last executing test programs: 18m32.168518619s ago: executing program 3 (id=138): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000140), 0x0, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) sched_setaffinity(0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r9, 0xb138e9a15534fe61, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xfffeffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) read$FUSE(r6, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) 18m30.893035875s ago: executing program 3 (id=146): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x801) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x400, 0x9}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000007c0)={{0x5, 0x6, 0xffffffff, 0x0, 'syz1\x00', 0x7}, 0x3, 0x200, 0x20000006, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="00fd67c6d222406b096cc34801001000647418aaf9b90732f41ec9591b532723e017c8c54d863ecd9b0df09072030025c3a03ce14a48716ba2f4127d38d2129825d9fff7065d51f973ee7ad483b1b28e4aa696cd0d0000b1e1caee2a1ffdbff2b7601618da596d1db25ba3cd0e6c352a27bcb491e01f716712f22f38ce63658951ffe9c3e755a5669dfd0aa44a04dfd4e3df02b0bfd0781bc9607466d4fd536faac836e6252b3119c95587671b", 0xad, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) read$FUSE(r6, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0x0, r8, {{0x80000000, 0x0, 0x1ff, 0x7, 0x7, 0x5, 0xfffffffe, 0x80}}}, 0x60) r9 = fcntl$dupfd(r7, 0x0, r7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 18m27.649369842s ago: executing program 3 (id=152): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x4, &(0x7f00000006c0)=0x0) io_pgetevents(r0, 0x3, 0x2, &(0x7f0000000700)=[{}, {}], &(0x7f0000000740)={0x77359400}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x3]}, 0x8}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c"], 0x50}}, 0x4008840) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587", @ANYRES16], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$uac1(0x3, 0xcd, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x23, 0x40, 0x9d, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x41}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x17b, 0x5, 0x1, 0x3}, @feature_unit={0xf, 0x24, 0x6, 0x6, 0x3, 0x4, [0x5, 0x414bd73dc78ee3ef, 0x3, 0x2], 0x3}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x84, "951c185907"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0x40, "1f25ef"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x40, 0x1001}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfff, 0x8, 0x6, "fe6e79f228"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xb3, 0x4, 0x4, 0x2, 'i', "d9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x12, 0x7, {0x7, 0x25, 0x1, 0x2, 0x6, 0x6df}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x10, 0x6, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xff, 0x2, 0x3, 0x9, "", "84"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x1, 0x4, {0x7, 0x25, 0x1, 0x3, 0x4, 0xc237}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7, 0x7, 0x80, 0x9f, 0x7}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x429}}, {0x71, &(0x7f0000000280)=@string={0x71, 0x3, "ee06ff98503ba310b175f86aa9eb021ec62927a3557895a614ea83590f0303715160aed12b1ebab7c0a653db59edad592297f24da64228fb5973118637bbc30ed3d2784680ecf5afba34b1d4e1cc1f44e344537f06dd84408769ef6799509cc31cfb7dd10798d96e6ed361156b1c24"}}, {0x92, &(0x7f0000000300)=@string={0x92, 0x3, "475c6062667550d2c276ad0c3903eb409b3ef9c79a73e1323224915246371b8369417b3281af805f8c873b7066859fb775220496e78a7cf73e204835e013f954455a5dfc92a75700c8a6fcc4a2b2c29544745393f2d857f65e614630083819274801c94e47c6c5e3b30617dbbe00bd3671db6905d0a260aa7b433494967f314fa889f5453906fa406ebbc7de60f73529"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xca4881a317b9c9ad}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x816}}, {0x87, &(0x7f0000000440)=@string={0x87, 0x3, "e5567720ea691e0783d119f4066fdaab6d0f0217c4a8d2aaee2b1b5d783a32e37209212a6d9b8cfd3fd8edfc19e89cb82e26bf54767a44ab5df8fb6aa3a823976c7034e8717f58e18fd2f10dbd7457211f276310aff947ed4b736b016984a9b5acee36e4956c42da089345cb13faaafdb9fcd9c0114d3da3661902fb24c69a7a9c81a25a30"}}, {0x57, &(0x7f0000000500)=@string={0x57, 0x3, "77956968c0090ebac08efa49b13c11a6cb7646c96ecc923592ee4862369ae5ac1cd6c64716444aecdb1d45f6c63a8faaa4d94d3a67ac9ca26f31b51cb9f02d8c192c2728ae0f07674b09a7116d576b4e0d13e86d17"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x2c0a}}]}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001080)={0x90000009}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 18m23.689388901s ago: executing program 3 (id=162): setitimer(0x0, &(0x7f0000000580)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x20, 0x0, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) poll(&(0x7f0000000080)=[{r0, 0x2c0}, {r1, 0x204}, {r1, 0x281}, {r0, 0x2000}, {r0, 0xb402}, {r1, 0x6002}, {r1, 0x44c9}], 0x7, 0x2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setns(r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) 18m22.561490384s ago: executing program 3 (id=166): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x15, 0x71, 0x12, 0x14}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x301}, 0x48) 18m22.284010599s ago: executing program 3 (id=167): syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x20800) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000000)={0x0, [0x0, 0x0, 0x7ff, 0x0, 0x80, 0xfffc, 0x0, 0xd35, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x80, 0x8000, 0x400, 0x3, 0x4, 0x30, 0x3, 0x800, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x6], 0x6}) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, 0x8) shutdown(0xffffffffffffffff, 0x0) 18m6.912094138s ago: executing program 32 (id=167): syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x20800) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000000)={0x0, [0x0, 0x0, 0x7ff, 0x0, 0x80, 0xfffc, 0x0, 0xd35, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x80, 0x8000, 0x400, 0x3, 0x4, 0x30, 0x3, 0x800, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x6], 0x6}) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x2}, 0x8) shutdown(0xffffffffffffffff, 0x0) 14m30.882046191s ago: executing program 5 (id=830): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, 0x0, 0x20004081) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf252c00000008000300", @ANYRES32=r8, @ANYBLOB="e124a9b5983af1b49e6c95f55ffeb3899400c89a0c56d2eb1dd2f6d6c812598394d4080c137e4be9bf31818bf10ca079ae0022671f8392afef83df8440d0c69b3c041e3518ed7e0cea71cb4002058e0c8fd822309b682b545467eda0a61ca41c43baeab5730b10870bb4a433bf4f3b25539fea59a595109bf7da6de42bb12239a22cfd822b7b63783826b8eb10917c8d51f96ae2a890b82ecc1701cbc78b19cb9ae71c3b3be102e14c176dea1d40edde984c8a3f78233bf4ff690325743e8bb5e935d75c0554903a6d41063445baccf21fee1ebe2cabf34df0f9a66b8d21e5566eb2f58bd7b4ec5b3b77467cc64cc7c0cfd76c5914"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x28) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0xffffffff, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r10, 0xffffffffffffffff, 0x0) 14m30.63741055s ago: executing program 5 (id=832): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {0x2}, 0x2}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x0, 0x288) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000100)=0x4000007, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000314000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001b00)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b5181e6a485d90a58", 0x2a}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffb}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x80000000000000a, 0x313e20d7a35df3b9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001780), 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x800d1}, 0x20000880) 14m29.475419787s ago: executing program 5 (id=838): unshare(0x6a040000) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x84202, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x4, 0x0, 0x800, 'syz1\x00', 0x100}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x2, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0xb, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x80000000000, 0x4, 0x4, 0x3, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0xffff7ffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3, 0x2, 0x0, 0x7, 0x34ce, 0x0, 0x800000000000009, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x20000000, 0x0, 0x80]}) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x3d, &(0x7f0000000000), 0x4) add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f700", 0x2e}, 0x48, 0xfffffffffffffffd) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x8000000000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00003a8000/0x3000)=nil, 0x3000, 0xc) 14m27.592130855s ago: executing program 5 (id=842): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) (async) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000c0c0)="f1187c2666e938b0d719606210914a175384a7d8bfa08a4ce1a6704c4c59dca5bd31c2e0daaec1bf1788b64cc764755c8227d255c9fcb56cddc8d23a8719578a528df745f0862275073dd2c88521736ffbb58e980e9803aa1406002487d226af95eedef88d3c768b748c28d604cd82f416f3c4f2071aac0274092945c94a4911345f1fb12c47fd864cef58c44ad5fb5348fea8246b3604a4c9c9a827e4aae4f7677d023169ef281c43f5341372d459170f25365fa911efb58b1a0c883d98677cce26aed7f8410a54aee36c963dd8f82fe532fd73594ee6f83265b5fbf2507319d73f87cb6d2050a7b1e001ec563d4170d9ca49e019c1f34a3f6a29e4adc72fcc343bb15caaa44814a11a621d682070b253354508d7b97b1439ad827954b305797e4de400c046ff93c99fa15125daa8b53581ae5392373621d5beffde817abdd5f4feb80aef8cbec83ad2a830c773ae907c19f5385e77e3adc425fc5d8dfd53312af6cb6556f8e3d871add2dc48a37fc05c65f32149a0ac179386d1016590ed19baede89d890902306e3ca40ddf9ea5f54b51cab0b6bc1bdddea7e6a64746cef6ecebedc1c51c670b0af450099c4052caf1eb0d4137a74f41f101a604fe08ef524e12f8f831c30e15da0947f6f584ae2ad96de45e3143f5a9dbce67edbdf5904a0ca1db282fb70dbec4870f6aeba8a74b24900d7c5a0758afadc26ac6f93695eeec1611d7a1123098420302ac2ecfb31bd545695b61c9f36663cf7ce86cd7ac350670893acf0d065fab2dc2ea43505b261393d285fbceaebe30e0d1fbf8baacb9eaf9f6ca84c598c5604fd4b11412a027760671956d312a4cd2e2dd54100519a0a8f93f5b229728bac624870cefd815a6b6d1ce8b06e045c47ee2f91e3524493df21f46cdd00a60c39f49d29965dbed6f408c42b29a3f76e0f840762b273628f7834397bb37d931231ab16f6cc7bbb5ca17fe83fc5ac8c67b120b19d8dbc3ef054e7490851bbf11c4cd19d8aad281fc054613050013dec6821e034f10413f96e289f81f10a52fc941992692b2c3b849d949b5c6465f335cd7876caff414d0a00ec927c2766c83249ca5e2d5dc9a524ea5142375bae891c8bcb34e8b4044964b8141841c619c6b1da249cf65b9c16506926804e4e388b60638c46128b43ab76a32659a5e3fa64c75609e31cc2738392a868434d9108c7710d72f8a34827943ded46328621b39b646cb663500467580b76cd6ee0217149dac6168499edcbff45193f49bd28fd105740f641f341ff8ded97ebea072d805062b35819f28541423b0e16ef996323f5907b0b2a0703e9fd5c6a511787cf6321a87f648170efd691aede0c178e0daf53da03829e4e7617b5b834c6b4196d926c7d7a54b9f1b3d3bc09bb7f22fb18f09150e34bec2102eafe634e13454a9d5cdc10da8e880cddaf892af35c437768b62c73f67ccd8764c34669a91f9d669fa1ebcc4159e4be7d4e589a59cb70c1ba77ef7a6a2c6fa4481c5f2c025ee26e24ea59215f971b1bd22af51af1334432d149a9574cac0d4cb145de1038fc37317b947fffb232209f8c65dce28179c950c7b23bd1052db323662512c5fb41acc84c4e42d1daa9be21e6c1d22b6bedd5f28d2241afc578e2a33e12d1b1b6427c620ce5d80c4a5ef351b2cdaa598c478b56bf79d9dcb8b8556503c66b44b27e8df8e046469a5da9390f58144b8766f9f51d39e8d5bd44e1ad024fed57ec1a3b18f04e6bb3b011f1b23031d85c498766cb10f66e3868a76ef1e388018292fdc4435e14bcf7ff6067535ee3764d8deb725cc0fe0afffe4285958ec9595ae5c5cb04834d15429435272e5b0510f246ce806895b85ba2f81912f76f6b955e28febafbd0c2e854479c4a6150b85c05bd54a1d0d37877e6fd3ae20046380dbf82bf9c8fa8a8d48f76cfc376fc9e0e4fdf0ccb785e9833c6c9ba006f7e59318ac733c3a1250f40ceb7ac3a167727bf89daea038372e212f02cf677a009cdfd224b41fc3c142b0882a53c1b9b7de6e99974d80ff8506c71ad3e063d7bc5c5366042b1cf952c6f76fad74fb16b9d9c9804589ae4f4afbc7bbaa340c1093d76a01fb254c5ea168e83b39bd3c97b8ace4f32612b63e841fd6eb304a663e4f43fcfb5f435716df89146d0ebc0c1517734ca4c90b9dd5db6820a4d730a9a7e6748d0d2b7def30a1c242fa36f52c3f685555b0828e1dd59023290ef4626d3759462cad9371d72a9c63824c91d5cc304ab43279f199811a604c164493794986b643ba6bf53d0a9ec7e304488b18bb2eedde5c128b2ef0303f85ed54875e38d4adbbfd477e8fe9a2217f084000813aecedcccb1dbe482b4856b9ceecb28d40bde5e8376eb8c29dc71b85d4b345fc411937234b318238e962f0d5dd46fdf5149685cb3c4f9c2710f4173f4ec616f7036ccf83ba228e1cc7b205cde9b57f00502d4d1c2af6dffaa37ad30fe0f5d955cfee2e00f48cb7ba02ab86748d0238914c66ca9ad9ff0e8bf2705e527c56b0d63a9b5a7b1da19424bc0c81d627b1389a42626654d901eff0f37d64e0cc894ab2c4399c67b846839a1c40033f4f9ecf8410fc63672ad471253fadd976df6510137d903a76ccf14509dd8839024608d707c4eb69cbcd5ba9cdddb7fbac1c963a99ef6e75eea8924aad62d6aea792042cb372131a83730a6ee7de386410d91697dad01d85ffcb22b3679573fea63a38c192b1b1e3a722adacaaf8e855843e1366763456c86ba9934302e0abfea2044386f31c457cb7ff445d7b00e3ed7d1dd4b2f92c845f65af3a3f68de96dd9b7bba62b7fefb52639b6796ca56d902f9dad52f42a1b79fc814c8a58033daa9f43ee3c540cfd08b0ed21941d67dc3ee37fcb855fa4a03453833714d8f8abf83256c503713adf7f8aee122cdb01d0ed27945d42633b0fc3b2fd51f8a9d403e792c9b77be56c257110669b46bd0f8bea9ec7b895b0b1bc9a9485a51e72763c3ccaf6210af7652ccd437722b359d20bc124e7055c5e41ddc5eb66f966647a3b91f1c51f3c6e340d6e203fcd30f39dd0398f0a1c9fa58f2da697033f5988cbc6e5c8e1fce7904112964b2ac5f938b9132d680f3cb0d8ec2fb65162113462ec459356bc9d28d9efdeb9983d79ed04da1a78f02ea8f5b42210a23d9c98a734dab4069dad2a532ebced93f5dad2ec9290b0016e6db7c3c9ca3ebc71d805aafc113ac93d1e68c637000879fd736cd8a42474e607da884df065a06f4d64054512a396d99cb7dfaad6a91cfce8288cf995e83a1ffd2ec83483a807c7ab3d0703e956222dbbc2fc5d57661fd186626b41a2e18144d592174cc8e45f1580593206e6d7c7f3236eeb41aa772e663834768dc21a4c216490612e6e912ad48f1d90650f1a9a29239ffa8f00747833038b75e8759c50799eba59ba58a1ddd3d9b49806e2c7ae143e88f704d0a5556429445a41ad83a95e43bf32fe2f6954ca030a3f2697014cb351c89cbd3d2792cc73371cae124e5c0055201036c7c0c73d94215214b33234f4e21071743cd553b8d96e3387151860f5143f16980020954d80b7f60955f9c09a6501e9d0eee4d8793e9ca2d04a8aa6831d2e54c0397c6c9f2486b79d06aee46f064c02e77fc4bd7bdf31b9dcf520e26ebb7a02ff3d9eef1357dbcc83877f5613c7a8c4e3a4636d2e0161a663a946f651cb5915f0776088c3de6b59b5ed0002a1fd5f7eb316ab62fef44af65abb81f96f495f867e128e8829a3d2693e00a5b2a14a6b76dff7c1cd80e26dca00482b3055741fcc7973e33346264f268e22ee4a74fb45066eb24cdbf71ea7c69d3fe9e9ce52dcc7e9b0645474ba2a635c36a83135cd98f892c2619a5724faff0aed7e236cad81184dd05dc5645c7e7ad52ef76d615255b2936bc40f0ea017035a8bfacc18c7bc52ec0e29d70126a6e912c6d06856a12ec2792738a9a1c2b2bd1e9b39db4fd115bc901e0d3fba472ea0182604cc9e73cc772117d49dbf41c7098076e20867d8eeb7b927701bd5cd21bc2b32e4ee2ab86f143770b4718f7c9ebdd32fdef6170ca284d4102360242f4d007fdcdd8fcfbb90e7d9b693fb1101dec0fa152a7417f70003159ca3633299cae4035793aa7668df47b09e0fad406e278a6105bbd2b9a523c1a8fdb394b9de39d3d9e1ce9d9ba717014dbe59855a92ff2375a3a3477c8bd22cde51e5bbb738b92ef4f3781e605c24e7140b2504b59328cb8e20c5c5d19acca392bbf60194e6257f674df0f99945132d78c76f182f2eb52058a908abf568352d50a7aa4d061380cc58cea53f166a753ffc4a51e90a0f46104decd9eaa77d48300f2c7901465effda4fdb0e70f7ede3541890732d4ff10eef7745ca362eb336febc2609f50f237eac6d4950593bfefe0718ae3bbf227ddd524178b39ce4341e68e4c1e5c65b506b73965c5e6ba8e7472d3b573d41b4e458c97d1f0164376cb24fdc38bce00df871938e65f46c3df4fc20e574581d6631d759c316af7f7709e05e9dc465b87234029ae78f071d892d5e7ab7fab90cbaba55acb3e654a18a5f0bf79d6e471d53b5fca51085a65534dbfa953379c4d4a0022f03da76fce767cfe2930992935ea897fc56dc23d377004d119c9b648986e402b035b7927e567db9019c915c0ab54e6e45435336e37d974a7ea3dfad73915badda2e0c32b87391e3226ef0509ec6a33462a246e62e0fb83065db0270c6c026415dfac7be0e7b1e790631347665e789ce6be41e7ea32b987465ca6a803508a52626d92858156920f841da0532854cd5c966f02911d10a4e12f687801d7b87891e0d7a1ed0279e3cbea3d73b3886e798d39460ef71ebafd803e3d367a0c67c31d502021a796e6c351caca55865902dea97edf28ca7f4da37d62e17df5245e52510e1d5bac6851e1a2bb2228aeb6add3c07bad5798176145d1b46d5ae3169581f2286f6ca3b09ce4c44df0031d6ed077e6af6226b6e21634037079331094fd3bcd0126d5c88069d1c240eba9a4ef943552dd69a2786301a0d94ba5f4afad155583d81cae6f68e600979674d05c5593ada14dccf11745118dfb6da366a15655469cc0fe0d31cabff9a84e40896f8726bb64bb0c548b8b7a7c031967ef8a38e85063eeeb48d271aa893cda1c66204cd3b2c35e27fa7dd972bc396283e24671b9f4c1bd9a4dcf30c8887864305b3f92ec1e678f85d552d411f8c2012bc77ae55d6d8a7c31bb6a9b80a530ef2900961a5c59fa0716f5b6ac2aa5b231005539414b2abb7ea3f7b4044e91e463f02e9c51891458084782209323f856148ed89c83d2fc194c127e47ae5bd711f5b130e6b21775090c6156cbe9737b33865b48489f4533945c4b9491add986d3095956796c1b217bf6b09ec63958fca7a9ec6b5435bb3fdbaca8a7520c7ba79098c47cd9208351b54e292509d4bc33bf40eaac6caa9f94d0918a7461e6bb8e8b259d3d90d641dec6612dc14b683ac4cbc217f6d108f666e66817867c70f3550d1ce37daf358cce35b8231fb70a4b1e302718163e5a628e8f653eeb25041290ef5f5289ec33dcec3bece209afaf2c4c8ed6145768ac945034473b01b63986f9882514722dd85df95448be18a59c5408ec8c95d203e7a4aebc68999c760d3f3929d0d28f7d8d0ea7c02a813515c5a82fc04cdcf20654c91af430aa34859a77eeca938842600afc6035605a0a9c01acdb164f2b2c3d4d7534c5292d08edb1adc446fedce1a14b7defb274051614de5157e8b5864f7ad8bf6d2f98515c07171afbb8c9d29a2202087bba880441bf68084d5bfdf3a7926ea2767a24bacdd5a6b98080b044071b3c21854333b84156771bbffe0458aed18e110ee0ec37f542b53afd04b76bbce6653d49434f0a8fe97d11cca1b211922bc48b0fa7526693889d0ae2b5a5f7746bd20803db5c57563137910efe92c6f4e0417978ac3af913d46fa9d49acf5f84de8e67f90b409bc78c30b58913f0149eab1629c1e8409190894f2591e208f3b61ed699670de4621675e9ca789cadb219013682d0655b785065dd4d2193f0a81b84f27330aa7a06fc09979239eff65b0327bd7887dd671bc4a51ca7dcca404fc24699a7703bdb1fe4b5175760f682531523ed75396e556b391b627035bbd9e323a004ec1875771b72f02af7711046a16e1df4fe22c8cc064bef1a401a430d2ed959aae3ab82db7a86b74821ed07dcf98ca76070b6e18fc749ef2ffeeec9585bd21aedaf8c05918bfd2f9ab1e1a6f023c0f2a2a418f5ecf711526525a165652eeab3ae16405ed177706844d1ca239f52641e0a66d89565d0b83cedc51d337496b2c5318cd5f44e6122c617387f85c3a6f76dc4d437e45f790c5f489bd56e56b8fa1e3111806429cd4ccf871b887ab9d8ee379f4cdd23bdbc476428ff912adcf7a84810c81943a778e57bbc3690911b5e046988dc85b7ccd09b7fc061f9259369601252aaeb4863d8d57796f1f4518130c911d1a331953663ef8a80fec491308297ccea77691fe14820aca10c6719c205988802791a54348222d6a34d9bf656696f396b27cfdea9d5b0e36838640d68ebe3be9ad72450232b66a5db274087e7a350a7d6abd95adf2557ee93154a966aab798b45c2fb1d5fa1f92db67a5bb2819e580dc15955249065189e4d1621c4517a67a76da14090a90b4da7272f57acc4228b49a1e5dc30002c11d03df9b60c382c026fac97ca1e389d6bb2af95494c2775b789988860478cb1e0a0e8e6a5b823fcaf6f8a031983408624a301bfad96784c9fe217e0c656cff8b65b3897a966c5ab572d269e30124ee813ac08ecec1aa40b73a3149e0647a00c612c0910878a079b5c163029435356473beced7fbc6ded2ee3e313082501fa91dc3ff05e4be525212ab350dceb9ac95c4f1db5399ea008b8609cb0c0f1a1319b9de77bbff478c197b9318005cf401a84f49499808fc403ea3ff9e1874d5ebe7997a0c03d977542c1877348da98f1d05641c9debd0dbba6b14ce8a83ac11de52ba7451cd1bb75f58ecc32676b3d00a76ce09e5695380ecc2e73f44ece11f77238d39696572e46761c7d5e638e94693591b70fffd8ab98b3294fc2614e3ce314a4947d0515baeab18ca4a23d479fa0a55d2950082cb770dbc34e138e9469f218a657dcdfee84cac9131cf6ad38000630aaf3fad747cb1dfc777188bafc927e7371ae2be48772afc09b6837784c8365c0ac6caac7de7ede4202ba8d28b18e6d20a217c30776f97546dc65822ff02be3be42f6043f828927ddcd693a7b691f9312aed70b5346cab9ff0d21e8783677bd71cd1b5e4975e588e121a90cdb6b4d3219effc8a868dd110f5cdfc119c121c84c2ad04189f84cec8f7d98d71ebb1f9793af002e2d645d7cfc03e3a4f61c28ff69f08024a93b8c712df64c83859374ae6d5575048d7baa3a0fab0ec0ecc731e3523d9deaebed7de16e9c6c453093de8738f8d7f4a244a6f15432cb494855c6c9b840d514af760c73b88099a66fc926b2f05befc766729f109ea436bbbb5ce2513fe654d7e0b379b49ed555cbddb8a690132417a31f48e530449ffe71d1f851acb1bdf245ec02dd39925782511c0d8930f17a14c54906d96a2daf27144914135cef344451982b50c71c1e5bf7d63f646fbdb749e2e9ce8e84ed334fb90d9ab7c6e7b265bdff840606ec572b035877e7d18cad3fa246ed000ec243d38da351fbea47a54dbea0942fbbf3fd9b00f19c21417159eedf477eb6af4ea228cde4ed64cc2d6890db81c74e5e08720dbea0f5364c1923cef7e0a883188a99896483d2977646bc9ebe9c8667fa68b3aa9cd961ad1dcaeba799eec564d20d771390c2ea12eb8cad0575d08320515c790155dcf477952c72c536e1bb2d6bdca553b02d23992129ce65d520c9f38bd385e37b98ac6c6974bd1fce4d53a7d11666ab3c04b6ff39f93ea50790aa027062d99c1486c5c692eefb05c29737b178526c91b62595f79396d40f2558148dd72652806ffd9fb334e744a2025070780d684dedb6db564fc76a5cf6f75766806e5c644bdb58c6c2aefe02a523f676aef200a3ea928810be43ec4367ec203edae43eedecb608cc48cde469217e36002b8419ba55ce00044a6d3590ba22c77001347c1545d07486d6a5f70ad9561fee62ee4eda80953218711d68ead9b38f3ef1012a952a572b38a5c90536754717799777574874b45e0b39e938ab2d31823bb1f44f965e225be271b69a9ccb32da2df01c65401df771f5e3e195ac977e627e3c4b522928d95391c1f6869ec2e340caf3f336e246d042da8fbe9702980babbb45067d82abebdfe34e3832c123575c479b66a33e22e47a5d8f7ee3c40fb538a3bb7a08ec13017f4c58f7ef769b7597f7252c8b6d0e4bbcefe0e32b4c1c92c5da2506d2be19bb6f71e662fb81f016404c96c50e4ad61dd3ba73746ce0489136d3b0414992f506900151bfbdf118a0e2f998f893560225da2c19280238cab9a986c747a265b22c0d6473f8248f83a3e155f4ee67cbde536b3c4dce586cc8d8ea15e55f3569ede91d29f9fdbaa88d20909f3dc3450e22ddb91722ed6e42f515db47259b74e25966408f4cab33177a74a038daf0967864330fc0be9f1f2b685cfa288bf89e72fecefca841fd0564a47826e586b6d4eb8dacbbfb0808a3255d5f69a8c56ca6e17f2041eff85aaa4eac86c1008d428d91237ec5e2cedad5383703ea7ca8e7dfb483ffd8e1f2abe1a90af170660f881f6cac3025087d72b6454bbc3f8b7308a27ee8a6e8294955903b0a69f66dbb4b6d7dfa2e726ebbdf91908990b042bd09ae9a6f6cd39a4d626f62b2efd8e85c02adeb492a9c97a4e883cd2660b570d0cf5b13c60fb58d60f07ca43b2b3a21843f85801c8d824d2bee451b86db0a61b45142a397372a3deb3bc10d80bf4f9907f5f3200c65f9cb6dd6411284ad5f7b837cb121c42b99f1e517569fc12b2606cb3f45daa0597a8aec824bfd4a31e4b17d5715ec48e8b9e666a5a9f881884b5d06cad31f1830d76db5bae7ef1833b727f6a15c0f32b8e561b41d4f286c74c901201ca52b95dd2b7bc930f5c7702eb282f4dce8dbb37f5137996967a07b0131da890e27edbbf5f5bcd3885889277d6faca161a138460fd1e70ef41179389c87338eb9eae94f2b8167e7e0683836b6153b7428ce1969da01b096eea0b4e7d5d85bb96037c17ee9ca630921367f17eb83845264fec0ecc866e58f845f2f32be57ea9d5c2c595f82efa6608c4c8946f0f56f3856fdaf3b8c0f78a017604521c727a136c2ac28c16ae19da2482c199eb7930fda5198f8269c774b8b2bd769c377a6f86416c2c3579e57a329e74021597aa1ed4e6da50806bdbdee831101cfa13b97e99fd512e43fa414f7b4cf1262c16b9e30ac4c34b108355ac16b6053751fb8c2f4eb4bbf7edcfbd0184f2250344e47bbfe9ca50f0e91e65c78270c58603c20679d739b454d1ec3301fd6b884d00d7539bdd3178126aca8ae37b9d8ecfcf14e62e653864d3ee4f1fae9ffb2197ed8a2455c90359b6a09910b79c2822f04bf07b6a27e01c9f1883fbcd08b7c26d7c8c25271338914cbc157dbbd0efada31709841831c71c1aaf111d0d46845d9aaeb7249dae34fdb050047ac38fbf0b746f33d6ea0baa5d4f7ddadeacb5831b7f9d5e219e4bae55d0b8594f52f0011badef967afef02884ce212c3341c340ee8fdca78e887b7bf2a98c31d1bb8a3969b8b4c939c362cd3edc19598fae9ccd82c88aabbad4c4ae278aa1b59d2003375cc932210f4a636af6c3126f200c8a7ac82d8226f244661ac6d73aa76edb53fa5b2216f645e873de27fbf580c7148fa72f992a220d1d4f499779e25c8b996c580a1165848d23088a6369957841653e291c7f520a8665997bf958ff7da53bef74eea85e3a1a3657945513137351cd4aab8499f23718abb8f66dd7d60e9775639e32ca1e8faacdb8f6b66d0b1b714af355773f1aed034f2e4cdaa17bac308dfd889bf123762b5c894de392a3081af84195438fdfd1868e2d978bf3ec1df5e81b9f8f6afdfbe3dc344f2a6dbf550080e403690d2ca7cfc0244014939aa79a8b3a0933e2bbc226385e3e4188a1ba2b37c34e02fd28c31f2c48d1a83294da501ab012d1d5e5fd26cd41ee71b4a150cf784486f9f6b5ab510cf07cf9792dd9e4d8bf48f06464fc957885d346fc501f21a07ac7fc71b9c01519cf4d2fa766d15eaf459fc429ace3a1a61ba078da7324ac06e65d7f36271f6898e8ccd673edeb25571c44606d7bde39d5195472e727bc7e2a2d1578328cdaf90400a7843f31793ad33d0f32885bf9b1f0e56d4a3ec40a1094e0ecec32a1712b88ff3008213795ffece882254753011c6988931fc9f19b5ad0891e20887b47ccf460e303842bb4c0b62163868e805b3bae6e4937a476e7eafe9fde0d0cf62223f714c69be6833c10d06f91a78016b1c00087415ac4a5b7b5e10f98a3e19adf60d56d5bee918c1c7ebbf7cfc37130ffae2ad7a620250c7387069ecc926f34069b717b97bf2a0ef0a2bf796034e88d30aa4235744a1aa5601ba718add8cd0cf38411f4787cd22e21dbacd9e480b13af38477a70d2a4800f680fa7cc8684fd467b86555422b1a901144b03e4327b2573769cb02de90e8e30df7afd2e571e2946d23a0efe02bac8e9698d12589378e28d1c36ce328a27abff98eca7b6da95daa681700397ce62c9b50a47cedeafd51b62e953413639a9d9978fb3e1604027751da66b5e481ec1e4697d64a4477c67ec2967e2389b6f716f77c810a62a5fd78c69907f4a4dc210db30d5d000000002c9c81f0dbeecb33a702f4860426e7d1c26d1a00ee4c62e3d671d545b26aab8ac758c53cea2250ed929aa715bf513a5fa242b78ddbc263990c42025ba2a52e368f6a18e2cfc0a6047e7f0e7187c3e36d61905cf0c1824a08e5c240ec56b04c909390322ce24f35001e8d5a599ffadbe2a8755920cc488f40be225110310d4e9e4d4cfa34f953c6f6cc6a5f8a89373739dc5da9445947fb58bec2c8e5b7f8c349d6df29e6a87336dd7bccb036139922faf14f3eeb92ba12d0084b1da8d36a3f9656414c0f32a1b2575a5147568ad96c2125701fc67d00e9d78788bfd0188276727d568bb0800a576913dbc5c1035fbcaa5359bc9b7fca0ef528903250be1a942e59727789ec61ee1ae617c3a23d3a89044a9ec729ef0cf7ec6a3d01e06e864c2e24c38a8389826c2cd471cca5cfd18a34050f24b99dcd26d418465a5e3623d7c9dffe7e65fc25f90710f42d00fb81b33a2db18d0ff7955c8d87ba8fdfe1186b638312505c7810dd0ead9c7722fcef542d2a73f107993e3ec78d3a0b15506ebd4d13a72384f77268b44c32a957aefda0bed253e76cb09012f104bd0c1f04e96b1fc60d08eb79ce9216fe1fde6ffe65d09056c9643ada21ef080b9da75c10f71ad334e4d3b5d3a0e55bd1ffcc18259cd28f6bbdfab16575cdcce86c95f894cd001e795cdaeac95c90d1ba94806ea2fdf45906eb7a2ba0613503f7aa7397e78c964ad3251d297ea76d88b4221efccb2c00", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x2020100, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0) 14m27.160247925s ago: executing program 5 (id=845): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg(r1, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000000)) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) read(r2, &(0x7f0000000080)=""/116, 0xfffffeb2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x3, 0x6000, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x1, 0x80, 0xb, 0xe, 0x81, 0x98, 0x9, 0x1, 0xff, 0x5, 0xfe, 0x81, 0x81, 0x2, 0x8}}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={0x0, 0x516512be}, &(0x7f0000000440)=0x8) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt(r1, 0x4, 0x10000000000009, &(0x7f0000000280)="e933f9ff", 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8100}, {{0x0, 0x0, 0x0, 0xfffffffffffffd47}, 0x6f92}, {{0x0, 0x0, 0x0}, 0xb}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b00)=""/240, 0xf0}, {&(0x7f0000000840)=""/73, 0x49}, {&(0x7f0000001dc0)=""/4105, 0xe2d}, {&(0x7f0000000940)=""/221, 0xd8}, {&(0x7f0000000380)=""/64, 0x40}, {&(0x7f0000000100)=""/195, 0xc3}], 0x6}, 0x3}], 0x4, 0x120, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000040)=0x3e, 0x14) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e22, 0x5, @loopback, 0x6}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000fcffffffffffffff000000000a020000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES8=r4, @ANYRES64=r2, @ANYBLOB="01000000010053fb5c1f0873ee6c4700532ddaca0c00000400000000000000000000ffffff7f0000000000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) 14m26.289047267s ago: executing program 5 (id=847): timer_create(0x3, 0x0, &(0x7f0000000300)) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') (async) socket(0x40000000015, 0x5, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async) inotify_init() (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ad}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x4}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/stat\x00', 0x41, 0x0) (rerun: 64) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000540)="a7", 0x1}], 0x1) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x25adf74, 0xfffffffffffffffa}}) (async, rerun: 32) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000000100)=""/140, 0x8c}], 0x2, 0x45, 0x4) (rerun: 32) 14m25.532427333s ago: executing program 33 (id=847): timer_create(0x3, 0x0, &(0x7f0000000300)) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') (async) socket(0x40000000015, 0x5, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x2) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) unshare(0x20000400) (async) inotify_init() (async, rerun: 32) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ad}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x80000) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000000)={0x4}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/stat\x00', 0x41, 0x0) (rerun: 64) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000540)="a7", 0x1}], 0x1) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f00000000c0)=@ethtool_sset_info={0x37, 0x25adf74, 0xfffffffffffffffa}}) (async, rerun: 32) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/122, 0x7a}, {&(0x7f0000000100)=""/140, 0x8c}], 0x2, 0x45, 0x4) (rerun: 32) 9m54.343971803s ago: executing program 1 (id=1623): syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4000010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tgkill(0x0, 0x0, 0x1a) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @rand_addr=0x5}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x1d, 0x4, @thr={&(0x7f0000000100)="fd0f980b743db012002d1d9ee53dd6d4ddb83c970de3dc921ac560f55812da6c39f9913e68aaa7d27ce600f6411de06060176d78a9538c8611607dfd8d5e39f6ab63ce8f33e12521289f13c67c70fa78793a1f7d3daee6016f6d4589a191250f5d2cc57bc241bc707f044d4c9495ced696d0f5bc6543fafb1a", &(0x7f0000000340)="a35f2bd7b2e91a6474da6c6d02d6c7331d534a9878e4684a59d21e5032707890f640670b3989cf1752c159f677f353a6bbe2aa3f802b3094e89a7ca41d28b7a7e9768700903c08"}}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x200000000002, 0x14802) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000200)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {r4, r5+60000000}}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0x81, 0x6}) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r6 = socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) removexattr(0x0, 0x0) 9m51.079832267s ago: executing program 1 (id=1641): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x5c, 0x2e, 0x300, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x3, 0xfffc}, {0xb, 0x7}, {0xfff2, 0x4}}, [{0x8, 0xb, 0x10001}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="600000002e000d030000007f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}, {&(0x7f0000000480)="09735d3afb66431ebb1445c996cc25aaf839dd2e3377f919c04196bbdaee9f178256f7e82e15df07f497c5465b6903389bfa17d0c719c61acafbaef685821aafd5c449933f99a441b51d72420496f20111eebb84dccfe4623c7b4fc6c9cfbc8cd54b499161c0b8d52caafc2992efd5715e", 0x71}, {&(0x7f00000005c0)="af145fceaed3fc7d9bb6328d22c2d5ea9fbb94ed94ede742646dd809df7c0234f698d3521f9660664c2a4fe4f1b166eb24b1e1c9a77fd83498adee905f390afb87652aa2d958d0247ffbaf165c3f92a06e98ea323c804bce6e9818ec13e5aaf3a2c6efe9526e80d1b6b3da03e1216177338044ccdf95b00816b6d1c369d1732e9d00dc27b23b7bbd5c685b3b83ccadb618fbd2", 0x93}], 0x4}, 0x4010) dup(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000000)={0x0, 0xa8ef, 0x8, 0x3}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x94, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x7, @private2, 0xfffffffd}, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x8, @empty, 0x3ff}]}, &(0x7f00000002c0)=0x10) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r15, 0x84, 0x74, &(0x7f0000000200)={r14, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000340)={0x77359400}, 0x1, 0x2}) r16 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r16, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 9m50.294316247s ago: executing program 1 (id=1645): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 9m50.033536106s ago: executing program 1 (id=1648): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') (async) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r2) (async) r3 = dup(r2) io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383}) (async) r4 = io_uring_setup(0x7ee1, &(0x7f0000000bc0)={0x0, 0x1cc1, 0x40, 0x2, 0x383}) io_setup(0x3f, &(0x7f0000000140)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f0000000180)='exfat\x00', 0x0) r6 = timerfd_create(0x0, 0x0) io_submit(r5, 0x3, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f0000000380)="682962ab7bb63432", 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0]) close_range(r4, 0xffffffffffffffff, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 9m49.599380317s ago: executing program 1 (id=1649): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, 0x0, 0x20004081) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf252c00000008000300", @ANYRES32=r8, @ANYBLOB="e124a9b5983af1b49e6c95f55ffeb3899400c89a0c56d2eb1dd2f6d6c812598394d4080c137e4be9bf31818bf10ca079ae0022671f8392afef83df8440d0c69b3c041e3518ed7e0cea71cb4002058e0c8fd822309b682b545467eda0a61ca41c43baeab5730b10870bb4a433bf4f3b25539fea59a595109bf7da6de42bb12239a22cfd822b7b63783826b8eb10917c8d51f96ae2a890b82ecc1701cbc78b19cb9ae71c3b3be102e14c176dea1d40edde984c8a3f78233bf4"], 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x28) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x9, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0xffffffff, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r10, 0xffffffffffffffff, 0x0) 9m49.237020067s ago: executing program 1 (id=1651): syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000640)={{0xa, 0xc}, 'port0\x00', 0x92, 0x20, 0x2, 0x80000001, 0xa6, 0x6, 0x8, 0x0, 0x3, 0xf7}) r3 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = io_uring_setup(0x3164, &(0x7f0000000580)={0x0, 0x3b1, 0x8, 0xfffffffd, 0xee, 0x0, r3}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r9, 0x5101) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, &(0x7f0000000a00)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3a) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x2, 0x0, 0x0, r7}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt(r11, 0x1, 0x8, &(0x7f0000000e80)="b6d38a68f7", 0x5) sendto$inet6(r11, &(0x7f0000000240)="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", 0x140, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) shutdown(r11, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x1, r10, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000140), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x8}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 9m48.332023658s ago: executing program 34 (id=1651): syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000640)={{0xa, 0xc}, 'port0\x00', 0x92, 0x20, 0x2, 0x80000001, 0xa6, 0x6, 0x8, 0x0, 0x3, 0xf7}) r3 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = io_uring_setup(0x3164, &(0x7f0000000580)={0x0, 0x3b1, 0x8, 0xfffffffd, 0xee, 0x0, r3}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) ioctl$SNDCTL_SEQ_SYNC(r9, 0x5101) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, &(0x7f0000000a00)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x3a) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340), 0x0, 0x2, 0x0, 0x0, r7}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt(r11, 0x1, 0x8, &(0x7f0000000e80)="b6d38a68f7", 0x5) sendto$inet6(r11, &(0x7f0000000240)="3afdc679464f0d8b290d5307123733b973d54623b912ef9b93e9aa796b0eed7c158e61a65713783d54bafac7f6386d80a752462f1efd1e99ad0530ddb4064768c12bfa6164dbb85e0e0a9b56d83647a10c4f6826eec5704c7564fc1340276f7bdb52059c22b2cf5f2c6a3c236388b55a3b1d4ac61068c7cba0eb7adc07ff4cfc25337387555abf956685dc78709d944f992b67c7f91169318afbec4967c1bc5dcb0e088cfabfb5c7038220e833ab432314b00e70281d917ef1d6b591798d07722e69c9500052e5ee4e8e44d1c6ad854219d35e9082f952ed713bc658fcc33336cc13094b9a168c9dc2c6c20d1fea5e3d1b04c06c42ffd55386475b532bf328530c41a47c534462e08e6622ffd65aadc31d5b6408c9dd58c8f670566618472d59e70d80ea12a2806c6ba5e3d60e9ab8ecd39ff4af81d704813a9d4965a8bf33bf", 0x140, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) shutdown(r11, 0x1) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x1, r10, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000140), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x8}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r2, 0x5000940c, 0x0) 11.296037743s ago: executing program 6 (id=3505): syz_usb_connect(0x17aff7a88c855ce9, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0xf, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x81, 0xd}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xd, 0x2, 0xff, 0xff, 0x49}, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0xbd, 0x4, 0x1000, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x4, 0x8}, @ptm_cap={0x3}]}, 0x1, [{0x80, &(0x7f00000001c0)=@string={0x80, 0x3, "5971b384883c9c0441b28387fa4085209e4c1632218abc6c841dfcfdc7a970e8735c524f36a6811485015a280be2fa34f493c7a091d6c4da5244aa3b49edc84824a784f988ed7463bafe961263578c034a08cdfbb6e74aaebfc38ab724165ee792c3ac4906226be53149ddd80496a5314705c8ff020a1309e892c59199ba"}}]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r2, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000480)={0x0, 0x15, 0x2, "efe6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)={0x20, 0x31, 0xf, "fee509f042a0acf1e551534bea3f6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) 8.079148413s ago: executing program 6 (id=3515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x44}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback}, @in6={0xa, 0x4e21, 0x7fff, @private2, 0x2}], 0x38) 7.356706994s ago: executing program 0 (id=3518): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090e0000402abd70000000000005000600330000000a00000000000002fe614ded5300000000000000000000120000000000000000021901000000000000020a000000002005000500330000000a00000100010001200100"/112], 0x70}, 0x1, 0x7}, 0x44011) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x4) 5.915024066s ago: executing program 4 (id=3523): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}}) (fail_nth: 1) 5.838918277s ago: executing program 7 (id=3524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 5.458825932s ago: executing program 7 (id=3525): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec1306000000000000010902240001000000000904000001030000000921000000012202000905810320"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)={0x10, 0x1f, 0x1, 0x70bd2d, 0x25d7dbfd}, 0x10}], 0x1, &(0x7f0000000380)=[@cred={{0x18}}], 0x18, 0x40014}, 0x6044) (async) syz_usb_control_io(r0, &(0x7f0000000900)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20014c0000004c0cff583c8bc8e004a4b59d53ce778442665cdf78b8c6b32e91f91a9140bb787de39b7d1125ee19e45cd3b6683168837fb60e27281d28bfa32ece458e1fbf84ac1dc5108e4364a20d14ab2673cbe3d12c99e3bc346d2d79d8377b"], 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x4, 0x9d, 0x7, "006df416", "e5f28ea0"}}, 0x0}, 0x0) 5.455532894s ago: executing program 6 (id=3526): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r1 = getpgrp(0x0) ptrace$cont(0xffffffffffffffff, r1, 0x9ae4, 0x7fff) syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0)=0x0, &(0x7f0000000000)=0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000140)='./file0\x00', r4, &(0x7f0000000180)='./file0\x00') syz_io_uring_submit(r2, r3, &(0x7f0000001040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x11, @empty, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240c089d) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x49e7, 0x200, 0xe, 0x7fffffffffffffff, 0x3, r1}) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 5.340314122s ago: executing program 4 (id=3527): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)="0000100000000000002a0000", 0xc, r1) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x7, 0x9, 0x4, 0x40, 0xfffffffd, {0x77359400}, {0x5, 0x8, 0x0, 0x6, 0x1, 0x0, "ad5015f6"}, 0x5}) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'], 0xa, r2) 5.330446301s ago: executing program 0 (id=3529): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{0x0, 0xf803, &(0x7f0000000240)=[{&(0x7f00000003c0)="c3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000004c0)="9d", 0x1}], 0x1, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], 0x1328}}], 0x3, 0x4048894) 5.116021531s ago: executing program 4 (id=3531): socket$igmp(0x2, 0x3, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001900)={{r0}, "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"}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r3, 0x4) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000380)={0x1d, r7}, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000240)=0x1, 0x4) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.016458773s ago: executing program 0 (id=3532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x900}, 0x0) 4.347303129s ago: executing program 0 (id=3533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20041, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 3.980291875s ago: executing program 6 (id=3534): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000240)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe81}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) 3.502580479s ago: executing program 0 (id=3535): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x3, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2004c890) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x401, 0x0, 0xf4ae, 0x9, 0x400000006, 0x12ce, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) listen(0xffffffffffffffff, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x844) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1, @ANYRESHEX=r0], 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100), 0xf9ba, 0x28540) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="6cdcc4e3d3942800"]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x10000003) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000001280)='/dev/vsock\x00/(zu\xaa\xa9\x9c\x11\xcb!i\x80\xeds/\xaa#\xd8^\xf2B\xf6\x81\x02\xae\xed\xcc\xd0\x80\x8eCA\xdd`\xcco$G\xf6f\xa7\xe2\xc2e\xf0&\x81\x9f)\'\x87Ro|\x0e,\x85\xe9\xa5\x93\xd7\xbb\x0fe?G\xeb\xd6\x0e/,\xec\xb1\xaf\xaeIZAk\xb3\xfcm\x12\xcb\x97,\xd2\xda\x19~\xbaAEV\xde\x15\x02\x0fA\xe3p\xe9\x96\xc3\x1f\x8e\xa7\xadi\x00\xf7\x05\xb4.f\b\x9f\xe1\f\x7f\x16!\xda\xfd\xb4\xbf\x88\x9dl\xda\xe8\xb1=\xceS\x85\xedVq2\"\x89\xd3\x8f\xbb\x1dP\xf2\x8f\xfb\xdfz2\x16\"\xfa\x1aX\x13\xb9\x94\x99\xa1T#`\xff61b\xbew\x17\xb3\x95z\xaey\xe9?n\xc3\xf7\xde\xbf\xb8\\D\xf4\xc8\xc6e\xc9\xbb\x1a>P\xf2\x10\xbf\x01\xc4\xca\xe2\xe3\x8a\xca!\x1e2\x03N\xe0\xb9OD\xd6\xbf\x02_|i/\x8a\x90\x155\x8e\xd9\xf4\x1e\aS-\x14\v\x05\xee\x83l.D\x03h\xbc@\xe0\xae\xa1zK\xc8\xd0\xbb\x89\xf1my*\x12\xb5\xbbE\x14\xd3', 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x0) 3.197639249s ago: executing program 2 (id=3536): r0 = socket$kcm(0xf, 0x9, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x57, &(0x7f0000000300)=[{&(0x7f0000000000)="2ccb82a7eb7fa1543e52277941724ff3fe48144654c2f2a89bacccdc4e20f0d6e521e3a09c3d2412f23dcae62e20c0046a847014932f1ab114bade5e640113e7e70c6bd2cded722350acf05c26de2d2c21a34c2c1fde14fb2b923b896cafad85123b3f6a15823490b18a4c699e80db6c4df32e40cf56ae44eee2d262675ea32c452d7614d6ec8bdeaa98a0370058169641e847301b828b8d5617d5496f9b3cbbfdfe9b70ad448eed38d1ee2bd9ebc3480a0f15415666b3332633914e0a8fe2c8ec540a4557a5fb352b3f8e8c071bf0a3ac", 0xd1}, {&(0x7f0000000100)="b73ddabb7113e3444543311c7dc565cf8749e4c93fa81b31796211cea877bf86aefba29ccf18b5195049bbe86ad984fdcb698486094d39affea50104957c6008a746621818a455c8f9e1967441ac54a836512c708b45f8d71fdc8103372e1d12cfb34c1eb15979d772323e1301ee4dc3127402e7bd9b4abf84ae721c7d2a2e926cba68f3101528f14610dad496312dd65c7f45bba0c76139c0ddd6210679b5169e11680bb44b8506b2298e6624c1106b8fbfdfd340ebb260700a3be848a64f61dac720969bdb849694cb", 0xca}, {&(0x7f0000000200)="80d0f5fe236c841d31166d97296122d98dbc5a01146c84d1dc6b4f47c2291f0e45b96f47b66e89680fd381945f191e7bbaa1e4680d394f5b75f702473003d1e648f8024f361076aaa1f6c373340db521d7009decb097ea1e386ef3efa74645b42ef542141533d1259bc3f60b529bda7f0ae1766299ea611488038096a3dc6d2f83e7242b1c89a161913b154ebf0db48c88aff2fc7479778d2ff37de17364ce420cc9a0150cb6e557c46c526e5cf520147f159283cd453b59face809fe8000000", 0xc0}, {&(0x7f0000000340)="090000004571f38d1f4a176283f123fdb3791c4f4cea71430dadf0d4131e981659bb831d45af745e19f8d1dd35a41d0e1d450ad0232e76133d8589c5f6fa5c6b3b713ae0388c5e4cf2", 0xffffffffffffff84}], 0x4}, 0x0) 3.144243784s ago: executing program 4 (id=3537): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB], 0x68}}, 0x0) 3.022030545s ago: executing program 6 (id=3538): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xe, 0x0, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000}}) 2.957987717s ago: executing program 2 (id=3539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@loopback, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x3000000, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2.816499932s ago: executing program 2 (id=3540): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x18, 0x24, 0x4ee4e6a52ff56541, 0x2b1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xfff1, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x0, 0xc, 0x1}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x406f413, 0x0) 2.277390983s ago: executing program 7 (id=3541): unshare(0x8040600) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2}, {0x1003fffe, 0x0, 0x0, 0x7}]}, 0x94) close(r0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4) 2.132236848s ago: executing program 7 (id=3542): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usbip_server_init(0x4) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYBLOB="040013001400030017"], 0x68}}, 0x20008804) 1.502378674s ago: executing program 6 (id=3543): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x801) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x400, 0x9}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000007c0)={{0x5, 0x6, 0xffffffff, 0x0, 'syz1\x00', 0x7}, 0x3, 0x200, 0x20000006, 0x0, 0x0, 0x1, 'syz1\x00', 0x0}) r4 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000580)="00fd67c6d222406b096cc34801001000647418aaf9b90732f41ec9591b532723e017c8c54d863ecd9b0df09072030025c3a03ce14a48716ba2f4127d38d2129825d9fff7065d51f973ee7ad483b1b28e4aa696cd0d0000b1e1caee2a1ffdbff2b7601618da596d1db25ba3cd0e6c352a27bcb491e01f716712f22f38ce63658951ffe9c3e755a5669dfd0aa44a04dfd4e3df02b0bfd0781bc9607466d4fd536faac836e6252b3119c95587671b", 0xad, r4) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r7 = open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) read$FUSE(r7, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r7, &(0x7f0000000480)={0x60, 0x0, r9, {{0x80000000, 0x0, 0x1ff, 0x7, 0x7, 0x5, 0xfffffffe, 0x80}}}, 0x60) r10 = fcntl$dupfd(r8, 0x0, r8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.476234195s ago: executing program 4 (id=3544): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x21, 0x3, 0x7ff08005}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x4f85}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000080000000000000300000018310000", @ANYRES32=r1, @ANYRES32], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x3f, &(0x7f0000000180)=""/63, 0x41000, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xd82b}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0xa, 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x402800, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r6, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a0102000000000000000000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a0000"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.412272323s ago: executing program 2 (id=3545): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf401}, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 1.318269666s ago: executing program 2 (id=3546): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 1.028572032s ago: executing program 2 (id=3547): r0 = userfaultfd(0x80001) pipe(0x0) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20001) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294}) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x202140) 727.984316ms ago: executing program 7 (id=3548): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)="02042700ea0e0000000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8440000", 0x31}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000080)="088d85d1f4f8220aee8de7932b326f8a3164ae439862807a1589836c736d2341f7", 0x21}, {&(0x7f0000000240)="df3b46a1330000000000000000000000000000f1", 0x14}, {&(0x7f00000005c0)="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", 0xe88}, {&(0x7f00000033c0)="d6d038091fcf458c47fa6bd5a8edbf8f968178124964b4b012f8047c9716eb31", 0x20}], 0x6}, 0x40000) 343.619966ms ago: executing program 0 (id=3549): setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff00000000000000", 0x1c) recvmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40002c1, 0x2000a002, 0x0) 159.496036ms ago: executing program 7 (id=3550): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsetxattr$security_capability(r0, &(0x7f00000000c0), 0x0, 0x0, 0x1) (async) pipe(&(0x7f0000000000)) (async) fanotify_init(0x200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x3, 0x3c) (rerun: 32) creat(&(0x7f0000000080)='./file0\x00', 0x7) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) syz_emit_ethernet(0x28e, &(0x7f00000000c0)=ANY=[@ANYBLOB="e727dc07001f00000000000086dd609907a602582c03cb697a653e336f000000500000000000ff0200000000000000000000000000010102002e"], 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) (async) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000002c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000c000000181618000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b00040000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) 0s ago: executing program 4 (id=3551): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xb}]}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80086303, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000002c0)) (async) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000002c0)) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xe9, 0x318, 0x1, 0x24}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0xffffffbc, 0x7ffffffc}, 0x8) bind$inet(r9, &(0x7f0000000700)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) (async) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r8}) (async) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000240)={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r8}) userfaultfd(0x80001) kernel console output (not intermixed with test programs): 4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.953809][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.057225][T15170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.072881][T15170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.427896][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.581254][T17231] Bluetooth: hci1: command tx timeout [ 1087.116357][T17993] chnl_net:caif_netlink_parms(): no params data found [ 1087.315708][T15170] tipc: Resetting bearer [ 1087.465094][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.500863][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.664614][T17231] Bluetooth: hci1: command tx timeout [ 1088.982167][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.195237][T15170] tipc: Disabling bearer [ 1089.407006][T15170] dvmrp0 (unregistering): left allmulticast mode [ 1089.558276][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.772063][T18041] FAULT_INJECTION: forcing a failure. [ 1089.772063][T18041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.798990][T18041] CPU: 1 UID: 0 PID: 18041 Comm: syz.7.2983 Not tainted syzkaller #0 PREEMPT(full) [ 1089.799021][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1089.799035][T18041] Call Trace: [ 1089.799044][T18041] [ 1089.799056][T18041] dump_stack_lvl+0x189/0x250 [ 1089.799085][T18041] ? __pfx____ratelimit+0x10/0x10 [ 1089.799109][T18041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1089.799135][T18041] ? __pfx__printk+0x10/0x10 [ 1089.799164][T18041] ? __might_fault+0xb0/0x130 [ 1089.799205][T18041] should_fail_ex+0x414/0x560 [ 1089.799242][T18041] _copy_from_iter+0x404/0x1790 [ 1089.799276][T18041] ? rcu_is_watching+0x15/0xb0 [ 1089.799315][T18041] ? __pfx__copy_from_iter+0x10/0x10 [ 1089.799341][T18041] ? __build_skb_around+0x257/0x3e0 [ 1089.799369][T18041] ? skb_put+0x11b/0x210 [ 1089.799396][T18041] pfkey_sendmsg+0x230/0x1090 [ 1089.799426][T18041] ? __pfx___might_resched+0x10/0x10 [ 1089.799445][T18041] ? __lock_acquire+0xab9/0xd20 [ 1089.799485][T18041] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1089.799517][T18041] ? aa_sk_perm+0x81e/0x950 [ 1089.799553][T18041] ? __pfx_aa_sk_perm+0x10/0x10 [ 1089.799582][T18041] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1089.799611][T18041] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1089.799633][T18041] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1089.799655][T18041] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1089.799679][T18041] __sock_sendmsg+0x21c/0x270 [ 1089.799713][T18041] ____sys_sendmsg+0x505/0x830 [ 1089.799745][T18041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1089.799780][T18041] ? import_iovec+0x74/0xa0 [ 1089.799810][T18041] ___sys_sendmsg+0x21f/0x2a0 [ 1089.799838][T18041] ? __pfx____sys_sendmsg+0x10/0x10 [ 1089.799907][T18041] ? __fget_files+0x2a/0x420 [ 1089.799925][T18041] ? __fget_files+0x3a0/0x420 [ 1089.799954][T18041] __x64_sys_sendmsg+0x19b/0x260 [ 1089.799983][T18041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1089.800020][T18041] ? __pfx_ksys_write+0x10/0x10 [ 1089.800044][T18041] ? rcu_is_watching+0x15/0xb0 [ 1089.800069][T18041] ? do_syscall_64+0xbe/0x3b0 [ 1089.800096][T18041] do_syscall_64+0xfa/0x3b0 [ 1089.800117][T18041] ? lockdep_hardirqs_on+0x9c/0x150 [ 1089.800172][T18041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.800192][T18041] ? clear_bhb_loop+0x60/0xb0 [ 1089.800217][T18041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.800237][T18041] RIP: 0033:0x7f674c38ec29 [ 1089.800274][T18041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.800292][T18041] RSP: 002b:00007f674d21f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1089.800314][T18041] RAX: ffffffffffffffda RBX: 00007f674c5d5fa0 RCX: 00007f674c38ec29 [ 1089.800330][T18041] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 1089.800344][T18041] RBP: 00007f674d21f090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.800356][T18041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.800370][T18041] R13: 00007f674c5d6038 R14: 00007f674c5d5fa0 R15: 00007f674c6ffa28 [ 1089.800403][T18041] [ 1090.468341][T15170] bond0 (unregistering): Released all slaves [ 1090.609779][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.729425][ T5941] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1090.749414][ T5873] Bluetooth: hci1: command tx timeout [ 1090.765453][T15170] bond1 (unregistering): Released all slaves [ 1090.799576][T15170] bond2 (unregistering): Released all slaves [ 1090.890574][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 1090.898399][ T5941] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 1090.907582][ T5941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1090.916545][ T5941] usb 3-1: config 0 has no interface number 0 [ 1091.035990][ T5941] usb 3-1: too many endpoints for config 0 interface 1 altsetting 204: 207, using maximum allowed: 30 [ 1091.050210][ T5941] usb 3-1: config 0 interface 1 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 1091.086862][ T5941] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1091.094991][ T5941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1091.103634][ T5941] usb 3-1: config 0 has no interface number 0 [ 1091.109959][ T5941] usb 3-1: too many endpoints for config 0 interface 1 altsetting 204: 207, using maximum allowed: 30 [ 1091.124081][ T5941] usb 3-1: config 0 interface 1 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 1091.144949][ T5941] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1091.154757][ T5941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1091.163344][ T5941] usb 3-1: config 0 has no interface number 0 [ 1091.169635][ T5941] usb 3-1: too many endpoints for config 0 interface 1 altsetting 204: 207, using maximum allowed: 30 [ 1091.190582][ T5941] usb 3-1: config 0 interface 1 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 1091.204203][ T5941] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1091.213324][ T5941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1091.230957][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.252603][ T5941] usb 3-1: config 0 has no interface number 0 [ 1091.258937][ T5941] usb 3-1: too many endpoints for config 0 interface 1 altsetting 204: 207, using maximum allowed: 30 [ 1091.321305][ T5941] usb 3-1: config 0 interface 1 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 1091.335115][ T5941] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1091.343672][ T5941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1091.370613][ T5941] usb 3-1: config 0 has no interface number 0 [ 1091.376134][T15170] bond3 (unregistering): Released all slaves [ 1091.381084][ T5941] usb 3-1: too many endpoints for config 0 interface 1 altsetting 204: 207, using maximum allowed: 30 [ 1091.414562][ T5941] usb 3-1: config 0 interface 1 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 1091.486856][ T5941] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1091.624963][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.634831][ T5941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1091.654358][ T5941] usb 3-1: config 0 has no interface number 0 [ 1091.661783][ T5941] usb 3-1: too many endpoints for config 0 interface 1 altsetting 204: 207, using maximum allowed: 30 [ 1091.678237][T15170] tipc: Disabling bearer [ 1091.684524][T15170] tipc: Disabling bearer [ 1091.691721][ T5941] usb 3-1: config 0 interface 1 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 1091.722780][T15170] tipc: Left network mode [ 1091.789427][ T5941] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1091.858572][ T5941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1091.900571][ T5941] usb 3-1: config 0 has no interface number 0 [ 1091.907103][ T5941] usb 3-1: too many endpoints for config 0 interface 1 altsetting 204: 207, using maximum allowed: 30 [ 1091.940629][ T5941] usb 3-1: config 0 interface 1 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 1091.979795][ T5941] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1092.018497][ T5941] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1092.032137][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.046467][T17993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.146646][T17993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.157426][ T5941] usb 3-1: config 0 has no interface number 0 [ 1092.174157][T17993] bridge_slave_0: entered allmulticast mode [ 1092.182581][ T5941] usb 3-1: too many endpoints for config 0 interface 1 altsetting 204: 207, using maximum allowed: 30 [ 1092.202565][T17993] bridge_slave_0: entered promiscuous mode [ 1092.215430][ T5941] usb 3-1: config 0 interface 1 altsetting 204 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 1092.237923][T17993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.252478][T17993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.259930][ T5941] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1092.267439][T17993] bridge_slave_1: entered allmulticast mode [ 1092.278046][T17993] bridge_slave_1: entered promiscuous mode [ 1092.288717][ T5941] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1092.299549][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.333498][ T5941] usb 3-1: Product: syz [ 1092.350286][ T5941] usb 3-1: Manufacturer: syz [ 1092.384544][T15170] IPVS: stopping master sync thread 7916 ... [ 1092.529876][ T5941] usb 3-1: SerialNumber: syz [ 1092.563671][ T5941] usb 3-1: config 0 descriptor?? [ 1092.779937][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.822210][ T5873] Bluetooth: hci1: command tx timeout [ 1092.850357][ T5941] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1092.906271][ T5941] usb 3-1: selecting invalid altsetting 1 [ 1092.919059][ T5941] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1092.939591][ T5941] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1093.019500][ T5941] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1093.100534][ T5941] usb 3-1: media controller created [ 1093.240037][T17993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.282956][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1093.322283][T17993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.423657][ T5941] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1093.460608][ T5941] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1093.468081][ T5941] usb 3-1: selecting invalid altsetting 0 [ 1093.484125][ T5941] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1093.890589][ T5941] usb 3-1: USB disconnect, device number 7 [ 1093.905733][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.391727][T17993] team0: Port device team_slave_0 added [ 1094.470343][T17993] team0: Port device team_slave_1 added [ 1094.890932][T17993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.897946][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.975964][T17993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.017434][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.068496][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.081120][T17993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.519764][T17993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.627714][T17993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.649100][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.657575][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.666221][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.761954][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.771101][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.811834][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.918476][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.937900][T18104] netlink: 'syz.7.2995': attribute type 29 has an invalid length. [ 1095.996568][T18104] netlink: 'syz.7.2995': attribute type 29 has an invalid length. [ 1096.629633][T17993] hsr_slave_0: entered promiscuous mode [ 1096.646591][T17993] hsr_slave_1: entered promiscuous mode [ 1096.653705][T17993] debugfs: 'hsr0' already exists in 'hsr' [ 1096.659584][T17993] Cannot create hsr debugfs directory [ 1097.436282][T15170] hsr_slave_0: left promiscuous mode [ 1097.484908][T15170] hsr_slave_1: left promiscuous mode [ 1097.839326][T15170] veth0_macvtap: left promiscuous mode [ 1097.866076][T15170] veth1_vlan: left promiscuous mode [ 1099.154651][T13529] net_ratelimit: 7 callbacks suppressed [ 1099.154668][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.472457][T18147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3002'. [ 1100.202251][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.821358][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.140980][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.239463][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.882495][T18171] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3009'. [ 1101.930151][T18154] dlm: non-version read from control device 36 [ 1102.025713][T15170] IPVS: stop unused estimator thread 0... [ 1102.273947][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.306631][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.344521][T17993] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1103.509945][T17993] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1103.609924][T17993] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1103.792501][T17993] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1103.830637][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3014'. [ 1104.181377][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.350659][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.522249][T17993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.644300][T17993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1104.728069][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.735420][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1104.756862][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.764463][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.864690][ T5941] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1104.923830][T17993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.035655][T17993] veth0_vlan: entered promiscuous mode [ 1105.070910][ T5941] usb 3-1: Using ep0 maxpacket: 8 [ 1105.075093][T17993] veth1_vlan: entered promiscuous mode [ 1105.093012][ T5941] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1105.127960][T17993] veth0_macvtap: entered promiscuous mode [ 1105.160459][T17993] veth1_macvtap: entered promiscuous mode [ 1105.234781][ T5941] usb 3-1: config 2 has an invalid descriptor of length 158, skipping remainder of the config [ 1105.254471][T17993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1105.305673][ T5941] usb 3-1: config 2 has no interface number 0 [ 1105.342539][ T5941] usb 3-1: config 2 interface 31 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1105.355605][T17993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1105.396475][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.410746][ T3470] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.440143][ T5941] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1105.447983][T15170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.497188][T15170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.518889][ T5941] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1105.541991][T15170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.560507][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.580878][ T5941] usb 3-1: Product: syz [ 1105.617422][ T5941] usb 3-1: Manufacturer: syz [ 1105.659544][ T5941] usb 3-1: SerialNumber: syz [ 1105.891879][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.930635][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.953927][ T5941] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1106.030566][ T5941] usb 3-1: USB disconnect, device number 8 [ 1106.105916][T15160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.173772][T15160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.434464][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.220880][T18229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.409646][T18269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3024'. [ 1107.480122][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.522279][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.816521][T18288] batadv_slave_1: entered promiscuous mode [ 1109.157349][T18287] batadv_slave_1: left promiscuous mode [ 1109.546418][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.584278][T13529] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1109.802784][T13529] usb 3-1: Using ep0 maxpacket: 8 [ 1109.844135][T13529] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1109.852358][T13529] usb 3-1: config 2 has an invalid descriptor of length 158, skipping remainder of the config [ 1109.863150][T13529] usb 3-1: config 2 has no interface number 0 [ 1109.869477][T13529] usb 3-1: config 2 interface 31 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1109.882738][T13529] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1109.894277][T13529] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1109.903618][T13529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.918633][T13529] usb 3-1: Product: syz [ 1109.930073][T13529] usb 3-1: Manufacturer: syz [ 1109.943925][T13529] usb 3-1: SerialNumber: syz [ 1110.190284][T13529] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1110.256066][T13529] usb 3-1: USB disconnect, device number 9 [ 1110.260821][T18229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.343736][T18315] netlink: 'syz.0.3032': attribute type 29 has an invalid length. [ 1110.422155][T18229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.448367][T18319] netlink: 'syz.0.3032': attribute type 29 has an invalid length. [ 1110.587621][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.190796][ T5941] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1111.360502][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 1111.379896][ T5941] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1111.404224][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.441106][ T5941] usb 3-1: config 0 descriptor?? [ 1111.462183][ T5941] as10x_usb: device has been detected [ 1111.476439][ T5941] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1111.640639][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.785038][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1111.785059][ T30] audit: type=1804 audit(1758416563.717:3035): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3036" name="/newroot/587/file1" dev="fuse" ino=1 res=1 errno=0 [ 1111.815002][ T5941] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1112.366118][ T5941] as10x_usb: error during firmware upload part1 [ 1112.412024][ T5941] Registered device nBox DVB-T Dongle [ 1112.439518][ T5941] usb 3-1: USB disconnect, device number 10 [ 1112.451610][T18229] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1112.539739][ T5941] Unregistered device nBox DVB-T Dongle [ 1112.544574][ T5941] as10x_usb: device has been disconnected [ 1112.640588][T18229] usb 1-1: Using ep0 maxpacket: 16 [ 1112.662820][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.699969][T18229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.796001][T18229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1112.950983][T18229] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1113.205762][T18229] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1113.232324][T18229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.301302][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.348349][T18229] usb 1-1: Product: syz [ 1113.358539][T18229] usb 1-1: Manufacturer: syz [ 1113.368727][T18229] usb 1-1: SerialNumber: syz [ 1113.739722][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.742363][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.651298][ T30] audit: type=1326 audit(1758416567.567:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1115.784214][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.793508][T15170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.803736][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.815341][ T30] audit: type=1326 audit(1758416567.577:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1115.879268][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.923414][ T30] audit: type=1326 audit(1758416567.577:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1116.054327][ T30] audit: type=1326 audit(1758416567.577:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1116.172823][ T30] audit: type=1326 audit(1758416567.577:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1116.368740][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.403859][T18229] usb 1-1: 0:2 : does not exist [ 1116.460543][ T30] audit: type=1326 audit(1758416567.577:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1116.533092][T18229] usb 1-1: USB disconnect, device number 116 [ 1116.578179][ T30] audit: type=1326 audit(1758416567.577:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1116.654682][ T30] audit: type=1326 audit(1758416567.577:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1116.703370][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1116.757046][ T30] audit: type=1326 audit(1758416567.577:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1116.854854][ T30] audit: type=1326 audit(1758416567.577:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1116.907273][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.920907][ T30] audit: type=1326 audit(1758416567.577:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1116.969935][ T30] audit: type=1326 audit(1758416567.577:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1117.002422][ T30] audit: type=1326 audit(1758416567.577:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1117.031546][ T30] audit: type=1326 audit(1758416567.577:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1117.054506][ T30] audit: type=1326 audit(1758416567.577:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1117.110655][T18229] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1117.154940][ T30] audit: type=1326 audit(1758416567.577:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1117.177707][ T30] audit: type=1326 audit(1758416567.577:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1117.201222][ T30] audit: type=1326 audit(1758416567.577:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1117.223924][ T30] audit: type=1326 audit(1758416567.577:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.4.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1117.281622][T18229] usb 1-1: Using ep0 maxpacket: 8 [ 1117.315496][T18229] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1117.362093][T18229] usb 1-1: config 2 has an invalid descriptor of length 158, skipping remainder of the config [ 1117.386491][T18229] usb 1-1: config 2 has no interface number 0 [ 1117.398156][T18229] usb 1-1: config 2 interface 31 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1117.488185][T18229] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1117.539675][T18229] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1117.564447][T18229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.700174][T18229] usb 1-1: Product: syz [ 1117.717318][T18229] usb 1-1: Manufacturer: syz [ 1117.755418][T18229] usb 1-1: SerialNumber: syz [ 1117.948017][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.001785][T18229] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1118.087824][T18229] usb 1-1: USB disconnect, device number 117 [ 1118.088466][T18417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.104415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.025997][T17228] net_ratelimit: 6 callbacks suppressed [ 1120.026019][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.039901][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.645737][T13529] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1120.810936][T13529] usb 3-1: Using ep0 maxpacket: 16 [ 1120.820058][T13529] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.831029][T13529] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1120.839926][T13529] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1120.934286][T13529] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1120.949227][T13529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.957924][T13529] usb 3-1: Product: syz [ 1121.005980][T13529] usb 3-1: Manufacturer: syz [ 1121.014133][T13529] usb 3-1: SerialNumber: syz [ 1121.071488][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.120679][ T5943] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1121.291094][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 1121.387951][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.397653][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.520585][ T5943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.637548][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.655400][ T5943] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1121.778581][ T5943] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1121.788217][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.801779][ T5943] usb 5-1: Product: syz [ 1121.814190][ T5943] usb 5-1: Manufacturer: syz [ 1121.853327][ T5943] usb 5-1: SerialNumber: syz [ 1122.107547][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.352303][T18456] netlink: 'syz.0.3059': attribute type 12 has an invalid length. [ 1122.450861][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.195017][ T5941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.275323][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.929678][T13529] usb 3-1: 0:2 : does not exist [ 1124.971494][T13529] usb 3-1: USB disconnect, device number 11 [ 1124.977783][ T5943] usb 5-1: 0:2 : does not exist [ 1125.133770][T18467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1125.151136][ T5943] usb 5-1: USB disconnect, device number 113 [ 1125.292450][T18467] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1125.467259][T18467] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1125.475171][T18467] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1125.513490][T18467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1125.519771][T18467] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1125.535285][T18467] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1125.572346][ T3470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.583606][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.596493][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.604696][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.613804][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.626290][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.729061][T18467] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1125.735667][T18467] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1125.756174][T18467] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1126.632165][T18490] program syz.6.3070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1126.660807][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.820553][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 1127.540748][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 1127.546836][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 1127.710939][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.798399][ T5873] Bluetooth: hci1: command 0x0405 tx timeout [ 1128.676998][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.750864][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.878459][T18517] netlink: 'syz.4.3077': attribute type 29 has an invalid length. [ 1128.889197][T18517] netlink: 'syz.4.3077': attribute type 29 has an invalid length. [ 1128.900668][ T5873] Bluetooth: hci3: command 0x0406 tx timeout [ 1129.632031][T17231] Bluetooth: hci0: command 0x0c1a tx timeout [ 1129.638300][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 1129.914471][ T5873] Bluetooth: hci1: command 0x0405 tx timeout [ 1130.240764][T17228] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1130.419741][T17228] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1130.535817][T17228] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.568552][T17228] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1130.630688][T17228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1130.680692][T17228] usb 1-1: SerialNumber: syz [ 1130.822863][ T5934] net_ratelimit: 5 callbacks suppressed [ 1130.822883][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.901077][T15164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.909884][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.918765][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.927862][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.936037][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.947047][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.000268][T17228] usb 1-1: 0:2 : does not exist [ 1131.015491][T18537] ipip0: entered promiscuous mode [ 1131.035321][T18537] ipip0: entered allmulticast mode [ 1131.052989][T17228] usb 1-1: USB disconnect, device number 118 [ 1131.250675][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1131.709250][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 1131.940577][ T5873] Bluetooth: hci1: command 0x0405 tx timeout [ 1132.010576][ T5934] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1132.050568][ T5943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.150689][ T5934] usb 5-1: device descriptor read/64, error -71 [ 1132.390806][ T5934] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1132.593427][ T5934] usb 5-1: device descriptor read/64, error -71 [ 1132.668007][T18560] bridge0: entered promiscuous mode [ 1132.681650][T18560] vlan4: entered promiscuous mode [ 1132.717398][ T5934] usb usb5-port1: attempt power cycle [ 1133.063344][ T9851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.100613][ T5934] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1133.131140][ T5934] usb 5-1: device descriptor read/8, error -71 [ 1133.267565][T18574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3094'. [ 1133.441885][ T5934] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1133.483191][ T5934] usb 5-1: device descriptor read/8, error -71 [ 1133.661252][ T5934] usb usb5-port1: unable to enumerate USB device [ 1133.979833][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.512852][T18610] random: crng reseeded on system resumption [ 1136.022474][T15164] net_ratelimit: 2 callbacks suppressed [ 1136.022492][T15164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.036843][T13457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.046129][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.061482][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.070752][T13457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.079430][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.148821][ T9851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.597618][T17231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1137.607998][T17231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1137.620937][T17231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1137.632982][T17231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1137.642215][T17231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1137.717902][T18630] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3113'. [ 1138.265643][ T9851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.405160][T18631] chnl_net:caif_netlink_parms(): no params data found [ 1139.037835][T18631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.045132][T18631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.072867][T17228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.210718][T18631] bridge_slave_0: entered allmulticast mode [ 1139.263594][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.333849][T18631] bridge_slave_0: entered promiscuous mode [ 1139.343510][T18631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.360981][T18631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.368312][T18631] bridge_slave_1: entered allmulticast mode [ 1139.401004][T18631] bridge_slave_1: entered promiscuous mode [ 1139.581414][T18631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1139.624274][T18631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.700856][T17231] Bluetooth: hci4: command tx timeout [ 1140.027364][T18631] team0: Port device team_slave_0 added [ 1140.074072][T18631] team0: Port device team_slave_1 added [ 1140.233166][T18631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.244967][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1140.244986][ T30] audit: type=1326 audit(1758416592.177:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1140.277747][T18631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.369634][ T30] audit: type=1326 audit(1758416592.177:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1140.393371][T18631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.471658][T18631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.479191][T18631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.640627][ T30] audit: type=1326 audit(1758416592.177:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1140.684062][ T30] audit: type=1326 audit(1758416592.177:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1140.717478][T18686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3127'. [ 1140.728034][ T30] audit: type=1326 audit(1758416592.187:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1140.773358][ T30] audit: type=1326 audit(1758416592.187:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1140.799453][ T30] audit: type=1326 audit(1758416592.187:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1140.837880][T18631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1140.857601][ T30] audit: type=1326 audit(1758416592.187:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1140.910100][ T30] audit: type=1326 audit(1758416592.187:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1140.951699][ T30] audit: type=1326 audit(1758416592.187:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18664 comm="syz.4.3125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ffc0000 [ 1141.229365][T15160] net_ratelimit: 2 callbacks suppressed [ 1141.229388][T15160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.256451][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.268429][T13457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.338507][T18631] hsr_slave_0: entered promiscuous mode [ 1141.357627][T18631] hsr_slave_1: entered promiscuous mode [ 1141.397011][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.410901][T18631] debugfs: 'hsr0' already exists in 'hsr' [ 1141.436830][T18631] Cannot create hsr debugfs directory [ 1141.780615][T17231] Bluetooth: hci4: command tx timeout [ 1141.781099][T15164] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.796593][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.805423][ T9851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.415333][T18631] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.443150][T18631] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.460760][T17228] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1142.768858][T18631] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.807889][T17228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1142.810014][T18631] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.833038][ T5934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.860914][T17228] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping [ 1142.884755][T17228] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1142.927060][T17228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1142.979317][T17228] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1143.052967][T18631] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.069608][T17228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.097390][T18631] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.109745][T17228] usb 5-1: Product: syz [ 1143.125422][T18707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.134275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.189619][T17228] usb 5-1: Manufacturer: syz [ 1143.278251][T17228] usb 5-1: SerialNumber: syz [ 1143.382179][T18631] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1143.400454][T18631] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.788306][T17228] usb 5-1: 0:2 : does not exist [ 1143.920467][T17231] Bluetooth: hci4: command tx timeout [ 1143.988358][T17228] usb 5-1: USB disconnect, device number 118 [ 1144.018731][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.282199][T18715] ipip0: entered promiscuous mode [ 1144.317315][T18715] ipip0: entered allmulticast mode [ 1144.549430][T18631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1144.627265][T18631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1144.683158][T18631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1144.707400][T18631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1145.350295][T18631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.450102][T18631] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.577762][T15160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.584969][T15160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.668948][T15160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.676307][T15160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.782742][T18740] FAULT_INJECTION: forcing a failure. [ 1145.782742][T18740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.840544][T18740] CPU: 0 UID: 0 PID: 18740 Comm: syz.6.3142 Not tainted syzkaller #0 PREEMPT(full) [ 1145.840574][T18740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1145.840586][T18740] Call Trace: [ 1145.840595][T18740] [ 1145.840604][T18740] dump_stack_lvl+0x189/0x250 [ 1145.840632][T18740] ? __pfx____ratelimit+0x10/0x10 [ 1145.840653][T18740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1145.840677][T18740] ? __pfx__printk+0x10/0x10 [ 1145.840704][T18740] ? __might_fault+0xb0/0x130 [ 1145.840742][T18740] should_fail_ex+0x414/0x560 [ 1145.840776][T18740] _copy_from_iter+0x1de/0x1790 [ 1145.840805][T18740] ? rcu_is_watching+0x15/0xb0 [ 1145.840826][T18740] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1145.840854][T18740] ? __pfx__copy_from_iter+0x10/0x10 [ 1145.840878][T18740] ? __build_skb_around+0x257/0x3e0 [ 1145.840906][T18740] ? skb_put+0x11b/0x210 [ 1145.840932][T18740] pfkey_sendmsg+0x230/0x1090 [ 1145.840990][T18740] ? __pfx___might_resched+0x10/0x10 [ 1145.841008][T18740] ? __lock_acquire+0xab9/0xd20 [ 1145.841044][T18740] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1145.841075][T18740] ? aa_sk_perm+0x81e/0x950 [ 1145.841113][T18740] ? __pfx_aa_sk_perm+0x10/0x10 [ 1145.841141][T18740] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1145.841171][T18740] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1145.841194][T18740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1145.841217][T18740] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1145.841241][T18740] __sock_sendmsg+0x21c/0x270 [ 1145.841276][T18740] ____sys_sendmsg+0x505/0x830 [ 1145.841309][T18740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1145.841346][T18740] ? import_iovec+0x74/0xa0 [ 1145.841377][T18740] ___sys_sendmsg+0x21f/0x2a0 [ 1145.841407][T18740] ? __pfx____sys_sendmsg+0x10/0x10 [ 1145.841473][T18740] ? __fget_files+0x2a/0x420 [ 1145.841491][T18740] ? __fget_files+0x3a0/0x420 [ 1145.841521][T18740] __x64_sys_sendmsg+0x19b/0x260 [ 1145.841550][T18740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1145.841587][T18740] ? __pfx_ksys_write+0x10/0x10 [ 1145.841613][T18740] ? rcu_is_watching+0x15/0xb0 [ 1145.841639][T18740] ? do_syscall_64+0xbe/0x3b0 [ 1145.841667][T18740] do_syscall_64+0xfa/0x3b0 [ 1145.841688][T18740] ? lockdep_hardirqs_on+0x9c/0x150 [ 1145.841710][T18740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.841732][T18740] ? clear_bhb_loop+0x60/0xb0 [ 1145.841757][T18740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.841778][T18740] RIP: 0033:0x7fc8fb78ec29 [ 1145.841797][T18740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.841816][T18740] RSP: 002b:00007fc8fc6bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1145.841839][T18740] RAX: ffffffffffffffda RBX: 00007fc8fb9d5fa0 RCX: 00007fc8fb78ec29 [ 1145.841855][T18740] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 1145.841868][T18740] RBP: 00007fc8fc6bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.841881][T18740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1145.841893][T18740] R13: 00007fc8fb9d6038 R14: 00007fc8fb9d5fa0 R15: 00007fc8fbaffa28 [ 1145.841925][T18740] [ 1146.151527][ C0] vkms_vblank_simulate: vblank timer overrun [ 1146.192648][T18631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.221779][T17231] Bluetooth: hci4: command tx timeout [ 1146.235363][T18631] veth0_vlan: entered promiscuous mode [ 1146.248120][T18631] veth1_vlan: entered promiscuous mode [ 1146.280291][T18631] veth0_macvtap: entered promiscuous mode [ 1146.291170][T18631] veth1_macvtap: entered promiscuous mode [ 1146.322875][T18631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.330601][T13529] net_ratelimit: 84 callbacks suppressed [ 1146.330618][T13529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.361423][T18631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.482050][ T3543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.596213][T18745] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.3143'. [ 1146.603219][ T3543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.606330][T18745] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1146.675100][ T3543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.720912][T18745] openvswitch: netlink: Key 0 has unexpected len 5 expected 0 [ 1146.781813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.793153][T18747] netlink: 'syz.6.3144': attribute type 4 has an invalid length. [ 1146.812996][ T3543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.853313][T18749] netlink: 'syz.6.3144': attribute type 4 has an invalid length. [ 1146.901185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.910798][ T1153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.928901][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.951068][T18229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.150869][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.158892][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.291292][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.316583][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.760094][T18747] block nbd0: Attempted send on invalid socket [ 1147.766419][T18747] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1148.801788][T18776] FAULT_INJECTION: forcing a failure. [ 1148.801788][T18776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.825885][T18776] CPU: 0 UID: 0 PID: 18776 Comm: syz.2.3153 Not tainted syzkaller #0 PREEMPT(full) [ 1148.825916][T18776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1148.825929][T18776] Call Trace: [ 1148.825939][T18776] [ 1148.825949][T18776] dump_stack_lvl+0x189/0x250 [ 1148.825979][T18776] ? __pfx____ratelimit+0x10/0x10 [ 1148.826001][T18776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1148.826026][T18776] ? __pfx__printk+0x10/0x10 [ 1148.826068][T18776] should_fail_ex+0x414/0x560 [ 1148.826106][T18776] _copy_to_user+0x31/0xb0 [ 1148.826137][T18776] simple_read_from_buffer+0xe1/0x170 [ 1148.826172][T18776] proc_fail_nth_read+0x1b3/0x220 [ 1148.826201][T18776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1148.826249][T18776] ? rw_verify_area+0x2a6/0x4d0 [ 1148.826276][T18776] ? __lock_acquire+0xab9/0xd20 [ 1148.826305][T18776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1148.826330][T18776] vfs_read+0x200/0xa30 [ 1148.826356][T18776] ? fdget_pos+0x247/0x320 [ 1148.826380][T18776] ? __pfx___mutex_lock+0x10/0x10 [ 1148.826404][T18776] ? __pfx_vfs_read+0x10/0x10 [ 1148.826433][T18776] ? __fget_files+0x2a/0x420 [ 1148.826455][T18776] ? __fget_files+0x3a0/0x420 [ 1148.826472][T18776] ? __fget_files+0x2a/0x420 [ 1148.826498][T18776] ksys_read+0x145/0x250 [ 1148.826528][T18776] ? __pfx_ksys_read+0x10/0x10 [ 1148.826552][T18776] ? rcu_is_watching+0x15/0xb0 [ 1148.826580][T18776] ? do_syscall_64+0xbe/0x3b0 [ 1148.826608][T18776] do_syscall_64+0xfa/0x3b0 [ 1148.826630][T18776] ? lockdep_hardirqs_on+0x9c/0x150 [ 1148.826651][T18776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.826672][T18776] ? clear_bhb_loop+0x60/0xb0 [ 1148.826698][T18776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.826729][T18776] RIP: 0033:0x7f09c398d63c [ 1148.826748][T18776] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1148.826766][T18776] RSP: 002b:00007f09c47aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1148.826788][T18776] RAX: ffffffffffffffda RBX: 00007f09c3bd5fa0 RCX: 00007f09c398d63c [ 1148.826804][T18776] RDX: 000000000000000f RSI: 00007f09c47aa0a0 RDI: 0000000000000004 [ 1148.826817][T18776] RBP: 00007f09c47aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.826830][T18776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.826843][T18776] R13: 00007f09c3bd6038 R14: 00007f09c3bd5fa0 R15: 00007f09c3cffa28 [ 1148.826877][T18776] [ 1149.220843][ T5934] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1149.404332][ T5934] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1149.441215][ T5934] usb 1-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 0 [ 1149.507668][ T5934] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1149.536358][ T5934] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1149.563287][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.574448][ T5934] usb 1-1: Product: syz [ 1149.578899][ T5934] usb 1-1: Manufacturer: syz [ 1149.585891][ T5934] usb 1-1: SerialNumber: syz [ 1149.791326][ T5934] usb 1-1: config 0 descriptor?? [ 1149.820482][ T5934] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 1149.830822][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 1149.855654][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 1149.896502][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 1149.924939][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 1149.967960][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 1149.994509][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 1150.046737][ T5934] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1150.077080][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 1150.100820][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 1150.146186][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 1150.229699][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 1150.243508][ T5934] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 1150.278244][ T5934] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1150.308688][ T5934] usb 1-1: USB disconnect, device number 119 [ 1150.319206][ T5934] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1150.371446][ T5934] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1150.403784][ T5934] keyspan 1-1:0.0: device disconnected [ 1151.396987][ T5943] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1151.560595][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 1151.576229][ T5943] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.586734][ T5943] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1151.612433][ T5943] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1151.682560][ T5943] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1151.692794][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.751184][ T5943] usb 3-1: Product: syz [ 1151.755573][ T5943] usb 3-1: Manufacturer: syz [ 1151.760208][ T5943] usb 3-1: SerialNumber: syz [ 1152.037426][T18827] binder: BINDER_SET_CONTEXT_MGR already set [ 1152.053715][T18827] binder: 18825:18827 ioctl 4018620d 200000000040 returned -16 [ 1152.310561][T13457] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1152.533317][T13457] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1152.545415][T13457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1152.586084][T13457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1152.630488][T13457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1152.671317][T13457] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1152.680569][T13457] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.701904][T13457] usb 1-1: Product: syz [ 1152.717823][T13457] usb 1-1: Manufacturer: syz [ 1152.738800][T13457] usb 1-1: SerialNumber: syz [ 1152.770772][T13457] usb 1-1: config 0 descriptor?? [ 1152.929542][T13457] iguanair 1-1:0.0: failed to get version [ 1153.041689][T13457] iguanair 1-1:0.0: probe with driver iguanair failed with error -90 [ 1153.121668][T13457] usb 1-1: USB disconnect, device number 120 [ 1154.156636][ T5943] usb 3-1: 0:2 : does not exist [ 1154.218649][ T5943] usb 3-1: USB disconnect, device number 12 [ 1154.293148][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.440657][ T5934] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1154.604840][ T5934] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1154.614914][ T5934] usb 1-1: not running at top speed; connect to a high speed hub [ 1154.686136][ T5934] usb 1-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 1154.720590][ T5934] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1154.749347][ T5943] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1154.777205][ T5934] usb 1-1: string descriptor 0 read error: -22 [ 1154.786483][ T5934] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1154.818660][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.011571][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 1155.036099][ T5943] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1155.048391][ T5934] usb 1-1: 0:2 : does not exist [ 1155.068353][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3186'. [ 1155.096031][ T5943] usb 5-1: config 0 has no interface number 0 [ 1155.124966][ T5943] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1155.162791][ T5943] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1155.180465][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.198417][ T5943] usb 5-1: Product: syz [ 1155.208609][ T5943] usb 5-1: Manufacturer: syz [ 1155.213746][ T5943] usb 5-1: SerialNumber: syz [ 1155.238276][ T5943] usb 5-1: config 0 descriptor?? [ 1155.788188][ T5934] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1155.828072][ T5934] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1155.896451][ T5934] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1155.970320][ T5934] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1156.045624][ T5934] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1156.086044][ T5934] usb 1-1: USB disconnect, device number 121 [ 1157.382171][ T5943] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1157.630002][ T5943] usb 5-1: USB disconnect, device number 119 [ 1158.009469][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1158.416387][T18904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3197'. [ 1158.450640][ T5943] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1158.693333][ T5943] usb 5-1: Using ep0 maxpacket: 16 [ 1158.741848][ T5943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.752541][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1158.780534][ T5943] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1158.833610][ T5943] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1158.843137][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.870209][ T5943] usb 5-1: Product: syz [ 1158.877627][ T5943] usb 5-1: Manufacturer: syz [ 1158.888848][ T5943] usb 5-1: SerialNumber: syz [ 1160.005269][T18935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.026549][T18935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.110591][ T5934] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1160.250562][ T5934] usb 1-1: device descriptor read/64, error -71 [ 1160.510702][ T5934] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1160.660652][ T5934] usb 1-1: device descriptor read/64, error -71 [ 1160.807402][ T5934] usb usb1-port1: attempt power cycle [ 1161.170660][ T5934] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1161.250853][ T5934] usb 1-1: device descriptor read/8, error -71 [ 1161.272429][ T5943] usb 5-1: 0:2 : does not exist [ 1161.366025][ T5943] usb 5-1: USB disconnect, device number 120 [ 1161.510526][ T5934] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1161.714642][ T5934] usb 1-1: device descriptor read/8, error -71 [ 1161.746458][T18947] fuse: Unknown parameter '000000000000000000590x0000000000000004' [ 1161.843449][ T5934] usb usb1-port1: unable to enumerate USB device [ 1163.371585][T18972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3218'. [ 1163.938333][T18980] loop6: detected capacity change from 0 to 7 [ 1164.008202][ T5933] Dev loop6: unable to read RDB block 7 [ 1164.014478][ T5933] loop6: AHDI p4 [ 1164.018392][ T5933] loop6: partition table partially beyond EOD, truncated [ 1164.085567][T18980] Dev loop6: unable to read RDB block 7 [ 1164.114366][T18980] loop6: AHDI p4 [ 1164.158762][T18980] loop6: partition table partially beyond EOD, truncated [ 1164.181582][T18229] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1164.394435][T18984] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3222'. [ 1164.457099][T18229] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1164.520797][T18229] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1164.548345][T18229] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1164.571722][T18229] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1164.602017][T18229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.627246][T18229] usb 5-1: Product: â [ 1164.642917][T18229] usb 5-1: Manufacturer: 㴼쾻펦⅒똃劰î»éš® [ 1164.669938][T18229] usb 5-1: SerialNumber: à¹€êµ„è‹æ§…ç‹âƒê·—㵖ղ䟩讆공ਢ냓罷欓夾â‹ä¯ºîº‚ᣚá‚äŸè®¡î¬µèªŽé©¿ç¿…뱼⎙픧î’᥋㚀ͣ崺ꋬ廠벽㊴祧ᖉ隼牋팢⟛헟⿢饛蜉跶葑暦㫢ᖒⲵ丟䑠丱鱆䌜螙ꀡ藮䃋ä¢Üžâ¹¦å“ꤦᅟᴫà±è‡¹å¯²ãª·ï†«í‰ëŠ ç™‡è‹›ì’€í‡‘æŽšè‘¦î”–å„ [ 1164.721377][ T5961] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1164.835840][T18978] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1164.843792][T18978] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1164.940754][ T5961] usb 3-1: Using ep0 maxpacket: 16 [ 1164.953011][ T5961] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 1164.976851][ T5961] usb 3-1: config 0 has no interface number 0 [ 1165.040062][ T5961] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1165.076152][ T5961] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 1165.166316][ T5961] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1165.226076][ T5961] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 1165.245411][ T5961] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1165.255648][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.264943][ T5961] usb 3-1: Product: syz [ 1165.269426][ T5961] usb 3-1: Manufacturer: syz [ 1165.274911][ T5961] usb 3-1: SerialNumber: syz [ 1165.311335][T18978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.321348][T18978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.331782][ T5961] usb 3-1: config 0 descriptor?? [ 1165.348526][T18984] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1165.375696][T18229] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 7 proto 1 vid 0x04B8 pid 0x0202 [ 1165.412585][T18229] usb 5-1: USB disconnect, device number 121 [ 1165.443464][T18229] usblp0: removed [ 1165.579498][T18984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.601490][T18984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.396474][T19001] FAULT_INJECTION: forcing a failure. [ 1166.396474][T19001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.411031][T19001] CPU: 0 UID: 0 PID: 19001 Comm: syz.4.3229 Not tainted syzkaller #0 PREEMPT(full) [ 1166.411060][T19001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1166.411075][T19001] Call Trace: [ 1166.411084][T19001] [ 1166.411093][T19001] dump_stack_lvl+0x189/0x250 [ 1166.411132][T19001] ? __pfx____ratelimit+0x10/0x10 [ 1166.411155][T19001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1166.411181][T19001] ? __pfx__printk+0x10/0x10 [ 1166.411224][T19001] should_fail_ex+0x414/0x560 [ 1166.411260][T19001] _copy_to_user+0x31/0xb0 [ 1166.411291][T19001] simple_read_from_buffer+0xe1/0x170 [ 1166.411328][T19001] proc_fail_nth_read+0x1b3/0x220 [ 1166.411356][T19001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1166.411384][T19001] ? rw_verify_area+0x2a6/0x4d0 [ 1166.411410][T19001] ? __lock_acquire+0xab9/0xd20 [ 1166.411439][T19001] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1166.411464][T19001] vfs_read+0x200/0xa30 [ 1166.411491][T19001] ? fdget_pos+0x247/0x320 [ 1166.411515][T19001] ? __pfx___mutex_lock+0x10/0x10 [ 1166.411539][T19001] ? __pfx_vfs_read+0x10/0x10 [ 1166.411569][T19001] ? __fget_files+0x2a/0x420 [ 1166.411592][T19001] ? __fget_files+0x3a0/0x420 [ 1166.411610][T19001] ? __fget_files+0x2a/0x420 [ 1166.411639][T19001] ksys_read+0x145/0x250 [ 1166.411666][T19001] ? __fget_files+0x3a0/0x420 [ 1166.411685][T19001] ? __pfx_ksys_read+0x10/0x10 [ 1166.411718][T19001] ? do_syscall_64+0xbe/0x3b0 [ 1166.411745][T19001] do_syscall_64+0xfa/0x3b0 [ 1166.411767][T19001] ? lockdep_hardirqs_on+0x9c/0x150 [ 1166.411789][T19001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.411810][T19001] ? clear_bhb_loop+0x60/0xb0 [ 1166.411835][T19001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.411857][T19001] RIP: 0033:0x7f298638d63c [ 1166.411877][T19001] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1166.411896][T19001] RSP: 002b:00007f29871b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1166.411918][T19001] RAX: ffffffffffffffda RBX: 00007f29865d5fa0 RCX: 00007f298638d63c [ 1166.411934][T19001] RDX: 000000000000000f RSI: 00007f29871b40a0 RDI: 0000000000000004 [ 1166.411948][T19001] RBP: 00007f29871b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.411960][T19001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.411973][T19001] R13: 00007f29865d6038 R14: 00007f29865d5fa0 R15: 00007f29866ffa28 [ 1166.412006][T19001] [ 1167.467852][ T5961] qcserial 3-1:0.49: Qualcomm USB modem converter detected [ 1167.515581][ T5961] usb 3-1: USB disconnect, device number 13 [ 1167.564550][ T5961] qcserial 3-1:0.49: device disconnected [ 1168.575635][T19035] pim6reg1: entered promiscuous mode [ 1168.607750][T19035] pim6reg1: entered allmulticast mode [ 1170.310616][ T5961] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1170.575439][ T5961] usb 1-1: Using ep0 maxpacket: 16 [ 1170.669705][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.418271][ T5961] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1171.465217][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.506934][ T5961] usb 1-1: config 0 descriptor?? [ 1173.981547][ T5961] usbhid 1-1:0.0: can't add hid device: -71 [ 1173.987560][ T5961] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1174.064366][ T5961] usb 1-1: USB disconnect, device number 126 [ 1174.154350][T19115] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1174.930896][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'. [ 1177.520516][ T5961] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1177.785732][ T5961] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1177.875904][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.090649][ T5961] usb 5-1: Product: syz [ 1178.094891][ T5961] usb 5-1: Manufacturer: syz [ 1178.099518][ T5961] usb 5-1: SerialNumber: syz [ 1178.201558][ T5961] usb 5-1: config 0 descriptor?? [ 1178.366648][T19171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.411564][T19171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.444633][T18229] usb 5-1: USB disconnect, device number 122 [ 1178.697720][ T5961] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 1179.051792][ T5961] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 1179.125241][ T5961] usb 1-1: config 0 has no interface number 0 [ 1179.144504][ T5961] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1179.179838][ T5961] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.201435][ T5961] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 1179.340188][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.383951][ T5961] usb 1-1: config 0 descriptor?? [ 1179.759109][ T5961] usbhid 1-1:0.32: can't add hid device: -71 [ 1179.775354][ T5961] usbhid 1-1:0.32: probe with driver usbhid failed with error -71 [ 1179.809637][ T5961] usb 1-1: USB disconnect, device number 127 [ 1180.577251][T19196] program syz.7.3281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1182.745880][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.752335][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.846804][T19219] loop6: detected capacity change from 0 to 7 [ 1182.855510][T19219] Dev loop6: unable to read RDB block 7 [ 1182.862838][T19219] loop6: AHDI p4 [ 1182.866510][T19219] loop6: partition table partially beyond EOD, truncated [ 1182.970875][ T5961] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1183.175429][T19211] netlink: 'syz.4.3284': attribute type 11 has an invalid length. [ 1183.184702][T19211] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3284'. [ 1183.265251][ T5933] udevd[5933]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1183.355148][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1183.382727][ T5961] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.496607][ T5961] usb 3-1: New USB device found, idVendor=05f6, idProduct=3201, bcdDevice= 0.00 [ 1183.526074][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.554385][ T5961] usb 3-1: config 0 descriptor?? [ 1183.589571][T19222] binder: BINDER_SET_CONTEXT_MGR already set [ 1183.595715][T19222] binder: 19221:19222 ioctl 4018620d 200000000200 returned -16 [ 1183.799721][ T5961] usbhid 3-1:0.0: can't add hid device: -71 [ 1183.810724][ T5961] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1183.989659][ T5961] usb 3-1: USB disconnect, device number 14 [ 1184.990752][ T9851] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1185.144040][ T9851] usb 1-1: Using ep0 maxpacket: 8 [ 1185.152058][ T9851] usb 1-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16 [ 1185.305130][ T9851] usb 1-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1185.375898][ T9851] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1185.416071][ T9851] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1185.434852][ T9851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.454929][ T9851] usb 1-1: Product: syz [ 1185.464936][ T9851] usb 1-1: Manufacturer: syz [ 1185.476543][ T9851] usb 1-1: SerialNumber: syz [ 1185.510334][T19236] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1185.555769][T19236] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1185.781186][ T9851] usb 1-1: bad CDC descriptors [ 1185.848662][ T9851] usb 1-1: USB disconnect, device number 2 [ 1186.915445][T19262] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3303'. [ 1188.026722][T19274] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3307'. [ 1189.985897][T19309] ip6gretap0: entered promiscuous mode [ 1190.017418][T19309] vlan3: entered promiscuous mode [ 1190.544705][T19316] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3319'. [ 1190.661665][T19316] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3319'. [ 1192.651663][T19341] FAULT_INJECTION: forcing a failure. [ 1192.651663][T19341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1192.716417][T19341] CPU: 1 UID: 0 PID: 19341 Comm: syz.7.3325 Not tainted syzkaller #0 PREEMPT(full) [ 1192.716439][T19341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1192.716450][T19341] Call Trace: [ 1192.716457][T19341] [ 1192.716465][T19341] dump_stack_lvl+0x189/0x250 [ 1192.716488][T19341] ? __pfx____ratelimit+0x10/0x10 [ 1192.716504][T19341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1192.716523][T19341] ? __pfx__printk+0x10/0x10 [ 1192.716553][T19341] should_fail_ex+0x414/0x560 [ 1192.716581][T19341] _copy_to_user+0x31/0xb0 [ 1192.716604][T19341] simple_read_from_buffer+0xe1/0x170 [ 1192.716630][T19341] proc_fail_nth_read+0x1b3/0x220 [ 1192.716650][T19341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1192.716670][T19341] ? rw_verify_area+0x2a6/0x4d0 [ 1192.716695][T19341] ? __lock_acquire+0xab9/0xd20 [ 1192.716716][T19341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1192.716733][T19341] vfs_read+0x200/0xa30 [ 1192.716752][T19341] ? fdget_pos+0x247/0x320 [ 1192.716769][T19341] ? __pfx___mutex_lock+0x10/0x10 [ 1192.716786][T19341] ? __pfx_vfs_read+0x10/0x10 [ 1192.716806][T19341] ? __fget_files+0x2a/0x420 [ 1192.716823][T19341] ? __fget_files+0x3a0/0x420 [ 1192.716835][T19341] ? __fget_files+0x2a/0x420 [ 1192.716854][T19341] ksys_read+0x145/0x250 [ 1192.716876][T19341] ? __pfx_ksys_read+0x10/0x10 [ 1192.716893][T19341] ? fput+0xa0/0xd0 [ 1192.716912][T19341] ? do_syscall_64+0xbe/0x3b0 [ 1192.716932][T19341] do_syscall_64+0xfa/0x3b0 [ 1192.716947][T19341] ? lockdep_hardirqs_on+0x9c/0x150 [ 1192.716963][T19341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.716977][T19341] ? clear_bhb_loop+0x60/0xb0 [ 1192.716996][T19341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.717011][T19341] RIP: 0033:0x7f674c38d63c [ 1192.717025][T19341] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1192.717038][T19341] RSP: 002b:00007f674d21f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1192.717054][T19341] RAX: ffffffffffffffda RBX: 00007f674c5d5fa0 RCX: 00007f674c38d63c [ 1192.717066][T19341] RDX: 000000000000000f RSI: 00007f674d21f0a0 RDI: 0000000000000005 [ 1192.717076][T19341] RBP: 00007f674d21f090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.717085][T19341] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1192.717095][T19341] R13: 00007f674c5d6038 R14: 00007f674c5d5fa0 R15: 00007f674c6ffa28 [ 1192.717118][T19341] [ 1193.660498][ T5934] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1193.862361][ T5934] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1193.876797][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.928085][ T5934] usb 3-1: Product: syz [ 1193.945518][ T5934] usb 3-1: Manufacturer: syz [ 1193.950185][ T5934] usb 3-1: SerialNumber: syz [ 1194.615895][T19347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.626443][T19347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.801123][T13457] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1194.850610][T19347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.871138][T19347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.106685][T13457] usb 5-1: Using ep0 maxpacket: 16 [ 1195.192928][ T5934] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1195.231770][ T5934] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1195.246725][ T5934] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1195.265063][ T5934] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1195.300016][ T5934] usb 3-1: USB disconnect, device number 16 [ 1195.344021][T13457] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.364870][T13457] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1195.385791][T13457] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1195.447716][T13457] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1195.562009][T13457] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.570746][T13457] usb 5-1: Product: syz [ 1195.575010][T13457] usb 5-1: Manufacturer: syz [ 1195.579620][T13457] usb 5-1: SerialNumber: syz [ 1198.263163][T13457] usb 5-1: 0:2 : does not exist [ 1198.359445][T13457] usb 5-1: USB disconnect, device number 123 [ 1199.266631][T19410] bridge0: entered promiscuous mode [ 1199.280979][T19410] vlan2: entered promiscuous mode [ 1199.472512][T19413] program syz.7.3348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1200.481753][ T5934] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 1200.627638][ T5934] usb 3-1: device descriptor read/64, error -71 [ 1200.637607][T19418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1200.916602][T19429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3352'. [ 1200.955821][ T5934] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1201.140922][ T5934] usb 3-1: device descriptor read/64, error -71 [ 1201.196389][ T9851] IPVS: starting estimator thread 0... [ 1201.262505][ T5934] usb usb3-port1: attempt power cycle [ 1201.320526][T19435] IPVS: using max 37 ests per chain, 88800 per kthread [ 1201.562423][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3357'. [ 1201.778636][ T5934] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1201.855590][ T5934] usb 3-1: device descriptor read/8, error -71 [ 1202.220549][ T5934] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1202.267012][ T5934] usb 3-1: device descriptor read/8, error -71 [ 1202.270852][T13457] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1202.390831][ T5934] usb usb3-port1: unable to enumerate USB device [ 1202.434040][T13457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.480781][T13457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.501935][T13457] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1202.519541][T13457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.556621][T13457] usb 5-1: config 0 descriptor?? [ 1203.154817][T19444] syz_tun: entered allmulticast mode [ 1203.163704][T19443] syz_tun: left allmulticast mode [ 1203.174597][T13457] usbhid 5-1:0.0: can't add hid device: -71 [ 1203.182590][T13457] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1203.205420][T13457] usb 5-1: USB disconnect, device number 124 [ 1203.783119][T18229] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1204.064057][T18229] usb 3-1: Using ep0 maxpacket: 16 [ 1204.083315][T18229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.098072][T18229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1204.119179][T18229] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1204.176059][T18229] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1204.188607][T18229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.198239][T18229] usb 3-1: Product: syz [ 1204.205494][T18229] usb 3-1: Manufacturer: syz [ 1204.211748][T18229] usb 3-1: SerialNumber: syz [ 1205.054158][T19473] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3366'. [ 1207.056170][T18229] usb 3-1: 0:2 : does not exist [ 1207.100688][T18229] usb 3-1: USB disconnect, device number 21 [ 1207.176593][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1208.944852][T13457] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1209.144522][T13457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1209.208772][T13457] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.270567][T13457] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1209.279675][T13457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.294546][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3376'. [ 1209.339363][T13457] usb 3-1: config 0 descriptor?? [ 1209.398956][T19509] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3377'. [ 1209.444807][T19518] syzkaller0: entered promiscuous mode [ 1209.478994][T19518] syzkaller0: entered allmulticast mode [ 1209.880575][T19529] program syz.0.3380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1210.623720][T19503] syz_tun: entered allmulticast mode [ 1211.022531][T19539] netdevsim netdevsim7: Direct firmware load for . [ 1211.022531][T19539] failed with error -2 [ 1211.041768][T19539] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1211.041768][T19539] [ 1211.555677][T19544] loop6: detected capacity change from 0 to 7 [ 1211.581578][ T5933] Dev loop6: unable to read RDB block 7 [ 1211.587542][ T5933] loop6: unable to read partition table [ 1211.594086][ T5933] loop6: partition table beyond EOD, truncated [ 1211.608153][T19544] Dev loop6: unable to read RDB block 7 [ 1211.636674][T19544] loop6: unable to read partition table [ 1211.693319][T19544] loop6: partition table beyond EOD, truncated [ 1211.744600][T19532] syz_tun: left allmulticast mode [ 1211.744678][T19544] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1211.788688][T13457] usbhid 3-1:0.0: can't add hid device: -71 [ 1211.795054][T13457] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1211.882134][T13457] usb 3-1: USB disconnect, device number 22 [ 1212.937796][T19566] input: syz1 as /devices/virtual/input/input48 [ 1213.322438][T19577] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3392'. [ 1215.172888][T19600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.297708][T19600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.478302][T19607] sctp: [Deprecated]: syz.4.3401 (pid 19607) Use of int in maxseg socket option. [ 1215.478302][T19607] Use struct sctp_assoc_value instead [ 1218.463321][T19626] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3406'. [ 1219.144832][T19637] tty tty34: ldisc open failed (-12), clearing slot 33 [ 1219.415552][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 1219.415573][ T30] audit: type=1326 audit(1758416671.347:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19648 comm="syz.2.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c398ec29 code=0x7ffc0000 [ 1219.472123][ T30] audit: type=1326 audit(1758416671.387:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19648 comm="syz.2.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c398ec29 code=0x7ffc0000 [ 1219.531705][ T30] audit: type=1326 audit(1758416671.387:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19648 comm="syz.2.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09c398ec29 code=0x7ffc0000 [ 1219.629373][ T30] audit: type=1326 audit(1758416671.387:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19648 comm="syz.2.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c398ec29 code=0x7ffc0000 [ 1219.651912][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.729285][ T30] audit: type=1326 audit(1758416671.387:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19648 comm="syz.2.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f09c398ec29 code=0x7ffc0000 [ 1219.751734][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.761326][T13457] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1219.787842][ T30] audit: type=1326 audit(1758416671.387:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19648 comm="syz.2.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c398ec29 code=0x7ffc0000 [ 1219.813496][ T30] audit: type=1326 audit(1758416671.387:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19648 comm="syz.2.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f09c398ec29 code=0x7ffc0000 [ 1219.835966][ C0] vkms_vblank_simulate: vblank timer overrun [ 1219.878073][ T30] audit: type=1326 audit(1758416671.387:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19648 comm="syz.2.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c398ec29 code=0x7ffc0000 [ 1219.901209][ T30] audit: type=1326 audit(1758416671.387:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19648 comm="syz.2.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f09c398ec29 code=0x7ffc0000 [ 1219.924861][ T30] audit: type=1326 audit(1758416671.387:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19648 comm="syz.2.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09c398ec29 code=0x7ffc0000 [ 1219.952210][T13457] usb 3-1: Using ep0 maxpacket: 32 [ 1219.964244][T13457] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1220.032279][T13457] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.082926][T13457] usb 3-1: config 0 descriptor?? [ 1220.124952][T13457] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1220.192524][T18229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1220.260704][ T9851] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1220.350539][T18229] usb 1-1: Using ep0 maxpacket: 16 [ 1220.364963][T18229] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1220.389949][T18229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1220.407162][T18229] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1220.410770][ T9851] usb 5-1: Using ep0 maxpacket: 16 [ 1220.417984][T18229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.439852][T18229] usb 1-1: Product: syz [ 1220.449890][ T9851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.449957][T18229] usb 1-1: Manufacturer: syz [ 1220.475886][ T9851] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1220.499206][ T9851] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1220.499299][T18229] usb 1-1: SerialNumber: syz [ 1220.536538][ T9851] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1220.557759][ T9851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.582553][ T9851] usb 5-1: Product: syz [ 1220.596185][ T9851] usb 5-1: Manufacturer: syz [ 1220.618982][ T9851] usb 5-1: SerialNumber: syz [ 1220.840686][T19658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.865573][T19658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.013238][T19672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.033603][T19672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.595065][T19650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.660339][T19650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.733927][T13457] gspca_sunplus: reg_w_riv err -71 [ 1221.766829][T13457] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1222.014835][T19688] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3425'. [ 1222.098838][T13457] usb 3-1: USB disconnect, device number 23 [ 1222.183511][T19690] IPv6: Can't replace route, no match found [ 1222.245585][T19688] syz.7.3425 (19688): drop_caches: 2 [ 1222.802845][T19695] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3426'. [ 1222.895603][T18229] usb 1-1: 0:2 : does not exist [ 1222.962941][T18229] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1223.051917][T18229] usb 1-1: USB disconnect, device number 3 [ 1223.234382][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1223.739819][ T9851] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1223.760607][ T9851] cdc_ncm 5-1:1.0: bind() failure [ 1223.779717][ T9851] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1223.808313][ T9851] cdc_ncm 5-1:1.1: bind() failure [ 1223.830853][ T5934] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1223.882371][ T9851] usb 5-1: USB disconnect, device number 125 [ 1224.016011][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 1224.046747][ T5934] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 1224.065701][ T5934] usb 1-1: config 0 has no interface number 0 [ 1224.085107][ T5934] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1224.173691][ T5934] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1224.207696][ T5934] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1224.271498][ T5934] usb 1-1: Product: syz [ 1224.618527][ T5934] usb 1-1: Manufacturer: syz [ 1224.635127][ T5934] usb 1-1: SerialNumber: syz [ 1224.689168][ T5934] usb 1-1: config 0 descriptor?? [ 1224.716148][ T5934] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 1224.749660][ T5934] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 1224.786477][ T5934] keyspan 1-1:0.107: unsupported endpoint type 0 [ 1224.845309][ T5934] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 1224.872266][ T5934] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1224.881363][T19716] FAULT_INJECTION: forcing a failure. [ 1224.881363][T19716] name failslab, interval 1, probability 0, space 0, times 0 [ 1224.918372][ T5934] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 1224.934709][T19716] CPU: 0 UID: 0 PID: 19716 Comm: syz.7.3433 Not tainted syzkaller #0 PREEMPT(full) [ 1224.934745][T19716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1224.934759][T19716] Call Trace: [ 1224.934767][T19716] [ 1224.934776][T19716] dump_stack_lvl+0x189/0x250 [ 1224.934809][T19716] ? __pfx____ratelimit+0x10/0x10 [ 1224.934832][T19716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1224.934851][T19716] ? __pfx__printk+0x10/0x10 [ 1224.934876][T19716] ? __pfx___might_resched+0x10/0x10 [ 1224.934890][T19716] ? fs_reclaim_acquire+0x7d/0x100 [ 1224.934907][T19716] should_fail_ex+0x414/0x560 [ 1224.934934][T19716] should_failslab+0xa8/0x100 [ 1224.934958][T19716] __kmalloc_cache_noprof+0x70/0x3d0 [ 1224.934978][T19716] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1224.934997][T19716] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1224.935020][T19716] sctp_association_new+0x15d3/0x25f0 [ 1224.935051][T19716] sctp_connect_new_asoc+0x2c5/0x690 [ 1224.935072][T19716] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1224.935091][T19716] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1224.935110][T19716] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1224.935126][T19716] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1224.935145][T19716] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1224.935163][T19716] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1224.935186][T19716] sctp_sendmsg+0x155c/0x2810 [ 1224.935212][T19716] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1224.935232][T19716] ? aa_sk_perm+0x81e/0x950 [ 1224.935259][T19716] ? __pfx_aa_sk_perm+0x10/0x10 [ 1224.935284][T19716] ? sock_rps_record_flow+0x19/0x410 [ 1224.935309][T19716] ? inet_sendmsg+0x2f4/0x370 [ 1224.935330][T19716] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1224.935348][T19716] __sock_sendmsg+0x19c/0x270 [ 1224.935374][T19716] ____sys_sendmsg+0x505/0x830 [ 1224.935397][T19716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1224.935423][T19716] ? import_iovec+0x74/0xa0 [ 1224.935446][T19716] ___sys_sendmsg+0x21f/0x2a0 [ 1224.935466][T19716] ? __pfx____sys_sendmsg+0x10/0x10 [ 1224.935512][T19716] ? __fget_files+0x2a/0x420 [ 1224.935525][T19716] ? __fget_files+0x3a0/0x420 [ 1224.935546][T19716] __x64_sys_sendmsg+0x19b/0x260 [ 1224.935575][T19716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1224.935618][T19716] ? __pfx_ksys_write+0x10/0x10 [ 1224.935637][T19716] ? rcu_is_watching+0x15/0xb0 [ 1224.935656][T19716] ? do_syscall_64+0xbe/0x3b0 [ 1224.935675][T19716] do_syscall_64+0xfa/0x3b0 [ 1224.935691][T19716] ? lockdep_hardirqs_on+0x9c/0x150 [ 1224.935706][T19716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.935720][T19716] ? clear_bhb_loop+0x60/0xb0 [ 1224.935738][T19716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.935753][T19716] RIP: 0033:0x7f674c38ec29 [ 1224.935777][T19716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1224.935795][T19716] RSP: 002b:00007f674d21f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1224.935818][T19716] RAX: ffffffffffffffda RBX: 00007f674c5d5fa0 RCX: 00007f674c38ec29 [ 1224.935842][T19716] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1224.935856][T19716] RBP: 00007f674d21f090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.935869][T19716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.935882][T19716] R13: 00007f674c5d6038 R14: 00007f674c5d5fa0 R15: 00007f674c6ffa28 [ 1224.935906][T19716] [ 1225.300097][ T5934] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1225.317780][ T5934] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 1225.349658][ T5934] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1225.615243][ T5934] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 1225.657020][ T5934] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1225.670853][T19724] binder: 19723:19724 ioctl 4018620d 0 returned -22 [ 1226.039629][T19730] bridge0: entered promiscuous mode [ 1226.045281][T19730] vlan2: entered promiscuous mode [ 1226.475018][ T5934] usb 1-1: USB disconnect, device number 4 [ 1226.500634][ T5934] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1226.535049][T13457] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1226.537596][T19736] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3440'. [ 1226.574890][ T5934] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1226.628613][ T5934] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1226.685617][ T5934] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1226.711178][T13457] usb 5-1: Using ep0 maxpacket: 8 [ 1226.720192][ T5934] keyspan 1-1:0.107: device disconnected [ 1227.035306][T13457] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1227.274393][T13457] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1227.538589][T13457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1227.633026][T13457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1227.672398][T13457] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1227.924372][T13457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1227.980615][T13457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1228.056948][T13457] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1228.230976][T13457] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1228.262855][T13457] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.329279][T13457] usb 5-1: Product: syz [ 1228.349574][T13457] usb 5-1: Manufacturer: syz [ 1228.377096][T13457] usb 5-1: SerialNumber: syz [ 1228.405944][T13457] usb 5-1: config 0 descriptor?? [ 1228.443145][T19733] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1228.453992][T13457] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1228.668648][T13457] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1228.710169][T13457] usb 5-1: USB disconnect, device number 126 [ 1228.816716][ T9543] udevd[9543]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1229.394324][T19770] program syz.7.3449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1230.241805][T19780] loop6: detected capacity change from 0 to 7 [ 1230.294587][ T5933] Dev loop6: unable to read RDB block 7 [ 1230.302909][ T5933] loop6: unable to read partition table [ 1230.310173][ T5933] loop6: partition table beyond EOD, truncated [ 1230.375996][T19780] Dev loop6: unable to read RDB block 7 [ 1230.381850][ T5941] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1230.400002][T19780] loop6: unable to read partition table [ 1230.416458][T19780] loop6: partition table beyond EOD, truncated [ 1230.423260][T19780] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1230.642572][T19787] program syz.2.3454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1230.840627][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 1230.858802][ T5941] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 1230.869294][ T5941] usb 5-1: config 0 has no interface number 0 [ 1230.900580][ T5941] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1231.232348][ T5941] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1231.252173][ T5941] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1231.302846][ T5941] usb 5-1: Product: syz [ 1231.307140][ T5941] usb 5-1: Manufacturer: syz [ 1231.340879][T19794] program syz.7.3455 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1231.350266][ T5941] usb 5-1: SerialNumber: syz [ 1231.377007][ T5941] usb 5-1: config 0 descriptor?? [ 1231.454778][ T5941] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 1231.755772][ T5941] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 1231.820832][ T5941] keyspan 5-1:0.107: unsupported endpoint type 0 [ 1231.847335][ T5941] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 1231.881102][ T5941] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1231.958988][ T5941] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 1232.032784][ T5941] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1232.073787][ T5941] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 1232.121348][ T5941] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1232.162535][ T5941] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 1232.208870][ T5941] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1232.260557][ T5941] usb 5-1: USB disconnect, device number 127 [ 1232.333035][ T5941] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1232.422136][ T5941] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1232.538317][ T5941] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1232.642502][ T5941] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1232.698615][ T5941] keyspan 5-1:0.107: device disconnected [ 1233.167240][T19817] tipc: New replicast peer: 255.255.255.255 [ 1233.174690][T19817] tipc: Enabled bearer , priority 10 [ 1233.237515][ T5941] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1233.410596][ T5941] usb 5-1: Using ep0 maxpacket: 8 [ 1233.434139][ T5941] usb 5-1: config 0 has an invalid interface number: 127 but max is 0 [ 1233.455223][ T5941] usb 5-1: config 0 has no interface number 0 [ 1233.495375][ T5941] usb 5-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=50.49 [ 1233.541485][ T3096] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1233.553167][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.577605][ T5941] usb 5-1: Product: syz [ 1233.646916][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3466'. [ 1233.670675][ T5941] usb 5-1: Manufacturer: syz [ 1233.700503][ T5941] usb 5-1: SerialNumber: syz [ 1233.715934][ T3096] usb 3-1: config 0 has no interfaces? [ 1233.730346][ T5941] usb 5-1: config 0 descriptor?? [ 1233.735828][ T3096] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1233.774690][ T3096] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.828640][ T3096] usb 3-1: Product: syz [ 1233.857195][ T3096] usb 3-1: Manufacturer: syz [ 1233.905632][ T3096] usb 3-1: SerialNumber: syz [ 1233.973744][T19809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.076599][T19809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.170677][ T3096] usb 3-1: config 0 descriptor?? [ 1234.408873][T19818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.419910][T19818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.444045][T19818] loop6: detected capacity change from 0 to 524288000 [ 1234.533162][T19818] support for the xor transformation has been removed. [ 1235.202298][T13529] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1235.380736][T13529] usb 1-1: Using ep0 maxpacket: 16 [ 1235.388841][T13529] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 1235.399398][T13529] usb 1-1: config 0 has no interface number 0 [ 1235.428466][T13529] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1235.454660][T13529] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1235.479421][T13529] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1235.494525][T13529] usb 1-1: Product: syz [ 1235.499068][T13529] usb 1-1: Manufacturer: syz [ 1235.506089][T13529] usb 1-1: SerialNumber: syz [ 1235.527074][T13529] usb 1-1: config 0 descriptor?? [ 1235.541765][T13529] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 1235.550803][T13529] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 1235.558946][T13529] keyspan 1-1:0.107: unsupported endpoint type 0 [ 1235.577997][T13529] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 1235.598602][T13529] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1235.612838][T13529] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 1235.628219][T13529] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1235.639558][T13529] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 1235.650188][T13529] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1235.678282][T13529] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 1235.700289][T13529] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1235.924406][ T5941] ums-sddr55 5-1:0.127: USB Mass Storage device detected [ 1236.129935][ T5941] usb 5-1: USB disconnect, device number 2 [ 1236.295551][T19838] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3469'. [ 1236.572919][ T5941] usb 3-1: USB disconnect, device number 24 [ 1237.430484][T13457] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1237.600750][T13457] usb 5-1: Using ep0 maxpacket: 8 [ 1237.627713][T13457] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1237.658890][T13457] usb 5-1: config 2 has an invalid descriptor of length 158, skipping remainder of the config [ 1237.682368][T13457] usb 5-1: config 2 has no interface number 0 [ 1237.688554][T13457] usb 5-1: config 2 interface 31 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1237.714646][T13457] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1237.747917][T18229] usb 1-1: USB disconnect, device number 5 [ 1237.764400][T18229] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1237.775776][T19854] FAULT_INJECTION: forcing a failure. [ 1237.775776][T19854] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.806939][T13457] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1237.841661][T18229] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1237.873385][T13457] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.887023][T19854] CPU: 0 UID: 0 PID: 19854 Comm: syz.2.3474 Not tainted syzkaller #0 PREEMPT(full) [ 1237.887051][T19854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1237.887064][T19854] Call Trace: [ 1237.887073][T19854] [ 1237.887083][T19854] dump_stack_lvl+0x189/0x250 [ 1237.887113][T19854] ? __pfx____ratelimit+0x10/0x10 [ 1237.887148][T19854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1237.887173][T19854] ? __pfx__printk+0x10/0x10 [ 1237.887216][T19854] should_fail_ex+0x414/0x560 [ 1237.887252][T19854] should_failslab+0xa8/0x100 [ 1237.887276][T19854] __kmalloc_cache_noprof+0x70/0x3d0 [ 1237.887297][T19854] ? sctp_add_bind_addr+0x8c/0x370 [ 1237.887315][T19854] sctp_add_bind_addr+0x8c/0x370 [ 1237.887333][T19854] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1237.887359][T19854] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1237.887383][T19854] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1237.887409][T19854] ? sctp_v4_is_any+0x35/0x60 [ 1237.887425][T19854] ? sctp_copy_one_addr+0x93/0x360 [ 1237.887442][T19854] sctp_bind_addr_copy+0xb3/0x3c0 [ 1237.887457][T19854] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1237.887481][T19854] sctp_connect_new_asoc+0x2e0/0x690 [ 1237.887502][T19854] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1237.887521][T19854] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1237.887539][T19854] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1237.887556][T19854] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1237.887575][T19854] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1237.887593][T19854] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1237.887616][T19854] sctp_sendmsg+0x155c/0x2810 [ 1237.887642][T19854] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1237.887662][T19854] ? aa_sk_perm+0x81e/0x950 [ 1237.887697][T19854] ? __pfx_aa_sk_perm+0x10/0x10 [ 1237.887722][T19854] ? sock_rps_record_flow+0x19/0x410 [ 1237.887747][T19854] ? inet_sendmsg+0x2f4/0x370 [ 1237.887767][T19854] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1237.887786][T19854] __sock_sendmsg+0x19c/0x270 [ 1237.887812][T19854] ____sys_sendmsg+0x505/0x830 [ 1237.887835][T19854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1237.887861][T19854] ? import_iovec+0x74/0xa0 [ 1237.887884][T19854] ___sys_sendmsg+0x21f/0x2a0 [ 1237.887905][T19854] ? __pfx____sys_sendmsg+0x10/0x10 [ 1237.887954][T19854] ? __fget_files+0x2a/0x420 [ 1237.887967][T19854] ? __fget_files+0x3a0/0x420 [ 1237.887989][T19854] __x64_sys_sendmsg+0x19b/0x260 [ 1237.888010][T19854] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1237.888037][T19854] ? __pfx_ksys_write+0x10/0x10 [ 1237.888058][T19854] ? rcu_is_watching+0x15/0xb0 [ 1237.888078][T19854] ? do_syscall_64+0xbe/0x3b0 [ 1237.888098][T19854] do_syscall_64+0xfa/0x3b0 [ 1237.888114][T19854] ? lockdep_hardirqs_on+0x9c/0x150 [ 1237.888129][T19854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.888144][T19854] ? clear_bhb_loop+0x60/0xb0 [ 1237.888162][T19854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.888177][T19854] RIP: 0033:0x7f09c398ec29 [ 1237.888190][T19854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1237.888203][T19854] RSP: 002b:00007f09c47aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1237.888220][T19854] RAX: ffffffffffffffda RBX: 00007f09c3bd5fa0 RCX: 00007f09c398ec29 [ 1237.888231][T19854] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1237.888241][T19854] RBP: 00007f09c47aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.888251][T19854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.888260][T19854] R13: 00007f09c3bd6038 R14: 00007f09c3bd5fa0 R15: 00007f09c3cffa28 [ 1237.888284][T19854] [ 1238.381778][T18229] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1238.393630][T13457] usb 5-1: Product: syz [ 1238.397987][T13457] usb 5-1: Manufacturer: syz [ 1238.403523][T18229] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1238.413899][T18229] keyspan 1-1:0.107: device disconnected [ 1238.422127][T13457] usb 5-1: SerialNumber: syz [ 1238.700062][T13457] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1238.761025][T13457] usb 5-1: USB disconnect, device number 3 [ 1239.012492][T19870] program syz.0.3479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1240.214821][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 1240.214841][ T30] audit: type=1326 audit(1758416692.147:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19878 comm="syz.4.3482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f298638ec29 code=0x0 [ 1240.730903][T19885] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3483'. [ 1241.075186][ T9851] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1241.282189][ T9851] usb 1-1: Using ep0 maxpacket: 16 [ 1241.324522][ T9851] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1241.361552][ T9851] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1241.413846][ T9851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.464002][ T9851] usb 1-1: Product: syz [ 1241.479413][ T9851] usb 1-1: Manufacturer: syz [ 1241.496482][ T9851] usb 1-1: SerialNumber: syz [ 1241.570052][ T9851] usb 1-1: config 0 descriptor?? [ 1241.800106][ T9851] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1241.852695][ T9851] usb 1-1: USB disconnect, device number 6 [ 1242.035348][T19901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3487'. [ 1242.855556][T19908] binder: 19907:19908 ioctl c0306201 0 returned -14 [ 1243.200653][ T5941] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1243.403225][ T5941] usb 5-1: config 0 has no interfaces? [ 1243.435811][ T5941] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1243.501503][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.520555][ T5941] usb 5-1: Product: syz [ 1243.552703][ T5941] usb 5-1: Manufacturer: syz [ 1243.557374][ T5941] usb 5-1: SerialNumber: syz [ 1243.621848][ T5941] usb 5-1: config 0 descriptor?? [ 1243.714717][T19923] program syz.6.3494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1243.926508][T19928] netlink: 332 bytes leftover after parsing attributes in process `syz.7.3496'. [ 1243.961703][T19916] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1244.251523][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.258214][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.859077][T13529] usb 5-1: USB disconnect, device number 4 [ 1245.936023][T19955] binder: 19954:19955 ioctl c0306201 0 returned -14 [ 1247.010077][T19965] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3506'. [ 1247.417996][T19971] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1249.048182][T19989] program syz.4.3512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1249.454792][ T3470] bridge0: port 3(team0) entered disabled state [ 1249.500765][ T3470] bridge_slave_1: left allmulticast mode [ 1249.519827][ T3470] bridge_slave_1: left promiscuous mode [ 1249.552488][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.660319][ T3470] : left allmulticast mode [ 1249.664957][ T3470] : left promiscuous mode [ 1249.689352][ T3470] bridge0: port 1() entered disabled state [ 1250.160054][T20000] loop6: detected capacity change from 0 to 7 [ 1250.200241][T20000] Dev loop6: unable to read RDB block 7 [ 1250.240450][T20000] loop6: unable to read partition table [ 1250.264447][T20000] loop6: partition table beyond EOD, truncated [ 1250.271110][T20000] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1251.477488][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.499430][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.528619][ T3470] bond0 (unregistering): Released all slaves [ 1251.583202][ T3470] bond1 (unregistering): Released all slaves [ 1251.970164][T20020] FAULT_INJECTION: forcing a failure. [ 1251.970164][T20020] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.002164][T20020] CPU: 0 UID: 0 PID: 20020 Comm: syz.4.3523 Not tainted syzkaller #0 PREEMPT(full) [ 1252.002211][T20020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1252.002235][T20020] Call Trace: [ 1252.002251][T20020] [ 1252.002267][T20020] dump_stack_lvl+0x189/0x250 [ 1252.002312][T20020] ? __pfx____ratelimit+0x10/0x10 [ 1252.002349][T20020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1252.002401][T20020] ? __pfx__printk+0x10/0x10 [ 1252.002437][T20020] ? __pfx___might_resched+0x10/0x10 [ 1252.002456][T20020] ? fs_reclaim_acquire+0x7d/0x100 [ 1252.002481][T20020] should_fail_ex+0x414/0x560 [ 1252.002519][T20020] should_failslab+0xa8/0x100 [ 1252.002552][T20020] __kmalloc_noprof+0xcb/0x4f0 [ 1252.002578][T20020] ? kfree+0x4d/0x440 [ 1252.002600][T20020] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1252.002630][T20020] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1252.002655][T20020] ? tomoyo_domain+0xd9/0x130 [ 1252.002685][T20020] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1252.002716][T20020] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1252.002749][T20020] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1252.002799][T20020] ? __lock_acquire+0xab9/0xd20 [ 1252.002853][T20020] ? __fget_files+0x2a/0x420 [ 1252.002875][T20020] ? __fget_files+0x2a/0x420 [ 1252.002892][T20020] ? __fget_files+0x3a0/0x420 [ 1252.002910][T20020] ? __fget_files+0x2a/0x420 [ 1252.002933][T20020] security_file_ioctl+0xcb/0x2d0 [ 1252.002965][T20020] __se_sys_ioctl+0x47/0x170 [ 1252.002994][T20020] do_syscall_64+0xfa/0x3b0 [ 1252.003016][T20020] ? lockdep_hardirqs_on+0x9c/0x150 [ 1252.003037][T20020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.003058][T20020] ? clear_bhb_loop+0x60/0xb0 [ 1252.003084][T20020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.003104][T20020] RIP: 0033:0x7f298638ec29 [ 1252.003123][T20020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.003141][T20020] RSP: 002b:00007f29871b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.003164][T20020] RAX: ffffffffffffffda RBX: 00007f29865d5fa0 RCX: 00007f298638ec29 [ 1252.003179][T20020] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 1252.003193][T20020] RBP: 00007f29871b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.003206][T20020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.003218][T20020] R13: 00007f29865d6038 R14: 00007f29865d5fa0 R15: 00007f29866ffa28 [ 1252.003251][T20020] [ 1252.003260][T20020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1252.300706][ T3470] bond2 (unregistering): Released all slaves [ 1252.512354][ T3470] tipc: Left network mode [ 1252.645403][T20034] blktrace: Concurrent blktraces are not allowed on sg0 [ 1253.027099][T20045] program syz.2.3530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1254.026508][ T3470] hsr_slave_0: left promiscuous mode [ 1254.054021][ T3470] hsr_slave_1: left promiscuous mode [ 1254.072438][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1254.086674][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.096625][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1254.151947][ T3470] veth1_macvtap: left promiscuous mode [ 1254.577974][T20055] program syz.0.3535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1254.833680][T20059] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3537'. [ 1254.854384][ T3096] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1255.021876][ T3096] usb 1-1: device descriptor read/64, error -71 [ 1255.275897][ T3096] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1255.366506][ T3470] team_slave_1 (unregistering): left promiscuous mode [ 1255.374974][ T3470] team_slave_1 (unregistering): left allmulticast mode [ 1255.383847][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 1255.416111][ T3096] usb 1-1: device descriptor read/64, error -71 [ 1255.459729][ T3470] team_slave_0 (unregistering): left promiscuous mode [ 1255.469470][ T3470] team_slave_0 (unregistering): left allmulticast mode [ 1255.478518][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 1255.538578][ T3096] usb usb1-port1: attempt power cycle [ 1255.717925][T20070] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1255.724527][T20070] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1255.733141][T20070] vhci_hcd vhci_hcd.0: Device attached [ 1255.818524][T20070] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3542'. [ 1255.892163][ T3096] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1255.920539][ T9851] vhci_hcd: vhci_device speed not set [ 1255.954789][ T3096] usb 1-1: device descriptor read/8, error -71 [ 1255.991926][ T9851] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1256.206735][ T3096] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1256.250784][ T3096] usb 1-1: device descriptor read/8, error -71 [ 1256.313300][T20071] vhci_hcd: connection reset by peer [ 1256.360110][ T3543] vhci_hcd: stop threads [ 1256.385585][ T3543] vhci_hcd: release socket [ 1256.396675][ T3096] usb usb1-port1: unable to enumerate USB device [ 1256.430440][ T3543] vhci_hcd: disconnect device [ 1256.480020][ T30] audit: type=1326 audit(1758416708.407:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20077 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ff00000 [ 1256.517712][ T30] audit: type=1326 audit(1758416708.407:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20077 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ff00000 [ 1256.566713][ T30] audit: type=1326 audit(1758416708.407:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20077 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ff00000 [ 1256.700923][ T30] audit: type=1326 audit(1758416708.407:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20077 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ff00000 [ 1256.741453][ T30] audit: type=1326 audit(1758416708.407:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20077 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ff00000 [ 1256.764713][ T30] audit: type=1326 audit(1758416708.407:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20077 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ff00000 [ 1256.789290][ T30] audit: type=1326 audit(1758416708.407:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20077 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ff00000 [ 1256.920257][ T30] audit: type=1326 audit(1758416708.407:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20077 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ff00000 [ 1257.002261][ T30] audit: type=1326 audit(1758416708.407:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20077 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ff00000 [ 1257.111022][ T30] audit: type=1326 audit(1758416708.407:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20077 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f298638ec29 code=0x7ff00000 [ 1257.302793][T20091] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3544'. [ 1257.364024][T20093] program syz.2.3547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1257.938003][ C1] [ 1257.940389][ C1] ============================= [ 1257.945256][ C1] [ BUG: Invalid wait context ] [ 1257.950143][ C1] syzkaller #0 Not tainted [ 1257.954584][ C1] ----------------------------- [ 1257.959452][ C1] syz.7.3550/20097 is trying to lock: [ 1257.964840][ C1] ffff888067275410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1257.974372][ C1] other info that might help us debug this: [ 1257.980286][ C1] context-{2:2} [ 1257.983781][ C1] 2 locks held by syz.7.3550/20097: [ 1257.988976][ C1] #0: ffff888027c1ace0 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x217/0xce0 [ 1257.998671][ C1] #1: ffff888067275960 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1c3/0x9b0 [ 1258.008654][ C1] stack backtrace: [ 1258.012381][ C1] CPU: 1 UID: 0 PID: 20097 Comm: syz.7.3550 Not tainted syzkaller #0 PREEMPT(full) [ 1258.012407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1258.012421][ C1] Call Trace: [ 1258.012430][ C1] [ 1258.012439][ C1] dump_stack_lvl+0x189/0x250 [ 1258.012472][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1258.012495][ C1] ? __pfx__printk+0x10/0x10 [ 1258.012523][ C1] ? print_lock_name+0xde/0x100 [ 1258.012551][ C1] __lock_acquire+0xbcb/0xd20 [ 1258.012582][ C1] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1258.012601][ C1] lock_acquire+0x120/0x360 [ 1258.012626][ C1] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1258.012694][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1258.012714][ C1] ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1258.012733][ C1] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1258.012750][ C1] ? xa_load+0x1ea/0x210 [ 1258.012776][ C1] kvm_xen_set_evtchn_fast+0x1fb/0x9b0 [ 1258.012797][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1258.012822][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1258.012851][ C1] ? kvm_xen_set_evtchn_fast+0x1c3/0x9b0 [ 1258.012872][ C1] xen_timer_callback+0x109/0x220 [ 1258.012893][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 1258.012913][ C1] __hrtimer_run_queues+0x4dd/0xc60 [ 1258.012941][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1258.012961][ C1] ? read_tsc+0x9/0x20 [ 1258.012995][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1258.013028][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1258.013054][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1258.013075][ C1] [ 1258.013083][ C1] [ 1258.013091][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1258.013114][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1258.013142][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 64 87 fe 0b 48 89 de 5b e9 f3 ab 58 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 d0 a0 92 65 8b 15 88 22 [ 1258.013161][ C1] RSP: 0018:ffffc900043b7598 EFLAGS: 00000246 [ 1258.013180][ C1] RAX: 0000000000000003 RBX: ffffc900043b7750 RCX: 0000000000000005 [ 1258.013195][ C1] RDX: ffffffff8b722eb4 RSI: ffffffff8f8a6840 RDI: 0000000000000001 [ 1258.013210][ C1] RBP: 0000000000000001 R08: ffff88802a68da00 R09: 0000000000000003 [ 1258.013223][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000 [ 1258.013235][ C1] R13: ffff88802c656a00 R14: ffffc900043b7768 R15: ffffffffffffffff [ 1258.013254][ C1] ? mas_next_slot+0x124/0xcf0 [ 1258.013274][ C1] mas_next_slot+0x140/0xcf0 [ 1258.013300][ C1] mas_find+0xb0e/0xd30 [ 1258.013321][ C1] validate_mm+0xe1/0x4b0 [ 1258.013343][ C1] ? __pfx_validate_mm+0x10/0x10 [ 1258.013366][ C1] ? vma_complete+0xa5c/0xae0 [ 1258.013388][ C1] ? vma_prepare+0x47e/0x4b0 [ 1258.013407][ C1] ? vma_adjust_trans_huge+0x286/0x370 [ 1258.013428][ C1] __split_vma+0x8bd/0xa00 [ 1258.013479][ C1] ? __pfx___split_vma+0x10/0x10 [ 1258.013514][ C1] vma_modify+0x13b3/0x1970 [ 1258.013546][ C1] vma_modify_flags+0x1e8/0x230 [ 1258.013569][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 1258.013600][ C1] ? __vm_enough_memory+0x11b/0x380 [ 1258.013626][ C1] mprotect_fixup+0x407/0x9c0 [ 1258.013659][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 1258.013684][ C1] do_mprotect_pkey+0x8cd/0xce0 [ 1258.013712][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1258.013740][ C1] ? __se_sys_futex+0x36f/0x400 [ 1258.013769][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 1258.013800][ C1] __x64_sys_mprotect+0x80/0x90 [ 1258.013820][ C1] do_syscall_64+0xfa/0x3b0 [ 1258.013842][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1258.013863][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.013883][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1258.013906][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.013924][ C1] RIP: 0033:0x7f674c38ece7 [ 1258.013943][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1258.013961][ C1] RSP: 002b:00007f674c6ff9c8 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 1258.013983][ C1] RAX: ffffffffffffffda RBX: 00007f674d1bc6c0 RCX: 00007f674c38ece7 [ 1258.013999][ C1] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f674d19d000 [ 1258.014013][ C1] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 1258.014026][ C1] R10: 0000000000021000 R11: 0000000000000206 R12: 00007f674c6ffb20 [ 1258.014040][ C1] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1258.014062][ C1] [ 1261.132151][ T9851] vhci_hcd: vhci_device speed not set [ 1261.630590][ T5873] Bluetooth: hci4: command 0x0406 tx timeout