last executing test programs: 1m26.44108904s ago: executing program 2 (id=4853): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x1000000, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$netlink(0x10, 0x3, 0x13) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x884) 1m25.296750772s ago: executing program 2 (id=4861): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0xfffffffffffffffa) pipe2$watch_queue(&(0x7f0000000180), 0x80) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c100000000000224e0000", 0x58}], 0x1) r4 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '#! '}]}, 0x10) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1m24.001401636s ago: executing program 2 (id=4863): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x64}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1m23.936242271s ago: executing program 2 (id=4865): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r1, 0x31a2}], 0x1, 0x8) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@delchain={0xf34, 0x65, 0x10, 0x2, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xe, 0x3}, {0xf, 0x5}, {0x5, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_cgroup={{0xb}, {0xeec, 0x2, [@TCA_CGROUP_EMATCHES={0x210, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}]}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x8000, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR='wN', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR='*+', @TCF_META_TYPE_VAR="3bf9aa8c40ff02a31cdb", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="f4ed1568d8813f4cfbce"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xc0, 0x2}, {0x3, 0x8, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x12, 0x7, 0x2}, {0x7, 0xc}}}]}}, @TCF_EM_IPT={0x1a0, 0x1, 0x0, 0x0, {{0x400, 0x9, 0x3}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xfb, 0x5, "0b484d10cc55d0c4313eae90226919998ef84203c1de2b84b3df3f8f6f6c8cd72ea5d09f8d6a757263f7637d863cf5b3694dcca0e8a43a22a1d9a610e2ce490761457268c7290523fa72ca2cf5d406b817de96eec15e322f4a33365dacbbcc8a1929c333de671ee085b0594b670c8743f250766717500634cd107bee39d8c5f6e225ccea536ba5baa581efb83c699ea120355e15f3392fe82e4efe12871848f929c3dba538d01c338aa9c68ff29e280123016c856ded1663ce1c131b24e65172b19e859944f0474dc1e84dd8bf4e467e6a6c7ba06395a3706fe507e82615ac7373cfd1e1289437f76e47bcc646c88fa923fd78bf9a26f0"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4b5d875dce7a3dc1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x5b, 0x5, "f7e99d252cff84d358d32097dd5213cad557ad23e55cc3ec4dbb67a2efff7fe0297d14b4d5c4a9b993eb4ff8758dfb8bfebefed5e3bfb6c1bef75f4e81c117e284abe3aadadd4f399d23dc84f8ea5144aa4a84fe9dfd27"}]}}]}]}, @TCA_CGROUP_POLICE={0x488, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x9, 0x2, 0x2, {0x10, 0x2, 0x7, 0x3, 0xa, 0x4}, {0xe, 0x2, 0x7, 0x7, 0x8, 0x80}, 0xffffffff, 0x7fff, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x3, 0xfffffffa, 0x4, 0x1ff, 0x2, 0x1, 0x5, 0x4, 0x2, 0x9, 0x90, 0x7c8bfcd3, 0x8, 0xf9f, 0x8, 0x705c, 0x8, 0x7, 0xfffff985, 0x9, 0xb6fc, 0x2, 0x10001, 0x81, 0x0, 0x7, 0xffffffff, 0xd5e, 0x7, 0x15a50, 0x4, 0x2, 0x0, 0x4, 0x2, 0x8, 0x3, 0x9, 0xf759, 0x1, 0xf, 0x9, 0x81, 0x90e, 0x7d, 0x9, 0x0, 0x4, 0xe8c2, 0xac, 0xa, 0x5, 0x10ab, 0x0, 0x2, 0x8, 0x6, 0x7, 0x9, 0x3103, 0xffffffb1, 0x4, 0x9, 0x80000001, 0x4, 0x4, 0x9, 0xff, 0x1, 0x0, 0x5, 0x40000, 0x81, 0x7ff, 0x0, 0x9, 0xc9, 0x3, 0x5, 0x7fff, 0x9, 0x0, 0x6634, 0x76, 0xc55c, 0x9, 0x1, 0x6, 0x4, 0x101, 0x3542, 0x6, 0x2, 0x8000, 0x9000000, 0x5, 0x9, 0x8000, 0x6, 0x9, 0x4, 0x6, 0x40, 0x100, 0x8, 0x9, 0x4, 0x2, 0x0, 0x9, 0x7ff, 0x16, 0x1, 0x7, 0x4, 0x0, 0x3, 0xc8, 0x4, 0x81, 0x80000001, 0x8000, 0x2, 0x180000, 0x5, 0x3, 0x6, 0x8, 0x1, 0x8e6, 0xff, 0x4, 0x2, 0x3122, 0x2, 0x200, 0x401, 0x0, 0x3ff, 0x80000000, 0x6, 0x3, 0x10, 0x4, 0x40000000, 0xda, 0x5, 0x98, 0x9, 0x7, 0x7, 0xc, 0x2, 0x3, 0x7474, 0x2, 0x5c, 0x0, 0x3, 0x2, 0x9, 0x5800, 0x4, 0x5, 0x7, 0x6, 0x9, 0x0, 0xb6b8, 0x7d3, 0x6, 0x5, 0x3, 0x9, 0x0, 0x3, 0x0, 0xfb8, 0x1, 0x1dba, 0x4, 0x7, 0x800, 0x6, 0x7fff, 0x4, 0x7, 0x9, 0xb, 0xa7a, 0xd7e0, 0xffffff7f, 0xc, 0x3, 0x1, 0x4, 0xb, 0x2, 0xe, 0x7f, 0x2, 0xaf, 0x802, 0x3, 0x6, 0x8, 0x1, 0x7ba, 0x6, 0x3, 0x8, 0x4, 0x6, 0xfffffffa, 0x5, 0x7, 0x10, 0x5b, 0x4, 0x2, 0xffffff75, 0x3, 0xffffff01, 0x0, 0x4, 0x6, 0x6, 0xfffffff0, 0x8, 0x7, 0x1, 0xfff, 0x2, 0x81, 0x0, 0x10001, 0x601f, 0x7, 0x3, 0x3, 0x800, 0x2, 0x4, 0x6, 0x100, 0x2, 0x8001, 0x3, 0x8, 0x2, 0x6, 0x59, 0x2, 0x3, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x30000007, 0x6, 0x8, 0xeb, {0xa, 0x2, 0xff, 0x58e9, 0x1, 0xad}, {0x9e, 0x0, 0x2, 0x8, 0x5, 0x6}, 0x7, 0x7f, 0xe03}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}]}, @TCA_CGROUP_POLICE={0x850, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf0e, 0xfff, 0x1, 0x5, 0x4, 0xcf, 0x8, 0x401, 0x101, 0xfffffff3, 0x4102, 0x9, 0x8, 0x6, 0x2, 0xff, 0x10, 0x5, 0x7, 0xac7c, 0x0, 0xacdc, 0x80, 0xfffffffb, 0x2, 0x0, 0x8001, 0xc, 0x0, 0xd4e, 0x4, 0x8, 0x2, 0x6, 0xfffffff7, 0x4, 0xa, 0x8000, 0x7, 0x7, 0xc, 0x9, 0x8c2, 0x309, 0x3, 0x5, 0x7, 0x7fffffff, 0x77, 0xfffffff9, 0x7, 0x9, 0xfffffff9, 0x7, 0x1000, 0x4, 0x4, 0x1000, 0x1, 0x178f2cb3, 0xb31, 0x4, 0xd79, 0x8, 0x7fff, 0x3, 0x2, 0x8, 0xdec, 0x1, 0x566, 0x0, 0x1, 0x8, 0xffffff95, 0x101, 0x4, 0x3, 0x200, 0x800, 0x7fff, 0x8, 0x2, 0x8, 0xeb, 0x7, 0x7, 0x10, 0x2c3, 0x7ff, 0x0, 0x7, 0x7fffffff, 0xb, 0xe, 0xc, 0x40000, 0x3, 0x4, 0x8, 0x6, 0x7fff, 0x9, 0x4, 0x6, 0x3f3b, 0x6, 0x5bbc, 0x75d, 0x400, 0x9, 0x3ff, 0x4, 0x7, 0x0, 0x40, 0x4c, 0x6, 0x7, 0x8, 0x7, 0x6, 0x0, 0x4, 0x2, 0x7, 0x0, 0x5b, 0x8, 0x5, 0x0, 0x1, 0xffff, 0x7, 0xd1, 0xfffff464, 0x0, 0x1, 0x7ff, 0x1, 0xf5ef, 0x6, 0x6, 0x3, 0x3, 0x5, 0x10, 0x1, 0x9, 0xa4, 0x8, 0x7fff, 0x3, 0x200, 0xf30, 0x1ff, 0x6, 0xb, 0x1000, 0x9, 0xd31, 0x8, 0x200, 0x5, 0xa, 0x6, 0x5, 0x4, 0x3, 0x3, 0x7bc, 0x0, 0x1, 0x80200000, 0x4, 0x5, 0x29ebb78, 0xd8, 0x0, 0x8, 0x3, 0x1, 0xea2, 0x5, 0x1000, 0x6, 0x9, 0x80, 0xffffffff, 0x4d6, 0x4, 0x1d, 0x389f2507, 0x8000, 0x3, 0x7e90, 0xd5, 0xee, 0x1, 0x1, 0x9, 0x0, 0x8, 0x4, 0xffff0000, 0x2, 0x9e590c51, 0x0, 0x100, 0x1, 0x5, 0x1, 0x7, 0x39d4, 0x5, 0xc10, 0x3, 0x80000000, 0x7, 0x401, 0x1, 0x1, 0x6470, 0x7, 0x9, 0x3, 0x4, 0xffff, 0x5, 0xfff, 0x3, 0x1, 0x6, 0x2, 0x200, 0x401, 0x8, 0x6, 0x1d, 0xfffffff9, 0x9b6, 0xb31d, 0x8, 0x6, 0x9, 0x2, 0x4, 0xfffffffb, 0x2, 0x0, 0x800, 0xf, 0x0, 0x80, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x6, 0x5, 0x1, 0x5, 0x3, 0x1c0e0a6f, 0x4, 0xc1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x800, 0x6, 0xa85, 0xfffffe01, 0x1ff, 0x7a207f2c, 0x80000001, 0x3, 0x70c, 0x9, 0x1, 0x2, 0x80000001, 0x8, 0x3ff, 0x9, 0x4, 0x3, 0x0, 0x4, 0x17, 0x8001, 0x9, 0x4, 0x3, 0x6, 0x1, 0x7, 0xf1692485, 0x4, 0x5f, 0x8000, 0x1800000, 0x4, 0x4, 0x0, 0xe3, 0x1, 0xd, 0x80000000, 0x3, 0x4, 0xca1, 0x4, 0x10, 0x10, 0x9, 0x2, 0xe8dd, 0x5, 0xfffffff9, 0x2, 0x7, 0xff, 0xffffffff, 0x0, 0x81, 0x1, 0x3, 0x80, 0x1000, 0x6, 0xa0000, 0x1, 0xb, 0x7ff, 0x8000, 0x11, 0x40, 0x9, 0x6e5d, 0x3, 0xfffffc01, 0x80000001, 0x0, 0x2, 0x6, 0x800, 0x7, 0x5, 0x1ff, 0x3, 0x80000000, 0x8, 0xff, 0xe, 0x5, 0x4, 0x8, 0x676, 0xf, 0x7fffffff, 0x7, 0x2, 0x8001, 0x5, 0x401, 0x8, 0x6, 0x3, 0x2, 0x8, 0x5d74, 0x80, 0xa, 0x2, 0x7, 0x7f, 0xe, 0x3216fc83, 0x3, 0x8, 0x8, 0x80, 0x991, 0x9, 0x7, 0x5, 0x9, 0x0, 0x1, 0x6, 0x9, 0xa, 0x4, 0x2, 0x3, 0x4, 0x9, 0x40cd, 0x6, 0x3, 0x7, 0x80000001, 0xa9, 0x81, 0x6dd, 0x6, 0x1, 0x6, 0x80000000, 0x2, 0x80000001, 0x81, 0x7, 0xa0, 0x5, 0x7, 0x2, 0xffffffff, 0x7, 0x5, 0x80000001, 0x1, 0x8, 0x6, 0x2, 0x2, 0x7, 0x1, 0x3c, 0x5, 0x8, 0x0, 0xfffffffd, 0x5, 0xb5, 0x81d9, 0x1, 0xb, 0x2, 0x5, 0x10000, 0x2, 0x3, 0x6, 0x3, 0x7, 0x81, 0xb28, 0xffffffff, 0xfffffffd, 0x6, 0x8000, 0x4, 0x5, 0x6, 0x33, 0x4, 0x5f, 0x1, 0x7, 0x3, 0x7, 0x2, 0xd852, 0xe73c, 0x0, 0xf3, 0x8000, 0x3, 0x57112657, 0x6, 0x4, 0x2, 0xfb9d, 0x3, 0x80000000, 0x9, 0x7, 0xba, 0x3, 0x6, 0x7ff, 0x1, 0x2, 0x1, 0x3, 0x2, 0x438, 0x7, 0x6a3, 0x4, 0x0, 0x6, 0x2, 0x6, 0x0, 0x8, 0x8, 0x9, 0x1000, 0x5ac, 0x0, 0xd, 0xfffffffc, 0x1, 0x5, 0x80000000, 0x6, 0x8000, 0x9]}]}]}}]}, 0xf34}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(r2, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r7, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) ioctl$LOOP_SET_FD(r2, 0x4c00, r7) 1m22.79713658s ago: executing program 2 (id=4873): unshare(0x26020480) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$alg(0x26, 0x5, 0x0) (async) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2de, 0x0, 0xffffffff, 0x4}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) read$FUSE(r3, &(0x7f0000003100)={0x2020}, 0x2020) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) (async) r9 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r9, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async) ioctl$SG_SET_FORCE_PACK_ID(r8, 0x227b, &(0x7f0000000080)=0x1) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0x8, 0x3}}, './file0\x00'}) fcntl$dupfd(r7, 0x406, r12) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000003, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x7, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000400)=@sco, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000140)="bd820fca85a889759490ebf6c6e73afea051b2a98c33baa54706a5c78394c34f", 0x20}, {&(0x7f00000006c0)="a05d54b0fe49fedcb0df70884dbb4bfbfde6c6fe67ac3badb34567e1129df3c54e6cb14cd8dfe12e79071c32d93053d6e5c284c81107c6e17e305d84479b79be2d435c1bcee4c7c89d78377bc051303c68ffc631b324cc9adbbe06fe0bc4fbbb08f16b23a8dbf797d4d44651ef9ecaf3815df58b9bd6ba57292f769b828504c70eedb550dfb1b54e8e2dc74f00bdf9450585b206956e8db9f1263c7fb45f482630", 0xa1}, {&(0x7f0000000780)="b9a5650d709ccef174f58ff7659795908358262ddca94e989c21f905e459ea9c24707774d418d1f5fcc67f0c54ce9d4a00017e391064514bc8ec34dae3ef3b6c82e9", 0x42}, {&(0x7f0000000280)="2d1ade982d3dc248f947922b42a8ec1be9ccc110b2161fdf0bd9310357a18912049d0de08493813f74a2c3a9636e40908128a9336068", 0x36}, {&(0x7f0000000300)="847757296b666792c0", 0x9}, {&(0x7f0000000800)="7658b9b97f776b645622e251e2cbf15d24d79d4f0e5704ac74c5299dcb558797e3152c1cf32f6b363884b009c4f628c7c2422c5d81944170f26c899db4b935f3bc21f941239f6ca2c26bda8de6c9a1357a2ff2b11650bb098ed8c60a13be7b96944987cea9c94e625eb3dde3533312f902af2214769213bf352f74265c15d07e8aa43e80b966f6046603f6643cd4bfd1569a3674384a2b3a6127acd853cf0aedb539004b054d984ca7b6eb39e250", 0xae}, {&(0x7f00000008c0)="a4c918543b4036a57189fa97bdf445006cd0555f2df156df458b9c3d041433376f0f730da11f27ec7b387514c22eb4357cddfca6029fc26b9716e9339d5d11a89920612d333c36faf6eef5124dc2bafa313a89ef27efa16ed85f984ce04cbebe40dd6143f40bfc4f4de8c98be16b430fcd63d00ab49e0a513b48bd611b92a438847381ccf2796913e963219111b274c3c029f35ce9407d1ea6b2f07fc75728b90a8eaa8efb7f4ed13c73f7bfbffaf40b60f17679275781eb0d08238e5a59f555c28de4e978ae152afb2b145f138443356aaee94629b7df", 0xd7}, {&(0x7f0000000a80)="7b2467d9cb399295aaa36242ee9c3ad83db52b7389c5d8f72bffd420e5918b572374d5540fb5c327b69ce5fe4d9a35e3b288e30eae23dd2a7c1ee9aaceef9797c67a4b1d3d6c31b4c89818d3576350e15a8eb2f9a42b9d07a50491f94654c924860db0e327b91ad6c798cb7216363fafe8de2f64dd1dfc68beac2e35ba6f0a5a4040da3af795de2076f5721168fea5057977e50d8980063a25f46e37b4e86b37b58b9c948263efd93d020d0c3f936340e6cb419f262577f915447656e7aaa36a8ccbc5711a0c86c9ad6ab412ace38538727fbc75cd8172c40d22fa60d570b38e56c3b11d1fcba9af00cd7ed4cc", 0xed}], 0x8, &(0x7f0000000e00)=[{0x28, 0x0, 0x1ff, "54aee799db04f00b87db478562c82f7d8899aa4c"}, {0x1010, 0x102, 0x3, "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"}, {0x1010, 0x10b, 0x35, "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"}, {0x28, 0x118, 0xfffffffb, "2da3637db34bc9197aafc66692f6952a3d5961274f063b90"}, {0x108, 0x112, 0x27a0, "494aa9dcedecd889cc2b3c1823c9a48bc276f1162f5e13991e1e37eff582de37bcea0320e55e6da86286a9be1e2b92f578b06dcd474b1a5046380f2d2bb34c4d21613ccb0021339d5f7c3ec94b556c96f56794cbd9c314c353799bada064bc73cbd497b85720f3f1a842e188fe7a2602e9f77d05d37dde6a15791461474550d87c29f9b2ebadb4c5b660a20060eb69501f0e12226a43ee0ef2ebef0fb6756c8515ccdedbac418cd0792ca675984e459f7d033cc303e561796cbea15d1708504b233696bf0b350240ca790df2eda4a7d12844cb9d1b0392e88cb537d813e1ce4abbab020e0a073780a5afaf1b7b1f9c81b8837e"}, {0x88, 0x107, 0xa, "e46f7f6ccc2bd2dde6e38a4c0fd05176c52642ae4ff73ceb1311fe6aca2b3c8fca904728ed9942d1a742d7eec1f698b8aac47860760bf9001d87870707df121e9df94a044bbf67ace70265dd5ec5b9d5077b22cf934d63105b347ada758c8b7bd2df5af3945f04e52860f53143ae523c193407507fed2bd8"}, {0x50, 0x1, 0x1000, "483183a358b0cc49f5e0ecdfaeacb2b36cec1e6cc8c5f1e9b37d7650b685b3d3051246eff2b6e5291018831c1ea622860a6c738c8127e376704185"}, {0xa0, 0x88, 0xfffffff8, "a8935b8566394d29c093e900329cf6058bd348352bcfa11b574962ff6c4117f6acfdc3009e033e00024cb2d5c59458f6ef30385430f25bcf37011750498b8240d4bd18def75ab37653f729dd4ec68a6d439217a01bbf199609acde2a2a4cce5868a12a506c528ecbf6d1ccf4a3945ebf6f7b513ea9e381c33e2826dc9ef09547c5e0692f2f185a2d28996663"}], 0x22f0}, 0x80) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) (async) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r13, 0x227b, &(0x7f00000001c0)=0x2001) (async) r14 = fcntl$dupfd(r13, 0x0, r13) write$sndseq(r14, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0xff, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r14, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) (async) write$RDMA_USER_CM_CMD_NOTIFY(r12, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1m22.530150219s ago: executing program 2 (id=4875): r0 = syz_usb_connect$uac1(0x3, 0xe4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1003020000000203"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r2, 0x7) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x6, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406441, &(0x7f0000000000)={0x0, 0xd2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f0000000380)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x2a, 0x0, 0x0, 0x0, "c970ba835e3091767a9f7dcca39c543242adda16fdf3d59d0b80e774cf0ce4a8671499bd4b407e9f5851b0d7600a95b63bd80b90fda752c123cee68377d8e540"}, 0x48}, 0x2, 0x0, 0x0, 0x4}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m21.888920738s ago: executing program 32 (id=4875): r0 = syz_usb_connect$uac1(0x3, 0xe4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1003020000000203"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x12) listen(r2, 0x7) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x6, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r5, 0xc0406441, &(0x7f0000000000)={0x0, 0xd2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f0000000380)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x2a, 0x0, 0x0, 0x0, "c970ba835e3091767a9f7dcca39c543242adda16fdf3d59d0b80e774cf0ce4a8671499bd4b407e9f5851b0d7600a95b63bd80b90fda752c123cee68377d8e540"}, 0x48}, 0x2, 0x0, 0x0, 0x4}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r7 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.437660868s ago: executing program 3 (id=5128): mkdir(&(0x7f0000000340)='./file0\x00', 0x180) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000033000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 8.23994466s ago: executing program 3 (id=5129): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) r3 = socket$alg(0x26, 0x5, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x21c, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"]) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006fc0), 0x0, 0x1, 0x0) r5 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000d00)="f5840eb9", 0x4, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 7.367037242s ago: executing program 4 (id=5134): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.725056098s ago: executing program 1 (id=5138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180), 0xe0d00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x8, 0x4) shutdown(0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fsopen(0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000440)={0x80000000, 0xc011, 0x462}) r3 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f", 0x5c, 0x0, &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d09229309241efeed6eb72cf77247") sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "001a23f2cca40ff667f66a9bf8b2c200"}}]}, 0x1b0}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) connect$unix(r3, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000580), 0x80802, 0x0) 6.604224761s ago: executing program 5 (id=5139): mkdir(&(0x7f0000000340)='./file0\x00', 0x180) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100003b000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 6.066466244s ago: executing program 5 (id=5140): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) socket$alg(0x26, 0x5, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='gid_map\x00') syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac05e7c677621302030109022d0001080540040904270102fffd01000921e700070122b3400905df0200"], 0x0) 5.972236371s ago: executing program 0 (id=5141): socketpair(0x22, 0x2, 0x2, &(0x7f00000000c0)) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x0, 0x358}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x54, 0x4, 0x1, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@link_local, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0xff, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "8d0022eb00000000"}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x2, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3a7}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000808}, 0x4000040) 5.643580914s ago: executing program 3 (id=5142): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010010000009040000028b86470009040000000000000009"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x80, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xcae}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x2, 0x5d}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x90, 0x2, 0x6}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9, 0xa, 0x7, 0x20, 0x4}, 0x10f, &(0x7f0000000080)={0x5, 0xf, 0x10f, 0x2, [@generic={0x100, 0x10, 0x1, "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"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x8, 0x8, 0x56}]}, 0xa, [{0x1a, &(0x7f00000001c0)=@string={0x1a, 0x3, "d804a0c60e21193672f3179ed78be210bdb3d4420859fbef"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2437}}, {0x4e, &(0x7f0000000280)=@string={0x4e, 0x3, "eba85e6a95e1d8de29258bb95331cdb562e0ee6b2dd5e83a0dbbffbf863868c97ef5c5517d60e84ed504984715c5cd011daa68d93a6c8dc1232c57b82b1d7ee124933f7fb2d66d17c041eb50"}}, {0xdf, &(0x7f0000000300)=@string={0xdf, 0x3, "e324e698352a3b75f3ef7483bb82f41fdae2ba66fda936f9dae463c53d2a8b8b1ec3dde6448a199990cbdee4a81a0d0a46da5be8f05f402d9b71c2f46ab39c4581e051488de936e2412f67f5c06aaa7d852bb85ad08d30c3b32f210809ee271212524970f18d9c1ee6c8d5fbb488a99cfd54bfcb2e1582eacc026b0c759bb2b6d353e7fa56a63e3ade33e6b49b57178783d870ce895d25445c1c670875628e8b084b6cbc527e83f75ecf3d8dbb8b09ad0517ac82757ab4a446f6a1b22fa351d509829552d0c332a157bdd24bda06a8ed90f726878dcdf013e50e6697c7"}}, {0x4, &(0x7f0000000400)=@string={0x4, 0x3, '3A'}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x820}}, {0x34, &(0x7f00000004c0)=@string={0x34, 0x3, "fbd8dca1941568a510eb36b3328fe9296b53ced4fae5befb64bff860fe022bd9150d26dcc711e33a6dbe5e1dacb9aca66e07"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x380a}}]}) 5.642745763s ago: executing program 4 (id=5143): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.450020447s ago: executing program 4 (id=5144): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0xa, 0x4f, {"3ef30f090f20c035010000000f22c0c441c9e513c462f94196d5bc589d66b83e018ed8b9800000c00f3235000100000f30f3dcfc0f015d010fc719440f30"}}], 0x4f}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x560, 0x0, 0x6}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe79b", 0x0, 0x19}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x17d739293968d0b1, 0x0, 0x0, 0x8, 0x0, 0x7, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff, 0x4}, {0xeeee0000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x1, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0xdddd6002, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x0, 0x0, 0xff, 0x40}, {0x0, 0x8080000, 0xa, 0x0, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0x10, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0xdf}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029000000001020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0) 5.425931542s ago: executing program 0 (id=5145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000002440000000030a03000000000000000000010000000900030073797a31000000001400048008000240fffffffc08000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000080500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a3000"], 0xf8}}, 0x0) 5.368730864s ago: executing program 1 (id=5146): r0 = io_uring_setup(0x177e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r2 = getgid() syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x2004019, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r2], 0xfc, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002180), 0x2000, &(0x7f0000004180)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x400000, 0x8000, 0x0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="aef2274aaa3571a2f64d4b425e82cc530437d5e8ec036e82837dbc2aa4b8afe833a341bedccccb72d33cc1a3d7063e57d74b579be6be9808e4eec720496335e176424ca94919153fa9d1b8a824a8aaa7f695ed92f9a730b42fed46b1f0be01eefe4dccc11cc7342d03eb81b955a7775db5037357909b5e362a256050cb03b2631d0aeb07d033f4710181432a5af194a814a792b8af68725b453164fdb89f67b1d249d02830bf40bdc17ca9da26f8cd992a34a3cfd7d0794845817b7df920216c1594773aed966964f74288164091dd3d375bbc5cd7e7922c3ba5a45975c20d96383ea037f18b478534d2c3617aafc13bf6190754b1575ad930894969b70771bed2f3b543f00487c3c42512845266b9ca8db1cfae189fda8103e464c55e367c0f8094a76547b7e4e64fc2bf533f3c2b22b11df6497a5f8f08bdc02d8f3d3f57c4330b909f16ee8d669fb473ca1d63cf0dd8c46efa31a3158f35d4011acf331aa79c4c381cb67f702e8eccabd2fe716af9bc2db4096568c0f663f4db02e3895dd12b341762a4d58df7f884d713418354e7f1f918c3760f197c472cd45aae7a6e020f5beb480910b0ebaf6d5056fad8d12abb5527abd7fe2d054dbc98a8062816a885b4f4787668e38609afd1849413881d166004c85b34e0044fadefb5f07d9257bfb42dc247a829b42ad6310cc244f79938ec2148705150c1523b3f4d60c65e280a183a2cceaf2fac6f83baa33d6530b8ad96496a1d250d6cf15f6ebb459c7795b5739a8135a8d83dd29147b3c98e8da3fd45a77b3876f5e6d1bd919c2abdda94f19d68eedef09a8f60f046067a3d63f245df430259ddbee316d721894b0df57e00ff0f192fa3450cdd81175f9d9b861fdf723524202402f3ac4af74f8aae5a9d9dfdeb91d530db93322498b20821e1341c83d0fe213cde72e5c0a420767765cb293da262dd8b4fc34d00d5f80258226498fcede4f039c5e0d9f61e4014fbc6cf78881743720c2b31f1ce76ed507e85cbabf80b8514d49e0eac69009c874777a5280167d5fb50a5e28692d74aa68426a7fe516ddd2ab9046fe58ed3eaac2af6cae309145207b00f123dfb1665462d60885dade812fd47f8742eeb00b3c45fd1464c24d13601878904ae7a75af4c22daaff072cf7168c8d513e277ebbd75d724c5e29d7c99077ffb2ab9951f0c4bebf8d1adf9f21a4539c9ca18a959fd0eebfc36e6fb223306e0a08209295c73f005d7832fd0ad27b9092448f14146759619aa07b387d77ddc050b51b56c9e368bb6d00bba934765f0643998535fb4d6f260e51440ac23e7ecaea37d26598ac28445853d8f9838d305f31b84984e1ba42b1d00bfb1d119a363606853ac84c81db27ef582fc2c917cab33028f26ccd05977ad50b100c35bb05aa1cb9792837d421fdc2e689f40c5dee415cded0f5aec85c415873502e99a76eddaa5b3dc35e4cec27d54b2200ab4eb5035b65ccfd6a31d8d5cd6e63d51265f7ae0ce0224ff6f95c74c7ce8a650ed2c6ae28bd8b29d2f662cdf7999641e341719927cffea1483ad026c705db203e5edea57414e66f8e37fd3aa1303eae825c0ca74e5384dd24c97623fa3a9cc520400000000000077e4a10f689a8cf6c951e3cf9147f7da39f5100323bda84c5b020ff3d2ebdd0f4709c8f3664ac2a9238226568bf3998999662e1456532af383af7cc4aa92b95547e3d6cf79c3853c9eb268764b00f805afaeb840b23de031e7f539c86654159da3d453cb0d1c9380e8be66ad86c634b3be7fd97a58e26c35d1c17cec3813b15737a4f3b984a758a641a2a26933d81bede453efdee6792031f0ce8ab0b2bb7fa9fb76f9ca884ccd3a374d27f87c66a72b45c4f39b132881de49d63a3319ef7a6c249cf7dc3ef1a4e90e25e87d10c4126a89e7d6eb538677ead1fb5ed01e02628ebefe2fd7f9375366c656ec9dfa6a7f497c5d29ad333270b1d2fa2308c2e814234e8610f63485f0ce9d6667c7e219fa0c582631c3ea178bfec63bbaaba4a52a6ec5f66ae727e99f45c9f4098feffca5722e5355b3ec37f8bb9b3dc75f1f550c43e297751a108c392616b6b65c652d9be3b1bad3dba6fdf356eac56b729b94f13a4c2445d1eab9f1670964d23ed3b709813cd9600a9c18d727c74eafcbe71f1a9468947139606c221958b8ae2a8fb63a0ae2f928383ec137f0de15a89684b7706908897e0cdfa52bf14a9432eb1906670471182978c00b49facbb4f95bfa0b8c73fc9e3ba1ecc5294439f931dbffb081fee966bbd30aa690e4afec0afd4afed36c570fabeb738889618448e93976d1de98728dc0ac2cab575e1bb2a72154573955ed99eb86831970c2d7317503d6c50d1493e44e5c731c2b40bbcad04a53bacb983cbe53103d837baa32dd554d28a4903ef173f9d758849ca32bb7df61d13d639d55ae27ffc7ef21e1e15c083c4557a3df8f7afab4beb959698c560fcba9f71012c853ca3b7633f3bda7ce95fdb9926f2a2f5c28688f92064c691958a42ab0c7518a04cdc6545fc1fba9eea43abf80a8b4fb97a8c88c8b60a5c9d57d58bc490c81edb8c9a2fcc4fed5a2478cf3967cbd2018c1c9304abfd712e7845c983f2ea40bd9c5e43694538b32b832627f222fbf4af3d619938358fbfb06b5e56aefb008b8a3dc20407a624cd28752553dd666ebb8bf46ee926593ba792f0ff99cf4f57ad90f6c5749f9f9e68fab43aa2388fc837e1ae135ffaf04f8b99911658ff3513131b08ac08c4e17063a66a448e10f6525557f13aaa697b56d4da690ae734f8a324e3c214bf20eaceb62f91855d9cb5087e0fa7f5b5a3237a0f4db0464cb255a7bf266a0702f3aae88f6cff31ef1e5a3046839fa17b4520232baf8627a39a2e301342199434f522ed8d04072a848a1cf23f5a5dfb8bafe4d1b5d38704ec390cbc38a4c70b2b955c6b1775b7f32e286582dbd3cc093709fef1ae99b0eba278787b709445e93b4ea3b26e077b9c2305049afe0e439cf814f6c7a538067fd499e3cc327df64107900a57254b4b4e0752129baeab2cb155f02b1532be72fe8d9f546cff4423e53cd389084050d62fb12a25bfaecf238e4185543f4b143a59ea52e146f7f1c558222c4d84931b2caec643f744f1a986c5dcb33dffcb52670a193dfe2d27d652bff1d2f2016f2958fca24452e23a5dbfdcd779e660a0715a03aa93004a6747ae505de74a2fa782651083a90326e0fd6b4fde44b65ef43c1a03e71acb13b41278c0a5437ceac64974eb0a2dd3322f3a81a719cd4eed104871fd37985056c79a3ccde7fa91f2efcb941ad931b33aa530447257072ae2f3dcd6b4bdbda976af51107fc0aa493acc2b7300b73baf7b1e6656cc72247f0878ff9cf5eece1179b3ae5b2ff23e01167234225a2bdca47f1bfbf882d9d04614a3b29310c9dbf2daba7a27c6e11230087f67374237e56b366e8b50b6f9d8c10a36c896afb3a414667d3b1d66e796be075ace4a624c0d4ed5f635635e9057ac0d34fe79835dc15482df2f7b8acd72e80b283087bae78f9cb9b91c354be64b1e99a46018f2cbe1abf0732113347c77184f5b64ac0c4c2a5b382c055b0e5b4e36c5b93898be0fb8bc1631e9997404bfc529f56e809824dd6d207bb54d233a209a51b53f545c1002d10815e14f30c8048bf51ca1cdcf99fca0de567f8ff2610b74a130a011d0cd2ed972510f375765f1ffba5ff31ec5d307fdeffa3ef28bb4f0cd64ea525316aae57bc2bd380a9bc19501fc0c802a217ffbc050c401a9d6cfd71fb6ea09490e932888dd23d3071418263b5d8a6bb5b1493f5ecebe76836ec0e013dea22042d9cab060dbcab4648bf59d8b2f01a254b9b4b84f1264c0c8157bee5e534f614e1efc3fd98153fc766afe9aaed148803c80e5606cf32dfbe0c17ae8882ac9ab3f055a4bec8c0ddd01721f6f436eea8a9fca2ce1a14acf96af54b9c0a6535395be965f2d715339f16d7d2aa8d2d9e0e5e76f02070dadcfc8af662742bf808c6c7899c6130a8506ce753ef62c22098b1e3bf6a062e50b55d5be26aaae653c6666b56862aa371815f4dfddd9bb3b2c23a5b0a589d045ca6fcc4f05ac1c50f3e66a06f5d09e1ba202730fa7cf31db93ae5f3d5d448e179afd4edf1469008212448e8d51c9d04287eb00cf81d161d9ff828e14123056633e1d78455e1b43093f3a6110637ee2a60e2fcef644190a2ae00a2530fa156a2b8f422180d6a074a6041eae984387d62202b0bfe0ca538cf4c09761cb69fb90aee57d4c7f403b34bf4283db91066cd84b177d55c2c1e3baf10781f0ed66fac5725b176e93fb4ad0697a27712a437e31481e85ed0d96fb77d801219df80a939e0367889d5ffdc4d6a617c86a6935205689dcdd3b537ce91f4dd7c10427502952dcc3a14c0a5b8a04b5d679a410f7e85c63583c691a2a9dc2fdb0911272f192bde2632d70f32b2c1070f454cc53c06e35e687a4093053c56146565266f22bd34dce87675f9649d8699390d302bb5d5025862d8c3c7f9718e5059ec4025e274e7aaea8f76af3309d56131aafa45ee13119c8c44d54cfab501afd59324926e36b6cd2a04d224aab44d66f05325d4bebdf913cd8b74ccd427bb270b28448d0183f4826f6045a96a0a16343dec9d0605e92747dc2c874608776769239ae399cda45bba6f99e00c483b1f7999327d4daa8176ba13d1f8bea9998d60f7b2c8c3aeefbcd43bcdf5df2897549cb17726fbcf43a7d1f67640f084e9873a7ee9804eb4ea58d49b7d8bdfcde55713a07830009719c15eeda90a2be29cadd63a051097e3dd989a732fedbcdc3fb441641565fa8c22f04111c648aee2dc3feea61da3c2b55c76be3b640537f579684f1c2b2cb00c84eddd2c555dc9e9c660a631ebf0f095bc03530ec034a532a458e217c05797ab0c18582c49dc738dcebd87246b06049e8b186d438809c6a6bc7a10ee3b3494ef781771ed5235cda19ed107a1d647fba8079f73c2a27866126530dc4b531119a99f881d001f6c3ec78128b62d65cedf2a0a505b28b3b1dd27bda7fb5cc9acead0bccfbc9c6c88454dd9ddce793b868dee01232eaf36ea0629b0e3eda2e29c4cfc2b52dcff47cb01846166a1a52893dd9a884e9629cb3d35f438347c63bca391b5826f0a4c71d9b8fe0894678cc08607704471e61063924ae090a34579b118b4cfc6f21a82d100c72c93bc35537ef5e5a4c60327b99b9b488b2f46a16b2cc43715bac5148c0e193c06876d46cc2c6da2b3a1b1b917411503818a12bd0dcb2cff6e1a8339d6d551d64f0ed333eb28e887b0d7ea3e8a03590e264ed6cccc7031420b81ea80e8841b0e02fdd0df7515ab5651245500e7624b996a27380a14d201fdd1ab5f024b866972d8a1b689c88b79f38e914972ad76cfa0489ce2596027abbcf33ca7dc9ffd00ab92286c7d8e815b1a208789fac06f9033f99b40ce219f0f454be714f1ba2302be2ee4d7ee16e66f9dd0f0adc13d45f1360c9b95a48d432f99c7c2cf2bc2b11146ac5ba2581647567035113ddfa32d7d22f41e812e9a090d3188e6ff84b808223be36df09bf74175c6a48b9a2de777b1295f80306eac7a7ac4294c98fa9dfa8c20311369c48aeb7b79226d8f619118eee6225d9a0ebefc2d05bc74009f63226cf8a02e614cc21e630fdd07b4f669c4922e15034f3849502374aaa118fc05d3b23ceb663d7ce97032e79f824025e5eebb11886b4ced0ba2c6b7db3f018255452b345fcace69f504c397b9d5fe6ec27f2b9b173083cd4a202324ffa7e976bc8aea5d6e052407c5662c49470ba9eb64a9c3a7680d385bb9c2164b9338f8764cf63c31d1caa2e2a4699ab84cea5ad693338a14245ec122422800193c580eaee1aa84b8b83451c2095b225aa4171ef8de738e39035357ff22c331262d05cdda4b2c72cbfbd1ecfb692196fb32ac15aebaa20f4cebc65b937d938d71f1f6689a74b379358ac521d6964058154c77e2c1c6db2f8059668fcd812d7c30fb9178dcd26bd0ecefb6c526ce45039d492d5a1002f66c4c884373dafedad232d5cf2137c86a8bbec2d238a3b73e36c73baec8d298a11b3e6b3107a8a9ada848a16596cc33ff2ac298f6b11819784479598df918c36b49acbe7187dc35210431b23c0ed44313567ba9eb646ff633a8d3fbeae67479169910ab45d2f177f6a937cb318b926f80b8c6a439ecae706419686fe838dfd9988fa65909d5b7b4a5666b63aceca65cfda662b6dae88aaebb1b8faa86cbbb24b14acd559a8eb1eab51815964cf3bef6df1f216270d0e6807dde51aeb6ff8e49db5f6b673ca00e9a7966e1e3469ed0d2bd613d31c3b57279ed315d629fb7a6e065ea85d11f6aaf1ac6da1fd81ca2a573d722dbdcfbbfa614d79eb24238711c09508dc50a70e5602fdb768c8449b2131925314fba79de6b1b73a176be70fd08ae7993ea3ef240e51e31025f13d3a866cc24c24d51d5f692932527cbb531c628e422e64d1f33057015467d01ed592c5c3a2f63e9db1fbe4afa9831e23966337899d5426c7ff923adc019a7537414e6eb482c538477e8c2bc61aadd48b90b5771802b914031f126f850371cf5a7706a8e2504ccef712773cbbc773d1f40611aae268898bd9339a832aad1e01b3694fc88450f0eb9d279a1531816ff5f213f375867b987882e9bcc89a997c97189a62d4b84850d3136091e44773432b3cb3e1d31035cd2869bf2e5f89a7a066db6704d9950641ea2b922e2730b3c207e37f61581190111252f33fae16945feccb70f12bc487b1b8996f76b4f81c6d7a8389af76db528711d16150c5cfea9e4936c260b72bc27af1db060c9d62676474fd7f6956e41fca51bb4e0a278c01056225d2e0e9993b50ed503e559d3b519e4c72e48692f52a77cec2d4ffabc24ccca06b25a9efbe22493043eb79ddbebf6e0e3013de77f8c646abeb67e906c6a0af27fae50d88a70abed2a37e30a407095b07682a0892ef96eb18b61f904a9edc0a9ef5c4f365dc27c0442a8f7a89e6553a4dc061c09769fde1fbafea56a194ac24eca91acd2a7d91f802cc21b4a3deec2ff395ac28606e3132c673b0cc0d2eadea0955fb8e57a2ea9bf8861837c93b4b609b1f4822b724a9b31733d47d4cc292352b6cb2bb50b613923749600197b5f4797ac82b79d5c98a7e782c5360506c8e8a7bbefd66ac92a1766a2e0cc8886492f06473224cdebd7a6ad803d1a0fe39d00951f6c7a9b094663d881177386b64f5fc3985bce4a17e9217a1946e84589af2ba56810e15b835484f637650cba1530c5438977af634c75750fd2f77f9dbb0cee56f4b7aaa3b4a34eb1bc93ac11249191d5a8b17478bdad56f80d5d3c531f86ee969ecfaefdc45e5d588cab1f43fe421ea3e3568fc7cf3304e9833ccca469b70da619f1ed0851a2f26297a2c061ccc4270b07d6e81e52d26b60b21de9139a740bb7a7aac550ab0ab0029e8fafd77c4a27fee0f77a660b03c76652c109b6276495d24045f00b7181585404ecdf9bede3288373f602831cc5e8c2510f638ac21328b82152af0322e2a5d91d8ce37b7d3afb9b73f90c086d26fc9d0295c6c42200509dbdb780bd1d50f64867a3208e1b20bd7fcc1681fcb40b588908b51255f0fc4d2b7ba86e8a929305aa1111b237c75087d3de02084e11abc6a20c4c7268b8be1558afb0822120742493bf33c056c332543d2eea4d18e5b0486a669d3624d135e8b432d6bf0e0c72bb2bfcf3b71009396ab6c5e639de506bda4985dba6dc67ca0c25553df48ba9f4c708283bdaa7905f98f1a756d86c94b60db11815332ccbd6b6a7b958ae738efec09597952829843025813a4733f34a1abc3c63979358c43df4165a302ed82988070a0f496aa81c7a0971d85d4f67aa4fa11253a956f8e5af31f31520c8a95c3c4515846d5aa07985126212e3d8b6e6350f0d14294db6655bda90fb2bde863716e584fe85115a79d90a01913fe3f307b8816985ae77ecb73e73734af7cb8c5eed2ecc2009cf8eb43793faad3246cb223a7a88704817b800b0f842c2b46dd17829116883d8d4f8b2e8c55c8bd47d6df9c622a5d0da42a4f3c4c773a9a885565f4989ca81da24ed7430f981100021d7f72dedd572e53941bf34ded3c7a642bc32d46112af9195bb0c2d0e969c04a141001f0399ffa7d896b47eb68ca851fa8c0fe368c945c52658be5cac5f582ed06b20e5f6cdf3d4e948b072c7c451e945f851a77248e883da919ae3e0d76ceaf7fe0b2d718a47dceed35f2a212363c565a1099db238b5140b22bc0dba39c9fd3e1b7cc89cf8326e81f515843db90cd83384c19738ad9cc301ca018c59bb887592ea89ff7d3746083c39bf0eab4a47824a5474600d8655644a64cfe0c2e7694d7be85246af80dc839392a1ddf0b44d5d3568adc814981554c394f2fb4c6b3bcfbddaf875c613fe499df7f9028582130b919abdef0e8948f0685ec5b043948a2ba53a61b7d29180933014e9c25b74297e8bb36afdd8fee7241d00924608bcd6cff45468f8776e5e21fa4e7a2186bd461f26c1b625b2c3ccc0fd9cc808bce477f66adf3d584dce667beaf88ea710df35173cdcdedc11f3c1abe4f2811b298cab8ac795632cf1f8248e5f425ca70836146075a1f2d23699c521837f33f81cc87a3b31fa57164ecb4ee940d6f973b473917871cd193c5d348d5b9705253b0677013fcb7d9f7dd49c452f1cc608f5a2b4ebb74dbb7291098d81b1b059b4c88083a796e9f5a416736030ac5d2f1300d3d70732f6d824985b34ed36240d17b340039826131c9ebcd528c2620b28f0cd8c47971a56f4f1ddfac59910a416d0030417c2f6ff99533f589438bfdd209d38238e8c56b803289084f39a4f21e44c7dbc09a77049adeee5854947fedc1db18a88cb7143a16d7d7a61fa47331aac36407d1191c38c2088d8ca839d0f64f060907c668dfd4cc928c723cfa98a685e28882920e056ee340acbb283d8faeda4265feff032ed47f96ac53ea08aba4a6b6f6a3da53ab6a276c0f66c36409eb738fee985c41a74c841ddbfe093917542ff33a5d20da262e491b20f0a510877a34878ecff576147371c2512c6bc1f1fc0b6a9e9cc0f9fe3b559e9e31b506970841084d5ece3480c37f393574f28743bcf1a3dcd3a9dd5464d73a0c1908ea26e2b3a92556d4cdbcbaad5b4d76a71ecc42d0cb54a8915bd2904dff36f1540cdd64963257b4e4b9a0d4b73f960c5aef98224ad015f1f8ddb083e0a4ad81060772ee1c3c23c320967ddd8f776027e9a9d0a92cf19fdf5c49a2e1e99e3448e6043e42b13afbcc2911d235e4a0f96611374066e2aa0a42406913237ae81fb58a362d99f522084fd529f6b0a5931e2ca99a7f5fa7fea2f1cc5bf2742aff2e1339dc18408c48df52883c46178589b72ba39f63e3a7f40bacefcba8454069a2b8e460f7b6dd0a743850825de3ec26ec302cbfcec692463a179aae128dd9b49160aea4b7f611d5eb21fe16f1584a82b1f7de171ecefb809a09e661e7a078f0ae1229d12b511c88df141cb15461466b0fef51ee93a74517598cd6e8ca6494a528973afa1098a350157fe75cc0be57770fdfc96f17e30fd2ca5fff5e18402ef8a6cc1f65a56b237aed43727bfd1e163a2a60dfe979b3cf9760240ca2f7bfa76b34b2b40fda933829ca6458cdff0230f77dd0a2770e8fbfc16b3d385881cbcb189682b99d351270b63c432b15c4935603e05eef3f384beebd0dd8ea4c2e919f93eb62c11978313ac0973fa8d096195c02954db7bd1db313e040a07ba475181013066f557495b2e9b0fbc205bfa074e7dcdbefa38d178da9658d064655f1412498e2047dbc6e99090835291ab982822476087b694a495ead1879b575a98128b459f9855be802925eda28e65b8dbe7bbe44fea75b41254b5446e60fee32df9d8c676bb4ffd958c82ec3d74ef2eb6c4c36e5c184593ce62c0331ece679e588264ce5b8c4d6507768eb4d31888480219779546d99536312971ef05e8710c6e0d4581253334af6dc3d6ce4fe44f1c96da50af4d1dbd18042bb5e8cd26bb03b6e4d0167f8c1ed7feb94b207865fe6d92d390b5124f17241cf7ff286a83520db99b5380384f666622d547812802e7f5829be08ffbbc51c91c2a532ca9fe3895bc27fa7804b7b41f60fdefe1fbc79c24dda59b91979279695eb785cf3f34c3b18e31b6d07926625d1170cafa1b552304d0696d432c59baefd0c1687bc0a01851d3dad8152994257819ac5a78c7af1f1cbb106a27b759d14cfcbba865a8708b203d2fee5610dd30842f80255c88f36824c26cbc478a79864beaffb1e68eb61ed157935f0d8566029113307f1ee53eafd7b3dd2b90eed86dbf52f62e9755717fa7c209a981776977a7eb43f2fee147b387538273f5801a511eeae1144b661c53dbc2df24a238c1cc5e228f60b740cb9b880e9b5b41147b2310562eb777c6775ae0f295c31a22d445727acf2fadfca2aa12df9bfff626454dfe025ecebe8368cc17707d1293db27fd4f7250adefd2ee8b1886df3771560fdf24075bf90594ce4d2440995625f9c32c4dbb85c2e99371e520fac491f4d6671a55e2cf5c9ad8a9fae6ede963acfa586b5173e46d71efba2e21b2699a0169050ff7544beb5f82ce69666d3d129b8eadb11aa72a56b822c9cc85288cadbb140b1502fd09167e2ced58c738d4b54a67d2544d357b9035382062b6f979dac0943bfba726fe0206ba3d9847e93f22ca284396ede878e4d126ba2a5a8f7deef86bed1e89fba087605fe02be1802c49e9b0cf18e7ab6dce52bf564b099f864e81bb7e559bc1e2c27f85a76af30b7369b7ce61e12a86e4e38a904ebf5dfa692b0af4b70a779becbe35956eae191f241c24295af5bac1d82d1da2d28462f1c02c5fb19840027a28387a158ef241fd57f6b6fe74e6dede537c716b933cdff7d14f697410e74844baad2c6ce57f9fbb4e44ca433dce3c2a2950849dbf9f7d81cd785f684c21877cc61016702850ea48ade29fb91e256ff4432ce6271ef2460b09ceaa2d08170fd12dfa96ece57a5ab7de5c26e276682772c70432d44ff12831a518e1a421c1250e9df750d550723690d28e0454bab415548176c9b5da5a54585366da24fa9093a891dd8c41b1db67897dd3ffd69c724e0a21fd1054c804ed4d3c73d362371b03e65c535c08dd27a29cff93d3e7bd0f68cc4001a8bd347e1dd13604578f3b213421b57c38fc0ff68267a3eaa3746b5ff5ba8eeba07c49f5029b92199c3f7b79df9cd523933af5ae4742166365217ef76291dbdf7946b01600dc59990a3121843d0d96ca43e9c5742e74bbec713dba8362177467aace17f75e3abb446a0f913bd09bf9e8d4ed69d60ffa93615386669c94d729b5e305fb40d7ca7f1f38af98432dcbed49c0b5744333e0622ec76d5a55d39593168d08d206751e49d2328efccb4af7ce62dcdbce35de129451133a0f7334097b0fe70b0372249f2bd3f80964b1086040e0f8971f41c7916a41f588d51438beff4a00550d3703f43639e80aeb9e6f58219f29fdac903cc20387dba5b784507f77918b7d6b94211b77bf280fe3653666cf46bbe6567c", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5.265020535s ago: executing program 0 (id=5147): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) 5.186204104s ago: executing program 0 (id=5148): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x17) syz_io_uring_submit(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, 0x0, 0x48040) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x3, 0x3a) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) pipe2$9p(&(0x7f0000000100), 0x84080) r5 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd2(0x0, 0x80000) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x8, 0x1000, 0x0, r8, 0x8}) close_range(r5, 0xffffffffffffffff, 0x0) 4.406271476s ago: executing program 1 (id=5149): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000001080108000000010073797a30101eac5774e300000000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r2 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}]) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$FBIOBLANK(r7, 0x4611, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000240)=0x4, 0x4) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) recvmmsg(r0, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x45833af92e4b39ff, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d00010000000009070009050502080000030109050c00ff030286030905870200040b7f147de71dd6a48d4ff34f1cdef66613533308ada61e86b4abbb1b493fa6b25c4794"], 0x0) 4.261259979s ago: executing program 5 (id=5150): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@remote, 0x4e20, 0x0, 0x0, 0x8dca, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000, 0x93}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 4.068819831s ago: executing program 5 (id=5151): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd00122800ff000000000060fc03000f982c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfce) 3.947292035s ago: executing program 0 (id=5152): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101}) r3 = socket$alg(0x26, 0x5, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x21c, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"]) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006fc0), 0x0, 0x1, 0x0) r5 = socket$kcm(0x10, 0x6, 0x10) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000d00)="f5840eb9", 0x4, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 3.845130741s ago: executing program 3 (id=5153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000040)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000000000000044d564b"]) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40c200, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x6, 0x5a7160f8, 0x3, 0x401}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000380)={0x6, 'pimreg0\x00', {}, 0x7}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'bond_slave_1\x00', {0x4}, 0x2}) 3.646880047s ago: executing program 3 (id=5154): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000310000000000000000000000000000000000000000000000000000000000ecffffff000000ffffffff410000000000000000880000000000000000000000000000000000000000000000000000000000ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000403000000ffffff00"/144]}, 0x108) 3.592897473s ago: executing program 4 (id=5155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0x9be9, 0x800, 0x0, 0x25a}, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x200}) unshare(0x22020400) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.489047432s ago: executing program 3 (id=5156): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) connect$pppoe(r2, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000400)={0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="000b8e0000008e099fee84b64bde36f9962690cf88fe409431d4430ba51d8505c0df1160dc9c1b557cc3839ffd4a0f9c80df570811284d5698f1995b95d4dd344113dd197bc2aabb2c9fbcb8f8a205f638267cc662da98571239aee6e40894b0bde0db41224002f6f79222d0c2660f8d619cb556c4e9b4483b193de415c39c663fd08361b7ab60abd7cc254f04bbca9853709f06d4"], &(0x7f0000000300)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x8, 0x2f, {0x2f, 0xc, "a5e0d78a4936eedf66d1c24de55f033f58fdee0bb0b60daf417e9d8be8154d64af590135c448a0f9542fc08e49"}}, &(0x7f0000000080)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "81cd6effe108fb7cb2a12d72a2cab222b8c825e5fbd32c42f1e0b2353b39b3bde82c1f1b853cfa95ebcf8a6eda944b9c21f5e4335ffd3f6df08691bf3f5e42668146631726c15b5fc667b5475cb179d70760111b3fb0303a3e0dbb0bd3f2b6c535a5d8c8f3c00d4abcf887145ff8b91229189b8fe4df8beb8c5db4e816495adacf888ce18d962eac7426d37fb9bf43e43951f189cbcc2a058fb877521ba33912a155c2c4c598069c1114ab6f733d4109b1ff4ceb390b7c86c688e3d8ef0d1aeb08af050082de557f038e9f1d8f7505db3a132e72fafa202ff56ed30bb8260dd0b213e47b83e4fe"}}}, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x40, 0xc, 0x17, "8dd3da18a6650b34d496ff7ef42de9723ead480d951e96"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "1fb8fffb50b576dce1f84786a870211af408135397f36e2369d39c904fc865ba0edac6a68d9945a9eba18888167937"}}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 2.529769689s ago: executing program 4 (id=5157): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x283}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 2.384894083s ago: executing program 5 (id=5158): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) 1.958349163s ago: executing program 5 (id=5159): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x2, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x107b000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 1.361437491s ago: executing program 0 (id=5160): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xff97}}], 0x400000000000172, 0x4000000) 926.210429ms ago: executing program 1 (id=5161): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in6=@remote, 0x4e20, 0x0, 0x0, 0x8dca, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000, 0x93}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 341.956939ms ago: executing program 1 (id=5162): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000100000000000000000000000000900000000000000000000000000000001000000000000000c000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000084010500ac141414000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb013500000000ff00000000000400000001000000fe800000000000000000000000000025000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000200000000000000ac1e0101000000000000000000000000000000003c00000002000000fe8800000000000000000000000001010000000001030000000000000000000000000000fe8000000000000000000000800000bb000000003c00000002"], 0x23c}}, 0x0) 327.845115ms ago: executing program 4 (id=5163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f00000001c0)={0x4, 0x3, &(0x7f00000000c0)=[0x7, 0x6, 0xe53], &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)}) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendfile(r7, r5, 0x0, 0x80004700) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0x1a, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_getrule={0x1c, 0x22, 0x100, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x0, 0x30, 0x7, 0x0, 0x0, 0x7, 0x10}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20844}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000001400000011000100"], 0x88}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x5, 0x2}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r12) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r13, 0x40045568, 0x29) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 0s ago: executing program 1 (id=5164): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef, 0x3}, {0x8000, 0x0, 0xffe}, 0x1, 0x100, 0x5, 0xd618, 0x0, 0x4, 0x4, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\xcd\x7f!8\x86\xe8\xc3(i\xfc\"H\x0eA\\bg\x99\x98\x0e\fu\x02\bO', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r5, &(0x7f0000000000), 0x0, 0x0, 0x8) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) r7 = dup2(r4, r3) read$ptp(r7, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) readv(r7, &(0x7f0000001400)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1) getsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f00000000c0)={@private, @loopback, 0x0}, &(0x7f0000000240)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004006c39080000000100000080000000", @ANYRES32, @ANYBLOB="0004002000"/20, @ANYRES32=r9, @ANYRES32=r7, @ANYBLOB='\t\x00'/14], 0x50) kernel console output (not intermixed with test programs): 3] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1254.855229][T13983] usb 3-1: device descriptor read/8, error -71 [ 1255.094492][ T8751] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1255.094701][T13983] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1255.126142][T13983] usb 3-1: device descriptor read/8, error -71 [ 1255.234602][ T8751] usb 4-1: device descriptor read/64, error -71 [ 1255.242661][T13983] usb usb3-port1: unable to enumerate USB device [ 1255.494453][ T8751] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1255.634482][ T8751] usb 4-1: device descriptor read/64, error -71 [ 1255.745197][ T8751] usb usb4-port1: attempt power cycle [ 1256.084508][T13983] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1256.084508][ T8751] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1256.117783][ T8751] usb 4-1: device descriptor read/8, error -71 [ 1256.245160][T13983] usb 2-1: Using ep0 maxpacket: 8 [ 1256.253689][T13983] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1256.262879][T13983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.270955][T13983] usb 2-1: Product: syz [ 1256.275430][T13983] usb 2-1: Manufacturer: syz [ 1256.280044][T13983] usb 2-1: SerialNumber: syz [ 1256.286625][T13983] usb 2-1: config 0 descriptor?? [ 1256.364508][ T8751] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1256.385100][ T8751] usb 4-1: device descriptor read/8, error -71 [ 1256.495481][ T8751] usb usb4-port1: unable to enumerate USB device [ 1256.499042][T13983] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1256.757735][T23524] netlink: 'syz.0.4705': attribute type 9 has an invalid length. [ 1256.765934][T23524] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4705'. [ 1257.054445][ T8751] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 1257.245750][ T8751] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1257.291467][ T8751] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1257.298832][ T8751] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 1257.309368][ T8751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.325273][ T8751] usb 3-1: config 0 descriptor?? [ 1257.332821][T23522] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1257.799794][ T8751] lenovo 0003:17EF:60B5.0067: hidraw0: USB HID vff.ff Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 1257.923469][T13983] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1257.966442][T13983] usb 2-1: USB disconnect, device number 72 [ 1258.015756][T23539] FAULT_INJECTION: forcing a failure. [ 1258.015756][T23539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.071232][T23539] CPU: 0 UID: 0 PID: 23539 Comm: syz.3.4710 Not tainted syzkaller #0 PREEMPT(full) [ 1258.071250][T23539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1258.071257][T23539] Call Trace: [ 1258.071262][T23539] [ 1258.071267][T23539] dump_stack_lvl+0x189/0x250 [ 1258.071286][T23539] ? __pfx____ratelimit+0x10/0x10 [ 1258.071301][T23539] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1258.071315][T23539] ? __pfx__printk+0x10/0x10 [ 1258.071326][T23539] ? __might_fault+0xb0/0x130 [ 1258.071347][T23539] should_fail_ex+0x414/0x560 [ 1258.071367][T23539] _copy_from_iter+0x1de/0x1790 [ 1258.071381][T23539] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1258.071396][T23539] ? policy_nodemask+0x27c/0x720 [ 1258.071406][T23539] ? __pfx__copy_from_iter+0x10/0x10 [ 1258.071421][T23539] ? set_page_refcounted+0xa0/0x1e0 [ 1258.071435][T23539] af_alg_sendmsg+0x1562/0x2440 [ 1258.071459][T23539] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 1258.071471][T23539] ? __pfx_aa_sk_perm+0x10/0x10 [ 1258.071485][T23539] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1258.071505][T23539] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1258.071521][T23539] ? skcipher_sendmsg+0x26/0xf0 [ 1258.071534][T23539] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 1258.071548][T23539] __sock_sendmsg+0x21c/0x270 [ 1258.071564][T23539] __sys_sendto+0x3bd/0x520 [ 1258.071581][T23539] ? __pfx___sys_sendto+0x10/0x10 [ 1258.071596][T23539] ? count_memcg_event_mm+0x21/0x260 [ 1258.071622][T23539] ? exc_page_fault+0x82/0x100 [ 1258.071637][T23539] ? do_user_addr_fault+0xc85/0x1380 [ 1258.071651][T23539] __x64_sys_sendto+0xde/0x100 [ 1258.071669][T23539] do_syscall_64+0xfa/0xfa0 [ 1258.071682][T23539] ? lockdep_hardirqs_on+0x9c/0x150 [ 1258.071695][T23539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.071705][T23539] ? clear_bhb_loop+0x60/0xb0 [ 1258.071718][T23539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.071728][T23539] RIP: 0033:0x7f4110190e5c [ 1258.071738][T23539] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1258.071748][T23539] RSP: 002b:00007f41110eeec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1258.071760][T23539] RAX: ffffffffffffffda RBX: 00007f41110eefc0 RCX: 00007f4110190e5c [ 1258.071768][T23539] RDX: 0000000000000020 RSI: 00007f41110ef010 RDI: 0000000000000004 [ 1258.071775][T23539] RBP: 0000000000000000 R08: 00007f41110eef14 R09: 000000000000000c [ 1258.071782][T23539] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1258.071788][T23539] R13: 00007f41110eef68 R14: 00007f41110ef010 R15: 0000000000000000 [ 1258.071805][T23539] [ 1258.384486][ T8751] usb 3-1: USB disconnect, device number 59 [ 1258.912273][T23546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4711'. [ 1259.038556][T23546] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1259.445271][ T8751] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1259.695190][T23556] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1259.701759][T23556] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1259.726451][T23556] vhci_hcd vhci_hcd.0: Device attached [ 1259.759763][T23556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4712'. [ 1259.770686][ T8751] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1259.794885][ T8751] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1259.818411][ T8751] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1259.847817][ T8751] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1259.857053][ T8751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.888311][ T8751] usb 3-1: Product: syz [ 1259.898412][ T8751] usb 3-1: Manufacturer: syz [ 1259.904741][T13983] vhci_hcd: vhci_device speed not set [ 1259.955157][ T8751] usb 3-1: SerialNumber: syz [ 1259.962611][ T8751] usb 3-1: config 0 descriptor?? [ 1260.005464][T23557] vhci_hcd: connection closed [ 1260.010870][T21276] vhci_hcd: stop threads [ 1260.013806][T23549] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1260.015710][T21276] vhci_hcd: release socket [ 1260.023674][T23549] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1260.045229][T21276] vhci_hcd: disconnect device [ 1260.084733][T13983] usb 35-1: new high-speed USB device number 5 using vhci_hcd [ 1260.101491][T13983] usb 35-1: enqueue for inactive port 0 [ 1260.102799][ T8751] usb 3-1: ucan: probing device on interface #0 [ 1260.176939][T23560] loop9: detected capacity change from 0 to 7 [ 1260.186934][T17439] loop9: [POWERTEC] p1 p2 p3 [ 1260.192810][T17439] loop9: p1 size 65536 extends beyond EOD, truncated [ 1260.202069][T17439] loop9: p2 size 32766 extends beyond EOD, truncated [ 1260.211528][T17439] loop9: p3 start 1572864 is beyond EOD, truncated [ 1260.218321][T13983] vhci_hcd: vhci_device speed not set [ 1260.280716][T23560] loop9: [POWERTEC] p1 p2 p3 [ 1260.333278][T23560] loop9: p1 size 65536 extends beyond EOD, truncated [ 1260.372909][T23560] loop9: p2 size 32766 extends beyond EOD, truncated [ 1260.382187][T23560] loop9: p3 start 1572864 is beyond EOD, truncated [ 1260.541182][T17326] udevd[17326]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1260.558809][T17439] udevd[17439]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1260.725179][ T8751] ucan 3-1:0.0: probe with driver ucan failed with error -22 [ 1260.953806][T18280] usb 3-1: USB disconnect, device number 60 [ 1260.970703][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 1261.099631][T23575] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1261.182667][T23577] FAULT_INJECTION: forcing a failure. [ 1261.182667][T23577] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.239791][T23577] CPU: 0 UID: 0 PID: 23577 Comm: syz.1.4721 Not tainted syzkaller #0 PREEMPT(full) [ 1261.239825][T23577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1261.239838][T23577] Call Trace: [ 1261.239847][T23577] [ 1261.239855][T23577] dump_stack_lvl+0x189/0x250 [ 1261.239877][T23577] ? __pfx____ratelimit+0x10/0x10 [ 1261.239891][T23577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1261.239905][T23577] ? __pfx__printk+0x10/0x10 [ 1261.239919][T23577] ? __pfx___might_resched+0x10/0x10 [ 1261.239930][T23577] ? fs_reclaim_acquire+0x7d/0x100 [ 1261.239949][T23577] should_fail_ex+0x414/0x560 [ 1261.239969][T23577] should_failslab+0xa8/0x100 [ 1261.239981][T23577] __kmalloc_noprof+0xcb/0x7f0 [ 1261.239996][T23577] ? sock_kmalloc+0xd6/0x160 [ 1261.240016][T23577] sock_kmalloc+0xd6/0x160 [ 1261.240038][T23577] af_alg_alloc_areq+0x8d/0x260 [ 1261.240065][T23577] skcipher_recvmsg+0x359/0x11d0 [ 1261.240094][T23577] ? aa_sk_perm+0x81e/0x950 [ 1261.240128][T23577] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1261.240157][T23577] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1261.240175][T23577] ? security_socket_recvmsg+0x7e/0x2e0 [ 1261.240197][T23577] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1261.240223][T23577] sock_recvmsg+0x22c/0x270 [ 1261.240254][T23577] __sys_recvfrom+0x1f6/0x340 [ 1261.240276][T23577] ? __pfx___sys_recvfrom+0x10/0x10 [ 1261.240304][T23577] ? count_memcg_event_mm+0x21/0x260 [ 1261.240353][T23577] ? exc_page_fault+0x82/0x100 [ 1261.240383][T23577] ? do_user_addr_fault+0xc85/0x1380 [ 1261.240408][T23577] __x64_sys_recvfrom+0xde/0x100 [ 1261.240431][T23577] do_syscall_64+0xfa/0xfa0 [ 1261.240455][T23577] ? lockdep_hardirqs_on+0x9c/0x150 [ 1261.240479][T23577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.240499][T23577] ? clear_bhb_loop+0x60/0xb0 [ 1261.240523][T23577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.240542][T23577] RIP: 0033:0x7feffdf90d94 [ 1261.240559][T23577] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 1261.240577][T23577] RSP: 002b:00007feffef08ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 1261.240598][T23577] RAX: ffffffffffffffda RBX: 00007feffef08fc0 RCX: 00007feffdf90d94 [ 1261.240614][T23577] RDX: 0000000000001000 RSI: 00007feffef09010 RDI: 0000000000000004 [ 1261.240628][T23577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1261.240640][T23577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1261.240652][T23577] R13: 00007feffef08f68 R14: 00007feffef09010 R15: 0000000000000000 [ 1261.240684][T23577] [ 1262.474694][ T8751] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1262.684470][ T8751] usb 3-1: device descriptor read/64, error -71 [ 1262.744262][T23599] loop9: detected capacity change from 0 to 7 [ 1262.760572][T17142] Dev loop9: unable to read RDB block 7 [ 1262.767021][T17142] loop9: unable to read partition table [ 1262.773757][T17142] loop9: partition table beyond EOD, truncated [ 1262.793580][T23599] Dev loop9: unable to read RDB block 7 [ 1262.812615][T23599] loop9: unable to read partition table [ 1262.828169][T23599] loop9: partition table beyond EOD, truncated [ 1262.834828][T23599] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1262.961270][ T8751] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1263.006833][T23601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4730'. [ 1263.025949][T23602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4730'. [ 1263.127045][ T8751] usb 3-1: device descriptor read/64, error -71 [ 1263.235862][ T8751] usb usb3-port1: attempt power cycle [ 1263.407368][T23616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4735'. [ 1263.489934][T23617] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4735'. [ 1263.631592][ T8751] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1263.667957][ T8751] usb 3-1: device descriptor read/8, error -71 [ 1264.124922][ T8751] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1264.145501][ T8751] usb 3-1: device descriptor read/8, error -71 [ 1264.277134][ T8751] usb usb3-port1: unable to enumerate USB device [ 1264.887098][T23641] netlink: 'syz.3.4739': attribute type 1 has an invalid length. [ 1264.961013][T23641] bond7: (slave bridge7): making interface the new active one [ 1264.969326][T23641] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1265.128019][T23648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4740'. [ 1265.237390][T23650] loop9: detected capacity change from 0 to 7 [ 1265.298915][T17142] Dev loop9: unable to read RDB block 7 [ 1265.305100][T17142] loop9: unable to read partition table [ 1265.310972][T17142] loop9: partition table beyond EOD, truncated [ 1265.319318][T23650] Dev loop9: unable to read RDB block 7 [ 1265.371281][T23650] loop9: unable to read partition table [ 1265.378748][T23650] loop9: partition table beyond EOD, truncated [ 1265.394450][T23650] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1266.125555][T23664] geneve2: entered promiscuous mode [ 1266.130855][T23664] geneve2: entered allmulticast mode [ 1266.184876][T13983] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1266.368218][T13983] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1266.389348][T13983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.406884][T13983] usb 2-1: Product: syz [ 1266.411984][T13983] usb 2-1: Manufacturer: syz [ 1266.416737][T13983] usb 2-1: SerialNumber: syz [ 1266.430906][T13983] usb 2-1: config 0 descriptor?? [ 1266.443143][T13983] ch341 2-1:0.0: ch341-uart converter detected [ 1266.604523][ T8751] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1266.776296][ T8751] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.791386][ T8751] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1266.810572][ T8751] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1266.820822][ T8751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.831921][ T8751] usb 4-1: Product: syz [ 1266.839095][ T8751] usb 4-1: Manufacturer: syz [ 1266.847859][ T8751] usb 4-1: SerialNumber: syz [ 1266.862306][ T8751] usb 4-1: config 0 descriptor?? [ 1266.878820][ T8751] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1266.897053][ T8751] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1266.916763][ T8751] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1266.925641][ T8751] usb 4-1: media controller created [ 1266.979898][ T8751] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1267.115760][T23667] netlink: 'syz.1.4745': attribute type 1 has an invalid length. [ 1267.140537][T23667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4745'. [ 1267.162232][T23667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1267.173585][ T8751] DVB: Unable to find symbol tda10046_attach() [ 1267.188745][ T8751] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1267.238732][ T8751] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1267.429514][T23662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.439303][T23662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.765639][T13983] usb 2-1: failed to send control message: -110 [ 1267.772246][T13983] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1267.955197][T23673] syzkaller0: entered promiscuous mode [ 1267.974802][T23673] syzkaller0: entered allmulticast mode [ 1268.254230][T23656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.263131][T23656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.297337][ T8751] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1268.321285][ T8751] usb 4-1: USB disconnect, device number 83 [ 1269.044091][T23683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4751'. [ 1269.094839][T13983] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1269.186905][ T8751] usb 2-1: USB disconnect, device number 73 [ 1269.195262][ T8751] ch341 2-1:0.0: device disconnected [ 1269.264643][T13983] usb 4-1: Using ep0 maxpacket: 16 [ 1269.279595][T13983] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1269.294937][T23690] loop9: detected capacity change from 0 to 7 [ 1269.303169][T23690] Dev loop9: unable to read RDB block 7 [ 1269.303591][T13983] usb 4-1: config 1 has no interface number 0 [ 1269.337859][T23690] loop9: unable to read partition table [ 1269.343992][T23690] loop9: partition table beyond EOD, truncated [ 1269.353067][T13983] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1269.356394][T23690] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1269.393357][T13983] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1269.501069][T13983] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1269.530591][T13983] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1269.555614][T13983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.590190][T13983] usb 4-1: Product: syz [ 1269.606997][T13983] usb 4-1: Manufacturer: syz [ 1269.623970][T13983] usb 4-1: SerialNumber: syz [ 1269.657034][T23677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1269.672711][T23699] FAULT_INJECTION: forcing a failure. [ 1269.672711][T23699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.686520][T23677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1269.732932][T23699] CPU: 1 UID: 0 PID: 23699 Comm: syz.4.4755 Not tainted syzkaller #0 PREEMPT(full) [ 1269.732958][T23699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1269.732968][T23699] Call Trace: [ 1269.732976][T23699] [ 1269.732985][T23699] dump_stack_lvl+0x189/0x250 [ 1269.733017][T23699] ? __pfx____ratelimit+0x10/0x10 [ 1269.733046][T23699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1269.733072][T23699] ? __pfx__printk+0x10/0x10 [ 1269.733093][T23699] ? __might_fault+0xb0/0x130 [ 1269.733130][T23699] should_fail_ex+0x414/0x560 [ 1269.733164][T23699] _copy_from_user+0x2d/0xb0 [ 1269.733188][T23699] ___sys_recvmsg+0x12e/0x510 [ 1269.733219][T23699] ? __pfx____sys_recvmsg+0x10/0x10 [ 1269.733261][T23699] ? __fget_files+0x3a0/0x420 [ 1269.733288][T23699] __x64_sys_recvmsg+0x198/0x260 [ 1269.733312][T23699] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1269.733339][T23699] ? __pfx_ksys_write+0x10/0x10 [ 1269.733369][T23699] ? do_syscall_64+0xbe/0xfa0 [ 1269.733397][T23699] do_syscall_64+0xfa/0xfa0 [ 1269.733421][T23699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.733437][T23699] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1269.733453][T23699] ? clear_bhb_loop+0x60/0xb0 [ 1269.733475][T23699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.733493][T23699] RIP: 0033:0x7f7f8f18efc9 [ 1269.733510][T23699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1269.733527][T23699] RSP: 002b:00007f7f900c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1269.733547][T23699] RAX: ffffffffffffffda RBX: 00007f7f8f3e5fa0 RCX: 00007f7f8f18efc9 [ 1269.733561][T23699] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1269.733573][T23699] RBP: 00007f7f900c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.733585][T23699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.733598][T23699] R13: 00007f7f8f3e6038 R14: 00007f7f8f3e5fa0 R15: 00007f7f8f50fa28 [ 1269.733628][T23699] [ 1269.931109][ C1] vkms_vblank_simulate: vblank timer overrun [ 1270.017380][T23702] netlink: 'syz.1.4756': attribute type 1 has an invalid length. [ 1270.064493][T18280] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1270.199054][T23704] bond7: (slave bridge7): making interface the new active one [ 1270.211054][T23677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1270.211733][T23704] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1270.218613][T23677] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1270.251544][T18280] usb 3-1: config 0 has no interfaces? [ 1270.263167][T18280] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1270.289263][T18280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.314050][T18280] usb 3-1: Product: syz [ 1270.325892][T18280] usb 3-1: Manufacturer: syz [ 1270.330582][T18280] usb 3-1: SerialNumber: syz [ 1270.340513][T18280] usb 3-1: config 0 descriptor?? [ 1270.732036][ T8753] usb 3-1: USB disconnect, device number 65 [ 1270.833723][T23723] geneve2: entered promiscuous mode [ 1270.839627][T23723] geneve2: entered allmulticast mode [ 1270.853199][T13983] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1270.875735][T13983] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1271.034892][T13983] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2e:86:a5:97:20:5c [ 1271.078868][T13983] usb 4-1: USB disconnect, device number 84 [ 1271.107509][T13983] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1271.164887][T13983] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1271.178872][T13983] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1271.188559][T13983] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1271.304838][ T8753] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1271.496235][ T8753] usb 2-1: Using ep0 maxpacket: 8 [ 1271.519894][ T8753] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1271.541338][ T8753] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1271.557878][ T8753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.580313][T23736] loop9: detected capacity change from 0 to 7 [ 1271.586746][ T8753] usb 2-1: Product: syz [ 1271.592425][T23736] Dev loop9: unable to read RDB block 7 [ 1271.603956][ T8753] usb 2-1: Manufacturer: syz [ 1271.609586][ T8753] usb 2-1: SerialNumber: syz [ 1271.614878][T23736] loop9: unable to read partition table [ 1271.626575][ T8753] usb 2-1: config 0 descriptor?? [ 1271.631762][T23736] loop9: partition table beyond EOD, truncated [ 1271.638768][T23736] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1271.651954][ T8753] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1271.665414][ T8753] usb 2-1: setting power ON [ 1271.683133][ T8753] dvb-usb: bulk message failed: -22 (2/0) [ 1271.712288][ T8753] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1271.737526][ T8753] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1271.759854][ T8753] usb 2-1: media controller created [ 1271.800816][ T8753] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1271.825696][ T8753] usb 2-1: selecting invalid altsetting 6 [ 1271.832268][ T8753] usb 2-1: digital interface selection failed (-22) [ 1271.839999][ T8753] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1271.850716][ T8753] usb 2-1: setting power OFF [ 1271.867855][ T8753] dvb-usb: bulk message failed: -22 (2/0) [ 1271.910973][ T8753] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1271.924148][ T8753] (NULL device *): no alternate interface [ 1271.959101][ T8753] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1272.072332][ T8753] usb 2-1: USB disconnect, device number 74 [ 1272.198069][T23745] FAULT_INJECTION: forcing a failure. [ 1272.198069][T23745] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.211135][T23745] CPU: 1 UID: 0 PID: 23745 Comm: syz.3.4767 Not tainted syzkaller #0 PREEMPT(full) [ 1272.211163][T23745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1272.211176][T23745] Call Trace: [ 1272.211185][T23745] [ 1272.211195][T23745] dump_stack_lvl+0x189/0x250 [ 1272.211227][T23745] ? __pfx____ratelimit+0x10/0x10 [ 1272.211252][T23745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1272.211278][T23745] ? __pfx__printk+0x10/0x10 [ 1272.211302][T23745] ? __pfx___might_resched+0x10/0x10 [ 1272.211323][T23745] ? fs_reclaim_acquire+0x7d/0x100 [ 1272.211354][T23745] should_fail_ex+0x414/0x560 [ 1272.211389][T23745] should_failslab+0xa8/0x100 [ 1272.211411][T23745] __kmalloc_noprof+0xcb/0x7f0 [ 1272.211462][T23745] ? sock_kmalloc+0xd6/0x160 [ 1272.211490][T23745] sock_kmalloc+0xd6/0x160 [ 1272.211515][T23745] af_alg_alloc_areq+0x8d/0x260 [ 1272.211542][T23745] skcipher_recvmsg+0x359/0x11d0 [ 1272.211573][T23745] ? aa_sk_perm+0x81e/0x950 [ 1272.211612][T23745] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1272.211642][T23745] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1272.211660][T23745] ? security_socket_recvmsg+0x7e/0x2e0 [ 1272.211681][T23745] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1272.211707][T23745] sock_recvmsg+0x22c/0x270 [ 1272.211737][T23745] ____sys_recvmsg+0x1c9/0x460 [ 1272.211768][T23745] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1272.211806][T23745] ? import_iovec+0x74/0xa0 [ 1272.211834][T23745] ___sys_recvmsg+0x1b5/0x510 [ 1272.211862][T23745] ? __pfx____sys_recvmsg+0x10/0x10 [ 1272.211916][T23745] ? __fget_files+0x3a0/0x420 [ 1272.211947][T23745] __x64_sys_recvmsg+0x198/0x260 [ 1272.211971][T23745] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1272.212002][T23745] ? __pfx_ksys_write+0x10/0x10 [ 1272.212035][T23745] ? do_syscall_64+0xbe/0xfa0 [ 1272.212065][T23745] do_syscall_64+0xfa/0xfa0 [ 1272.212089][T23745] ? lockdep_hardirqs_on+0x9c/0x150 [ 1272.212115][T23745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.212135][T23745] ? clear_bhb_loop+0x60/0xb0 [ 1272.212159][T23745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.212179][T23745] RIP: 0033:0x7f411018efc9 [ 1272.212198][T23745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.212216][T23745] RSP: 002b:00007f41110f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1272.212238][T23745] RAX: ffffffffffffffda RBX: 00007f41103e5fa0 RCX: 00007f411018efc9 [ 1272.212254][T23745] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1272.212267][T23745] RBP: 00007f41110f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1272.212281][T23745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.212293][T23745] R13: 00007f41103e6038 R14: 00007f41103e5fa0 R15: 00007f411050fa28 [ 1272.212325][T23745] [ 1272.484751][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.783821][T23750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4769'. [ 1272.817831][T23750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4769'. [ 1274.355907][T23773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4774'. [ 1274.614720][T23056] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1274.713022][T23776] macvtap0: entered promiscuous mode [ 1274.742665][T23776] macvtap0: entered allmulticast mode [ 1274.787765][T23056] usb 4-1: config 0 has no interfaces? [ 1274.795776][T23056] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1274.807468][T23056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.810772][T23776] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1274.848120][T23056] usb 4-1: Product: syz [ 1274.863507][T23056] usb 4-1: Manufacturer: syz [ 1274.877176][T23056] usb 4-1: SerialNumber: syz [ 1274.892038][T23776] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1274.909494][T23056] usb 4-1: config 0 descriptor?? [ 1274.987871][T23776] team0: Device macvtap0 failed to register rx_handler [ 1275.044169][T23776] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 1275.065647][T23776] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 1275.092417][T23782] loop9: detected capacity change from 0 to 7 [ 1275.113215][T23782] Dev loop9: unable to read RDB block 7 [ 1275.128990][T23782] loop9: unable to read partition table [ 1275.151212][T23782] loop9: partition table beyond EOD, truncated [ 1275.163102][T23782] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1276.523422][T23819] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1276.914812][T18280] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1277.256431][T18280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.268853][T18280] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1277.296699][T18280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.353579][T18280] usb 2-1: config 0 descriptor?? [ 1277.443571][ T8751] usb 4-1: USB disconnect, device number 85 [ 1277.845167][T23834] fuse: Unknown parameter '' [ 1277.874073][T18280] usbhid 2-1:0.0: can't add hid device: -71 [ 1277.924627][T18280] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1278.416597][T18280] usb 2-1: USB disconnect, device number 75 [ 1278.710063][T23840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4790'. [ 1279.489150][T23859] binder: 23858:23859 ioctl c018620c 200000000240 returned -22 [ 1279.520477][ T30] audit: type=1326 audit(1761441488.645:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23858 comm="syz.0.4796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff89978efc9 code=0x0 [ 1279.623193][T23861] syzkaller0: entered promiscuous mode [ 1279.628942][T23861] syzkaller0: entered allmulticast mode [ 1279.727463][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1280.424897][T23874] syzkaller0: entered promiscuous mode [ 1280.477536][T23874] syzkaller0: entered allmulticast mode [ 1280.895152][T23897] geneve2: entered promiscuous mode [ 1280.900444][T23897] geneve2: entered allmulticast mode [ 1281.752460][T23905] geneve2: entered promiscuous mode [ 1281.760112][T23905] geneve2: entered allmulticast mode [ 1282.586645][T23910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4809'. [ 1284.211429][T23941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4817'. [ 1284.539813][T23941] bond8: option primary_reselect: invalid value (13) [ 1284.571147][T23941] bond8 (unregistering): Released all slaves [ 1284.752800][T23951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4820'. [ 1284.936291][T23955] binder: 23948:23955 ioctl c0306201 200000000080 returned -14 [ 1284.982963][T23958] bond0: option ad_select: invalid value (253) [ 1284.995867][T23958] bond0 (unregistering): Released all slaves [ 1285.132875][T23962] bond6: option ad_select: invalid value (253) [ 1285.170788][T23962] bond6 (unregistering): Released all slaves [ 1285.388183][T23970] netlink: 'syz.0.4826': attribute type 32 has an invalid length. [ 1285.396422][T23970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4826'. [ 1285.449689][T23970] bond0: option coupled_control: invalid value (32) [ 1285.491406][T23970] bond0 (unregistering): Released all slaves [ 1286.243660][T24000] FAULT_INJECTION: forcing a failure. [ 1286.243660][T24000] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.257502][T24000] CPU: 1 UID: 0 PID: 24000 Comm: syz.1.4833 Not tainted syzkaller #0 PREEMPT(full) [ 1286.257527][T24000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1286.257539][T24000] Call Trace: [ 1286.257546][T24000] [ 1286.257554][T24000] dump_stack_lvl+0x189/0x250 [ 1286.257587][T24000] ? __pfx____ratelimit+0x10/0x10 [ 1286.257613][T24000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1286.257639][T24000] ? __pfx__printk+0x10/0x10 [ 1286.257665][T24000] ? __pfx___might_resched+0x10/0x10 [ 1286.257692][T24000] should_fail_ex+0x414/0x560 [ 1286.257726][T24000] should_failslab+0xa8/0x100 [ 1286.257748][T24000] __kmalloc_noprof+0xcb/0x7f0 [ 1286.257774][T24000] ? kfree+0x4d/0x6d0 [ 1286.257794][T24000] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1286.257831][T24000] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1286.257862][T24000] ? tomoyo_domain+0xd9/0x130 [ 1286.257896][T24000] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1286.257921][T24000] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1286.257952][T24000] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1286.258014][T24000] ? __fget_files+0x2a/0x420 [ 1286.258038][T24000] ? __fget_files+0x3a0/0x420 [ 1286.258055][T24000] ? __fget_files+0x2a/0x420 [ 1286.258078][T24000] security_file_ioctl+0xcb/0x2d0 [ 1286.258103][T24000] __se_sys_ioctl+0x47/0x170 [ 1286.258131][T24000] do_syscall_64+0xfa/0xfa0 [ 1286.258154][T24000] ? lockdep_hardirqs_on+0x9c/0x150 [ 1286.258179][T24000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.258199][T24000] ? clear_bhb_loop+0x60/0xb0 [ 1286.258222][T24000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.258242][T24000] RIP: 0033:0x7feffdf8efc9 [ 1286.258260][T24000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.258278][T24000] RSP: 002b:00007feffeec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1286.258299][T24000] RAX: ffffffffffffffda RBX: 00007feffe1e6180 RCX: 00007feffdf8efc9 [ 1286.258315][T24000] RDX: 0000200000000000 RSI: 000000004058534c RDI: 0000000000000007 [ 1286.258328][T24000] RBP: 00007feffeec8090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.258341][T24000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.258353][T24000] R13: 00007feffe1e6218 R14: 00007feffe1e6180 R15: 00007feffe30fa28 [ 1286.258393][T24000] [ 1286.258415][T24000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1287.093906][T24007] bond2: option ad_select: invalid value (253) [ 1287.101938][T24007] bond2 (unregistering): Released all slaves [ 1287.347642][T24017] netlink: 'syz.2.4840': attribute type 1 has an invalid length. [ 1287.552244][T24022] bond2: (slave bridge3): making interface the new active one [ 1287.623262][T24022] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1288.422759][T24037] netlink: 'syz.3.4844': attribute type 32 has an invalid length. [ 1288.432249][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4844'. [ 1288.492811][T24040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4845'. [ 1288.519584][T24037] bond8: option coupled_control: invalid value (32) [ 1288.529098][T24037] bond8 (unregistering): Released all slaves [ 1288.788944][T18280] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1288.947561][T18280] usb 3-1: Using ep0 maxpacket: 16 [ 1288.954786][T18280] usb 3-1: config 128 has an invalid interface number: 4 but max is 1 [ 1288.964827][T18280] usb 3-1: config 128 has an invalid interface number: 203 but max is 1 [ 1288.988068][T18280] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.024521][T18280] usb 3-1: config 128 has no interface number 0 [ 1289.041490][T18280] usb 3-1: config 128 has no interface number 1 [ 1289.051266][T18280] usb 3-1: config 128 interface 4 altsetting 109 has an invalid descriptor for endpoint zero, skipping [ 1289.083834][T18280] usb 3-1: config 128 interface 4 altsetting 109 has an invalid descriptor for endpoint zero, skipping [ 1289.105331][T18280] usb 3-1: config 128 interface 4 altsetting 109 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1289.144511][T18280] usb 3-1: config 128 interface 4 altsetting 109 has a duplicate endpoint with address 0x9, skipping [ 1289.160992][T24048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4847'. [ 1289.171335][T18280] usb 3-1: config 128 interface 4 altsetting 109 bulk endpoint 0x4 has invalid maxpacket 64 [ 1289.222552][T18280] usb 3-1: config 128 interface 4 altsetting 109 bulk endpoint 0xC has invalid maxpacket 1023 [ 1289.244475][T18280] usb 3-1: config 128 interface 4 altsetting 109 has a duplicate endpoint with address 0xC, skipping [ 1289.258181][T18280] usb 3-1: config 128 interface 4 altsetting 109 has a duplicate endpoint with address 0xB, skipping [ 1289.276663][T18280] usb 3-1: config 128 interface 4 altsetting 109 has a duplicate endpoint with address 0x9, skipping [ 1289.289316][T18280] usb 3-1: config 128 interface 4 altsetting 109 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 1289.309529][T18280] usb 3-1: config 128 interface 203 altsetting 3 endpoint 0x2 has invalid maxpacket 27072, setting to 64 [ 1289.322548][T18280] usb 3-1: config 128 interface 203 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1289.364217][T18280] usb 3-1: config 128 interface 4 has no altsetting 0 [ 1289.371922][T18280] usb 3-1: config 128 interface 203 has no altsetting 0 [ 1289.388773][T18280] usb 3-1: New USB device found, idVendor=19d2, idProduct=0042, bcdDevice=9f.0f [ 1289.398000][T18280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.406581][T18280] usb 3-1: Product: syz [ 1289.410774][T18280] usb 3-1: Manufacturer: syz [ 1289.449178][T18280] usb 3-1: SerialNumber: syz [ 1289.478988][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4848'. [ 1289.590026][T24054] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1289.945111][T24041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1290.156424][T24041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1290.201904][T24041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1290.532622][T18280] qmi_wwan 3-1:128.4: probe with driver qmi_wwan failed with error -22 [ 1290.664732][T24067] netlink: 'syz.2.4853': attribute type 1 has an invalid length. [ 1290.732984][T24064] loop9: detected capacity change from 0 to 7 [ 1290.759255][T24067] bond3: (slave bridge4): making interface the new active one [ 1290.866930][T24067] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1290.867689][T24064] Dev loop9: unable to read RDB block 7 [ 1290.904865][T24064] loop9: unable to read partition table [ 1290.922090][T24064] loop9: partition table beyond EOD, truncated [ 1290.931183][T18280] usb 3-1: USB disconnect, device number 66 [ 1290.960933][T24064] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1291.118579][T24078] netlink: 'syz.4.4855': attribute type 39 has an invalid length. [ 1291.190601][T24081] netlink: 'syz.1.4856': attribute type 32 has an invalid length. [ 1291.199168][T24081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4856'. [ 1291.247498][T24081] bond8: option coupled_control: invalid value (32) [ 1291.307380][T24081] bond8 (unregistering): Released all slaves [ 1291.483059][T18465] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 1291.497094][T18465] hid-generic 0000:0000:0000.0068: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1292.197657][T24092] fido_id[24092]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1293.048181][T24100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4862'. [ 1293.067393][T24100] netlink: 'syz.4.4862': attribute type 18 has an invalid length. [ 1293.075558][T24100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4862'. [ 1294.461390][T19849] bond0: (slave syz_tun): Releasing backup interface [ 1294.948785][T20759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.966781][T20759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.182183][T20759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1295.254232][T20759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.435886][T24147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4878'. [ 1295.649826][T24147] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1296.296356][T20759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.330613][T20759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.422577][T24152] sctp: [Deprecated]: syz.1.4880 (pid 24152) Use of int in max_burst socket option. [ 1296.422577][T24152] Use struct sctp_assoc_value instead [ 1296.510368][T20759] team0: Port device netdevsim0 removed [ 1296.518792][T20759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1296.557600][T20759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.687053][T16189] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1296.698414][T16189] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1296.716396][T16189] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1296.728986][T16189] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1296.738857][T16189] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1296.768070][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1296.778055][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1296.844989][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1296.853096][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1296.893510][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1297.004148][T20759] bridge_slave_1: left allmulticast mode [ 1297.067008][T20759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.132424][T20759] bridge_slave_0: left allmulticast mode [ 1297.159598][T20759] bridge_slave_0: left promiscuous mode [ 1297.190058][T20759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.296885][T24175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4886'. [ 1298.333081][T20759] bridge0 (unregistering): left promiscuous mode [ 1298.471215][T24178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4887'. [ 1298.485895][T20759] bond1 (unregistering): (slave bridge2): Releasing active interface [ 1298.584613][ T8751] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1298.597687][T20759] bond2 (unregistering): (slave bridge3): Releasing active interface [ 1298.674088][T20759] bond3 (unregistering): (slave bridge4): Releasing active interface [ 1298.752425][T24180] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1298.798300][ T8751] usb 2-1: Using ep0 maxpacket: 32 [ 1298.809250][ T8751] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1298.817870][ T8751] usb 2-1: config 0 has no interface number 0 [ 1298.824077][ T8751] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1298.874059][ T8751] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1298.883346][ T8751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.904208][ T8751] usb 2-1: Product: syz [ 1298.917480][ T8751] usb 2-1: Manufacturer: syz [ 1298.924428][ T8751] usb 2-1: SerialNumber: syz [ 1298.932159][ T8751] usb 2-1: config 0 descriptor?? [ 1298.944238][ T8751] smsc75xx v1.0.0 [ 1299.034919][T16189] Bluetooth: hci0: command tx timeout [ 1299.408526][T20759] bond0 (unregistering): left promiscuous mode [ 1299.418672][T20759] bond_slave_0: left promiscuous mode [ 1299.468064][T20759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.537430][T20759] bond0 (unregistering): Released all slaves [ 1299.580931][T24184] netlink: 'syz.0.4889': attribute type 32 has an invalid length. [ 1299.587833][T20759] bond1 (unregistering): Released all slaves [ 1299.589433][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4889'. [ 1299.621642][T20759] bond2 (unregistering): Released all slaves [ 1299.640438][T20759] bond3 (unregistering): Released all slaves [ 1299.918418][T24184] bond0: option coupled_control: invalid value (32) [ 1300.084913][T24184] bond0 (unregistering): Released all slaves [ 1300.176776][T20759] tipc: Disabling bearer [ 1300.217833][T20759] tipc: Left network mode [ 1300.400225][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.406797][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.080098][ T30] audit: type=1326 audit(1761441510.205:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24211 comm="syz.4.4892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f8f18efc9 code=0x0 [ 1301.116279][T16189] Bluetooth: hci0: command tx timeout [ 1301.353304][T24216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4892'. [ 1301.425963][ T8751] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1301.440444][ T8751] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1301.470783][ T8751] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1301.482288][ T8751] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1301.612183][ T8751] usb 2-1: USB disconnect, device number 76 [ 1301.629205][T20759] hsr_slave_0: left promiscuous mode [ 1301.643737][T20759] hsr_slave_1: left promiscuous mode [ 1301.651814][T20759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1301.709791][T20759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1301.768452][T20759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1301.823161][T20759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.974250][T20759] veth1_macvtap: left promiscuous mode [ 1301.992234][T20759] veth0_macvtap: left promiscuous mode [ 1302.008859][T20759] veth1_vlan: left promiscuous mode [ 1302.029970][T20759] veth0_vlan: left promiscuous mode [ 1302.554631][ T30] audit: type=1326 audit(1761441511.645:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24221 comm="syz.1.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1302.603683][ T30] audit: type=1326 audit(1761441511.645:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24221 comm="syz.1.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1302.663134][ T30] audit: type=1326 audit(1761441511.655:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24221 comm="syz.1.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1302.791532][ T30] audit: type=1326 audit(1761441511.655:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24221 comm="syz.1.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1302.915175][ T30] audit: type=1326 audit(1761441511.655:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24221 comm="syz.1.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1302.951649][ T30] audit: type=1326 audit(1761441511.655:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24221 comm="syz.1.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1302.999854][ T30] audit: type=1326 audit(1761441511.655:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24221 comm="syz.1.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1303.088496][ T30] audit: type=1326 audit(1761441511.655:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24221 comm="syz.1.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1303.255398][T16189] Bluetooth: hci0: command tx timeout [ 1303.283496][ T30] audit: type=1326 audit(1761441511.655:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24221 comm="syz.1.4894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1303.844043][T20759] team0 (unregistering): Port device team_slave_1 removed [ 1303.894002][T20759] team0 (unregistering): Port device team_slave_0 removed [ 1304.705026][T24167] chnl_net:caif_netlink_parms(): no params data found [ 1304.966738][T13983] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1305.158735][T24167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.166349][T13983] usb 2-1: Using ep0 maxpacket: 16 [ 1305.172332][T24167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.173754][T13983] usb 2-1: config 4 has an invalid interface number: 51 but max is 0 [ 1305.184647][T24167] bridge_slave_0: entered allmulticast mode [ 1305.208772][T13983] usb 2-1: config 4 has no interface number 0 [ 1305.209781][T24167] bridge_slave_0: entered promiscuous mode [ 1305.224490][T13983] usb 2-1: config 4 interface 51 has no altsetting 0 [ 1305.239483][T24261] netlink: 'syz.4.4901': attribute type 3 has an invalid length. [ 1305.243857][T13983] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 1305.249764][T24167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.274517][T16189] Bluetooth: hci0: command tx timeout [ 1305.287857][T24167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.295418][T13983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.298511][T24167] bridge_slave_1: entered allmulticast mode [ 1305.311191][T24167] bridge_slave_1: entered promiscuous mode [ 1305.330022][T20759] IPVS: stop unused estimator thread 0... [ 1305.339529][T13983] usb 2-1: Product: syz [ 1305.343731][T13983] usb 2-1: Manufacturer: syz [ 1305.376946][T13983] usb 2-1: SerialNumber: syz [ 1305.397736][T13983] cdc_eem 2-1:4.51: probe with driver cdc_eem failed with error -22 [ 1305.555853][ T5918] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1305.764823][ T5918] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1305.896261][ T5918] usb 5-1: USB disconnect, device number 80 [ 1306.020046][T24167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.107199][T24167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.301272][ T5918] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1306.412151][T24167] team0: Port device team_slave_0 added [ 1306.426649][T24167] team0: Port device team_slave_1 added [ 1306.466643][ T5918] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1306.476963][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1306.497480][ T5918] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1306.579795][ T5918] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1306.589621][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.620931][ T5918] usb 5-1: Product: syz [ 1306.637706][T24167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.641089][ T5918] usb 5-1: Manufacturer: syz [ 1306.691509][T24167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.717760][ T5918] usb 5-1: SerialNumber: syz [ 1306.734156][ T5918] usb 5-1: config 0 descriptor?? [ 1306.759419][T24263] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1306.767285][T24263] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1306.776986][ T5918] usb 5-1: ucan: probing device on interface #0 [ 1306.783917][T24167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.808918][T24167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.820686][T24167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.939084][T24167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.141130][T24167] hsr_slave_0: entered promiscuous mode [ 1307.161462][T24167] hsr_slave_1: entered promiscuous mode [ 1307.587615][ T5918] ucan 5-1:0.0 can0: registered device [ 1307.808747][ T8753] usb 2-1: USB disconnect, device number 77 [ 1308.224388][T24305] netlink: 'syz.1.4909': attribute type 1 has an invalid length. [ 1308.609665][T24307] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1308.621131][T24307] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 1308.850893][ T5918] ucan 5-1:0.0 can0: firmware string: unknown [ 1308.961160][T24308] bond8: (slave bridge8): Enslaving as an active interface with a down link [ 1308.985282][ T5918] usb 5-1: USB disconnect, device number 81 [ 1309.080175][T24311] macvlan2: entered promiscuous mode [ 1309.166508][T24311] macvlan2: entered allmulticast mode [ 1309.213650][T24311] bond8: entered promiscuous mode [ 1309.233650][T24311] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1309.322315][T24311] bond8: left promiscuous mode [ 1310.043250][T24167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1310.067446][T24330] loop9: detected capacity change from 0 to 7 [ 1310.076365][ T5918] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1310.107752][T24167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1310.117463][T24330] Dev loop9: unable to read RDB block 7 [ 1310.133258][T24330] loop9: unable to read partition table [ 1310.142445][T24330] loop9: partition table beyond EOD, truncated [ 1310.153269][T24167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1310.169374][T24330] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1310.181781][T24167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1310.248276][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 1310.256145][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.266386][ T5918] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 1310.292142][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.319055][ T5918] usb 5-1: config 0 descriptor?? [ 1310.596749][ T5918] hid-corsair-void 0003:1B1C:1B25.0069: item fetching failed at offset 0/1 [ 1310.647518][ T5918] hid-corsair-void 0003:1B1C:1B25.0069: parse failed (reason: -22) [ 1310.695271][ T5918] hid-corsair-void 0003:1B1C:1B25.0069: probe with driver hid-corsair-void failed with error -22 [ 1310.752266][ T5918] usb 5-1: USB disconnect, device number 82 [ 1310.830661][T24167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1310.872886][T24167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1310.975758][T21275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1310.983063][T21275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.028238][T21275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.035473][T21275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.330652][T24355] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 1311.387528][T24355] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0/file1 [ 1311.401777][T24167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.486859][T24363] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1311.493431][T24363] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1311.503396][T24363] vhci_hcd vhci_hcd.0: Device attached [ 1311.775647][T24365] vhci_hcd: connection closed [ 1311.779668][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1311.779689][ T30] audit: type=1326 audit(1761441520.905:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24370 comm="syz.4.4919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f8f18efc9 code=0x0 [ 1311.780873][T21279] vhci_hcd: stop threads [ 1311.807138][T24167] veth0_vlan: entered promiscuous mode [ 1311.826285][ T5918] vhci_hcd: vhci_device speed not set [ 1311.856643][T21279] vhci_hcd: release socket [ 1311.889085][ T5918] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1311.907620][T21279] vhci_hcd: disconnect device [ 1312.049438][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4919'. [ 1312.204843][T24167] veth1_vlan: entered promiscuous mode [ 1312.330878][T24167] veth0_macvtap: entered promiscuous mode [ 1312.392760][T24167] veth1_macvtap: entered promiscuous mode [ 1312.493295][T24167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.569645][T24167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.676854][T21275] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.717079][T21275] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.739432][T21275] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.922334][T21275] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.015732][T21275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.061824][T21275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.272164][T21279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.323239][T21279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.253571][ T30] audit: type=1326 audit(1761441523.375:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24401 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1314.338268][T24402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4922'. [ 1314.354884][ T30] audit: type=1326 audit(1761441523.375:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24401 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1314.382069][T24402] netlink: 'syz.1.4922': attribute type 3 has an invalid length. [ 1314.506352][ T30] audit: type=1326 audit(1761441523.415:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24401 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1314.587555][ T30] audit: type=1326 audit(1761441523.455:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24401 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1314.736762][T18280] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1314.749820][ T30] audit: type=1326 audit(1761441523.455:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24401 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1314.808681][ T30] audit: type=1326 audit(1761441523.455:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24401 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1314.832985][ T30] audit: type=1326 audit(1761441523.455:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24401 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1314.875226][ T30] audit: type=1326 audit(1761441523.455:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24401 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1314.924602][T18280] usb 4-1: Using ep0 maxpacket: 16 [ 1314.936486][T18280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.954641][ T30] audit: type=1326 audit(1761441523.455:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24401 comm="syz.1.4922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1314.983502][T18280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.011920][T18280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1315.065543][T18280] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1315.082110][T18280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.125908][T18280] usb 4-1: config 0 descriptor?? [ 1315.331571][T24418] bridge0: port 3(..0·) entered blocking state [ 1315.352650][T24418] bridge0: port 3(..0·) entered disabled state [ 1315.363183][T24418] ..0·: entered promiscuous mode [ 1315.382178][T24418] bridge0: port 3(..0·) entered blocking state [ 1315.388561][T24418] bridge0: port 3(..0·) entered forwarding state [ 1315.608141][T18280] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 1315.707266][T18280] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 1315.812639][T18280] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 1315.837250][T18280] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 1315.854291][T18280] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 1315.882158][T18280] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 1315.900109][T18280] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 1315.963798][T18280] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 1316.151102][T18280] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 1316.197785][T18280] microsoft 0003:045E:07DA.006A: unknown main item tag 0x0 [ 1316.252464][T24429] kvm: pic: level sensitive irq not supported [ 1316.253294][T24429] kvm: pic: single mode not supported [ 1316.260036][T24429] kvm: pic: level sensitive irq not supported [ 1316.309672][T24429] kvm: pic: level sensitive irq not supported [ 1316.333795][T24429] kvm: pic: single mode not supported [ 1316.344660][T24429] kvm: pic: single mode not supported [ 1316.350078][T24429] kvm: pic: level sensitive irq not supported [ 1316.364618][T24429] kvm: pic: single mode not supported [ 1316.404485][T24429] kvm: pic: level sensitive irq not supported [ 1316.492454][T18280] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.006A/input/input102 [ 1316.524726][T24429] kvm: pic: single mode not supported [ 1316.524753][T24429] kvm: pic: level sensitive irq not supported [ 1316.541055][T24429] kvm: pic: level sensitive irq not supported [ 1316.548000][T24429] kvm: pic: single mode not supported [ 1316.554657][T24429] kvm: pic: single mode not supported [ 1316.560140][T24429] kvm: pic: level sensitive irq not supported [ 1316.565834][T24429] kvm: pic: single mode not supported [ 1316.572145][T24429] kvm: pic: level sensitive irq not supported [ 1316.578108][T24429] kvm: pic: single mode not supported [ 1316.584206][T24429] kvm: pic: level sensitive irq not supported [ 1316.590814][T24429] kvm: pic: single mode not supported [ 1316.611747][ T8753] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1316.684524][T18280] microsoft 0003:045E:07DA.006A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1316.776229][T18280] usb 4-1: USB disconnect, device number 86 [ 1316.883640][T24441] fido_id[24441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1316.914533][ T8753] usb 5-1: Using ep0 maxpacket: 8 [ 1316.934159][ T8753] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1316.979203][ T8753] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 1316.997207][ T8753] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1317.023322][ T8753] usb 5-1: config 4 has no interface number 0 [ 1317.024742][ T5918] vhci_hcd: vhci_device speed not set [ 1317.045942][T23056] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1317.067951][ T8753] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1317.094692][ T8753] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.126693][ T8753] usb 5-1: Product: syz [ 1317.138737][ T8753] usb 5-1: Manufacturer: syz [ 1317.154394][ T8753] usb 5-1: SerialNumber: syz [ 1317.206410][T23056] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1317.215782][T23056] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.250467][T23056] usb 2-1: config 0 has no interface number 0 [ 1317.271866][T23056] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1317.284990][T23056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.293297][T23056] usb 2-1: Product: syz [ 1317.318244][T23056] usb 2-1: Manufacturer: syz [ 1317.322931][T23056] usb 2-1: SerialNumber: syz [ 1317.356917][T23056] usb 2-1: config 0 descriptor?? [ 1317.388030][T23056] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 1317.598960][T24440] 8021q: VLANs not supported on vcan0 [ 1318.001778][T24457] loop6: detected capacity change from 0 to 524287999 [ 1318.010543][T24457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1318.021381][T24457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1318.085006][T24459] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4934'. [ 1318.094483][ T982] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1318.343424][ T982] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1318.373460][ T982] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1318.455457][ T982] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1318.494192][ T982] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1318.567528][ T982] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1318.734168][ T8753] uvcvideo 5-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1318.742077][ T8753] uvcvideo 5-1:4.147: No valid video chain found. [ 1318.802240][ T982] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1318.832112][ T8753] usb 5-1: USB disconnect, device number 83 [ 1318.859325][ T982] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1318.902599][T24464] netlink: 'syz.4.4940': attribute type 9 has an invalid length. [ 1318.911841][T24464] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4940'. [ 1318.922624][ T982] usb 6-1: Product: syz [ 1318.933737][ T982] usb 6-1: Manufacturer: syz [ 1318.981613][ T982] cdc_wdm 6-1:1.0: skipping garbage [ 1319.012360][ T982] cdc_wdm 6-1:1.0: skipping garbage [ 1319.081781][ T982] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1319.088346][ T982] cdc_wdm 6-1:1.0: Unknown control protocol [ 1319.720674][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1319.720693][ T30] audit: type=1326 audit(1761441528.845:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24471 comm="syz.3.4943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f411018efc9 code=0x0 [ 1319.801592][ T8753] usb 2-1: USB disconnect, device number 78 [ 1319.943429][ T30] audit: type=1326 audit(1761441529.045:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1319.953781][T24473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4942'. [ 1320.001987][ T30] audit: type=1326 audit(1761441529.045:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1320.025671][ T30] audit: type=1326 audit(1761441529.045:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1320.060604][T24479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4943'. [ 1320.218275][T24473] netlink: 'syz.4.4942': attribute type 7 has an invalid length. [ 1320.294587][ T30] audit: type=1326 audit(1761441529.055:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1320.338824][T24473] netlink: 'syz.4.4942': attribute type 8 has an invalid length. [ 1320.355512][T24473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4942'. [ 1320.371718][ T30] audit: type=1326 audit(1761441529.055:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1320.786653][ T30] audit: type=1326 audit(1761441529.065:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1320.802486][T24483] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1320.883107][ T30] audit: type=1326 audit(1761441529.065:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1321.158254][T24488] fuse: Unknown parameter '' [ 1321.160128][ T5918] usb 6-1: USB disconnect, device number 2 [ 1321.235243][ T30] audit: type=1326 audit(1761441529.065:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1321.297731][ T30] audit: type=1326 audit(1761441529.115:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.4944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1321.635063][T24500] fuse: Unknown parameter '' [ 1323.704642][ T982] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1323.944581][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 1323.955835][ T982] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1323.989018][ T982] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1324.013181][ T982] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1324.054484][ T982] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1324.133137][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1324.134461][ T5918] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1324.145286][ T982] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1324.161048][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.199295][ T982] usb 5-1: Product: syz [ 1324.211329][ T982] usb 5-1: Manufacturer: syz [ 1324.262156][ T982] usb 5-1: SerialNumber: syz [ 1324.283112][ T982] usb 5-1: config 0 descriptor?? [ 1324.354813][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 1324.374183][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.407954][ T5918] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1324.427830][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.458843][ T5918] usb 6-1: config 0 descriptor?? [ 1324.498745][ T982] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input103 [ 1324.540841][ T5184] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1324.694963][ T5184] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1324.761797][ T982] usb 5-1: USB disconnect, device number 84 [ 1324.763145][T24530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.778220][T24530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.793470][ T5184] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1325.101638][ T5918] usbhid 6-1:0.0: can't add hid device: -71 [ 1325.147123][ T5918] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1325.180583][ T5918] usb 6-1: USB disconnect, device number 3 [ 1325.244496][T23056] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1325.352137][T24556] loop9: detected capacity change from 0 to 7 [ 1325.394502][T23056] usb 2-1: Using ep0 maxpacket: 8 [ 1325.408267][T24556] Dev loop9: unable to read RDB block 7 [ 1325.431414][T23056] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1325.447588][T24556] loop9: unable to read partition table [ 1325.454755][T24556] loop9: partition table beyond EOD, truncated [ 1325.457683][T23056] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1325.484294][T23056] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1325.511896][T23056] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1325.557460][T24548] futex_wake_op: syz.3.4955 tries to shift op by 32; fix this program [ 1325.604474][T24556] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1325.684568][T23056] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1325.759181][T23056] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1325.822594][T23056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.073533][T24547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1326.092282][T24547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.125846][T23056] usb 2-1: usb_control_msg returned -32 [ 1326.142157][T23056] usbtmc 2-1:16.0: can't read capabilities [ 1326.157038][T18280] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1326.458015][T18280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1326.520178][T18280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 35, changing to 7 [ 1326.800622][T18280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 41963, setting to 1024 [ 1326.969784][T18280] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1327.179214][T18280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.202140][T18280] usb 5-1: Product: syz [ 1327.224103][T18280] usb 5-1: Manufacturer: syz [ 1327.238674][T18280] usb 5-1: SerialNumber: syz [ 1327.260447][T18280] usb 5-1: config 0 descriptor?? [ 1327.287048][T18280] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 7f [ 1327.517407][T18280] usb 5-1: USB disconnect, device number 85 [ 1327.570030][T17328] udevd[17328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1328.083856][T18465] usb 2-1: USB disconnect, device number 79 [ 1328.122261][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1328.122281][ T30] audit: type=1326 audit(1761441537.245:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24602 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41b8efc9 code=0x7ffc0000 [ 1328.208081][ T30] audit: type=1326 audit(1761441537.245:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24602 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feb41b8efc9 code=0x7ffc0000 [ 1328.369643][ T30] audit: type=1326 audit(1761441537.245:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24602 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41b8efc9 code=0x7ffc0000 [ 1328.424993][ T30] audit: type=1326 audit(1761441537.245:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24602 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7feb41b8efc9 code=0x7ffc0000 [ 1328.729084][ T30] audit: type=1326 audit(1761441537.245:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24602 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41b8efc9 code=0x7ffc0000 [ 1328.752935][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.761129][ T30] audit: type=1326 audit(1761441537.245:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24602 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7feb41b8efc9 code=0x7ffc0000 [ 1328.784104][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.792015][ T30] audit: type=1326 audit(1761441537.255:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24602 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41b8efc9 code=0x7ffc0000 [ 1328.821134][ T30] audit: type=1326 audit(1761441537.255:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24602 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb41b8efc9 code=0x7ffc0000 [ 1328.845275][T18280] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1328.892510][ T30] audit: type=1326 audit(1761441537.255:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24602 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb41b8efc9 code=0x7ffc0000 [ 1328.915029][ C1] vkms_vblank_simulate: vblank timer overrun [ 1328.977872][ T30] audit: type=1326 audit(1761441537.255:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24602 comm="syz.5.4967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7feb41b8efc9 code=0x7ffc0000 [ 1329.000423][ C1] vkms_vblank_simulate: vblank timer overrun [ 1329.047410][T18280] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1329.059181][T18280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.087356][T18280] usb 6-1: config 0 descriptor?? [ 1329.677892][T24628] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1330.034512][ T8753] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1330.116873][T18465] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1330.178006][T18280] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1330.188326][ T8753] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1330.189059][T18280] [drm:udl_init] *ERROR* Selecting channel failed [ 1330.199365][ T8753] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1330.253260][ T8753] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1330.267564][T18280] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1330.279711][T18465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.299068][ T8753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1330.310081][T18280] [drm] Initialized udl on minor 2 [ 1330.313509][T18280] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1330.364922][T18465] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.377238][T18280] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1330.387076][T18465] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1330.424509][ T8753] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1330.476308][T18465] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1330.490593][ T8753] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1330.505171][T18465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.512615][T23056] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1330.527346][ T8753] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1330.529822][T23056] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1330.536746][ T8753] usb 2-1: Product: syz [ 1330.543722][T18280] usb 6-1: USB disconnect, device number 4 [ 1330.546938][ T8753] usb 2-1: Manufacturer: syz [ 1330.639373][T18465] usb 5-1: config 0 descriptor?? [ 1330.652323][ T8753] cdc_wdm 2-1:1.0: skipping garbage [ 1330.674598][ T8753] cdc_wdm 2-1:1.0: skipping garbage [ 1330.693473][ T8753] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1330.707033][ T8753] cdc_wdm 2-1:1.0: Unknown control protocol [ 1330.791105][T24644] loop9: detected capacity change from 0 to 7 [ 1330.825287][T24644] Dev loop9: unable to read RDB block 7 [ 1330.851610][T24644] loop9: unable to read partition table [ 1330.922297][T24644] loop9: partition table beyond EOD, truncated [ 1330.972317][T24644] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1331.371520][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4984'. [ 1331.764533][ T982] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1331.916995][ T982] usb 6-1: Using ep0 maxpacket: 32 [ 1331.929823][T24659] team0 (unregistering): Port device team_slave_0 removed [ 1331.965873][T24659] team0 (unregistering): Port device team_slave_1 removed [ 1331.968000][ T982] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1332.013715][ T982] usb 6-1: config 0 has no interface number 0 [ 1332.029718][ T982] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1332.107328][ T982] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1332.141630][ T982] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1332.170743][ T982] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1332.178012][T24673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4988'. [ 1332.194611][ T982] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1332.210731][T24673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4988'. [ 1332.215873][ T982] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1332.264852][ T982] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1332.282484][ T982] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1332.314057][ T982] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1332.331428][ T982] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1332.347871][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.366292][ T982] usb 6-1: Product: syz [ 1332.376717][ T982] usb 6-1: Manufacturer: syz [ 1332.386796][ T982] usb 6-1: SerialNumber: syz [ 1332.405186][ T982] usb 6-1: config 0 descriptor?? [ 1332.417466][T24660] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1332.440068][ T982] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1332.462500][ T982] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 1333.025759][T23056] usb 6-1: USB disconnect, device number 5 [ 1333.110737][T18465] usbhid 5-1:0.0: can't add hid device: -71 [ 1333.163371][ T982] usb 2-1: USB disconnect, device number 80 [ 1333.256920][T18465] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1333.377188][T18465] usb 5-1: USB disconnect, device number 86 [ 1333.547729][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 1333.547740][ T30] audit: type=1326 audit(1761441542.675:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24688 comm="syz.1.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1333.582537][ T30] audit: type=1326 audit(1761441542.705:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24688 comm="syz.1.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1333.607545][ T30] audit: type=1326 audit(1761441542.735:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24688 comm="syz.1.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1333.697284][ T30] audit: type=1326 audit(1761441542.735:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24688 comm="syz.1.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1333.752007][T24691] loop9: detected capacity change from 0 to 7 [ 1333.758962][T24691] Dev loop9: unable to read RDB block 7 [ 1333.774637][T24691] loop9: unable to read partition table [ 1333.787702][T24691] loop9: partition table beyond EOD, truncated [ 1333.817041][T24691] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1333.837844][ T30] audit: type=1326 audit(1761441542.735:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24688 comm="syz.1.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1334.488096][ T30] audit: type=1326 audit(1761441542.735:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24688 comm="syz.1.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1334.516310][ T30] audit: type=1326 audit(1761441542.735:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24688 comm="syz.1.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1334.539072][ T30] audit: type=1326 audit(1761441542.735:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24688 comm="syz.1.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1334.563468][ T30] audit: type=1326 audit(1761441542.765:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24688 comm="syz.1.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1334.587161][ T30] audit: type=1326 audit(1761441542.765:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24688 comm="syz.1.4994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feffdf8efc9 code=0x7ffc0000 [ 1335.085339][T24709] netlink: 'syz.5.5000': attribute type 1 has an invalid length. [ 1335.577466][T24723] xt_hashlimit: max too large, truncated to 1048576 [ 1335.781651][T24726] netlink: 'syz.3.5003': attribute type 10 has an invalid length. [ 1335.834672][T24726] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1335.843234][T24726] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1335.859480][T24726] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1336.854457][ T8751] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1337.024725][ T8751] usb 6-1: Using ep0 maxpacket: 8 [ 1337.034021][ T8751] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1337.050129][ T8751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.093260][ T8751] usb 6-1: Product: syz [ 1337.140420][ T8751] usb 6-1: Manufacturer: syz [ 1337.159762][ T8751] usb 6-1: SerialNumber: syz [ 1337.211490][ T8751] usb 6-1: config 0 descriptor?? [ 1337.247812][ T8751] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1337.977417][ T8751] gspca_sonixj: reg_r err -32 [ 1337.985281][ T8751] sonixj 6-1:0.0: probe with driver sonixj failed with error -32 [ 1338.482059][T24772] netlink: 'syz.1.5015': attribute type 1 has an invalid length. [ 1338.566381][T24774] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1338.677704][T23056] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1338.681011][T24775] syz.5.5009 (24775): drop_caches: 2 [ 1338.700633][T24774] bond9: (slave vxcan5): Error -95 calling set_mac_address [ 1338.783648][ T982] usb 6-1: USB disconnect, device number 6 [ 1338.827989][T24772] bond9: (slave bridge9): Enslaving as an active interface with a down link [ 1338.856449][T23056] usb 4-1: Using ep0 maxpacket: 16 [ 1338.880670][T23056] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1338.894837][T24772] macvlan2: entered promiscuous mode [ 1338.900575][T24772] macvlan2: entered allmulticast mode [ 1338.906538][T24772] bond9: entered promiscuous mode [ 1338.912791][T24772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1338.920137][T23056] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1339.064323][T23056] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1339.076594][T24772] bond9: left promiscuous mode [ 1339.146034][T23056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.162491][T23056] usb 4-1: Product: syz [ 1339.213464][T23056] usb 4-1: Manufacturer: syz [ 1339.231533][T23056] usb 4-1: SerialNumber: syz [ 1339.259698][T23056] usb 4-1: config 0 descriptor?? [ 1339.278528][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5016'. [ 1339.804324][T23056] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1339.821503][T23056] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1340.097822][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 1340.097840][ T30] audit: type=1326 audit(1761441549.225:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.0.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89978efc9 code=0x7ffc0000 [ 1340.133485][ T30] audit: type=1326 audit(1761441549.225:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.0.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89978efc9 code=0x7ffc0000 [ 1340.162624][ T30] audit: type=1326 audit(1761441549.225:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.0.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff89978efc9 code=0x7ffc0000 [ 1340.187462][ T30] audit: type=1326 audit(1761441549.225:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.0.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89978efc9 code=0x7ffc0000 [ 1340.237573][ T30] audit: type=1326 audit(1761441549.225:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.0.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7ff89978efc9 code=0x7ffc0000 [ 1340.261743][ T30] audit: type=1326 audit(1761441549.235:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.0.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89978efc9 code=0x7ffc0000 [ 1340.291543][ T30] audit: type=1326 audit(1761441549.235:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.0.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89978efc9 code=0x7ffc0000 [ 1340.318908][ T30] audit: type=1326 audit(1761441549.235:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.0.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff89978efc9 code=0x7ffc0000 [ 1340.341787][T23056] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1340.354713][T23056] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1340.384915][ T30] audit: type=1326 audit(1761441549.235:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.0.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89978efc9 code=0x7ffc0000 [ 1340.527553][ T30] audit: type=1326 audit(1761441549.235:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24784 comm="syz.0.5017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff89978efc9 code=0x7ffc0000 [ 1340.579369][T24793] netlink: 'syz.0.5020': attribute type 1 has an invalid length. [ 1340.683813][T24793] bond0: (slave bridge0): making interface the new active one [ 1340.692580][T24793] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1340.788999][T24770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.806257][T24770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.817099][T23056] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1340.824106][T23056] em28xx 4-1:0.0: No AC97 audio processor [ 1341.034172][T23056] usb 4-1: USB disconnect, device number 87 [ 1341.248908][T23056] em28xx 4-1:0.0: Disconnecting em28xx [ 1341.270184][T23056] em28xx 4-1:0.0: Freeing device [ 1341.864503][T24814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5026'. [ 1342.521380][ T5918] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1342.704706][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 1342.723063][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.735045][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.751767][ T5918] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1342.775658][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.787610][ T5918] usb 5-1: config 0 descriptor?? [ 1343.498674][T24821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5028'. [ 1343.521868][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 1343.528928][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1343.572303][ T5918] usb 5-1: USB disconnect, device number 87 [ 1344.117342][T24849] netlink: 'syz.5.5037': attribute type 1 has an invalid length. [ 1344.745397][T24864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5039'. [ 1344.828856][T24864] libceph: resolve '0..' (ret=-3): failed [ 1345.866849][T24869] binder: 24868:24869 unknown command 0 [ 1345.882133][T24869] binder: 24868:24869 ioctl c0306201 200000000080 returned -22 [ 1345.947960][T24869] binder: 24868:24869 ioctl c0306201 200000000180 returned -22 [ 1346.066686][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1346.066706][ T30] audit: type=1400 audit(1761441555.195:2988): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=24873 comm="syz.1.5043" [ 1346.668063][T24889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.789017][T24883] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1346.795382][T24883] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1346.884045][T24890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5046'. [ 1346.953493][T24890] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1347.506278][T24896] netlink: 'syz.0.5049': attribute type 1 has an invalid length. [ 1347.516299][T24898] netlink: 'syz.1.5050': attribute type 1 has an invalid length. [ 1347.773933][T24901] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1347.787885][T24901] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1347.835969][T24900] bond10: (slave bridge10): making interface the new active one [ 1347.844319][T24900] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 1347.895874][T24904] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 1348.192928][T24896] macvlan2: entered promiscuous mode [ 1348.205072][T24896] macvlan2: entered allmulticast mode [ 1348.211561][T24896] bond2: entered promiscuous mode [ 1348.218225][T24896] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1348.251565][T24896] bond2: left promiscuous mode [ 1348.562704][ T30] audit: type=1800 audit(1761441557.685:2989): pid=24918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5053" name="card2" dev="devtmpfs" ino=5365 res=0 errno=0 [ 1349.440324][T24941] bond9: option ad_select: invalid value (253) [ 1349.449393][T24941] bond9 (unregistering): Released all slaves [ 1349.514167][T24947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5061'. [ 1349.680802][T24953] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1349.740985][T24955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5062'. [ 1349.762479][T24955] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 1349.773607][T24955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1350.095991][T24959] syzkaller0: entered promiscuous mode [ 1350.164002][T24959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5064'. [ 1350.238930][T24959] netlink: 'syz.3.5064': attribute type 8 has an invalid length. [ 1350.619301][ T5918] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1350.858577][ T5918] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.902487][ T5918] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1350.930098][ T5918] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1350.954733][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1350.973082][ T5918] usb 4-1: SerialNumber: syz [ 1351.225376][ T5918] usb 4-1: 0:2 : does not exist [ 1351.413832][ T5918] usb 4-1: USB disconnect, device number 88 [ 1351.447860][T17142] udevd[17142]: setting mode of /dev/bus/usb/004/088 to 020664 failed: No such file or directory [ 1351.459343][T17142] udevd[17142]: setting owner of /dev/bus/usb/004/088 to uid=0, gid=0 failed: No such file or directory [ 1351.562633][T24982] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1352.185169][T17142] udevd[17142]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1352.376696][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5070'. [ 1352.421516][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5070'. [ 1352.954450][ T982] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1352.998151][T25000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5074'. [ 1353.119420][ T982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.130777][ T982] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1353.140568][ T982] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1353.150368][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.181885][ T982] usb 2-1: config 0 descriptor?? [ 1353.199333][ T982] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1353.208101][ T982] dvb-usb: bulk message failed: -22 (3/0) [ 1353.220786][ T982] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1353.231293][ T982] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1353.265120][ T982] usb 2-1: media controller created [ 1353.272779][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1353.294474][ T8751] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1353.312329][ T982] dvb-usb: bulk message failed: -22 (6/0) [ 1353.319491][ T982] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1353.329810][ T982] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input104 [ 1353.345566][ T982] dvb-usb: schedule remote query interval to 150 msecs. [ 1353.352691][ T982] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1353.454525][ T8751] usb 6-1: Using ep0 maxpacket: 16 [ 1353.472204][ T8751] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1353.492846][ T8751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1353.515916][ T982] dvb-usb: bulk message failed: -22 (1/0) [ 1353.521816][ T982] dvb-usb: error while querying for an remote control event. [ 1353.534582][ T8751] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1353.549750][ T8751] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1353.565022][ T8751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.573312][ T8751] usb 6-1: Product: syz [ 1353.578460][ T8751] usb 6-1: Manufacturer: syz [ 1353.583196][ T8751] usb 6-1: SerialNumber: syz [ 1353.591518][ T8751] usb 6-1: config 0 descriptor?? [ 1353.598477][T25001] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1353.610131][ T8751] mceusb 6-1:0.0: mceusb_dev_probe: device setup failed! [ 1353.622875][ T8751] mceusb 6-1:0.0: probe with driver mceusb failed with error -12 [ 1353.683960][ T5918] usb 2-1: USB disconnect, device number 81 [ 1353.701013][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1353.811609][ T8751] usb 6-1: USB disconnect, device number 7 [ 1354.674460][ T8751] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1354.834436][ T8751] usb 6-1: Using ep0 maxpacket: 32 [ 1354.845154][ T8751] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1354.858779][ T8751] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.877322][ T8751] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1354.889808][ T8751] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.902606][ T8751] usb 6-1: Product: syz [ 1354.910457][ T8751] usb 6-1: Manufacturer: syz [ 1354.917659][ T8751] usb 6-1: SerialNumber: syz [ 1355.143663][T25012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.198923][T25012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.242209][ T8751] usb 6-1: Limiting number of CPorts to U8_MAX [ 1355.260843][ T8751] usb 6-1: Not enough endpoints found in device, aborting! [ 1355.542904][ T5918] usb 6-1: USB disconnect, device number 8 [ 1355.784705][ T8753] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1355.966844][ T8753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1355.985762][ T8753] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1355.998834][ T30] audit: type=1800 audit(1761441565.125:2990): pid=25031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5083" name="SYSV00000000" dev="tmpfs" ino=6 res=0 errno=0 [ 1356.081124][ T8753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.104223][ T8753] usb 2-1: config 0 descriptor?? [ 1356.112882][T25023] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1356.507750][ T8753] usbhid 2-1:0.0: can't add hid device: -71 [ 1356.543644][ T8753] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1356.560693][ T8753] usb 2-1: USB disconnect, device number 82 [ 1356.658759][T25044] loop9: detected capacity change from 0 to 7 [ 1356.671734][T25044] Dev loop9: unable to read RDB block 7 [ 1356.677476][T25044] loop9: unable to read partition table [ 1356.687816][T25044] loop9: partition table beyond EOD, truncated [ 1356.717835][T25044] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1357.002154][T25036] loop6: detected capacity change from 0 to 2640 [ 1357.010666][T17142] buffer_io_error: 25 callbacks suppressed [ 1357.010678][T17142] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.029111][T17142] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.046882][T17142] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.059718][T17142] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.069647][T17142] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.079175][T17142] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.104701][T17142] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.127749][T17142] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.135980][ T8753] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1357.150130][T17142] ldm_validate_partition_table(): Disk read failed. [ 1357.176816][T17142] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.217483][T17142] Buffer I/O error on dev loop6, logical block 0, async page read [ 1357.229205][T17142] Dev loop6: unable to read RDB block 0 [ 1357.235452][T17142] loop6: unable to read partition table [ 1357.283407][ T5199] ldm_validate_partition_table(): Disk read failed. [ 1357.306591][ T8753] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.318410][ T8753] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1357.345080][ T5199] Dev loop6: unable to read RDB block 0 [ 1357.352155][ T5199] loop6: unable to read partition table [ 1357.410513][ T8753] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1357.473941][ T8753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.518038][ T8753] usb 2-1: Product: syz [ 1357.527080][ T8753] usb 2-1: Manufacturer: syz [ 1357.540543][ T8753] usb 2-1: SerialNumber: syz [ 1357.745287][T25058] fuse: Bad value for 'fd' [ 1357.791540][ T8753] usb 2-1: 0:2 : does not exist [ 1357.831501][ T8753] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1357.923520][ T8753] usb 2-1: USB disconnect, device number 83 [ 1358.020377][T17142] udevd[17142]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.107945][ T5918] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1358.274809][ T5918] usb 6-1: Using ep0 maxpacket: 32 [ 1358.276312][ T8751] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1358.289559][ T5918] usb 6-1: config 0 has an invalid interface number: 37 but max is 0 [ 1358.299166][ T5918] usb 6-1: config 0 has no interface number 0 [ 1358.308431][ T5918] usb 6-1: config 0 interface 37 has no altsetting 0 [ 1358.318148][ T5918] usb 6-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 1358.331404][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.342874][ T5918] usb 6-1: Product: syz [ 1358.347751][ T5918] usb 6-1: Manufacturer: syz [ 1358.352514][ T5918] usb 6-1: SerialNumber: syz [ 1358.363289][ T5918] usb 6-1: config 0 descriptor?? [ 1358.376621][ T5918] rtl8150 6-1:0.37: couldn't find required endpoints [ 1358.384982][ T5918] rtl8150 6-1:0.37: probe with driver rtl8150 failed with error -5 [ 1358.434630][ T8751] usb 4-1: Using ep0 maxpacket: 8 [ 1358.453631][ T8751] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1358.463263][ T8751] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1358.476026][ T8751] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1358.503475][ T8751] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1358.525224][ T8751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.791328][ T8751] usb 4-1: string descriptor 0 read error: -71 [ 1358.856368][ T8751] usb 4-1: USB disconnect, device number 89 [ 1358.938146][ T8753] usb 6-1: USB disconnect, device number 9 [ 1361.156557][ T30] audit: type=1326 audit(1761441570.285:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25105 comm="syz.5.5102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb41b8efc9 code=0x0 [ 1361.162276][T25102] loop9: detected capacity change from 0 to 7 [ 1361.171251][T25102] Dev loop9: unable to read RDB block 7 [ 1361.171284][T25102] loop9: unable to read partition table [ 1361.171411][T25102] loop9: partition table beyond EOD, truncated [ 1361.171436][T25102] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1361.440873][T25115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5102'. [ 1361.612201][T25121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5104'. [ 1361.846921][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.853238][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.034799][T25124] hub 9-0:1.0: USB hub found [ 1362.040506][T25124] hub 9-0:1.0: 1 port detected [ 1362.064457][ T8753] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1362.244538][ T8753] usb 4-1: Using ep0 maxpacket: 16 [ 1362.275988][ T8753] usb 4-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.291308][ T8753] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1362.445725][ T8753] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1362.628523][ T8753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.663947][T25131] loop9: detected capacity change from 0 to 7 [ 1362.672509][T17142] Dev loop9: unable to read RDB block 7 [ 1362.678767][T17142] loop9: AHDI p1 p2 [ 1362.682912][T17142] loop9: partition table partially beyond EOD, truncated [ 1362.703775][T17142] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 1362.728733][T25131] Dev loop9: unable to read RDB block 7 [ 1362.776480][ T8753] usb 4-1: config 0 descriptor?? [ 1362.804627][T25131] loop9: AHDI p1 p2 [ 1362.818554][T25131] loop9: partition table partially beyond EOD, truncated [ 1362.854692][T25131] loop9: p1 size 4227858431 extends beyond EOD, truncated [ 1363.006516][T25127] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1363.121545][T17142] udevd[17142]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1363.202956][ T8753] microsoft 0003:045E:009D.006B: unknown main item tag 0x4 [ 1363.234842][ T8753] microsoft 0003:045E:009D.006B: hidraw0: USB HID v0.07 Device [HID 045e:009d] on usb-dummy_hcd.3-1/input0 [ 1363.257666][ T8753] microsoft 0003:045E:009D.006B: no inputs found [ 1363.274439][ T8753] microsoft 0003:045E:009D.006B: could not initialize ff, continuing anyway [ 1363.392986][ T5918] usb 4-1: USB disconnect, device number 90 [ 1363.798039][T25136] fido_id[25136]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1364.407586][T25154] netlink: 'syz.5.5113': attribute type 1 has an invalid length. [ 1364.475740][T25154] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1364.499471][T25154] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1364.544439][ T5918] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1364.663834][T25157] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 1364.708692][ T5918] usb 4-1: config 0 has no interfaces? [ 1364.717098][ T5918] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1364.726527][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.736240][ T5918] usb 4-1: Product: syz [ 1364.743807][ T5918] usb 4-1: Manufacturer: syz [ 1364.767889][ T5918] usb 4-1: SerialNumber: syz [ 1364.832384][ T5918] usb 4-1: config 0 descriptor?? [ 1365.142632][T25160] loop9: detected capacity change from 0 to 7 [ 1365.178093][T17142] Dev loop9: unable to read RDB block 7 [ 1365.191296][T17142] loop9: unable to read partition table [ 1365.197339][T17142] loop9: partition table beyond EOD, truncated [ 1365.208003][T25160] Dev loop9: unable to read RDB block 7 [ 1365.215763][T25160] loop9: unable to read partition table [ 1365.234845][T25160] loop9: partition table beyond EOD, truncated [ 1365.252642][T25160] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1365.268768][ T8753] usb 4-1: USB disconnect, device number 91 [ 1365.277436][T25162] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5115'. [ 1365.324323][T25162] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5115'. [ 1365.529726][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5116'. [ 1365.629293][T25170] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1365.803083][T25171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5117'. [ 1365.928569][T25171] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1366.878841][ T30] audit: type=1326 audit(1761441576.005:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25182 comm="syz.1.5119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feffdf8efc9 code=0x0 [ 1367.322835][T25188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5119'. [ 1367.942462][T25199] loop7: detected capacity change from 0 to 7 [ 1367.952206][T17142] Dev loop7: unable to read RDB block 7 [ 1367.966313][T17142] loop7: unable to read partition table [ 1367.972277][T17142] loop7: partition table beyond EOD, truncated [ 1367.982334][T25199] Dev loop7: unable to read RDB block 7 [ 1367.989852][T25199] loop7: unable to read partition table [ 1367.996789][T25199] loop7: partition table beyond EOD, truncated [ 1368.003047][T25199] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1368.418668][T18465] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1368.675053][T18465] usb 6-1: Using ep0 maxpacket: 32 [ 1368.692295][T18465] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1368.729088][T18465] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.761625][T18465] usb 6-1: config 0 has no interface number 0 [ 1368.816425][T18465] usb 6-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1368.836659][T18465] usb 6-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1368.850434][T18465] usb 6-1: config 0 interface 8 has no altsetting 0 [ 1368.869585][T18465] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1368.890174][T18465] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.903404][T18465] usb 6-1: Product: syz [ 1368.910530][T18465] usb 6-1: Manufacturer: syz [ 1368.919159][T18465] usb 6-1: SerialNumber: syz [ 1368.945560][T18465] usb 6-1: config 0 descriptor?? [ 1369.389898][T18465] ath6kl: Failed to submit usb control message: -71 [ 1369.398787][T18465] ath6kl: unable to send the bmi data to the device: -71 [ 1369.426144][T18465] ath6kl: Unable to send get target info: -71 [ 1369.450213][T18465] ath6kl: Failed to init ath6kl core: -71 [ 1369.457651][T18465] ath6kl_usb 6-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1369.506034][T18465] usb 6-1: USB disconnect, device number 10 [ 1370.253182][T25242] loop7: detected capacity change from 0 to 7 [ 1370.264033][T17439] Dev loop7: unable to read RDB block 7 [ 1370.273919][T17439] loop7: unable to read partition table [ 1370.282253][T17439] loop7: partition table beyond EOD, truncated [ 1370.331266][T25242] Dev loop7: unable to read RDB block 7 [ 1370.344642][T25242] loop7: unable to read partition table [ 1370.361780][T25242] loop7: partition table beyond EOD, truncated [ 1370.380938][T25242] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1371.504459][T18465] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1371.665688][T18465] usb 6-1: Using ep0 maxpacket: 16 [ 1371.696917][T18465] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 1371.728665][T18465] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.741877][T18465] usb 6-1: config 8 has no interface number 0 [ 1371.748273][T18465] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1371.765483][T18465] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1371.777407][T18465] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1371.788130][T18465] usb 6-1: config 8 interface 39 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1371.809417][T18465] usb 6-1: config 8 interface 39 has no altsetting 0 [ 1371.821694][T18465] usb 6-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77 [ 1371.822959][T25262] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1371.831113][T18465] usb 6-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 1371.831142][T18465] usb 6-1: Product: syz [ 1371.831158][T18465] usb 6-1: Manufacturer: syz [ 1371.831174][T18465] usb 6-1: SerialNumber: syz [ 1371.863737][T18280] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1372.027546][T18280] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1372.041210][T18280] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1372.056175][T18280] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1372.067706][T18280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.084822][T18280] usb 4-1: Product: syz [ 1372.089284][T18280] usb 4-1: Manufacturer: syz [ 1372.090192][T18465] ipheth 6-1:8.39: Unable to find endpoints [ 1372.100227][T18280] usb 4-1: SerialNumber: syz [ 1372.156005][ T5918] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1372.348899][T18280] usb 4-1: config 0 descriptor?? [ 1372.353243][T18465] usb 6-1: USB disconnect, device number 11 [ 1372.438711][ T5918] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1372.448037][ T5918] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 1372.463077][ T5918] usb 5-1: config 0 has an invalid interface number: 2 but max is -1 [ 1372.481792][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.492264][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1372.501427][ T5918] usb 5-1: config 0 has no interface number 0 [ 1372.507887][ T5918] usb 5-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1372.524464][ T5918] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1372.533791][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.542385][ T5918] usb 5-1: Product: syz [ 1372.547057][ T5918] usb 5-1: Manufacturer: syz [ 1372.551923][ T5918] usb 5-1: SerialNumber: syz [ 1372.569561][T25259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1372.582991][ T5918] usb 5-1: config 0 descriptor?? [ 1372.589053][T25259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1372.607754][T18280] usb 4-1: USB disconnect, device number 92 [ 1372.800064][T25279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5149'. [ 1372.870746][ T5918] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1372.939557][ T5918] usb 5-1: MIDIStreaming interface descriptor not found [ 1373.003521][ T5918] usb 5-1: USB disconnect, device number 88 [ 1373.104905][T18280] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1373.128823][T17106] udevd[17106]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1373.264731][T18280] usb 2-1: Using ep0 maxpacket: 16 [ 1373.271900][T18280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.283770][T18280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1373.293958][T18280] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1373.304122][T18280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.368404][T18280] usb 2-1: config 0 descriptor?? [ 1373.404534][ T982] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1373.576716][ T982] usb 6-1: config 0 has no interfaces? [ 1373.584812][ T982] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1373.594213][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.603343][ T982] usb 6-1: Product: syz [ 1373.612664][ T982] usb 6-1: Manufacturer: syz [ 1373.643530][ T982] usb 6-1: SerialNumber: syz [ 1373.706592][ T5918] IPVS: starting estimator thread 0... [ 1373.735473][ T982] usb 6-1: config 0 descriptor?? [ 1373.787717][T18280] kye 0003:0458:5016.006C: control desc unexpectedly large [ 1373.805662][T25301] IPVS: using max 51 ests per chain, 122400 per kthread [ 1373.851091][T18280] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.006C/input/input105 [ 1374.018367][T18280] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.006C/input/input106 [ 1374.090357][T18280] kye 0003:0458:5016.006C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 1374.134683][ T982] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1374.150729][ T5918] usb 6-1: USB disconnect, device number 12 [ 1374.401811][ T982] usb 4-1: Using ep0 maxpacket: 16 [ 1374.465254][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.513899][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1374.544450][ T982] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1374.567490][ T982] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1374.601410][ T982] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1374.667908][ T982] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1374.745324][ T982] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1374.745355][ T982] usb 4-1: Manufacturer: syz [ 1374.775490][ T982] usb 4-1: config 0 descriptor?? [ 1374.940511][T25308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.966423][T25308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.976305][ C1] kye 0003:0458:5016.006C: usb_submit_urb(ctrl) failed: -1 [ 1375.104688][ T5918] usb 2-1: reset high-speed USB device number 84 using dummy_hcd [ 1375.422141][ T5918] usb 2-1: device descriptor read/64, error -32 [ 1375.504569][ T982] rc_core: IR keymap rc-hauppauge not found [ 1375.510797][ T982] Registered IR keymap rc-empty [ 1375.645464][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1375.698429][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1375.741254][ T982] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1375.777781][ T982] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input107 [ 1375.813023][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1375.861657][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1375.915203][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1376.040000][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1376.074629][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1376.129912][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1376.195648][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1376.228492][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1376.346935][T18280] usb 2-1: USB disconnect, device number 84 [ 1376.580592][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1376.604833][ T982] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1376.627183][ T982] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1376.640033][ T982] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1377.132063][T25333] loop6: detected capacity change from 0 to 2560 [ 1377.168936][T25333] buffer_io_error: 22 callbacks suppressed [ 1377.168954][T25333] Buffer I/O error on dev loop6, logical block 0, async page read [ 1377.195619][ C1] [ 1377.197989][ C1] ============================================ [ 1377.204138][ C1] WARNING: possible recursive locking detected [ 1377.210302][ C1] syzkaller #0 Not tainted [ 1377.214704][ C1] -------------------------------------------- [ 1377.220840][ C1] swapper/1/0 is trying to acquire lock: [ 1377.226468][ C1] ffff888030036f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1377.235600][ C1] [ 1377.235600][ C1] but task is already holding lock: [ 1377.243006][ C1] ffff88807e74af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1377.252063][ C1] [ 1377.252063][ C1] other info that might help us debug this: [ 1377.260141][ C1] Possible unsafe locking scenario: [ 1377.260141][ C1] [ 1377.267610][ C1] CPU0 [ 1377.270895][ C1] ---- [ 1377.274171][ C1] lock(&hsr->seqnr_lock); [ 1377.278680][ C1] lock(&hsr->seqnr_lock); [ 1377.283188][ C1] [ 1377.283188][ C1] *** DEADLOCK *** [ 1377.283188][ C1] [ 1377.291321][ C1] May be due to missing lock nesting notation [ 1377.291321][ C1] [ 1377.299643][ C1] 11 locks held by swapper/1/0: [ 1377.304487][ C1] #0: ffffc90000a08be0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 1377.314090][ C1] #1: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 1377.323666][ C1] #2: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 1377.332735][ C1] #3: ffffffff8df3d340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 1377.342754][ C1] #4: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1377.351896][ C1] #5: ffff88807e74af30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1377.361375][ C1] #6: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 1377.370891][ C1] #7: ffffffff8df3d340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 1377.380839][ C1] #8: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x185/0x1840 [ 1377.390073][ C1] #9: ffffffff8df3d340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 1377.400000][ C1] #10: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1377.409233][ C1] [ 1377.409233][ C1] stack backtrace: [ 1377.415123][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1377.415149][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1377.415162][ C1] Call Trace: [ 1377.415173][ C1] [ 1377.415180][ C1] dump_stack_lvl+0x189/0x250 [ 1377.415200][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1377.415214][ C1] ? __pfx__printk+0x10/0x10 [ 1377.415224][ C1] ? br_dev_xmit+0x11b3/0x1840 [ 1377.415244][ C1] print_deadlock_bug+0x28b/0x2a0 [ 1377.415270][ C1] validate_chain+0x1a3f/0x2140 [ 1377.415297][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 1377.415323][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1377.415339][ C1] __lock_acquire+0xab9/0xd20 [ 1377.415350][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1377.415360][ C1] lock_acquire+0x120/0x360 [ 1377.415369][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1377.415380][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1377.415393][ C1] _raw_spin_lock_bh+0x36/0x50 [ 1377.415414][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1377.415432][ C1] hsr_dev_xmit+0x237/0x360 [ 1377.415451][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 1377.415470][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 1377.415486][ C1] __dev_queue_xmit+0x1b8d/0x3b50 [ 1377.415499][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 1377.415512][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1377.415523][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1377.415540][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1377.415563][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 1377.415595][ C1] ? ebt_do_table+0x265b/0x2820 [ 1377.415622][ C1] ? __lock_acquire+0xab9/0xd20 [ 1377.415637][ C1] br_dev_queue_push_xmit+0x6c5/0x890 [ 1377.415651][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1377.415663][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1377.415674][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1377.415688][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1377.415710][ C1] NF_HOOK+0x320/0x3c0 [ 1377.415732][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1377.415752][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1377.415771][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1377.415785][ C1] br_forward_finish+0xd3/0x130 [ 1377.415796][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1377.415807][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1377.415818][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1377.415830][ C1] NF_HOOK+0x320/0x3c0 [ 1377.415850][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1377.415870][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1377.415891][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1377.415916][ C1] __br_forward+0x41e/0x600 [ 1377.415928][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 1377.415940][ C1] ? __pfx___br_forward+0x10/0x10 [ 1377.415951][ C1] ? skb_clone+0x246/0x3a0 [ 1377.415962][ C1] maybe_deliver+0xb5/0x160 [ 1377.415974][ C1] br_flood+0x31a/0x6a0 [ 1377.415994][ C1] ? br_dev_xmit+0x185/0x1840 [ 1377.416020][ C1] br_dev_xmit+0x11b3/0x1840 [ 1377.416048][ C1] ? br_dev_xmit+0x185/0x1840 [ 1377.416072][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 1377.416089][ C1] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 1377.416106][ C1] ? netif_state_change+0x260/0x3a0 [ 1377.416119][ C1] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 1377.416145][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 1377.416172][ C1] __dev_queue_xmit+0x1b8d/0x3b50 [ 1377.416197][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 1377.416217][ C1] ? rcu_is_watching+0x15/0xb0 [ 1377.416230][ C1] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1377.416243][ C1] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 1377.416256][ C1] ? kmalloc_reserve+0xbd/0x290 [ 1377.416271][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1377.416291][ C1] ? __copy_skb_header+0xa7/0x550 [ 1377.416311][ C1] ? __asan_memcpy+0x40/0x70 [ 1377.416336][ C1] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 1377.416357][ C1] ? __asan_memcpy+0x40/0x70 [ 1377.416370][ C1] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 1377.416384][ C1] ? hsr_addr_subst_dest+0x307/0xac0 [ 1377.416395][ C1] hsr_forward_skb+0x158b/0x2860 [ 1377.416409][ C1] ? hsr_forward_skb+0x9e/0x2860 [ 1377.416422][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1377.416443][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1377.416469][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1377.416497][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1377.416510][ C1] hsr_dev_xmit+0x242/0x360 [ 1377.416519][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 1377.416529][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 1377.416542][ C1] __dev_queue_xmit+0x1b8d/0x3b50 [ 1377.416553][ C1] ? register_lock_class+0x51/0x320 [ 1377.416564][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 1377.416593][ C1] ? neigh_connected_output+0x1ea/0x460 [ 1377.416622][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1377.416644][ C1] ? read_seqbegin+0x122/0x250 [ 1377.416660][ C1] ? neigh_connected_output+0x1ea/0x460 [ 1377.416673][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1377.416686][ C1] ? read_seqbegin+0x1ac/0x250 [ 1377.416698][ C1] ? __pfx_read_seqbegin+0x10/0x10 [ 1377.416712][ C1] ? eth_header+0x11b/0x200 [ 1377.416731][ C1] ? __asan_memcpy+0x40/0x70 [ 1377.416766][ C1] ip6_finish_output2+0xfb3/0x1480 [ 1377.416797][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1377.416812][ C1] ? ip6_mtu+0x7d/0x490 [ 1377.416823][ C1] ? ip6_mtu+0x38c/0x490 [ 1377.416835][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 1377.416850][ C1] ? ip6_output+0x126/0x550 [ 1377.416865][ C1] ip6_output+0x340/0x550 [ 1377.416890][ C1] ndisc_send_skb+0xbce/0x1510 [ 1377.416911][ C1] ? ndisc_send_skb+0x1e4/0x1510 [ 1377.416933][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1377.416949][ C1] ? __pfx_dst_output+0x10/0x10 [ 1377.416962][ C1] addrconf_rs_timer+0x369/0x670 [ 1377.416978][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1377.416994][ C1] call_timer_fn+0x17e/0x5f0 [ 1377.417005][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1377.417030][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1377.417048][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1377.417070][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1377.417091][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1377.417102][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 1377.417117][ C1] __run_timer_base+0x61a/0x860 [ 1377.417134][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1377.417147][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 1377.417175][ C1] run_timer_softirq+0xb7/0x180 [ 1377.417204][ C1] handle_softirqs+0x286/0x870 [ 1377.417227][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1377.417243][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1377.417254][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1377.417269][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1377.417279][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1377.417291][ C1] irq_exit_rcu+0x9/0x30 [ 1377.417304][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1377.417328][ C1] [ 1377.417335][ C1] [ 1377.417344][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1377.417367][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1377.417388][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1377.417398][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1377.417409][ C1] RAX: 36c5fef7c6d06000 RBX: ffffffff81967b97 RCX: 36c5fef7c6d06000 [ 1377.417418][ C1] RDX: 0000000000000001 RSI: ffffffff8d70bf99 RDI: ffffffff8bbf05e0 [ 1377.417426][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 1377.417434][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd470 [ 1377.417441][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395db58 [ 1377.417454][ C1] ? do_idle+0x1e7/0x510 [ 1377.417478][ C1] default_idle+0x13/0x20 [ 1377.417505][ C1] default_idle_call+0x73/0xb0 [ 1377.417531][ C1] do_idle+0x1e7/0x510 [ 1377.417542][ C1] ? __pfx_do_idle+0x10/0x10 [ 1377.417555][ C1] cpu_startup_entry+0x44/0x60 [ 1377.417566][ C1] start_secondary+0x101/0x110 [ 1377.417582][ C1] common_startup_64+0x13e/0x147 [ 1377.417616][ C1] [ 1378.175301][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.201335][T23056] usb 4-1: USB disconnect, device number 93 [ 1378.246714][T25333] Buffer I/O error on dev loop6, logical block 0, async page read [ 1378.373599][T25333] Buffer I/O error on dev loop6, logical block 0, async page read [ 1378.373640][T25333] Buffer I/O error on dev loop6, logical block 0, async page read [ 1378.373673][T25333] Buffer I/O error on dev loop6, logical block 0, async page read [ 1378.373715][T25333] Buffer I/O error on dev loop6, logical block 0, async page read [ 1378.373770][T25333] Buffer I/O error on dev loop6, logical block 0, async page read [ 1378.373803][T25333] Buffer I/O error on dev loop6, logical block 0, async page read [ 1378.373835][T25333] ldm_validate_partition_table(): Disk read failed. [ 1378.373866][T25333] Buffer I/O error on dev loop6, logical block 0, async page read [ 1378.373919][T25333] Buffer I/O error on dev loop6, logical block 0, async page read [ 1378.373993][T25333] Dev loop6: unable to read RDB block 0 [ 1378.374144][T25333] loop6: unable to read partition table [ 1378.374238][T25333] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5)