-1: config 0 interface 184 has no altsetting 0 [ 590.627425][ T5938] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 590.678035][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.735195][ T5938] usb 4-1: Product: syz [ 590.754727][ T5938] usb 4-1: Manufacturer: syz [ 590.804577][ T5938] usb 4-1: SerialNumber: syz [ 590.887510][ T5938] usb 4-1: config 0 descriptor?? [ 590.903349][ T5938] smsc75xx v1.0.0 [ 590.910177][ T5938] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 590.929841][ T5938] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 591.324993][ T7181] usb 4-1: USB disconnect, device number 97 [ 592.007177][T12843] FAULT_INJECTION: forcing a failure. [ 592.007177][T12843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.055523][T12844] PKCS7: Unknown OID: [5] (bad) [ 592.060567][T12844] PKCS7: Only support pkcs7_signedData type [ 592.237585][T12843] CPU: 0 UID: 0 PID: 12843 Comm: syz.4.2026 Not tainted syzkaller #0 PREEMPT(full) [ 592.237616][T12843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.237631][T12843] Call Trace: [ 592.237638][T12843] [ 592.237646][T12843] dump_stack_lvl+0x189/0x250 [ 592.237668][T12843] ? __pfx____ratelimit+0x10/0x10 [ 592.237690][T12843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 592.237708][T12843] ? __pfx__printk+0x10/0x10 [ 592.237728][T12843] ? __might_fault+0xb0/0x130 [ 592.237756][T12843] should_fail_ex+0x414/0x560 [ 592.237779][T12843] _copy_from_user+0x2d/0xb0 [ 592.237797][T12843] ___sys_recvmsg+0x12e/0x510 [ 592.237818][T12843] ? __pfx____sys_recvmsg+0x10/0x10 [ 592.237857][T12843] ? __might_fault+0xb0/0x130 [ 592.237879][T12843] do_recvmmsg+0x307/0x770 [ 592.237901][T12843] ? __pfx_do_recvmmsg+0x10/0x10 [ 592.237926][T12843] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 592.237967][T12843] __x64_sys_recvmmsg+0x190/0x240 [ 592.237986][T12843] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 592.238001][T12843] ? rcu_is_watching+0x15/0xb0 [ 592.238019][T12843] ? do_syscall_64+0xbe/0x3b0 [ 592.238035][T12843] do_syscall_64+0xfa/0x3b0 [ 592.238047][T12843] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.238068][T12843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.238083][T12843] ? clear_bhb_loop+0x60/0xb0 [ 592.238101][T12843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.238115][T12843] RIP: 0033:0x7f2c4cd8ebe9 [ 592.238128][T12843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.238141][T12843] RSP: 002b:00007f2c4dc78038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 592.238157][T12843] RAX: ffffffffffffffda RBX: 00007f2c4cfc6180 RCX: 00007f2c4cd8ebe9 [ 592.238167][T12843] RDX: 00000000000005df RSI: 0000200000000b40 RDI: 0000000000000003 [ 592.238177][T12843] RBP: 00007f2c4dc78090 R08: 0000000000000000 R09: 0000000000000000 [ 592.238186][T12843] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 592.238195][T12843] R13: 00007f2c4cfc6218 R14: 00007f2c4cfc6180 R15: 00007f2c4d0efa28 [ 592.238217][T12843] [ 592.514827][ T7181] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 592.725134][ T7181] usb 6-1: Using ep0 maxpacket: 32 [ 592.810978][ T7181] usb 6-1: config 0 has no interfaces? [ 592.841814][ T7181] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 592.857934][ T7181] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.871007][T12849] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 592.889762][ T7181] usb 6-1: Product: syz [ 592.902013][ T7181] usb 6-1: Manufacturer: syz [ 592.924062][ T7181] usb 6-1: SerialNumber: syz [ 593.027943][ T7181] usb 6-1: config 0 descriptor?? [ 593.412033][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2034'. [ 593.432681][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2034'. [ 593.458270][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2034'. [ 593.621023][ T5938] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 593.815346][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 593.836354][ T5938] usb 4-1: unable to get BOS descriptor or descriptor too short [ 593.850266][ T5938] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 593.860943][ T5938] usb 4-1: config 8 has no interface number 0 [ 593.869132][ T5938] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 593.891844][ T5938] usb 4-1: config 8 interface 24 has no altsetting 0 [ 593.959615][ T5938] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 593.971226][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.981960][ T5938] usb 4-1: Product: syz [ 593.987148][ T5938] usb 4-1: Manufacturer: syz [ 593.991875][ T5938] usb 4-1: SerialNumber: syz [ 594.444965][ T31] INFO: task syz.1.1442:10810 blocked for more than 143 seconds. [ 594.452735][ T31] Not tainted syzkaller #0 [ 594.494675][ T31] Blocked by coredump. [ 594.500322][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 594.537014][ T31] task:syz.1.1442 state:D stack:26568 pid:10810 tgid:10807 ppid:5882 task_flags:0x400448 flags:0x00024000 [ 594.752942][ T31] Call Trace: [ 594.769152][ T31] [ 594.974351][ T31] __schedule+0x1798/0x4cc0 [ 594.994930][ T31] ? __pfx___schedule+0x10/0x10 [ 595.024746][ T31] ? schedule+0x91/0x360 [ 595.038730][ T31] schedule+0x165/0x360 [ 595.050845][ T31] schedule_timeout+0x9a/0x270 [ 595.062571][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 595.080006][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 595.097650][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.154072][ T31] ? wait_for_completion+0x267/0x5d0 [ 595.202509][ T31] wait_for_completion+0x2bf/0x5d0 [ 595.249223][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 595.294643][ T31] ? io_wq_put_and_exit+0x160/0x650 [ 595.300063][ T31] ? io_wq_put_and_exit+0x160/0x650 [ 595.342799][ T31] io_wq_put_and_exit+0x316/0x650 [ 595.419842][ T31] io_uring_clean_tctx+0x11f/0x1a0 [ 595.483984][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 595.496419][ T31] ? io_uring_drop_tctx_refs+0x131/0x1c0 [ 595.523814][ T31] io_uring_cancel_generic+0x6ca/0x7d0 [ 595.550289][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 595.560970][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 595.578765][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 595.597498][ T31] ? io_uring_unreg_ringfd+0x52f/0x540 [ 595.612542][ T31] do_exit+0x345/0x2300 [ 595.639166][ T31] ? do_raw_spin_lock+0x21f/0x290 [ 595.659861][ T31] ? __pfx_do_exit+0x10/0x10 [ 595.675006][ T31] ? preempt_schedule_common+0x83/0xd0 [ 595.699456][ T31] ? preempt_schedule+0xae/0xc0 [ 595.717182][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 595.749385][ T31] do_group_exit+0x21c/0x2d0 [ 595.778209][ T31] get_signal+0x1286/0x1340 [ 595.803318][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 595.813349][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 595.833088][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 595.850993][ T31] exit_to_user_mode_loop+0x75/0x110 [ 595.881068][ T31] do_syscall_64+0x2bd/0x3b0 [ 595.894697][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.914211][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.949997][ T31] ? clear_bhb_loop+0x60/0xb0 [ 595.962419][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.984198][ T31] RIP: 0033:0x7fdf95d8ebe9 [ 595.998744][ T6013] usb 6-1: USB disconnect, device number 25 [ 596.013079][ T31] RSP: 002b:00007fdf93e210e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 596.037448][ T31] RAX: fffffffffffffe00 RBX: 00007fdf95fc6098 RCX: 00007fdf95d8ebe9 [ 596.118735][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdf95fc6098 [ 596.148170][ T31] RBP: 00007fdf95fc6090 R08: 0000000000000000 R09: 0000000000000000 [ 596.179935][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.218128][ T31] R13: 00007fdf95fc6128 R14: 00007fdf960ef940 R15: 00007fdf960efa28 [ 596.259867][ T31] [ 596.283344][ T31] [ 596.283344][ T31] Showing all locks held in the system: [ 596.332111][ T31] 1 lock held by khungtaskd/31: [ 596.524992][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 596.535401][ T31] 3 locks held by kworker/u8:7/1160: [ 596.540954][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 596.607849][ T31] #1: ffffc900038ffbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 596.648057][ T31] #2: ffffffff8f538c08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 596.684851][ T31] 2 locks held by getty/5625: [ 596.689572][ T31] #0: ffff8880339940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 596.737148][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 596.768037][ T31] 4 locks held by kworker/0:3/5938: [ 596.790917][ T31] #0: ffff8881436fa548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 596.840295][ T31] #1: ffffc90004507bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 596.887895][ T31] #2: ffff888027ed4198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 596.931125][ T31] #3: ffff888076981198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 596.962120][ T31] 4 locks held by udevd/6011: [ 596.975099][ T31] #0: ffff888030adc8b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 597.004668][ T31] #1: ffff8880556e7088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 597.017783][ T31] #2: ffff888056bb5c38 (kn->active#28){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 597.038601][ T31] #3: ffff888076981198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 597.055021][ T31] 3 locks held by kworker/1:11/7181: [ 597.066783][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 597.086013][ T31] #1: ffffc9001dd27bc0 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 597.113547][ T31] #2: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 597.142512][ T31] 1 lock held by iou-wrk-10810/10811: [ 597.152816][ T31] 2 locks held by iou-wrk-10810/10814: [ 597.169833][ T31] 2 locks held by syz.0.2028/12837: [ 597.181888][ T31] #0: ffffffff8f538c08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 597.214602][ T31] #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 597.230797][ T5938] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 597.249554][ T31] 1 lock held by syz.3.2033/12857: [ 597.261430][ T5938] usb 4-1: USB disconnect, device number 98 [ 597.274337][ T31] [ 597.291319][ T31] ============================================= [ 597.291319][ T31] [ 597.341087][ T31] NMI backtrace for cpu 0 [ 597.341107][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 597.341128][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.341139][ T31] Call Trace: [ 597.341147][ T31] [ 597.341156][ T31] dump_stack_lvl+0x189/0x250 [ 597.341186][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.341210][ T31] ? __pfx__printk+0x10/0x10 [ 597.341247][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 597.341273][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 597.341302][ T31] ? __pfx__printk+0x10/0x10 [ 597.341329][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 597.341362][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 597.341389][ T31] watchdog+0xf93/0xfe0 [ 597.341421][ T31] ? watchdog+0x1de/0xfe0 [ 597.341460][ T31] kthread+0x70e/0x8a0 [ 597.341486][ T31] ? __pfx_watchdog+0x10/0x10 [ 597.341510][ T31] ? __pfx_kthread+0x10/0x10 [ 597.341535][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.341560][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.341585][ T31] ? __pfx_kthread+0x10/0x10 [ 597.341609][ T31] ret_from_fork+0x3fc/0x770 [ 597.341630][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.341656][ T31] ? __switch_to_asm+0x39/0x70 [ 597.341679][ T31] ? __switch_to_asm+0x33/0x70 [ 597.341701][ T31] ? __pfx_kthread+0x10/0x10 [ 597.341725][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.341762][ T31] [ 597.341794][ T31] Sending NMI from CPU 0 to CPUs 1: [ 597.490174][ C1] NMI backtrace for cpu 1 [ 597.490209][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 597.490228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.490240][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 597.490271][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 597.490286][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 597.490302][ C1] RAX: 03985fb9a3b5ab00 RBX: ffffffff819683c8 RCX: 03985fb9a3b5ab00 [ 597.490315][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b81b0 RDI: ffffffff8be33800 [ 597.490327][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 597.490340][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38f30 [ 597.490353][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 597.490365][ C1] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 597.490379][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.490390][ C1] CR2: 00007f09572eeccc CR3: 00000000761d2000 CR4: 00000000003526f0 [ 597.490406][ C1] Call Trace: [ 597.490414][ C1] [ 597.490421][ C1] default_idle+0x13/0x20 [ 597.490438][ C1] default_idle_call+0x74/0xb0 [ 597.490475][ C1] do_idle+0x1e8/0x510 [ 597.490500][ C1] ? __pfx_do_idle+0x10/0x10 [ 597.490514][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.490549][ C1] cpu_startup_entry+0x44/0x60 [ 597.490565][ C1] start_secondary+0x101/0x110 [ 597.490592][ C1] common_startup_64+0x13e/0x147 [ 597.490628][ C1] [ 597.667031][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 597.673932][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 597.683064][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.693152][ T31] Call Trace: [ 597.696459][ T31] [ 597.699411][ T31] dump_stack_lvl+0x99/0x250 [ 597.704035][ T31] ? __asan_memcpy+0x40/0x70 [ 597.708642][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.713872][ T31] ? __pfx__printk+0x10/0x10 [ 597.718497][ T31] vpanic+0x281/0x750 [ 597.722505][ T31] ? __pfx_vpanic+0x10/0x10 [ 597.727030][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 597.732628][ T31] ? preempt_schedule+0xae/0xc0 [ 597.737511][ T31] ? preempt_schedule_common+0x83/0xd0 [ 597.743006][ T31] panic+0xb9/0xc0 [ 597.746752][ T31] ? __pfx_panic+0x10/0x10 [ 597.751196][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 597.756606][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 597.762788][ T31] watchdog+0xfd2/0xfe0 [ 597.766983][ T31] ? watchdog+0x1de/0xfe0 [ 597.771349][ T31] kthread+0x70e/0x8a0 [ 597.775443][ T31] ? __pfx_watchdog+0x10/0x10 [ 597.780149][ T31] ? __pfx_kthread+0x10/0x10 [ 597.784769][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.789991][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.795214][ T31] ? __pfx_kthread+0x10/0x10 [ 597.799819][ T31] ret_from_fork+0x3fc/0x770 [ 597.804423][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.809557][ T31] ? __switch_to_asm+0x39/0x70 [ 597.814350][ T31] ? __switch_to_asm+0x33/0x70 [ 597.819153][ T31] ? __pfx_kthread+0x10/0x10 [ 597.823764][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.828557][ T31] [ 597.831928][ T31] Kernel Offset: disabled [ 597.836294][ T31] Rebooting in 86400 seconds..