last executing test programs: 14m3.435789718s ago: executing program 3 (id=72): timer_create(0x2, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x4b564dff, 0x0, 0x149}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000480)='R', 0x1}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r4, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'cbc(blowfish)\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f, 0x0, r6}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f0000000200)}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, 0x0) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x94, 0x9, 0x5, 0x5}]}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x60000600) 14m2.348513229s ago: executing program 3 (id=78): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x40045b0a, &(0x7f0000000040)) 14m1.895088563s ago: executing program 3 (id=79): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) pipe(&(0x7f0000000080)) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}, 0xff03}], 0x1, 0x8000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x400) 14m0.505856741s ago: executing program 3 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r9, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xdf8, 0x42}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x400c044) move_mount(r7, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) ioprio_set$uid(0x3, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r7, &(0x7f0000000100)='./file0\x00', 0x220) 14m0.148558661s ago: executing program 3 (id=93): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000900)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x79c, 0x2, 0x7acd, 0x7, 0x9b1], 0x7, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xc0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x10c, 0x0, 0x1ec, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0xff, 0xb, 0xa, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0xe8, 0x9, 0x8, 0x7f, 0x1, 0x2, 'veth0_to_hsr\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x3a2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@multicast, @remote, @empty, 0x2, 0xffffffff}}}, {{@uncond, 0xbc, 0xe0, 0x1100}, @unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@local, @local, 0xff000000, 0xffffffff, 0x7, 0xe, {@empty, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x80, 0xff, 0xff]}}, 0xc, 0x0, 0x7, 0x1, 0x7, 0x7, 'sit0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x24e}, 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x4}}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x41c) 13m59.920902085s ago: executing program 3 (id=95): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x96f}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x3ff, 0x2, 0x1, 0x0, @sint={0x9, 0x1}}]}) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x900389b, 0x1c481, 0x0, 0x3b2}, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x9, 0x2, 0x17, 0x0, 0x70bd27, 0x0, [@sadb_x_sec_ctx={0xb, 0x18, 0xff, 0x69, 0x4b, "9081fbff96441d19beaa9be0a259843fcfedcb327af4935359fd118e1dd4d4c9006da559ea0d8dc21c399d639b415f71e716e31ec09848fc1b08c27a0bf1c8bd0d4846579fbe9a0a5a803a"}, @sadb_address={0x5, 0x5, 0x6c, 0x80, 0x0, @in6={0xa, 0x4e22, 0x6, @loopback, 0x25ea}}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0xb8}, 0x1, 0x7}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d", 0x32, 0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x9}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) 13m59.307659315s ago: executing program 32 (id=95): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x96f}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x3ff, 0x2, 0x1, 0x0, @sint={0x9, 0x1}}]}) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x900389b, 0x1c481, 0x0, 0x3b2}, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x9, 0x2, 0x17, 0x0, 0x70bd27, 0x0, [@sadb_x_sec_ctx={0xb, 0x18, 0xff, 0x69, 0x4b, "9081fbff96441d19beaa9be0a259843fcfedcb327af4935359fd118e1dd4d4c9006da559ea0d8dc21c399d639b415f71e716e31ec09848fc1b08c27a0bf1c8bd0d4846579fbe9a0a5a803a"}, @sadb_address={0x5, 0x5, 0x6c, 0x80, 0x0, @in6={0xa, 0x4e22, 0x6, @loopback, 0x25ea}}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}]}, 0xb8}, 0x1, 0x7}, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d", 0x32, 0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x26, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x9}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) 10.905293588s ago: executing program 1 (id=4209): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='cmdline\x00') openat$mice(0xffffff9c, &(0x7f00000000c0), 0x202300) preadv(r1, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)=""/88, 0x58}], 0x2, 0x9, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008340)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0xfffffffffffffffe, 0x0, {0x8, 0x69, 0x0, {0x6, 0xe, 0x2, 0x5, 0x5, 0x9d, 0x1845ba98, 0x8, 0x7, 0x4000, 0xb6fd, 0x0, 0x0, 0x9, 0xdd8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x10, 0xffffffffffffffff, 0xec776000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000600)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0xd, 0xe, 0x3, 0x6, 0xd, 0x0, 0x2, 0x612, 0x3, 0x7, 0x71, 0x2, '\x00', 0x7, 0x6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.956559945s ago: executing program 2 (id=4223): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000140)="010000000980", 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7, 0x1}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0xa, 0x0) ioctl$MON_IOCX_GETX(r8, 0x80089203, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffc9b}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x9, 0x7, [0x1, 0x2, 0x267, 0x7, 0x9, 0xffe, 0x2]}, 0x16) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x5}) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept4(r0, 0x0, 0x0, 0x800) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) 6.974565292s ago: executing program 1 (id=4224): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0xffffffff, 0x4, 0x8003}]}) prctl$PR_SET_IO_FLUSHER(0x43, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86eb4337b8d343ed9c18927289d3d788fa281a5742690ff5a505cfff34fc1503afbfd2d44b50e4ca119f67b2890064d83a34eae5f4e64ae0c7c124730f21dcbc2d36ade1464efc381735512e000bc2b08cd6d659d3cfb1f79688235dd8"}, 0xc4) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) unshare(0xa000080) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f00001b9000/0x1000)=nil) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 6.153540546s ago: executing program 4 (id=4225): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x6, r1, 0x1, 0xf5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="070f", 0x2}, {&(0x7f0000001540)="20704e696119aed2", 0x8}], 0x2}, 0x4) 5.874564109s ago: executing program 5 (id=4226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000020000103000000000000000002000008000000431f0000000c000c40000000190000000308000a000d00000008000b0005000000"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x54, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010003904000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="01980000031300f0ff0100000000000000040000006ef18edb40e22d0cc5c23321b9ace821d230066799a403f98fd2ecd972ef3e6aabfced50c044844cac61f4c0bea9e8f32a03326308ab9cc53dc8c008a48593b597430ffa016434c28772887ee8933c14fb1d0dfe4cdd47b164329889ba5a54221b1b20db95016c55cf207188572fe90cd7f04947c9dc9acd7a6866d86f6eee979a3cdb8cb161fee5f7b89d3d890435519d11e3a0e960caaa3787119cf2"], 0x3c}, 0x1, 0x0, 0x0, 0x28000004}, 0x4000000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) close(r1) r2 = dup3(r0, r0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000800)={@local, @multicast1, 0x0}, &(0x7f0000000840)=0xc) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d989291817bc968074556f7739b2ddfa4a18d4cce3d3338f9dab39a7e0a77abccbbf7559b2cf923bae5fbccac4ae073e0d08d0d527c2aaa53038f087b5beb74b11cbc3dc05fe06245bf75c06149999a05a965a0f692652c98ad56ea3b280fa79021e068fedfb0e", 0x67}, {&(0x7f0000000440)="ae36d3516a1f4be3375fe583c8ef5cc79caa05d7aa503095f520893928621c37310727941668f0210fc9afe23b18396baa025958db504979464ad3966efebb76bf607603d668361174824d08692ec53e85", 0x51}, {&(0x7f00000004c0)="9284123d439f55ca095393c4ef513228d550600c4dc3c0833b7d585a748fd643967925cc5bf009a75b83c31ac182f3d3467864c49f0ea3fb0b793c048b34b0d7b85993f866822b75", 0x48}, {&(0x7f0000000540)="f91d29e4c4109cfd2c9fe5db9cf90bfb38b2d89f9ebe6b05ce6c8dd85a500fb44c3243a906fd3ca6966b644b93c078434424ae7e85c8906573cf16635c95edaa1135124af2fc6c42d1dc13591ec371f42dc4e019968fd879d17205f589b1287521681ef6b7ace2c13afeac43d16db2d95ea2c0aec9fb030b8141d931f9bb046a5e3a178817994a8ebb8ba433a8ce9654ab1371e954a0dc2a2442c876", 0x9c}, {&(0x7f0000000080)="483fd344a75c526a223653b93a11", 0xe}, {&(0x7f0000000600)="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", 0xfa}, {&(0x7f0000000700)="608ee3b7e285c5a2d5548928c541b44906656ba9df9ad10f199a65028ab8b6f424585bcea3a86580f23e6542f4ce214c4b9bd9c9aae685cccfdb7ed2b239179215d1a24668b219486e3e75f20929adb95c85ec5e446c595ac85f270d589a00a7bbce22efb0519da3d0b670059926a0fa6ea0bd11c9b8f761340a14a25e2aac258e46f1916eafdecfe26ec24e087406a670b8772975a4c5e4567132ed046140ffe1f198e74de53ac411996882c2a6dc260018a0731cba310b1b58029651c591c8fc9a70793c449b52", 0xc8}], 0x7, &(0x7f0000000880)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x24, 0x32, 0x3, 0x0, [{@multicast1, 0x9}, {@local, 0x7}, {@broadcast, 0x7}, {@loopback, 0x3}]}, @cipso={0x86, 0x12, 0x1, [{0x5, 0xc, "f165f1af66abc1575290"}]}, @noop, @noop]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}], 0x5c}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)=']$-+\\-,\x00', &(0x7f00000001c0)="65fb29b375a67673527b14942583f9364806bc63ab365936af7a95d4de6cb49c6f270d68448e14ea445e548dbf7c237b5c1b30a85ec0985b201351daa724deae2c7ce7b4e1218c2667965215bcc2843c757bc35c6827640b8d0a8453b80c777cdc24af8709022555c1e9cbaceff1e1f0e60895c4f1b4c119892765c6458e34d24204e0fc21c23d3eb5f6c0114f7d18c46bcfd2cc841382f63fd877", 0x9b) 5.763638829s ago: executing program 4 (id=4227): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r3 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e60, 0x4, @empty, 0x4}}, 0x7, 0x31, 0xffff1896, 0x3, 0x0, 0x400, 0x1b}, 0x9c) syz_clone3(&(0x7f0000000080)={0x2d028400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r4 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000040)={0x1, {0x6, 0x8, 0x4, 0x1}, {0x2, 0x0, 0x1ff, 0x1}, {0x7f, 0x4}}) 5.760840843s ago: executing program 2 (id=4228): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) r2 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000006b00)=[{{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000680)="3477fe4e585f02fddf4176fd9559651e5d89bdea98c9d4d711b43ad37a47f43bb3133398cc2e1a2999c13d56af198ba1b34334a797c5d6a0fbf5a574bfb0e4c4e68f852aa824a2bd739d4971848c6b8f85b8952a6593ac7f32d02635a8beb05f25e98e9d58948d49b5bc8e7dda97", 0x6e}, {&(0x7f00000001c0)="d923a16192fde270bc753c9a2c47f132f0e430616a4b2c0dd5af3d80308f62a52aff79a338d453e47f975b", 0x2b}, {&(0x7f0000000700)="d81ba33a11fd491b69fbfdd01aa880d54eb1a9cda3be310b7139f1a9a439d718d70b7c8193473265c563caf5dd3f19471a17fa701154c240413d0be75e2fe9a9803fea722bb0c69912e2ab0ea77ded21e9f45296a90a", 0x56}, {&(0x7f0000000340)="1297b96d37ce8756661bc231dbf8f10ee8b07ba3d3c4fe2166f089ce", 0x1c}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000780)="0c1287e29330dc529590659dee2902263ff41dd6a81f955d9a2ffc3558fcd2883d18496f2dd7c859c0ad1b1752ab3e009afcb64a5f6585b9e78bc2cdf06d3335eca73614595f82edaf904da2ff18958052775ca547aee35f51f659ad1b571d3e5424af006d8f78ecdddfb23e5d5fc305542f202fc5cadadb8350eec216c769118ba6f6c02514ba4ae72f50d90105", 0x8e}, {&(0x7f0000000840)="6b9415ea3562bd06b51fc4ea66fef14c18d9615c4c6f89f573b9a264efcf56345f10ce46a6c378029cf7e9b619b0e2307db05ca4114bae4e19ea006a3af504ddcbce42e9a5dd260b332aaa3ef8f166bcfe9ccfa27943c72bf38f11495834b1c151aeff782ca87dfbc74e3a0be31c51c2280ebd3d9a63910158be", 0x7a}, {&(0x7f00000008c0)="a7e13a34195d3c95dd0968b780df3865c8c4bb9561b1284f465a73ec904c8a4b178bf0dbbe6ce7823093d2073b7342668ce88823c03e7c7800d55e21364ca75f5d452c84c9ba96d1c8d76997629006f8895ddff41b5e96ad6da2c320d4d0ed41826e87e62c06fe0128aee670190b7aa8d183258b9e21595c6ae25ab5dd543c155ebdd2a06c7e1a5c379acc82dd3a42ff90b3118d9d5c5b838e66074983c3f1fe35ff5ebbc0f0f0b43f0a121358d177a7a2cca0d011c0bda4bde4d76beefb047fea50827426471101601e0ed72da1f5f98aabcb4c1a430acfc15681cb7bbd34166da350d2a16481aa96a049687dcbff11f07d8935d2fed3fbca", 0xf9}, {&(0x7f00000009c0)="c62a01b06c7192b4037e67191442bcc786ecd739428da724a6", 0x19}, {&(0x7f0000000a00)="da46d6a5ef35905ce7603daba15bc80705ef9e6943c6dde30f89af5a7da507da45971e8ff0825590f376918ac9fbf96916f6acac75403787ed6a58b4675ceb73245d68ce3551ba091ec852fdcac47e2b0b07d1bf562dcdc0c9c087d15559ddc75ae95c02876bb6b8a96c80dcd6fd87de15526e1d83cdc16f4a4a6509b5c5dd9d49e72a1a25dc52d780e32a6d32e40a3ee2e05c60f69e1a0f3d89230ebc2d8068a01ceac451b5313badf7fbc1ffd78a97804135c52d04c26d9076f678354c5bcb4b484e5fb02fa754bb05175f6105796d8dc70ba08f65243307b9bc2934feb0f1338c1403", 0xe4}], 0xa, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b80)="cd0f99027d44b2939dee4310a890b2c7625ca6c7f026cd3e2058756790d7ca0be57a01502e2e82c3a35fda7a44d50cce31e22e7a8c1e1195d1da5d59f6d1b057405f6dcafb6571e2b59ea04707965cfa184e6be43e3adf69279f7212a4f2c87c8d14e8ad6db682cdd95eb4aef313c5857ff4610c", 0x74}], 0x1, 0x0, 0x0, 0xa000081}}, {{&(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000cc0)="c34c97a674b27f8cab2bd4dc3560d746ccc89278e1a6013131e4e09d7dc56f5014ba2ea817868d03cfcc5d02bed3", 0x2e}, {&(0x7f0000000d00)="5833f57adbf6121a691a202b631662f74fa8936618ca2b9af22e3807cc92b4bcbc8808d394108f638164593266747c1a24b2f0fb469f6cd4828a5e9b08f5ee5ac0bd637b4b38fe9407fc2f021512148b21a9f1d1d6398a48bceab079096c73b8715f98218cb1f5bf84449b261376013efcee6bac189a60f9799e0f8f1f06ad5c2df19b23f95a2597cbacd2e2756aa21faf20ab9fb6dfd457bb777d6d104c45a4ff88cc0f5332041d3ec99de20b85ff0f77fa19b424e83727e9c5886efa141aea451721a679bc", 0xc6}, {&(0x7f0000000e00)="81b4dd6534f3a4885da20a4af39e7fb265585effa4aa5e0596c4a9f28289917389146f8685076e3eaf59986a374947e9f879e0dcd9646b906dcb28d4ecf17b9033f007eccaaf1c323ac599c7fb6be830f5072e7e90a2e2567530aa9a8d520ce60bf12105bd375597c9f5c6e5583da5b011660356748da5f98e4760e6edf5391f36eab9f011a5b69169cd7832deed5f2d2d415be3b84c54e33cabffefed22f7c11ba642b54906356bb809c602c4656933925ca2dc7d3f6fd0b87a4bb062e80efc5da7c57e89b69dc685b3d57bc994b28a5482324cc18d4142e5ff44e5", 0xdc}, {&(0x7f0000000f00)="975262c346fa5a5949576d10bcf66e6105e786dd7f3c3d7b58d20260d371b6a5cccc052720811b4128803edb7d773c4817c52f2194e802cd033c0c951e0f791d7314713ad8e4ef63fa4ad4", 0x4b}, {&(0x7f0000000f80)}], 0x5, &(0x7f0000001140)=[@cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18, 0x1, 0x2, {r2, 0xee00}}}, @rights={{0x10, 0x1, 0x1, [r1]}}, @rights={{0x10, 0x1, 0x1, [r3]}}, @cred={{0x18, 0x1, 0x2, {r2, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {r2}}}, @cred={{0x18}}], 0xe0, 0x10}}], 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000800) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}, {0x0}, {&(0x7f0000000540)=""/74, 0x4a}, {&(0x7f00000016c0)=""/227, 0xe3}], 0x5}, 0x0) syz_io_uring_setup(0x6496, &(0x7f00000002c0)={0x0, 0x1ce7, 0x10100, 0x3, 0x400000}, 0x0, &(0x7f0000000000)) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x86) 5.488441295s ago: executing program 5 (id=4229): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="2e00000010218188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.42007762s ago: executing program 5 (id=4230): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x4c, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x8, 0xfa11, 0xffffffff}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1400000010003507d25a806f8c6394f90324fc60", 0xfffffffffffffef1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000980), 0x0, 0x63, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40080d0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x41) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r9 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1], [0x0, 0x2, 0x0, 0x720], [0x3]], '\x00', [{0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0xffffffff, 0x0, 0x1}, {0x0, 0xb}, {0x0, 0x1}], '\x00', 0x6b4, 0x0, 0x0, 0x1000000}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r8, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 5.306164181s ago: executing program 2 (id=4231): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000900)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x79c, 0x2, 0x7acd, 0x7, 0x9b1], 0x7, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xc0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x10c, 0x0, 0x1ec, 0x2f0, 0x2f0, 0x2f0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xff000000, 0xff, 0xb, 0xa, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0xe8, 0x9, 0x8, 0x7f, 0x1, 0x2, 'veth0_to_hsr\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x3a2}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@multicast, @remote, @empty, 0x2, 0xffffffff}}}, {{@uncond, 0xbc, 0xe0, 0x0, {0x41000000}}, @unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@local, @local, 0xff000000, 0xffffffff, 0x7, 0xe, {@empty, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x80, 0xff, 0xff]}}, 0xc, 0x0, 0x7, 0x1, 0x7, 0x7, 'sit0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x24e}, 0xbc, 0x104}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x4}}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x41c) 5.129532697s ago: executing program 1 (id=4233): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000001808a8972bd0b72e410", @ANYBLOB="ebe42bde4340155d7bfbd1ea2ac08cfa60206e362a491781d46bdc6478d751637183a55add08bbf1b9fb42afd58f9dfa39eda225888889"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 4.962453793s ago: executing program 2 (id=4235): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='cmdline\x00') openat$mice(0xffffff9c, &(0x7f00000000c0), 0x202300) preadv(r1, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)=""/88, 0x58}], 0x2, 0x9, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0/file0\x00', 0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008340)="697d834293a96a4b7e0b9b6f1b0f9a3fa8a35be9150bf339c4267908c6137441bd5785dde58d8dee64881b2dac135b366c8345268061b2f6f72686633ad2aab3d04a1bc825630b4476b3927a06890b34e608612a66cacb6438ad247a3d8c040c445bd9a3d8764052e5ac422f37d2b442c43c9a06345230b464dfecbe31b60a4d2a48481ffd16a88c048607213e4e596462a8be2a1e8a6ac8ff593b0b00f5f6c904a062aca4c050a8f90c2c132c0d21e50ff106de53ab231e93b26227944bd278f6a7c09e846d73b1327191ee270833e6ba6ba9296b89e4fa7180722c7c44425d2465c63de843e1fdba663e36c179bb1d73d2b2abb3718e5034f845f1554ae834bb1585c6d5f355b6cb07c317517e9c255ef871da6b68fb48b509e59c59eed0092ed34d3af3f56ade3b1fa3cfdbd5623ed7882e169aac33eb907d10827d60c8b40612a70525b4ced58a6a89b4df964e0bc2adba561ea6ca3b0ef2dfc204c9f5eae0cc090f0ba832b5888e4ca12ed5cd27d880ad92ec738f9e97710bd838015cbea7e464f02d02ff5d6ce7d51eb7ac785250b940089bc6a8488ef3f9f21cf58025fc3157ced0bb7fb7ccc16851347afd26a04acba7faaaa972babe12f2f9cb4092ffbe17b3eeaac4fc659f073b79bd3d9962e4f74d23f9d4aab0a4bd4c441c774d970c195d8faf008fcb270238ac9653c24e13579ed7848c31f22c61d56b412784898ecf6cf0e598cd35036a601560d3e5ec23f1fde8aa4e6a64b991118e16f7b3d14589cbde4a3fd9995d8c04f3d0f6cf5d4786940fd381877856958ea9acc247bca3403e6b254825b9b3641f9c6418c7a5c991d8edb1c0fe50e1ccbfa8f853b88945f04eff88f14946aa61fbd29e089e8e3cb51f1affe1f7db019712b5a3178a7f5e5e92207962f426b29fb7eb9437c841ed0ae551dff9f783f34b0ff16260489d6c81656ca70b1efc216dff7c272a662d5e5cbe989c1fb765f03ca6dd398642817aeea31d3afd8e1efded49c5ae0e05cf99c44b061e5f28db515e38f2840a68e1ab03f563cc86d831b8c6fc9a9d80d9f5563637e8fa78ffe90733032da2605862b1c0fb5e272c853e1e3f8de38c2637758f6c221713042c80982afeabe7d9ca8dacc2766b5c5c80dbf5a8b91ac1fdb21f7b6ef455c245b0590b890949352d1a3524846ed7f1d13bedb68c570765ca35196f4ef3aff9767c1dffa5b96a8599d3dc2a8f67cb43678b0514f91e3e451eb2b1fa205bb6fad1a6522b46bbeaa2a73771dc77a91484de1d167fd072e717e1ee13ae75f83e5364f37137351d17b4493ddae9f2309920b583610da82ba6406e22f657c2a00b37e21911dbe371c972120b32376d6866cb51a846b2926a7bab615fc22e0cda17add8940029d5264a216cb6e93389f24e057ccb10b17016e56ad65b2121b49ebc0b1515cb2aabe2f21bc27d0b4d2507f367b245c15258687d2bc901a22d58baa60899e74350113959231f26f58c435bcddb106acb87d4a3bce9813bae84f9e6703f060d249941ecd5910e95be38d8fea4555211d85b43369f9df87c2d8cc25bf36322c3674e8cf8982fe954c4e9db3fd948c7ac7f885fba193e6b85f7ce28771119adcc459726873435f9f0f73ac6fea5f6d46b04de30398be071057ef870877d950b5673ac0d7a1fa95e9e9153ece01e87781ea6d656d281307bee066cc1e0e15a1e06652dcd5124faf8f768e6a5c229fd8029c373d7b50fd110a148e856876748c22daaddc4470e9235e0be20c12d5479a1ff479fe1c0bb82eaaea3f418dbd147fc00bf5cc1627846b373c8a2872045c72a11363829270a1d82f0db670bbea3131f1835fdf836a2046e4a7b91d175f4a397b8e4319ad6e76728eebfbad849792c04ecbb29c0c628c65163e6b17a5db2f61738c5ea95dc89566b04ebf470c0f91c543b180c5f71d900f55a2ded87208320e861e2a6dc6f85bf665fe4310cf253de744744a9870ba2f208f832b94593d36e9989c2ed51414931e8186b662e1bc0eba62e768ee8796fb8fba729026647784fd0f90dff0315dfeadf780de0479cda9403951e4c90c1571a04581996d38c2349e6241b5f4b0c9642aca9f288425cbcfba4d2540a2ec157b709827dbf926a0c4566d8ac7b50ac5ff080488f34180080b96c13367cbcf87505c0c4979624b2fb87cb5e0d678767a2e769aacb8a43935728e13ced19a9f29a1d29b52748cf7289f4bb66cac86874e103643079886ce823cd3797e2ba58e5f7541e122249ac274ef6f8159d2c3fa631ff2272849a503769c80be26270cd88f84cd3765111fb6328ab61158d7174dc9da201988885a82d291d072cb2f3e03593a4e55cec278cd9ce634840cf184d43f5232eb67d2b9fb5d2da7bbe2203da26d257c6a6514365d37012fc7f8abac4881767352933ec5d5aaa9b12374899f89c44c93ea361e92020e5a240831e7d06aaffc2a0fb27410ee5a5d1152bbc42e780429032a4e3b887e8529166a8b18543b9a1c9bd877bed460f00189cd985baf66f56be8e129c7b153687f8d713e98d4e3e29f0f4c7315977050c1a8d318bdbb8ab619aded191714c6c91d851a4afc4cfb9c4aabe719e7ed037bb4c2166448e0f760717e422513ab5c061c4cc7f37c37b1468e202c2063b247e6f4bf6b7725f8eb8ece572ea150cbb95fe93d9411b8b98d7a57a3daede5dcf9f7648c4971286a716e00bec7d2959fb9dd1c0d5ec5e4cc9c89dbc93a417c5700606d35004698fdf750a46861568f78952abe91240a9b8e0647d3d5cb29bc2045eefc44e148ce92b9d880cc16217bb0ce07a93fcf5de24097d5bab2923d56edb73ff59e9852ca689a99d07bbd2b56cd4e1533f5ad7190d8330b12aa99e0b12d347d3f9bfdc3699ffb2729d70e789e134bf5ed011a9d989d0d65a35369cf3e318efcb8a8ef55f7a4ea6582d490d5d04e59a4ff23ea890d7e74eee0e43d15ad3ce096735aba6aede852671cd2d3b3130e9dd7d2125cee2943b6f66886073566a3a357acdd703fbf4bcf01928a79a582bee20053aa9031ff9c7309f558f3e75589f13bddfd0c75bc57e32f4ce3065f7aed0589332ae8e607bfb891a443c650596411e6a0858b8a6b632c11cbcceb6eec3ecbffcffe9ee30a93510742cb90bafb82ef21bb7cc74b17640d9b050b4aec397252c0a51dadc8500c5c93f8aa54ae8bfe936fe81c0aee8bf5a9c214108154a6147aad74899b89e7ae97ecdcbbe38fe5421a6bccffe7cdbf334558878d1fae270e5435acf794996fa21161aa7c6a3d3e73cdf5a71085943d125159f98d998851404fd910c0dac7366244d69f928704e6bea8b6b641efaeb775829df21b22789e1bc219acdde5c2bf29827f02e55a828783fe9f519faaa89d804912df59bfcef6ba1c12d52e0c1914a32e5e10df0d8f3cf31fa3a936c35dfd7a529ca7e2721b0c1c430eb0f84808c2a7e43ddb240cee3c7e68ba4b499f21d70f202a0fe678da0bb56a2e237888f7b22ca9aa31f7ed5f212425b0bf2b75b4dbe6121f5e716cf186b4e2d86f5f9e700494de653eeff930b92369c75cee9ed632d17a6d42b07cea3e35cbaf6d36e1efbb287f758b5e61fdabb674e7e284c03487df0f3c553e0263087a7cd90cf10a835bc58b193e42b6dbce6ced508a8e40532c298aa22dc0add5fdfc8b6735766e77d4c4e81c0c9bbae06618703577b913a52fc0fc25524cbdddc234d3dcbc63c37076ea80a5388bfbd3a5c298f1b59aa15f62aa50bc56115de8a5d379eba06c3d33359ae5ec764918edf075b6c4cbb47403be0f08b122a1b4edcd96a80ec783cfc0dc62694370e4f82f57ecb2c6697b5335e1251f0100aed71fecda463adc9837b8758df588a0072bef8dbf0d170ba3b83833712e4c34abad600e0324896b4f6d65514ee017785268b27b87e0b0d56bc54ac7f7b42b58353f642dbebcacf235d49685eb632eb11910c65e402c7c34e8b15d52e73a3b3276cd4e3c77b644d67167cac7d8d64207f5f90de5f79c2845c44c11e769509014892ef04e213d827e2856a06f88cd734c826f29d4816c63733064fa6d7e870c2c9de060f4e0b5f4bf1342fb43c7bdc8d135cc932feca0a0cc942172b3bc430822582a22e20a0835f95a340101840bfb38b05e9c6c63c9210c36006a5596e4ef7a0fd16a2e305ed795a68bba6602d59843b9b69bac764d6e40b73277465f005b5ea36d963b19f66f945f4e026f739421e66b316e93eb69a7da8740c538bea0c4e25fd612a999c1e23517bccceb61df3f1b422aea631db6ddb02e9d6adfb3eb97f9ea7d64dece96a1b92d6487f2bc258f4f55237be2867907f68167ab95a605730539f31c7bc87e5fe4bde0737a0c917c332fc5ee72622865704c3643b0e9e834c364e77fb2d8cffb77d44450a6c5ce8f700dc9e823b7f89a711d0e8971e9f61033b96c9d6f9020c9aa65102022ecf4125a8e8b9c2779d8a8797f47cada42f41306e3a8c51dacb5ada1d7177d383ec5815ae923f89fcf6a92c439ad503a8c2639cbd6964c88e7cafea77abde53f3db2f17b34e03772ae75c680a94bab8b522837d4f18788d0804309c20427b961d6f448d74a871368d41bbbfa45aea0bcb02fea334443d7320dd71a1407ca76602eab171dfb4dc698606e9da6b91b7acbe41301e0c02ff8711b1c8e617fff79cd48f75c8cf209c5419184f01d0c5355ad01bd363e2675004628b145a02e39dd399b3eb57a211970cb88df89f3acf623f49848d627d08fd3f196eb93a4ddb1879290f160872c2752f7a399a5674d2f1c486ae126c4bf61e7a6d054eac045b38464e508a729448fbaed8c1c55b26bb273075d18369927dcc803ddbebf19e14a1f93a094fc090ff19ecca9d50b71ede90ed688ceea0a89d96219cd51e8cb2ada1ce8f7ff72bc2b006acde55b4e2f0c651b63b639ef8f6b95e52838a334d9d3a49f63492b096da194b76571211f9df386eb75a4df2691016d691d710a05063e46a034c8bb58aa81d0b04afb3ed3401472101d550e1526ef657c06e737f4342263718da18c56bb976bdc6ece796d3593f745c8dd9445ffea8844ef47f1294f5b1ec2c94133a3916f8508ebbfc09bcce0f3729bda6011054043c31a9d6b0491b079d185c3d7541852baf2e1a8649bb24238813b7e38fb4b048106218e4542c2cbd511c87dfa308be82b447e1fe84b6c37f1593a6a581de11c60fb736bdc010392df2c7fa8d94b565f164f2a3c432f0b4024faf98bd56860e07fa4679ca55cdfc63e9fd4a5184ee7d471fd2a1267d2f5c9a45c06df08232c28c8600afebef5b34f2c87f867d8947e1af7cd6ef0d12ca4219e7ee2675c31ed1676a2542b2ed2e6b570cf2a4b263a0fb4f9fd387803de3eb38e812c5b02773f30de699815f9d64dfe09a14dc046894a1716d82a7cadc8ad8fddfed3a5d9615843104c5cb1c84b715d5d591cbd167b9086fde118fb03fb6eee0bdb72e93b66f7e546b716c2c9d4a38767539136f17e1c5316dc23793b01bdad2b35b598c5b824484b2c0e0e26c61ba1bc05da32cab5fd44c9d297a68e624f2611822385a43856f0f8717d2f658869a6052ae4791fd23efa9d3c8452e5dfadf9c6d3c4b87ef12be63307e605cff80cbcd7b79bfaec6c8498337757f1320c99fed2870ab5cbecfe59bc18cd7efd2818b95e09410f763177abe3b5ec1744716165c233e510ae61cc4ad30bab2dbffb0dfe41222f87635531dea5335c3926a0b0dfb45757e92530b3d92713ca8a60def918c067892bddcea23f9b9c5ef35418e2b3196d6787afd5f4effc4f10ddb1879c522f31380eaf4702fcfa85bd8dd1663f0848c2fdfbd3a77d0de01b5222f00a29b59e30943e41e5f8d89591b2559619f915a774a8af5c185d71df2db35b7d7f24212ea8e731ff815f9024b9fa876b6c6a12e784d36e78caa07599b92a88dfddbd6de8dac357393597dc09e4314dcb32696d28a105548a252282cda7c9ef57778017db4c979c1c9743d6e914b04aa1724a454e1325d4f62761159e65059d3404d86f00aaf4f4e657d529ae2a38b5ba69500a029873991d575dd8a76711c8285804408231dcce6c04c0d289fd37ee4cbb3b32e93abe04efd435b1831cc00185f666ff6f88fc60281d0525c64126225d56a8ad64d736814ef9e76a9fa68b1df907681f4b11c5402c1de0ecbd5b4fe1fa55b92ad111a884309c6d799f5ea0dc50c81bafc7630e2425e36c770b189365f13ecda846ba9ba6a57116c7423da7ac2be417f2c6f544ff38a63f7449f9aa61241afef210025ec09347c47fdc717bb2c2ecc9b76c0441e9da1941ae66a2b42e744ecbc9396bc40ece312aee8310a70b226ec9c0b0c9d806c2a688495ee12104f11524bb5d80d56d5440df9f02f722e710cd24064b1845f09ae37c3af8261b840f833af9e13430993d3d48cd9b2b599e3e241f6534f701937b5c51eb053bb9f797c651db1446fa4bcf87eaf3da600307d6596812fa85359a61646c7938db0e020e2ff539767a4ec85d2676c14e93c0235a761ff6b6a5d6bcc2b6a5db108bbddf8f5a7d2a43303263b1e868c3f85878ffdd0853fa5cf0991bd9727b02bcfb87c78d11a7dff71f5c3354e9bc839ac5a2f434fa479e1fcfe6696547a0b263a1210bc50e9721603e7cf4c52d862bb36ac75bf8b06d2e3358110e17a634cef58a0f5d1901e5028a69f01591571731b9c8c5a4389e045a09dd9a05e4b709b07045663d152b7461456969341f10185767024c9e742536536444c2d4eeb3d0f458fd7e8e438ad01b8b2e76cebb3b5915e412aeeb61ccf113d4b48b79dec51942a1dc6914d0979138063a4b9bc8addf1f92df2b117f27ee2d17bbe306e3036ed4189abaa47a109ea626105a2bc1d289fade3e784206e69f05e46b7f3510224014fb77498a8cba80129f2a4ef414109f5d423243d637939b0f6c2ffe9e7872bae2c12046c5ab184b4d350af578e01f240e2f7cfd1dcde4011758f38f84406a1f82d4c0f8005aed97ac65565125635cb23058eebf1a133d1de233257ea912b61a4387034cc1b1a1eb3e3febdc51aa751fd42d9666602534a1ac65888e2608fdce124a4d3eb6e2f6465b1495744f770b7e5bfe17e192212d1e4b568a68a1da5e846241017360a963275665b305661cb323ad75d4a0417b0d423c2fcd1850d80ce9cfb8a841133a2d862a8f98c349aaf9b3ac6358d79b739a6851f1ee310e3250e72e00c3d41c26a3d34bbdfd194747b2a261cb3b71db61ae26e9ce6c10e50f4e0d7220e9c287d541d0803a2504ac6268ffeb30451577ae9c2fb519a0cdca4075fba4890c39ebac996eaf56567bbe2653769552c4282d2f133b35c27aa566ed4c985ce92d8f0b3db32d7781a7bbdcaab72b6e1694e452766ae44e523c1313ec1937d2bc16ce3e7480576112659920917b7a029c000329da05ac383ed8f7b5c41577ccdfb56df371cd0498cbc1bbe30fb58158e7ed4173b12a84561afb0ed99727cdd1fd2f13a6a0b85e7e79d37f2dcf607a47cd186d6c2116915aae76c11d1c518229378521c943501fcca61fe2b9a7ef3ea3987e5c79b14e778ff829aeb800b4ba23e1d995ecb6f80bbdbb6b12502e5aa85e304d5248316cf7478080c207fb28b6fb5f39c9b55631c9a218452adc206853f194cfd52444c665a534c59ed3718bbba1b7a969e61f3fd425ff553c96682f959e73b41da9039ac6865b395d5ec185278f200d78a24dcdc951462c9667397747669b517f95e1ccc911e2f0dcdc0eeadc16d5601f711d068d7378a12027248b767a050ffd05d20f8fb391110401a34c5e3b32e2d5ae421542d1432451d7c4e8139749ccc32bd772e46d8c4b460c4d2f386619effd9c5148d6e9bc6c106236495816c0ac4926d3beaa81a3e88c81d3e9a4015b09ea1f1e0c44c1468ac86b822c35afcfade556fde4fc85452435ebb775f188e0c7353f7ff7998c257c6925b38f00b84bc36bb719d5336238141cfcaeb2bcf95fb3ae0bbb58c35cfa85f6eebb1ec63cd00f8b34c2987de97f209602d90a380c99d5e31f41cae0e54e080f39dd25281efa8f34ed808781d61430637ee74f5d965257c0444ce6d684737470a51163e6f2baa1e8da5064a787cd6701a5b546e968505dd944d7b24d0336e79d4f34fed60c6bfad7ce1d3ccb9714366b70ad20200f763efb999f30bed61a0cdf2a6519e1b10f6b0ff4c17d4b154be89b3f245d44fcc4c8d7f0ef04fa66054827e0c3688d5efb0e3273f735873925cf800c8b6e1c142d9eeabdb73b2fbcf74d191e0d5dec40115e33b424ba4473aa3e308c7109f905552d916724028dc847011745a138cee966323ae669f45da4772455f04d7160fdd76f7a0c7f6843bd45b741dc5d290a7a11cd1fcf125cb371c3bba303403d380db201d8ce84d265140951da4de207adc08ae65f945dc95ae90eecb00fee975909f8807bebe58c354d31369091c99f9d8dd3a4a001b1442e5705457c6bcdc86f463c74573f1c1a06bfdcf833321e09488e3835822e0b3d6781c8c5cb0ecae0a08da5c5d0f70de162cafc50dcc39032bea3b393e80f2455c71a1f676b90af9c9911be781d4db28ade9131e25fd4b67bc3d05e345eb9cdb816dd56e21426db9f8f62bf1a7f4f7a74a8ffda45f6a487f1d821242a94ccbd36feb0de0b5ebc6a6b892f22e70c85d9679b87a7fc16057494a142d2285978da08601a038d1d5474d9aee8c963ce8c3f30ee0a1097968c49a59821aa20965dcb19f9f795c24925c6013a5573fbdc2ddb672e09fc9c17353f75ecf7bba758d6b38167ba483f4d81b3e3809e87c025df9bf74580657812738eef4f94cd544785b128ee7d614e234f447688fd3181b06b6a749128ecfc24378a94054f55b7b929d79a0375e072fb0c4c4615e2541b44d3f8ec12b589d7ff9833e30f9b1ceab3617e9fb776fb5fdfc412edc900fb73e824e5faea3a8e801c7d04968f53b397526da26a129bf83398051b9fd4243e3779367c0abb4db4f4315925a1abeb5d96d88c8c360bcd3645b693c4b7f15e501fb433fd7c1d08cdad25b3c64c1c888a22ebcdf3147ce770433b4a62b991661bba29487dd46e75522b7dd0ccf23899e70bd7c5b1b67a03c990a411ea55c9c5c084de4d88fad6f134bed04673a2415bb3b7bff0e82feac8382d18983f288b32254d0e7cd94149aebb5f84eeca82ccf6d0b2b68fd3e9abcca4bb685fe4efed27043760b6ee04d62424a32a80784ee09aba5140d2b82de664e4900f7474c2a1c7413e863e0c4cbe0cd7bab0dd13fa16a0c8b3bfa29d43d5219239e7ee2f8cfcf82b88c698edb3dcf8ad9be19953b07bacb5ab7599691451ef800afbea4573ecbbd81ad67e87b929ef843b75a61e641e1c59b0658463e39c74037002fc39c62f51b13e8de66deef1081e130956d6835ba4e2381ee889b4862c70294dd5505f5dcb009770ae58d1b5bed9c017e1b63699ffaa6a63e6f084a1c567765249704c64e7b4565b423a6ab64459c0453c13b276ede055419b8477aba4fc836b3aa20cc17432b03d896883a792b45e328d3cd07b6d6a7eb5e885495b5d3bd8b409c8696b966a9f3ee5b0b1f3cc644b37a1f58d1187479a853bd0d80c7bf67dc8e081b2a46496968f2c49d627e2f10bc53efa61ca5d6e9a0539cf63f7064c154c74c0a4989e60fe835ba9e2c43aa9b4ad76dd7f21ba5c631e87b1dc214e46d0db361fdcbdad2e7606e01e0a4d4eebb442768e4ab332738134be089b3f0a528f37b1fc24467237ae945e708699165c031836ef49614c3c64900c762555fc57edd72c349f945728ca6d04e373ff04bc9c96527befb30162530513087b6dbdf261c533819a5ac83723a0eff1abc256b998cf87fb1c27b27e9ce2d7884627fc8a106419e40500d70da4894f079180795222472186ce855b972e8e309de56b17d5ffa89546ce46871783b723bce3bebd78a9b9710bf10342923254f0ac2ac5cd6d086d1207bf42e21c15e81e26a7d9312ad6c44c92c30e582c4697674c24ae60001994046775a3efaa6d16ee7b0912b265d0f416f79dab6951277e573545bf78e612049256ba9625f1bd29fc9c980055e1615153850077780e6f48bf0e047f21deeb28c7392001f460f9bf40fac69806c5136c5bac02d51f35e75131a245b83b5033e137b3dc318cc5030d8dc0531e038849872adca03c59f2ae63d62935537f1fa876dbc658ab8b1c48c19cdc225af1e96807d397afb6b4889ca804c38e2fc5d6cc95094e2a7de8e10c7350b6894e360f93673aad4fb9f31f2c8d13039dcdf0929007a780e49985f317dce702539434d7fdd16ecbd0cdf0f18b6ab7b85eb92633daf329bd60d8c7a8ed849f5b527f1f8da23470c48ead23375db16c95d25cc5c4861176496437411859cffffaf3c752be42a6d0e4d2e30e6e50559c27d6564e8b19dabc80532405f8900d3f19290213c41db3fa1f7841ddc086f8fad49903f6d3ba51d30639650e0e8d9b929525e7602da42a1328f38d609e76237eb4e1ccd41c01882d003491460dc942fb24768051e00daaceb6e5968dffd38acf59e19154d4638f96f78a5d5acff98e81e066844f23622ef526899b1f0c5106da280b3cbd71211a0407ee21ee531ceb188b6ca47bd8eef37442af66aa4d8118e9761c85a623d6cfabda3196d2bd8c31608702927a8d28e2739743f5fbe9083ad552700186a6ad2162f926a8f524927b5c537ab572bef352ee45e51357548bb50ce5734f092fe1cc1885d565bac7c0acb90e165baee81bb79834debfde6fa69a6dd5561b9d4266d7edaf2b6a0a822584028fe693def8348ad6ad83a5b6385d80a969def66f1c213fcbb9625a5df3a8a52fa2adda2edd9806e4a60481815495f4d7b73395f789c1a88198cce327ddb554ae87c7a422a510287fbaab9df26d7c108830d3ef7663e4a001895d1b984b19d027576a4782c635c704977ef26bca18b88c865f88533a5c296825288e0c08cba1f190c001f1c0ed7cc606dcfd57d5a44e8d6e33a804bfca26b750843c2bad5b0ed93c94100dffab019c5c168b897121525aa5ea81b2230404b8dc32cf1244aa950707bd71eaeebe70c902afdb2181dc974eea83409c3f440ca108c3ce0463c7ec7b9623b95eac971c69683fc874e754e3b046dc16ee4eefc3487cce64b2e64c8d9cb1799ae38b23c5a3ce6d2c5b95ecdd3c61390cc7b9fb6e3837865b5ea3ccecec0bd8ee741150a1f45a668591bba5153b020f73aeb4ef1e4058ed45a9eb1495efdb7e96443a20a28d647bdb418823417c84ee162f4c8fcca8d2eeb196826aab39b142e7a38427eecf89cb2adc2f4404b4c05b611b4d2808cd3e0c7d00f965ab5db27dcfb5f7546f426ba2992c723c4a56e36d942e03590a8d0a9812fb1118af72f3fe8588125a88ed9cf7122c0f381a68caddf8f4717f420926b9615b830fa332b13a39a51442092b426751cb634b84cd02447af30c08b278a7249e2e4e7ce522ab8f0f197b22c85f506f6e0b957cb152881bd9dd256c32f6aaff1285f118c57ab2e946a41721635a8c62ca4dbb1121d01cc2f03180bc86ceca675240fe014930b726abbbbb1ce9b41d5aedafea6", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x78, 0xfffffffffffffffe, 0x0, {0x8, 0x69, 0x0, {0x6, 0xe, 0x2, 0x5, 0x5, 0x9d, 0x1845ba98, 0x8, 0x7, 0x4000, 0xb6fd, 0x0, 0x0, 0x9, 0xdd8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x10, 0xffffffffffffffff, 0xec776000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000600)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0xd, 0xe, 0x3, 0x6, 0xd, 0x0, 0x2, 0x612, 0x3, 0x7, 0x71, 0x2, '\x00', 0x7, 0x6}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.800799894s ago: executing program 0 (id=4236): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c03000000000000000000000000230000000000", @ANYRES32=r0, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r0, 0x0, 0x200040c0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r6 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x5, 0x7}) r7 = memfd_create(&(0x7f00000004c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xef\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xff\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \xaa+S\xb7\xc9h\xcb\xd8\x19d\x0eW\xae\x1d\x94]\xd7\xec\xd6\xcf\xe5\xa1dF\x0e\xae\x95\xcc\xedVk\xc1\xdaS\x1c\xbd\xde\xfd\xb3\xbev\xe79\tT\xbe\xec\x1caJ\x9f\\\xa1{E\x8f w\xc0\xea<\x94\xd5\xfa\xe7\xbbu#\xc7\x8f\xe1\x9as\xdd\xac\xd9-\xdf\xa0\x0e\xb4\x8d\xcdN/\xe4\xdb\xa9k)\x04\x93', 0x6) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r8, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000400)={0x9, 0x7, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) r9 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r10 = shmget$private(0x0, 0xc00000, 0x1000, &(0x7f00003fd000/0xc00000)=nil) shmctl$SHM_LOCK(r10, 0xb) lsetxattr$security_capability(&(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 4.721077217s ago: executing program 1 (id=4237): openat$mice(0xffffff9c, &(0x7f00000002c0), 0x212240) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa0e, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x3b) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r6, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.392659264s ago: executing program 4 (id=4238): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x6, r1, 0x1, 0xf5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="070f", 0x2}, {&(0x7f0000001540)="20704e696119aed2", 0x8}], 0x2}, 0x4) 4.076200631s ago: executing program 4 (id=4239): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x93020007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000003c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40585414, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r5, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff034}, {0x20, 0xe, 0x0, 0x46}, {0x6}]}, 0x8) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) io_submit(r8, 0x0, &(0x7f0000000080)) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/162, 0xa2}], 0x1, 0xfffff27e, 0x0) r9 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r9, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe8000000000"], 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/74, 0x4a}, 0x10022) 3.45479518s ago: executing program 5 (id=4240): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001ef8080027bd7000fbdbdf250d0008005b002a402700722b5f9207bdb68db145fe258894aa85ffaf767a84eb91bbab3985ae85e21472d90ed56ab415b91f4c5b97be94744b150ab57a65774a715233302591b4c8000282e47121fd0ee1aa77c2f1a0143ebc707e336f3e143acc2ac7de42664fb5ed16b14c3da8feb65064d38e342b782ae9632245fef7f366914a6096d1b177091a24f6b38f57a2c6d8806ce724038e4b340964c1fbc87675820dcdc6f256459788a5f84fdce5843f3bbea0"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) stat64(&(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000400)) 3.454170705s ago: executing program 0 (id=4241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r9, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x0, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) close(r4) 2.682734073s ago: executing program 1 (id=4242): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xe, 0x6, 0x0, 0xb49, 0x9, 0xb, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001000)="7f", 0x1}, {&(0x7f0000001280)}], 0x3, 0x17, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0xf, &(0x7f0000004280)=@ringbuf={{0x18, 0x0, 0x0, 0x2000, 0x100, 0x0, 0x0, 0x0, 0x99f}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6400}}}, &(0x7f0000004380)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) r7 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) write$apparmor_exec(r7, &(0x7f0000000680)={'exec ', '&[^\xb8+%%\x00'}, 0xd) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000040)=0x7) r9 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x2c020400) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 2.62517348s ago: executing program 4 (id=4243): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) getdents64(r6, &(0x7f0000000940)=""/4096, 0x1000) (async) lseek(r6, 0x24, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) connect$unix(r7, &(0x7f00000001c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000240)=@userptr={0x7, 0xa, 0x4, 0x2, 0x3b55, {}, {0x1, 0x8, 0x7, 0x8, 0x3, 0x16, "f7daba30"}, 0x4, 0x2, {0x0}, 0x2, 0x0, r6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg$inet(r8, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x1, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 2.331652931s ago: executing program 5 (id=4244): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000200), 0x8, 0x2) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001ffffffffffffff8000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff0300"/51], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000007c0)=[@rthdr={{0x24, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@remote]}}}, @dstopts={{0x54, 0x29, 0x37, {0x3b, 0x7, '\x00', [@pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0xfd, 0x1ff, [0x5, 0x9, 0x11d46c03, 0x0, 0x9, 0x5]}}]}}}], 0x78}}, {{&(0x7f0000000700)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffd2}, 0x1c, 0x0, 0x0, &(0x7f0000001e80)=[@rthdr={{0x54, 0x29, 0x39, {0x67, 0x8, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x11}, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @empty]}}}, @rthdr_2292={{0x74, 0x29, 0x39, {0x3a, 0xc, 0x0, 0x1, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, @loopback, @empty, @mcast2]}}}, @rthdr_2292={{0x94, 0x29, 0x39, {0x73, 0x10, 0x0, 0x6, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @mcast2, @local, @local, @private2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x15c}}, {{&(0x7f0000002040)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000003400)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)="c25029170ae27ee74d412aa8dfb204a379c3d490c36f0bd3853636522adfe36e14f4a07fd089eb6a7361fa85adf323e8b7dd5eb15d019271a1296c42db06187d5ec41da346efe505fc7799f33ee3c7ec752e89879fcd377f720f0cf87f2e2bdcc55d31a94e063f308de4f008215013a424da922343e6e5fa9d84075d391ff1d556ef9dafa57ae9d73fd7ac3f7f389d1d975868e9aac2eff206c1c520f040e85f168b923e874826b0bc2cecbb352e44ae2f3acef01e9d551ed0e1", 0xba}, {&(0x7f00000021c0)="1bb914f416fd4f3a0c1dcd7a48cfda7b1a958f836a2d8bc99d18b248927ba661d156884c71d53e6783d7f491db8744f1dc7d9b66e10580fb1578b4a120590159c36267c15700c79e49af7dfd50d2aae5904025f6ffb9b46de24406afecc2f8596eeae1da10d4fb9993f39848ee59133e73d607defd059bb62d47eec158369975faa972a15a18af2bb6907d1003204a7327af74b030bea517fb796989f345050dd55e8b7622428d14b32abc4136d2635d7686bc7f681bbb95f3540c821ff32778a4b0b0550742efa7b6f63fddfe14ce4f5d3fba6efadf09bcce9354790dd70bae0744a218ecb4e8ea3e258bf8a658254149c7610d8bfc7f09d48a3360458315eb8250eb04f4af6a39657cf862f294535e1be3583cc8c32d9fc0d6b4894707d8fef39023f554ba57e4515487c85da5d72139397f184d167bb881024894d42448b8ed2f6b517331cf03d3edcc68063adbd68980db2351964e16b6e637ff71648cbdd6a474946c7e63283039d58e06577319d7bb1e417abdab5295e04cd335fdbe384611e30a246927eccfc7361559ff0891d93be193efc61bd1f8d7e887a80466d7a8e171c5da47c98896e2c6aab49b25b81178d74e4bb306fd2087aff37789fc4341e59ab020e8eb44805dc76d7da5a01b9c8c688eb3b9a0f03a2898694941f0d567da9e7e8c9e26f9a2d390cb130116ef75f4bad1a27453b622bd979b049fd8546c268cbe3f344a8548041818504ea466fe2775c69617f2501f60197c6950ce734ff13a47d97768a78997158c368787119b11277b5d3d6519d4445b498d7e95170998500aaa8b9dc4de32bf7481905a77fc9c5fa62063506d58f1bdad250eacf6909d75f121a0d15a34836080cf4ce0a6526627dfc2f8470040e281680aadb8456f60089017b8242e2a8971285a7aee9ab6e277c40fa4643d648469576f5b59cbf341fd3993b764658175d4395a52eaf718ced8717f8eb5abcd9c92b36dadf494a3f252e823474d99f1b8d09e4c8ac7701948c397b6bc9f198c6f1f20a4171b9bc40e2ec3a763e55681b8389b8994b41784db8bcf3d31b521730b5d8311190eeb4d006add132f8807e0dffece6d68fc4eda28a5f5dafac93dd95486370b78c74916af7c7d0986bfa9465e3d1891389f2cb2095f3427e334373bdd10236441358e563e2a142f4628a33f603c01a1b3bfdfdf6aa6db072994714f119205f8967cddc7e7a054558a9db5e95054b042786cc8dae8da3db44f409130e80ca887a84ad337755c7c9919dc9855c8aadf0de1cef17eee7855a69271a631721e464da332dcca2134eaf6dfa7372a30ed70924a31e24cce654ed0e1ce1a4bb874469ee610c19b8c6244efe2b7e5e4a22b980ae0c6cc50c134cda5ce99e27a3e8b059c0ac30e82fc53e800dda86ee1c385791faca8f4d7a6a11d89c334dd2e6a3fe1a0f06c5df9f6a0661606ba4c043ab5121f36d11f63254fb591192da88e90d276586aab3e3374d9c6dec63f4a9ba1c204dcab9363d57f3e3036a977fad2dfc7875a810e06075087ecd24eddd60bcba924247a30ab82110fcc8983fd4b60d7fb41a07a082b066c29e51051afdd756729e3539cfc7a043dae366b48dabc1503ccbe0011ecbbb91430b3b51df6ca294675422f0fb9e6e55ff1bab9fe33b1ddb012385da3f9d78acff923e044574fd8f1e79fd7a71a2e7829c8544e464c0029e7de127e3e41c180c1c087efa13c029eab3844927e8c6227c36b253d36e2f8c8660b3546c325352d58524b86cafdc36cec66e6808ba579f1fac1628c641a0df34b1bf5d479789c35d4df35d5ee28b55202a399338ae7842bd1671ff4ccb287e997ed22bf14ca7512b60d72fddeb31e605e2e1e0020dbc587f70b8f827ddfcbbabbc2661bf74758720442e6931b00f8b20b7a511b0e9892e29320c51e887050e1684fba3d32657eabedee22fc118add2a5ea669a99dc9e254ab6203dfda8f8931fc9e345b1be5132a81bab7bd2bf1211a531b5ef79f3d9ec519495797e95432a73a6ad984659d0f240f732101e2a2721119b2b4ec1c83d84230aa004c75b5a6616bf6df365385e216187e1ddfebfc36507e98208bea071baa5aff74d630336debaa53c0ecdd52c3d8843f053f19cf38c07245181714b5a424a6adf9def8712f368b33b489b2676f9b25e5b841349c453de0bbad3f065bc46b9b23af17a408736ec7484180434b82118e165601abb2962a1430f80386e01b374684b34196c12e5cec64cb29c42f5dc1dadf0c6d2aecc18f4034e213c3ec1efe1322cba9c8f92e62f1ec1b41886b918882f936cbd8d5758a977b6ef00f52c9a4fba2803c29ba196dfcd4fed355dbfd572e7240c91f252b2bf4007be0ef7ebb9369b2f1603425c300e2da75df05a645ef4c051ca574bf5ffe505e8e54b510202033dbfca4fe2d02490d5a522ef44889456c15ba52fc522b0e8b4e4a7c32ce8a20c44fea65b9a711391d3c983177a6c130da0eb492cdfa5cb460ed83cfa5c33722ca3ef90472cbace8d3aba3bc10ec40731dc98e3d36474a201e2a0b5ca4e0df99637a33fe8e34c62c1cf339ec81c8db862b22135153a6a71ea70cdbc00da673467cb3538ce4a47afd354a76bc28bc0e7389920a7e3e5a2d1ac3d2e456ce3d2057833c6c708837df0caa35095b8b6022f3de48f7b9d17e4b30068b1fa5290c9763efa2ee037d60be0c78ba3b82bb84647fb26da05ef0471b789c1ad51fae1a62f563bef4bea9ebdfe6ed5b1c732847f0bfd54f450d612cd8ce7b34f684789788d80f1223a516c5a1c84e0b9bc1ba34bc0d0f56d80e2fdb5761f07604f0f7d79d35a86ff595e1858428acc0aa656246f90bdb7b0c1557dbc265557b33376f166bda7a32a59ee600a2961e3a72e86db5e74796eb3fdba6e5ddc69a8797c03fe92f701e1e1503f3dca9b516fd605ee187f7f81781591efac58544c43c7f23f39d723686a0f84385c192517267f8b813d07ef78682f36d5c1c65ed434e618a71cde0b420837103ef6e91b84e775b97be3ed8463c3b7ea10dcd75c0c757750fb750cbbd178d5f9bc245ec1379480c63f1ac1d267945a49ab5148bd33c71bdc163d6bbab0465af371f1ea407dd6743994e0bdc3dd56f2b1faa6a7a201bcf6ee05f464604e1a1f90e068f8fc9ba96757ff009200bd146ddfc7a8b503844bcfbaa1383d8b7b08f9201c849485336ee4a59cbf42fcba7e83914ba0cb0782928a19ae41ed962bdccdc413b1adca53fcb5b38deb406b8e096d81a5d46fef3f5ad8f27f88ed61a2393903d08a82fea20edb58c08c82e9b86d97012561fea3504607a932d6ba7bb4801e613c60cfea3805d6ef7cab4ce4c443a32c53ee275f23ff5379e7c4af348357f86653808053898e60a7177b141fe7dafc1a74a3a8eafe359d400789ed73cc06f3a0dd5d3f991b40043f6d793d6f6df2adfb3426a63931f5508190965f29adaccd2893e2f11c11eb22de67d724a453e0ee4ee914d3867d9c2be12d76e635f7941e0b3578a762455242bf9408239244dd95bcb8c52c09555da3c9f8b886d0fadbf4a5b5c3997c8f37f3fb72e78028a2550ee8349e3c1e56e0b0df8732ee9928a9ca7e2ff99f39ed3459bc9e1d5deafb203d93d6d13e957d9364fd3d0668c16ca033beedfff0f4cfe906f495bb49be570fba1c019600a1f6025ddad63a6fed60a7c6e5297da4797f5afc6ddd92677823755173dee8971541fb395de0d358f487fead919c5e179942db1dea55363928934755a2d4b15cea0bf30a6495ba6225f1c93b2b484f4efa5ad44b7b5876f96efbd1a8e34d25b17bece332436944ac95c97d86e6474d4bcd6fb180e1be9885c781dcd392ea5a31c540f7f3d9fb45e266bc8af11d35c220686df35597c50b0b49f9bf8e2ee80cd4b3d7cca34e24a0c4050b2ad751e10786539de613d2e4ba9aee6555259ff6fe70cd339b040a38eea2407f0d4880ea1eeeb9e4cb2a55b04506bbe02b5bb514c7ab90f6e4225fb0f28dabf50ac11e0cdfddda4ee4eb540ddf0725e5da8ffb67930375309fa3a83cc346c4c7503fc6a0961b4400eab7ea9a29272a5bf4391285e485370c09649aafbb388354e14965358ca2eb11f7aec739214ed6fdf5704375fc4d56e41bcd9d7332a7eb51dc4b363d67affef8e74bcaf128941a9398da508d36f29f40627d7e4212e2bdff1a32d5541d1fe971b3d2aeeeb62960d97c99ead46eac7fbcb33b68a66ddd092f7a4337237abdbb53b19f1b450f55ca41a89575c0dead2e9dfb335d11b28ec750fd505b8c17a5fff3ebfc10c7520031f7b9161b788740c858fe67b46933e4488b228db982f81a92b866797be15d8", 0xbff}, {0x0}, {&(0x7f0000003200)="ac1d1cf19d45906f68c1dd6113c7f52a36e28747ec70422e8923892900f97440229182102e6f46b87f006e8853c18884acc070e724f9f802d19051a530358055ddd937e65e1143a87566c2ddf3dab6f3b3aab87e3a736d97c2cca3d85b680f1ac3b8715fdd96dd2e63fc6124dc786fa6f800691fbcfcfd99e1508b7ca5a9290fcaecb7b6305debcb706931e3779f02735dd229736a2f8d067ee123f2ca5e1e2281f5faeb8b832d24afca01e31edae77b51da78d2655a181e2aa4b2b08ba70ace7d69bb5ae70c9106d360fc9a87b26b5f52400bd4a5da16396d96", 0xda}, {&(0x7f0000003300)="55adcad98951b8e8318ea0364004e409b88606d62c4d8fb3b3c900e5352a8f16ffa42348474d7336dd2f4097b40f4dfa3d6699d285e4ebf7c60f5e33e4caf0aec7aeea29045a52a49022230c3a5dc15572b1314dffd5de6f71becd33079356929af34a6b34f7582a5adf14bcfee2eb3a93e238dd017605ac70401d7a7335f19af9624c69100dbbc3c1ba68bdbd0bebc61b7d6d30266216eade6de415f776130bcfae5979c3965c39e8bc426f95ea19f77efc17da1f417b3be587a77bdd07a03c1a70f43e8e", 0xc5}], 0x6, &(0x7f0000003440)=ANY=[@ANYBLOB="0000000029000000390000003b00010900000000fc01000000000000000000000000000100000000000000000000000000000000fe880100000000000000000000000001fe8000"/83]}}], 0x4, 0x4c040) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 2.064165536s ago: executing program 0 (id=4245): syz_open_dev$loop(&(0x7f0000000140), 0x3, 0x2a0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0xdd, 0x0, 0x1, [@nested={0x4, 0xb7}, @typed={0x8, 0x49, 0x0, 0x0, @fd=r3}]}]}]}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r5, 0x0, 0x4000) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r9 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r9, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x40) 1.590233646s ago: executing program 4 (id=4246): syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200045687430096078f290f58b3000008b804020240000102030109022463290900010106100609040008ff07"], &(0x7f0000000580)={0x0, 0x0, 0x8, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x141, 0x80, 0xe7, 0x39, 0x20, 0x3d88, 0x866, 0xe48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x98, 0x5, 0x2, 0x58, 0x42, 0x0, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x4d, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 1.128364522s ago: executing program 0 (id=4247): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001140000002f0600ac141430e0000001808a8972bd0b72e410", @ANYBLOB="ebe42bde4340155d7bfbd1ea2ac08cfa60206e362a491781d46bdc6478d751637183a55add08bbf1b9fb42afd58f9dfa39eda225888889"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) 1.070738847s ago: executing program 2 (id=4248): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r1 = memfd_create(&(0x7f00000002c0)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xbb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g\x00'/205, 0x0) ftruncate(r1, 0x80079a0) splice(r1, 0x0, r0, 0x0, 0x7, 0x7) r2 = socket(0x1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) (fail_nth: 8) 860.527029ms ago: executing program 0 (id=4249): r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x6, r2, 0x1, 0xf5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="070f", 0x2}, {&(0x7f0000001540)="20704e696119aed2", 0x8}], 0x2}, 0x4) 233.170599ms ago: executing program 0 (id=4250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x8, 0x0, 0x5, 0xe, 0x9, 0x5, 0x2fff, 0x14080a, 0x7, 0x3, 0x6, 0x4, 0x2abf34b, 0x9, 0xc, 0x96a], 0xdddd0000, 0x5f93}) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x4, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 164.317673ms ago: executing program 2 (id=4251): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000012000126000000000700074e23000000000000000000194b1cec000000000001000000fdffffff00000100"/56, @ANYRES32=0x0, @ANYBLOB="00000000ff7f000007"], 0x4c}, 0x1, 0x0, 0x0, 0x20000193}, 0x40000) 80.131638ms ago: executing program 5 (id=4252): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f00000000c0)='\x02~yT\b=\xc4U\xddmk\x184\x04\x8c\b):\x8b\x1bJ\xa9\xe4\x9e\xbb<\xc3\x9fFw\xc4\x98\xeb\x9f\xf9\xafK\a\xf6\xa9i\x1d\xd40T^\x9b\xe8s\x80\x143\x85\xb7\xa7V#\xeec\x1d\xc1\x83\xfa\x83\xfe\xfc\xd32\xa2#\xf8\x8e7@Xg\x9cam|\x89\xee7\xd1\xe2$\xfa\x12\xff\x8d\xd5[\x9a\xa0\xd4\x9eS\xdb\x04\x8f\xbd\xbd#<\xe8B\xa6\xc8-\xa0\x8c\xaa\xc4R<\xa9cAf\x05\xe6 \xf0e\x02\xc5\x84\xb6\xe1\x97\x9e63\xf3\xc1\xe8\x19\x94\xe7\xbf\xc1k\xee\x94\xf3\xc1s(\x87\xe6\x04.p\x98;\x91\xd8\x99L\x9e\"\x84*a', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)) request_key(&(0x7f0000000480)='id_resolver\x00', 0x0, &(0x7f0000001240)='\x00\xa8\xd8n\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89u\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xcf\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x01p\xa3LfvHf\xea\xd8\xfd\t<\xfe\xe7\x02F\xcaJT\xcd%\xf5\xf8t\x8d\xfb\x05\xef\x82\x8cYXo\x0f\x00\x00[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\xf3\xb2s\xdd\x8e\x97\xe7\xc7\xb9\xb1\x04\x89\xc6\xd3\xaap\x9e\x8b\x17\x0e5\x93\xc6\x04\x02\xff\xa2X\xd84.%\x02\x80\xa4\xfad\xa5?0\x87\xc6\xaf\x92\xb5\xbe`h`\x16C\xd7X\xc4c&\x96]\xae\xc71\"\xa2\xb5Z\xd9M_\xe2\xec\xbb\xeap\xb8\x8a\xe1y\xbf>\x19\xdc/#\x9dV\x9d$<\xff\f\xe6\xaahP\x81D\x16C\x05\xe77\xb8\xbc\xaeBB\xfe\x99\x00\xe4\xdd\xc3\xaa\xe9\x12\xbaf\xe0\xd7\xc9\x90\xbe\x88!F\xfa\xc6\xeb\x12\x97\x99\xfb\x1fp&E\xc8\xa2s\xf3a\x05\x1a\x92\xe90\xb8\x80\xa2M\xffq\xe6\x13\xf604D\xb5\xba\x822\x91\x00\x00\x00\xd6\x80\x1d\xa1\xa6\xf9\x8b\x00\x00\xdd*\xfe\xec\xeb_\x99\xaf\x86\xbeV\xaa\xf0?\xb6\xfa$T\xd5|\x8a\x9d\xee\x02\x8aq\xb1\x12\xf4\xc9\f\x9d\x9b\x83\xd0!\x95\x15`\xa73\x86V_\xb2wy\x14\xa0\xa9\x996n\b+\xccQ\xd6\x8d\xeb\xd6w\xc7\x1cXv3\xc5\xab\xcd\x99U\xf4\x87\xednb;\xc6!\xc1X\xff\xd0\xac6\x88P\xaa\xd4\xb6\xb0\xca6\xb3b\b\xd1eO\x0e\x17X\xae\xd5\xe9.\xd3\a\x00W\xd7\n\x10\xdb\xdal1P\xb3\xfb7\\\x85N\xd7\\\xa5\r\b\x18\x9an)1\xeb\xb9\x13\x88\x84\xbac3\xff\t\x9d\xde\xc1\xc8\xf3MF\x9a\x96\a\xa73H\x13\x1f\xec\r\xbf\x94\b.\xc55\xbb\x91_\xba\xdc?O\xc5\xe8\xabd\x18\x90\xc5\xff~^\x16A\x01\v4\b\x8fs\x8f]\v\xaa\xb0\xf9\xb9aj\xb2\xd1[\xc1\xb7.\xc2\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00IO~\x10!\xb1\xf7\xb9\xfe+MJ\xfd\x17lq(\xeb\x1ar\x19q\xda\xf6\x92\xd0\x88\x8f\x18bS\x7f_\x8e5\x02T\xc3\x85\xc1\xa6OT\xb9j\xdd\xaf\x0e\x12p\xedQ\xcf\x10\xa5?\xcc\x8a`T\xac\xf8X*U\xf1\x8f\x1c\x82lmLb\x86\x83P\xcd\x178\xdc\xa8\xa6\x1d\x18p{N\x95\xec\xd0\xf0\xbd\xae\x80\xd8\a\xb9v\xc4', r1) add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x81) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x10001, 0x4) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)}}], 0x1, 0x20008000) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x88}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800}, 0x1c) 0s ago: executing program 1 (id=4253): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f00000000c0)='\x02~yT\b=\xc4U\xddmk\x184\x04\x8c\b):\x8b\x1bJ\xa9\xe4\x9e\xbb<\xc3\x9fFw\xc4\x98\xeb\x9f\xf9\xafK\a\xf6\xa9i\x1d\xd40T^\x9b\xe8s\x80\x143\x85\xb7\xa7V#\xeec\x1d\xc1\x83\xfa\x83\xfe\xfc\xd32\xa2#\xf8\x8e7@Xg\x9cam|\x89\xee7\xd1\xe2$\xfa\x12\xff\x8d\xd5[\x9a\xa0\xd4\x9eS\xdb\x04\x8f\xbd\xbd#<\xe8B\xa6\xc8-\xa0\x8c\xaa\xc4R<\xa9cAf\x05\xe6 \xf0e\x02\xc5\x84\xb6\xe1\x97\x9e63\xf3\xc1\xe8\x19\x94\xe7\xbf\xc1k\xee\x94\xf3\xc1s(\x87\xe6\x04.p\x98;\x91\xd8\x99L\x9e\"\x84*a', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)) request_key(&(0x7f0000000480)='id_resolver\x00', 0x0, &(0x7f0000001240)='\x00\xa8\xd8n\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89u\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xcf\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x01p\xa3LfvHf\xea\xd8\xfd\t<\xfe\xe7\x02F\xcaJT\xcd%\xf5\xf8t\x8d\xfb\x05\xef\x82\x8cYXo\x0f\x00\x00[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\xf3\xb2s\xdd\x8e\x97\xe7\xc7\xb9\xb1\x04\x89\xc6\xd3\xaap\x9e\x8b\x17\x0e5\x93\xc6\x04\x02\xff\xa2X\xd84.%\x02\x80\xa4\xfad\xa5?0\x87\xc6\xaf\x92\xb5\xbe`h`\x16C\xd7X\xc4c&\x96]\xae\xc71\"\xa2\xb5Z\xd9M_\xe2\xec\xbb\xeap\xb8\x8a\xe1y\xbf>\x19\xdc/#\x9dV\x9d$<\xff\f\xe6\xaahP\x81D\x16C\x05\xe77\xb8\xbc\xaeBB\xfe\x99\x00\xe4\xdd\xc3\xaa\xe9\x12\xbaf\xe0\xd7\xc9\x90\xbe\x88!F\xfa\xc6\xeb\x12\x97\x99\xfb\x1fp&E\xc8\xa2s\xf3a\x05\x1a\x92\xe90\xb8\x80\xa2M\xffq\xe6\x13\xf604D\xb5\xba\x822\x91\x00\x00\x00\xd6\x80\x1d\xa1\xa6\xf9\x8b\x00\x00\xdd*\xfe\xec\xeb_\x99\xaf\x86\xbeV\xaa\xf0?\xb6\xfa$T\xd5|\x8a\x9d\xee\x02\x8aq\xb1\x12\xf4\xc9\f\x9d\x9b\x83\xd0!\x95\x15`\xa73\x86V_\xb2wy\x14\xa0\xa9\x996n\b+\xccQ\xd6\x8d\xeb\xd6w\xc7\x1cXv3\xc5\xab\xcd\x99U\xf4\x87\xednb;\xc6!\xc1X\xff\xd0\xac6\x88P\xaa\xd4\xb6\xb0\xca6\xb3b\b\xd1eO\x0e\x17X\xae\xd5\xe9.\xd3\a\x00W\xd7\n\x10\xdb\xdal1P\xb3\xfb7\\\x85N\xd7\\\xa5\r\b\x18\x9an)1\xeb\xb9\x13\x88\x84\xbac3\xff\t\x9d\xde\xc1\xc8\xf3MF\x9a\x96\a\xa73H\x13\x1f\xec\r\xbf\x94\b.\xc55\xbb\x91_\xba\xdc?O\xc5\xe8\xabd\x18\x90\xc5\xff~^\x16A\x01\v4\b\x8fs\x8f]\v\xaa\xb0\xf9\xb9aj\xb2\xd1[\xc1\xb7.\xc2\xfd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00IO~\x10!\xb1\xf7\xb9\xfe+MJ\xfd\x17lq(\xeb\x1ar\x19q\xda\xf6\x92\xd0\x88\x8f\x18bS\x7f_\x8e5\x02T\xc3\x85\xc1\xa6OT\xb9j\xdd\xaf\x0e\x12p\xedQ\xcf\x10\xa5?\xcc\x8a`T\xac\xf8X*U\xf1\x8f\x1c\x82lmLb\x86\x83P\xcd\x178\xdc\xa8\xa6\x1d\x18p{N\x95\xec\xd0\xf0\xbd\xae\x80\xd8\a\xb9v\xc4', r1) add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x81) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x10001, 0x4) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)}}], 0x1, 0x20008000) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x88}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x800}, 0x1c) kernel console output (not intermixed with test programs): endmsg+0x183/0x260 [ 856.275232][T19366] ? __pfx___sys_sendmsg+0x10/0x10 [ 856.275276][T19366] __do_fast_syscall_32+0x20d/0x640 [ 856.275296][T19366] ? do_fast_syscall_32+0x33/0x70 [ 856.275312][T19366] ? asm_int80_emulation+0x1a/0x20 [ 856.275329][T19366] ? do_int80_emulation+0x274/0x4d0 [ 856.275345][T19366] ? trace_irq_disable+0x3b/0x150 [ 856.275374][T19366] do_fast_syscall_32+0x33/0x70 [ 856.275392][T19366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 856.275415][T19366] RIP: 0023:0xf7f27f6c [ 856.275432][T19366] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 856.275446][T19366] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 856.275467][T19366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 856.275480][T19366] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 856.275491][T19366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 856.275502][T19366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 856.275513][T19366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 856.275540][T19366] [ 857.107055][ T5873] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 857.123910][ T5923] usb 6-1: USB disconnect, device number 99 [ 857.131303][ T5923] em28xx 6-1:0.132: Disconnecting em28xx [ 857.135575][ T5873] em28xx 6-1:0.132: No AC97 audio processor [ 857.172362][ T5873] usb 6-1: Decoder not found [ 857.177142][ T5873] em28xx 6-1:0.132: failed to create media graph [ 857.184532][ T5873] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 857.217206][ T5873] em28xx 6-1:0.132: Remote control support is not available for this card. [ 857.259395][ T5923] em28xx 6-1:0.132: Closing input extension [ 857.332063][ T5923] em28xx 6-1:0.132: Freeing device [ 857.710129][T19392] netlink: zone id is out of range [ 857.715467][T19392] netlink: zone id is out of range [ 857.740121][T19392] netlink: zone id is out of range [ 857.757261][T19392] netlink: zone id is out of range [ 857.762533][T19392] netlink: zone id is out of range [ 857.767715][T19392] netlink: zone id is out of range [ 857.772945][T19392] netlink: zone id is out of range [ 857.779620][T19392] netlink: zone id is out of range [ 857.785974][T19392] netlink: zone id is out of range [ 857.972946][T19396] tipc: Started in network mode [ 857.987852][T19396] tipc: Node identity 8a23bfbcf93a, cluster identity 4711 [ 858.020715][T19396] tipc: Enabled bearer , priority 0 [ 858.052784][T19396] tipc: Disabling bearer [ 858.158732][T19403] __nla_validate_parse: 1 callbacks suppressed [ 858.158746][T19403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3773'. [ 858.360132][ T56] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 858.638929][T19413] netlink: 'syz.1.3776': attribute type 2 has an invalid length. [ 858.670090][ T56] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 858.679984][ T56] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.694766][ T56] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 858.706038][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.926204][ T56] usb 1-1: usb_control_msg returned -32 [ 858.938565][ T56] usbtmc 1-1:16.0: can't read capabilities [ 859.379846][ T5923] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 859.543625][ T5923] usb 5-1: no configurations [ 859.548528][ T5923] usb 5-1: can't read configurations, error -22 [ 859.689780][ T5923] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 859.882122][ T5923] usb 5-1: no configurations [ 859.886760][ T5923] usb 5-1: can't read configurations, error -22 [ 859.895324][ T5923] usb usb5-port1: attempt power cycle [ 860.259949][ T5923] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 860.310794][ T5923] usb 5-1: no configurations [ 860.315469][ T5923] usb 5-1: can't read configurations, error -22 [ 860.509771][ T5923] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 860.545358][ T5923] usb 5-1: no configurations [ 860.550635][ T5923] usb 5-1: can't read configurations, error -22 [ 860.558032][ T5923] usb usb5-port1: unable to enumerate USB device [ 861.114813][ T5888] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 861.158857][ T5873] usb 1-1: USB disconnect, device number 90 [ 861.340573][ T5888] usb 6-1: Using ep0 maxpacket: 8 [ 861.446653][ T5888] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 861.472609][ T5888] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 861.484351][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.538146][ T5888] usb 6-1: Product: syz [ 861.553490][ T5888] usb 6-1: Manufacturer: syz [ 861.565805][ T5888] usb 6-1: SerialNumber: syz [ 861.644826][ T5888] usb 6-1: config 0 descriptor?? [ 861.659972][ T5888] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 861.696725][ T5888] usb 6-1: setting power ON [ 861.703739][ T5888] dvb-usb: bulk message failed: -22 (2/0) [ 861.717479][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 861.749520][ T5888] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 861.779145][ T5888] usb 6-1: media controller created [ 861.816988][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 861.874414][ T5888] usb 6-1: selecting invalid altsetting 6 [ 861.881426][ T5888] usb 6-1: digital interface selection failed (-22) [ 861.888134][ T5888] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 861.910628][ T5888] usb 6-1: setting power OFF [ 861.915551][ T5888] dvb-usb: bulk message failed: -22 (2/0) [ 861.924001][ T5888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 861.945665][ T5888] (NULL device *): no alternate interface [ 862.086374][ T5888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 862.517440][T19476] netlink: 'syz.2.3795': attribute type 9 has an invalid length. [ 862.561948][T19476] netlink: 'syz.2.3795': attribute type 11 has an invalid length. [ 862.573258][T19476] netlink: 'syz.2.3795': attribute type 12 has an invalid length. [ 862.590943][T19476] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3795'. [ 862.624693][T19476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3795'. [ 862.802030][T19486] warning: `syz.4.3796' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 862.949910][ T5888] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 862.971049][T19489] net_ratelimit: 161 callbacks suppressed [ 862.971061][T19489] netlink: zone id is out of range [ 863.004481][T19489] netlink: zone id is out of range [ 863.020965][T19489] netlink: zone id is out of range [ 863.026292][T19489] netlink: zone id is out of range [ 863.032095][T19489] netlink: zone id is out of range [ 863.042124][T19489] netlink: zone id is out of range [ 863.049908][T19489] netlink: zone id is out of range [ 863.056291][T19489] netlink: zone id is out of range [ 863.066315][T19489] netlink: zone id is out of range [ 863.071880][T19489] netlink: zone id is out of range [ 863.130079][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 863.137932][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 863.145591][ T5888] usb 1-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 863.155072][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.176136][ T5888] usb 1-1: config 0 descriptor?? [ 863.576609][T19494] syzkaller0: entered promiscuous mode [ 863.582268][T19494] syzkaller0: entered allmulticast mode [ 863.601697][ T5888] hid (null): invalid report_count 13573 [ 863.628103][ T24] usb 6-1: USB disconnect, device number 100 [ 863.674065][ T5888] chicony 0003:04F2:1236.0035: invalid report_count 13573 [ 863.682105][ T5888] chicony 0003:04F2:1236.0035: item 0 2 1 9 parsing failed [ 863.750992][ T5888] chicony 0003:04F2:1236.0035: Chicony hid parse failed: -22 [ 863.758489][ T5888] chicony 0003:04F2:1236.0035: probe with driver chicony failed with error -22 [ 863.844974][T19480] loop2: detected capacity change from 0 to 7 [ 863.946055][ T5951] Dev loop2: unable to read RDB block 7 [ 863.952937][ T5951] loop2: AHDI p1 p2 [ 863.959273][ T5951] loop2: partition table partially beyond EOD, truncated [ 864.225236][T19503] tipc: Started in network mode [ 864.270315][T19503] tipc: Node identity fe800000000000000000000000000018, cluster identity 4711 [ 864.283484][T19503] tipc: Enabled bearer , priority 10 [ 864.335610][T19498] syz.5.3801 (19498): drop_caches: 2 [ 864.530259][ T5951] loop2: p1 start 926365495 is beyond EOD, truncated [ 864.548021][T19480] Dev loop2: unable to read RDB block 7 [ 864.557387][T19480] loop2: AHDI p1 p2 [ 864.567604][T19480] loop2: partition table partially beyond EOD, truncated [ 864.666706][T19480] loop2: p1 start 926365495 is beyond EOD, truncated [ 864.876825][T19509] FAULT_INJECTION: forcing a failure. [ 864.876825][T19509] name failslab, interval 1, probability 0, space 0, times 0 [ 864.980163][T19509] CPU: 0 UID: 0 PID: 19509 Comm: syz.1.3804 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.980194][T19509] Tainted: [L]=SOFTLOCKUP [ 864.980201][T19509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.980210][T19509] Call Trace: [ 864.980218][T19509] [ 864.980226][T19509] dump_stack_lvl+0xe8/0x150 [ 864.980255][T19509] should_fail_ex+0x412/0x560 [ 864.980282][T19509] should_failslab+0xa8/0x100 [ 864.980307][T19509] __kmalloc_node_noprof+0xf0/0x7c0 [ 864.980327][T19509] ? qdisc_alloc+0x92/0x9e0 [ 864.980351][T19509] qdisc_alloc+0x92/0x9e0 [ 864.980372][T19509] ? __kasan_kmalloc+0x93/0xb0 [ 864.980395][T19509] qdisc_create_dflt+0x8e/0x510 [ 864.980419][T19509] qfq_change_class+0x70a/0x14b0 [ 864.980448][T19509] ? __pfx_qfq_change_class+0x10/0x10 [ 864.980474][T19509] ? lockdep_rtnl_is_held+0x26/0x40 [ 864.980501][T19509] ? qdisc_lookup+0x179/0x6d0 [ 864.980530][T19509] tc_ctl_tclass+0xb7e/0x1690 [ 864.980564][T19509] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 864.980582][T19509] ? trace_contention_end+0x3d/0x150 [ 864.980613][T19509] ? __mutex_lock+0x319/0x1300 [ 864.980637][T19509] ? __local_bh_enable_ip+0xd0/0x130 [ 864.980663][T19509] ? __dev_queue_xmit+0x274/0x38a0 [ 864.980726][T19509] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 864.980745][T19509] rtnetlink_rcv_msg+0x77e/0xbe0 [ 864.980773][T19509] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 864.980795][T19509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 864.980822][T19509] ? ref_tracker_free+0x693/0x840 [ 864.980843][T19509] ? __copy_skb_header+0xa3/0x4a0 [ 864.980872][T19509] ? __pfx_ref_tracker_free+0x10/0x10 [ 864.980893][T19509] ? __skb_clone+0x63/0x7a0 [ 864.980923][T19509] netlink_rcv_skb+0x232/0x4b0 [ 864.980946][T19509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 864.980968][T19509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.981001][T19509] ? netlink_deliver_tap+0x2e/0x1b0 [ 864.981030][T19509] netlink_unicast+0x80f/0x9b0 [ 864.981059][T19509] ? __pfx_netlink_unicast+0x10/0x10 [ 864.981090][T19509] ? netlink_sendmsg+0x650/0xb40 [ 864.981110][T19509] ? skb_put+0x11b/0x210 [ 864.981138][T19509] netlink_sendmsg+0x813/0xb40 [ 864.981170][T19509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.981196][T19509] ? aa_sock_msg_perm+0xf1/0x1b0 [ 864.981219][T19509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.981242][T19509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.981263][T19509] ____sys_sendmsg+0xa68/0xad0 [ 864.981299][T19509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.981330][T19509] ? kstrtoull+0x12f/0x1d0 [ 864.981358][T19509] ___sys_sendmsg+0x2a5/0x360 [ 864.981390][T19509] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.981419][T19509] ? get_pid_task+0x20/0x1f0 [ 864.981436][T19509] ? get_pid_task+0x20/0x1f0 [ 864.981451][T19509] ? get_pid_task+0x20/0x1f0 [ 864.981491][T19509] ? __fget_files+0x2a/0x420 [ 864.981516][T19509] ? __fget_files+0x3a0/0x420 [ 864.981551][T19509] __sys_sendmsg+0x183/0x260 [ 864.981580][T19509] ? __pfx___sys_sendmsg+0x10/0x10 [ 864.981627][T19509] __do_fast_syscall_32+0x20d/0x640 [ 864.981647][T19509] ? do_fast_syscall_32+0x33/0x70 [ 864.981664][T19509] ? asm_int80_emulation+0x1a/0x20 [ 864.981682][T19509] ? do_int80_emulation+0x274/0x4d0 [ 864.981708][T19509] ? trace_irq_disable+0x3b/0x150 [ 864.981738][T19509] do_fast_syscall_32+0x33/0x70 [ 864.981767][T19509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 864.981789][T19509] RIP: 0023:0xf7fb2f6c [ 864.981807][T19509] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 864.981824][T19509] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 864.981844][T19509] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 864.981858][T19509] RDX: 00000000040408c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 864.981869][T19509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 864.981880][T19509] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 864.981891][T19509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 864.981919][T19509] [ 865.388785][ T5873] tipc: Node number set to 4269801496 [ 865.606607][ T5923] usb 1-1: USB disconnect, device number 91 [ 865.671327][T19519] netlink: 'syz.1.3808': attribute type 10 has an invalid length. [ 865.679231][T19519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3808'. [ 865.688643][T19519] bridge0: port 3(ipvlan1) entered blocking state [ 865.696516][T19519] bridge0: port 3(ipvlan1) entered disabled state [ 865.703309][T19519] ipvlan1: entered allmulticast mode [ 865.708614][T19519] veth0_vlan: entered allmulticast mode [ 865.716473][T19519] ipvlan1: left allmulticast mode [ 865.721634][ T5888] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 865.734872][T19519] veth0_vlan: left allmulticast mode [ 865.929928][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 865.937078][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.948408][ T5888] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 865.957759][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.971793][ T5888] usb 5-1: config 0 descriptor?? [ 866.109977][ T5923] usb 1-1: new low-speed USB device number 92 using dummy_hcd [ 866.272361][ T5923] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 866.280551][ T5923] usb 1-1: config 0 has no interface number 0 [ 866.286880][ T5923] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 866.308163][ T5923] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 866.328898][ T5923] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 866.347083][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.364729][ T5923] usb 1-1: config 0 descriptor?? [ 866.386609][ T5923] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 866.403309][T19513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.412944][T19513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.471197][T19533] usb 1-1: USB disconnect, device number 92 [ 866.750788][ T5888] usbhid 5-1:0.0: can't add hid device: -71 [ 866.756810][ T5888] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 866.829984][ T5888] usb 5-1: USB disconnect, device number 106 [ 866.917150][T19539] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 868.509076][T19564] netlink: 'syz.2.3819': attribute type 1 has an invalid length. [ 868.654860][T19567] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 868.744728][T19564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3819'. [ 868.771685][T19564] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 868.822123][T19564] bond1 (unregistering): Released all slaves [ 869.137683][T19587] net_ratelimit: 161 callbacks suppressed [ 869.137698][T19587] netlink: zone id is out of range [ 869.149320][T19587] netlink: zone id is out of range [ 869.499978][T19587] netlink: zone id is out of range [ 869.507039][T19587] netlink: zone id is out of range [ 869.522741][T19587] netlink: zone id is out of range [ 869.538104][T19587] netlink: zone id is out of range [ 869.543648][T19587] netlink: zone id is out of range [ 869.550399][T19587] netlink: zone id is out of range [ 869.569872][T19587] netlink: zone id is out of range [ 869.575142][T19587] netlink: zone id is out of range [ 869.840168][ T5923] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 869.994463][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 870.047383][ T5923] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 870.059090][ T5923] usb 5-1: config 0 has no interface number 0 [ 870.094660][ T5923] usb 5-1: config 0 interface 125 has no altsetting 0 [ 870.112110][ T5923] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 870.121987][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.141843][ T5923] usb 5-1: Product: syz [ 870.154347][ T5923] usb 5-1: Manufacturer: syz [ 870.167366][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.174060][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.185754][ T5923] usb 5-1: SerialNumber: syz [ 870.205465][ T5923] usb 5-1: config 0 descriptor?? [ 870.362352][T19609] syz.2.3832 (19609): drop_caches: 2 [ 870.382454][T19609] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3832'. [ 870.552250][ T5923] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 871.349880][ T56] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 871.359804][ T5923] usb 5-1: reset high-speed USB device number 107 using dummy_hcd [ 871.522927][ T56] usb 6-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 871.533833][ T56] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.546751][ T56] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 871.565771][ T56] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 871.576583][ T56] usb 6-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 871.592114][ T56] usb 6-1: Product: syz [ 871.682140][ T56] usb 6-1: Manufacturer: syz [ 871.729971][ T56] usb 6-1: SerialNumber: syz [ 871.774091][ T56] usb 6-1: config 0 descriptor?? [ 871.804968][ T56] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 872.019001][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3843'. [ 872.030871][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3843'. [ 872.041265][T19635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3843'. [ 872.164384][ T56] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 872.235933][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 872.269036][T19642] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3845'. [ 872.338822][ T5888] usb 6-1: USB disconnect, device number 101 [ 872.533464][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 872.533482][ T29] audit: type=1326 audit(1772021087.858:6581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19651 comm="syz.2.3846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 872.565858][T19653] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3847'. [ 872.567308][ T5923] ueagle-atm 5-1:0.125: usbatm_usb_probe: bind failed: -19! [ 872.577182][ T29] audit: type=1326 audit(1772021087.858:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19651 comm="syz.2.3846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 872.633722][ T29] audit: type=1326 audit(1772021087.858:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19651 comm="syz.2.3846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 872.680232][ T5923] usb 5-1: USB disconnect, device number 107 [ 872.698897][ T29] audit: type=1326 audit(1772021087.858:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19651 comm="syz.2.3846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 872.731516][ T29] audit: type=1326 audit(1772021087.858:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19651 comm="syz.2.3846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 872.755702][ T29] audit: type=1326 audit(1772021087.858:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19651 comm="syz.2.3846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 872.800223][ T56] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 872.808741][ T29] audit: type=1326 audit(1772021087.858:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19651 comm="syz.2.3846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 872.845990][ T29] audit: type=1326 audit(1772021087.858:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19651 comm="syz.2.3846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 872.876922][ T29] audit: type=1326 audit(1772021087.858:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19651 comm="syz.2.3846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 872.947190][ T29] audit: type=1326 audit(1772021087.858:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19651 comm="syz.2.3846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 872.982566][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 872.989337][ T56] usb 3-1: too many configurations: 42, using maximum allowed: 8 [ 873.012844][ T56] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 873.020657][ T56] usb 3-1: can't read configurations, error -61 [ 873.115182][T19675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3854'. [ 873.160027][ T56] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 873.308825][T19684] netlink: 'syz.0.3856': attribute type 4 has an invalid length. [ 873.338649][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 873.359513][T19685] netlink: 'syz.5.3857': attribute type 4 has an invalid length. [ 873.387812][ T56] usb 3-1: too many configurations: 42, using maximum allowed: 8 [ 873.400248][ T56] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 873.492329][ T56] usb 3-1: can't read configurations, error -61 [ 873.505775][ T56] usb usb3-port1: attempt power cycle [ 874.349820][ T56] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 874.429757][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 874.518342][ T56] usb 3-1: too many configurations: 42, using maximum allowed: 8 [ 874.615987][ T56] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 874.683124][ T56] usb 3-1: can't read configurations, error -61 [ 874.904335][T19701] net_ratelimit: 160 callbacks suppressed [ 874.904348][T19701] netlink: zone id is out of range [ 874.915470][T19701] netlink: zone id is out of range [ 874.920940][T19701] netlink: zone id is out of range [ 874.929937][T19701] netlink: zone id is out of range [ 874.935059][T19701] netlink: zone id is out of range [ 874.960311][ T56] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 874.992559][T19701] netlink: zone id is out of range [ 874.997827][T19701] netlink: zone id is out of range [ 875.003278][T19701] netlink: zone id is out of range [ 875.005181][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 875.013688][T19701] netlink: zone id is out of range [ 875.014609][ T56] usb 3-1: too many configurations: 42, using maximum allowed: 8 [ 875.169497][T19707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3862'. [ 875.205188][T19701] netlink: zone id is out of range [ 875.217772][ T56] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 875.225615][ T56] usb 3-1: can't read configurations, error -61 [ 875.234821][ T56] usb usb3-port1: unable to enumerate USB device [ 875.859911][ T5888] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 876.115746][ T5888] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 876.123080][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3871'. [ 876.129046][ T5888] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 876.159837][ T5888] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 876.215139][ T5888] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 876.224633][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.259066][ T5888] usb 6-1: Product: syz [ 876.268437][ T5888] usb 6-1: Manufacturer: syz [ 876.287705][ T5888] usb 6-1: SerialNumber: syz [ 876.324615][T19717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 876.563183][T19738] netlink: 'syz.1.3872': attribute type 4 has an invalid length. [ 876.587072][T19717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 876.595641][T19739] netlink: 'syz.0.3873': attribute type 9 has an invalid length. [ 876.604248][T19717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 876.616198][T19739] netlink: 'syz.0.3873': attribute type 11 has an invalid length. [ 876.631038][T19739] netlink: 'syz.0.3873': attribute type 12 has an invalid length. [ 876.657955][T19739] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.3873'. [ 877.284988][T19717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 877.380006][T19717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 877.682400][ T5888] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 877.688983][ T5888] cdc_ncm 6-1:1.0: setting rx_max = 16384 [ 877.993625][T19748] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3878'. [ 878.022872][T19748] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3878'. [ 878.050014][T19748] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3878'. [ 878.345157][T19758] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 879.173151][ T5888] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 879.194904][ T5888] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 879.219151][ T5888] usb 6-1: USB disconnect, device number 102 [ 879.227148][ T5888] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 879.450126][ T10] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 879.600441][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 879.613038][ T10] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 879.662130][ T10] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 879.684382][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.713753][ T10] usb 5-1: Product: syz [ 879.723577][ T10] usb 5-1: Manufacturer: syz [ 879.738207][ T10] usb 5-1: SerialNumber: syz [ 879.757259][ T10] usb 5-1: config 0 descriptor?? [ 879.780730][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 879.808730][ T10] usb 5-1: setting power ON [ 879.822153][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 879.844523][T19791] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3889'. [ 879.858479][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 879.883567][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 879.893795][T19791] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3889'. [ 879.913085][ T10] usb 5-1: media controller created [ 879.939495][T19791] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3889'. [ 880.005567][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 880.052655][ T10] usb 5-1: selecting invalid altsetting 6 [ 880.061332][ T10] usb 5-1: digital interface selection failed (-22) [ 880.076748][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 880.103039][ T10] usb 5-1: setting power OFF [ 880.108995][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 880.115088][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 880.129207][ T10] (NULL device *): no alternate interface [ 880.275424][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 880.538802][T19800] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 880.667248][T19809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3893'. [ 880.684426][T19809] netlink: 'syz.1.3893': attribute type 21 has an invalid length. [ 881.289897][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 881.289917][ T29] audit: type=1326 audit(1772021096.608:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19815 comm="syz.5.3898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 881.319656][T19821] net_ratelimit: 161 callbacks suppressed [ 881.325552][T19821] netlink: zone id is out of range [ 881.335732][T19821] netlink: zone id is out of range [ 881.342171][T19821] netlink: zone id is out of range [ 881.412583][T19821] netlink: zone id is out of range [ 881.485636][ T29] audit: type=1326 audit(1772021096.608:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19815 comm="syz.5.3898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 881.507942][T19821] netlink: zone id is out of range [ 881.518830][T19821] netlink: zone id is out of range [ 881.527013][T19821] netlink: zone id is out of range [ 881.532433][T19821] netlink: zone id is out of range [ 881.537940][T19821] netlink: zone id is out of range [ 881.544222][T19821] netlink: zone id is out of range [ 881.550558][ T29] audit: type=1326 audit(1772021096.728:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19815 comm="syz.5.3898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f18f6c code=0x7ffc0000 [ 881.580666][ T29] audit: type=1326 audit(1772021096.728:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19815 comm="syz.5.3898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 881.652276][ T5888] usb 5-1: USB disconnect, device number 108 [ 881.741230][ T29] audit: type=1326 audit(1772021096.728:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19815 comm="syz.5.3898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 881.891272][ T29] audit: type=1326 audit(1772021096.748:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19815 comm="syz.5.3898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 881.964361][ T29] audit: type=1326 audit(1772021096.748:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19815 comm="syz.5.3898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 882.018076][ T29] audit: type=1326 audit(1772021096.748:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19815 comm="syz.5.3898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 882.068325][ T29] audit: type=1326 audit(1772021096.748:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19815 comm="syz.5.3898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 882.105841][ T29] audit: type=1326 audit(1772021096.748:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19815 comm="syz.5.3898" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f18f78 code=0x7ffc0000 [ 882.214573][T19837] FAULT_INJECTION: forcing a failure. [ 882.214573][T19837] name failslab, interval 1, probability 0, space 0, times 0 [ 882.248003][T19837] CPU: 0 UID: 0 PID: 19837 Comm: syz.1.3903 Tainted: G L syzkaller #0 PREEMPT(full) [ 882.248041][T19837] Tainted: [L]=SOFTLOCKUP [ 882.248049][T19837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 882.248061][T19837] Call Trace: [ 882.248068][T19837] [ 882.248077][T19837] dump_stack_lvl+0xe8/0x150 [ 882.248105][T19837] should_fail_ex+0x412/0x560 [ 882.248132][T19837] should_failslab+0xa8/0x100 [ 882.248155][T19837] ? skb_clone+0x212/0x3a0 [ 882.248188][T19837] kmem_cache_alloc_noprof+0x87/0x650 [ 882.248226][T19837] skb_clone+0x212/0x3a0 [ 882.248256][T19837] __netlink_deliver_tap+0x404/0x850 [ 882.248291][T19837] ? netlink_deliver_tap+0x2e/0x1b0 [ 882.248314][T19837] netlink_deliver_tap+0x19c/0x1b0 [ 882.248338][T19837] netlink_sendskb+0x68/0x140 [ 882.248360][T19837] netlink_unicast+0x3a3/0x9b0 [ 882.248389][T19837] ? __pfx_netlink_unicast+0x10/0x10 [ 882.248417][T19837] netlink_rcv_skb+0x2b6/0x4b0 [ 882.248441][T19837] ? __pfx_genl_rcv_msg+0x10/0x10 [ 882.248468][T19837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 882.248507][T19837] ? down_read+0x272/0x2e0 [ 882.248525][T19837] ? genl_rcv+0xd/0x40 [ 882.248553][T19837] genl_rcv+0x28/0x40 [ 882.248576][T19837] netlink_unicast+0x80f/0x9b0 [ 882.248605][T19837] ? __pfx_netlink_unicast+0x10/0x10 [ 882.248627][T19837] ? netlink_sendmsg+0x650/0xb40 [ 882.248647][T19837] ? skb_put+0x11b/0x210 [ 882.248674][T19837] netlink_sendmsg+0x813/0xb40 [ 882.248705][T19837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.248731][T19837] ? aa_sock_msg_perm+0xf1/0x1b0 [ 882.248755][T19837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 882.248777][T19837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.248799][T19837] ____sys_sendmsg+0xa68/0xad0 [ 882.248834][T19837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 882.248881][T19837] ? kstrtoull+0x12f/0x1d0 [ 882.248910][T19837] ___sys_sendmsg+0x2a5/0x360 [ 882.248941][T19837] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.248971][T19837] ? get_pid_task+0x20/0x1f0 [ 882.248988][T19837] ? get_pid_task+0x20/0x1f0 [ 882.249004][T19837] ? get_pid_task+0x20/0x1f0 [ 882.249050][T19837] ? __fget_files+0x2a/0x420 [ 882.249073][T19837] ? __fget_files+0x3a0/0x420 [ 882.249107][T19837] __sys_sendmsg+0x183/0x260 [ 882.249136][T19837] ? __pfx___sys_sendmsg+0x10/0x10 [ 882.249182][T19837] __do_fast_syscall_32+0x20d/0x640 [ 882.249203][T19837] ? do_fast_syscall_32+0x33/0x70 [ 882.249220][T19837] ? asm_int80_emulation+0x1a/0x20 [ 882.249238][T19837] ? do_int80_emulation+0x274/0x4d0 [ 882.249255][T19837] ? trace_irq_disable+0x3b/0x150 [ 882.249285][T19837] do_fast_syscall_32+0x33/0x70 [ 882.249304][T19837] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 882.249327][T19837] RIP: 0023:0xf7fb2f6c [ 882.249345][T19837] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 882.249362][T19837] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 882.249381][T19837] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 882.249395][T19837] RDX: 0000000004008094 RSI: 0000000000000000 RDI: 0000000000000000 [ 882.249406][T19837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 882.249417][T19837] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 882.249428][T19837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 882.249457][T19837] [ 882.762684][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3904'. [ 882.919279][T19849] kvm: user requested TSC rate below hardware speed [ 883.621010][T19859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3909'. [ 883.852083][T19863] Cannot find del_set index 3 as target [ 884.395577][T19882] syz.1.3917 (19882): drop_caches: 2 [ 884.431616][T19882] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3917'. [ 884.744252][T19895] loop5: detected capacity change from 0 to 7 [ 884.773683][T19895] Dev loop5: unable to read RDB block 7 [ 884.779732][T19895] loop5: AHDI p3 [ 884.783530][T19895] loop5: partition table partially beyond EOD, truncated [ 884.808029][T19895] Invalid argument reading file caps for ./file0 [ 885.279870][ T10] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 885.350662][ T5191] Dev loop5: unable to read RDB block 7 [ 885.369434][ T5191] loop5: AHDI p3 [ 885.389995][ T5191] loop5: partition table partially beyond EOD, truncated [ 886.511730][T19934] net_ratelimit: 77 callbacks suppressed [ 886.511744][T19934] netlink: zone id is out of range [ 886.523430][T19934] netlink: zone id is out of range [ 886.528675][T19934] netlink: zone id is out of range [ 886.561767][T19934] netlink: zone id is out of range [ 886.571227][T19934] netlink: zone id is out of range [ 886.586957][T19934] netlink: zone id is out of range [ 886.593969][T19934] netlink: zone id is out of range [ 886.625036][T19934] netlink: zone id is out of range [ 886.634137][T19934] netlink: zone id is out of range [ 886.639337][T19934] netlink: zone id is out of range [ 886.790023][ T56] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 886.868512][T19939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'. [ 886.940038][T19939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3935'. [ 886.976407][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 886.999182][ T56] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 887.013795][T19926] syz.5.3930 (19926): drop_caches: 1 [ 887.031873][ T56] usb 5-1: config 0 has no interface number 0 [ 887.051332][ T56] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 887.111694][ T56] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 887.152139][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.186618][ T56] usb 5-1: Product: syz [ 887.195170][ T56] usb 5-1: Manufacturer: syz [ 887.279654][T19926] syz.5.3930 (19926): drop_caches: 1 [ 887.299458][ T56] usb 5-1: SerialNumber: syz [ 887.315044][ T56] usb 5-1: config 0 descriptor?? [ 887.328095][ T56] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 887.345770][ T56] em28xx 5-1:0.132: Video interface 132 found: [ 887.663272][T19947] syzkaller0: entered promiscuous mode [ 887.669766][T19947] syzkaller0: entered allmulticast mode [ 887.704944][ T5922] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 887.744993][ T56] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 887.889783][ T5922] usb 2-1: device descriptor read/64, error -71 [ 888.129870][ T5922] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 888.279012][T19967] netlink: 'syz.2.3944': attribute type 2 has an invalid length. [ 888.279791][ T5922] usb 2-1: device descriptor read/64, error -71 [ 888.326910][T19967] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3944'. [ 888.425382][ T5922] usb usb2-port1: attempt power cycle [ 888.850076][ T5922] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 888.882569][ T56] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 888.892803][ T56] em28xx 5-1:0.132: board has no eeprom [ 888.911432][ T5922] usb 2-1: device descriptor read/8, error -71 [ 888.995274][ T56] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 889.014512][ T56] em28xx 5-1:0.132: analog set to bulk mode. [ 889.032077][ T24] em28xx 5-1:0.132: Registering V4L2 extension [ 889.039790][ T5888] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 889.180218][ T5922] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 889.189833][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 889.206955][ T5888] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 889.231753][ T5888] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 889.244111][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.251254][ T5922] usb 2-1: device descriptor read/8, error -71 [ 889.264563][ T5888] usb 3-1: Product: syz [ 889.275049][ T5888] usb 3-1: Manufacturer: syz [ 889.284350][ T5888] usb 3-1: SerialNumber: syz [ 889.303850][ T5888] usb 3-1: config 0 descriptor?? [ 889.315161][ T5888] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 889.340230][ T5888] usb 3-1: setting power ON [ 889.344907][ T5888] dvb-usb: bulk message failed: -22 (2/0) [ 889.363219][ T5922] usb usb2-port1: unable to enumerate USB device [ 889.365720][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 889.523984][ T5888] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 889.617399][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 889.628024][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 889.630672][ T5888] usb 3-1: media controller created [ 889.742217][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 889.764777][ T24] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 889.777518][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 889.818643][ T5922] usb 5-1: USB disconnect, device number 109 [ 889.828253][ T5922] em28xx 5-1:0.132: Disconnecting em28xx [ 889.905703][ T5888] usb 3-1: selecting invalid altsetting 6 [ 889.917732][ T5888] usb 3-1: digital interface selection failed (-22) [ 889.931640][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3952'. [ 889.935144][ T5888] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 889.989860][ T5888] usb 3-1: setting power OFF [ 889.995447][ T5888] dvb-usb: bulk message failed: -22 (2/0) [ 890.040368][ T5888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 890.074116][ T5888] (NULL device *): no alternate interface [ 890.130517][ T24] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 890.151316][ T24] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 890.170489][ T24] em28xx 5-1:0.132: No AC97 audio processor [ 890.190289][ T24] usb 5-1: Decoder not found [ 890.195304][ T24] em28xx 5-1:0.132: failed to create media graph [ 890.258580][ T24] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 890.310538][ T24] em28xx 5-1:0.132: Remote control support is not available for this card. [ 890.310701][ T5888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 890.353080][ T5922] em28xx 5-1:0.132: Closing input extension [ 890.392900][ T5922] em28xx 5-1:0.132: Freeing device [ 891.625503][ T5888] usb 3-1: USB disconnect, device number 110 [ 891.798660][T20032] syzkaller0: entered promiscuous mode [ 891.816237][T20032] syzkaller0: entered allmulticast mode [ 891.831384][T20035] loop5: detected capacity change from 0 to 7 [ 891.873530][T20035] Dev loop5: unable to read RDB block 7 [ 891.879378][T20035] loop5: AHDI p3 [ 891.890046][T20035] loop5: partition table partially beyond EOD, truncated [ 891.924854][T20035] Invalid argument reading file caps for ./file0 [ 892.409474][T20051] net_ratelimit: 75 callbacks suppressed [ 892.409488][T20051] netlink: zone id is out of range [ 892.421968][T20051] netlink: zone id is out of range [ 892.427109][T20051] netlink: zone id is out of range [ 892.432749][T20051] netlink: zone id is out of range [ 892.437975][T20051] netlink: zone id is out of range [ 892.466611][T20051] netlink: zone id is out of range [ 892.475835][T20051] netlink: zone id is out of range [ 892.487382][T20051] netlink: zone id is out of range [ 892.494206][T20051] netlink: zone id is out of range [ 892.507889][T20051] netlink: zone id is out of range [ 892.565842][T20057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3969'. [ 892.681150][T20061] netlink: 'syz.4.3971': attribute type 2 has an invalid length. [ 892.823552][T20065] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3972'. [ 893.151158][T20075] netlink: 'syz.4.3973': attribute type 4 has an invalid length. [ 893.296639][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 893.296657][ T29] audit: type=1400 audit(1772021108.618:6705): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20068 comm="syz.4.3973" [ 894.303239][T20083] IPv6: NLM_F_CREATE should be specified when creating new route [ 894.430947][T20089] binder: 20088:20089 ioctl 4018620d 0 returned -22 [ 894.442720][T20089] binder: 20088:20089 ioctl d000941e 0 returned -22 [ 894.594947][T20090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3977'. [ 894.643552][T20095] binder_alloc: 20094: pid 20094 spamming oneway? 1 buffers allocated for a total size of 4096 [ 894.664086][T20090] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3977'. [ 894.726441][T20098] FAULT_INJECTION: forcing a failure. [ 894.726441][T20098] name failslab, interval 1, probability 0, space 0, times 0 [ 894.739327][T20098] CPU: 0 UID: 0 PID: 20098 Comm: syz.5.3982 Tainted: G L syzkaller #0 PREEMPT(full) [ 894.739358][T20098] Tainted: [L]=SOFTLOCKUP [ 894.739365][T20098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 894.739377][T20098] Call Trace: [ 894.739385][T20098] [ 894.739394][T20098] dump_stack_lvl+0xe8/0x150 [ 894.739426][T20098] should_fail_ex+0x412/0x560 [ 894.739453][T20098] should_failslab+0xa8/0x100 [ 894.739478][T20098] __kmalloc_noprof+0xe8/0x760 [ 894.739497][T20098] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 894.739527][T20098] tomoyo_realpath_from_path+0xe3/0x5d0 [ 894.739562][T20098] ? tomoyo_path_number_perm+0x219/0x630 [ 894.739582][T20098] tomoyo_path_number_perm+0x246/0x630 [ 894.739605][T20098] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 894.739629][T20098] ? __lock_acquire+0x6b5/0x2cf0 [ 894.739686][T20098] ? __fget_files+0x2a/0x420 [ 894.739713][T20098] ? __fget_files+0x3a0/0x420 [ 894.739741][T20098] ? __fget_files+0x2a/0x420 [ 894.739768][T20098] security_file_ioctl_compat+0xc3/0x2a0 [ 894.739798][T20098] __ia32_compat_sys_ioctl+0x139/0x950 [ 894.739824][T20098] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 894.739847][T20098] ? __fget_files+0x3a0/0x420 [ 894.739876][T20098] ? fput+0xa0/0xd0 [ 894.739898][T20098] ? ksys_write+0x242/0x270 [ 894.739926][T20098] __do_fast_syscall_32+0x20d/0x640 [ 894.739947][T20098] ? do_fast_syscall_32+0x33/0x70 [ 894.739963][T20098] ? asm_int80_emulation+0x1a/0x20 [ 894.739981][T20098] ? do_int80_emulation+0x274/0x4d0 [ 894.739996][T20098] ? trace_irq_disable+0x3b/0x150 [ 894.740020][T20098] do_fast_syscall_32+0x33/0x70 [ 894.740036][T20098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 894.740055][T20098] RIP: 0023:0xf7f18f6c [ 894.740069][T20098] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 894.740083][T20098] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 894.740101][T20098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 894.740112][T20098] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 894.740122][T20098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 894.740131][T20098] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 894.740140][T20098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 894.740163][T20098] [ 895.230788][T20098] ERROR: Out of memory at tomoyo_realpath_from_path. [ 895.237545][T20098] binder_alloc: 20097: pid 20097 spamming oneway? 1 buffers allocated for a total size of 4096 [ 895.459008][T20104] netlink: 'syz.2.3984': attribute type 2 has an invalid length. [ 895.507130][T20107] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 895.529158][T20110] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 895.542974][T20110] xt_HMARK: spi-set and port-set can't be combined [ 895.566729][T20110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3987'. [ 895.917955][T20118] FAULT_INJECTION: forcing a failure. [ 895.917955][T20118] name failslab, interval 1, probability 0, space 0, times 0 [ 895.931607][T20118] CPU: 1 UID: 0 PID: 20118 Comm: syz.2.3991 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.931626][T20118] Tainted: [L]=SOFTLOCKUP [ 895.931630][T20118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 895.931637][T20118] Call Trace: [ 895.931642][T20118] [ 895.931647][T20118] dump_stack_lvl+0xe8/0x150 [ 895.931666][T20118] should_fail_ex+0x412/0x560 [ 895.931681][T20118] should_failslab+0xa8/0x100 [ 895.931695][T20118] __kmalloc_cache_noprof+0x88/0x660 [ 895.931707][T20118] ? hash_ipportnet_create+0x2fe/0x1040 [ 895.931726][T20118] hash_ipportnet_create+0x2fe/0x1040 [ 895.931745][T20118] ? __nla_parse+0x40/0x60 [ 895.931758][T20118] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 895.931774][T20118] ip_set_create+0xae6/0x1a40 [ 895.931785][T20118] ? ip_set_create+0x4eb/0x1a40 [ 895.931800][T20118] ? __pfx_ip_set_create+0x10/0x10 [ 895.931826][T20118] nfnetlink_rcv_msg+0xc00/0x12c0 [ 895.931836][T20118] ? unwind_get_return_address+0x4d/0x90 [ 895.931852][T20118] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 895.931870][T20118] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 895.931903][T20118] netlink_rcv_skb+0x232/0x4b0 [ 895.931917][T20118] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 895.931928][T20118] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 895.931945][T20118] ? bpf_lsm_capable+0x9/0x20 [ 895.931959][T20118] ? security_capable+0x7e/0x2c0 [ 895.931974][T20118] nfnetlink_rcv+0x2c0/0x27b0 [ 895.931989][T20118] ? __local_bh_enable_ip+0xd0/0x130 [ 895.932003][T20118] ? lockdep_hardirqs_on+0x7a/0x110 [ 895.932018][T20118] ? __dev_queue_xmit+0x274/0x38a0 [ 895.932034][T20118] ? __local_bh_enable_ip+0xd0/0x130 [ 895.932046][T20118] ? __dev_queue_xmit+0x274/0x38a0 [ 895.932062][T20118] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 895.932076][T20118] ? do_fast_syscall_32+0x33/0x70 [ 895.932091][T20118] ? __dev_queue_xmit+0x274/0x38a0 [ 895.932107][T20118] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 895.932120][T20118] ? __pfx___dev_queue_xmit+0x10/0x10 [ 895.932140][T20118] ? ref_tracker_free+0x693/0x840 [ 895.932152][T20118] ? __copy_skb_header+0xa3/0x4a0 [ 895.932167][T20118] ? __pfx_ref_tracker_free+0x10/0x10 [ 895.932179][T20118] ? __skb_clone+0x63/0x7a0 [ 895.932195][T20118] ? __skb_clone+0x483/0x7a0 [ 895.932213][T20118] ? skb_clone+0x246/0x3a0 [ 895.932229][T20118] ? __netlink_deliver_tap+0x807/0x850 [ 895.932241][T20118] ? netlink_deliver_tap+0x2e/0x1b0 [ 895.932256][T20118] ? netlink_deliver_tap+0x2e/0x1b0 [ 895.932271][T20118] netlink_unicast+0x80f/0x9b0 [ 895.932285][T20118] ? __pfx_netlink_unicast+0x10/0x10 [ 895.932297][T20118] ? netlink_sendmsg+0x650/0xb40 [ 895.932308][T20118] ? skb_put+0x11b/0x210 [ 895.932330][T20118] netlink_sendmsg+0x813/0xb40 [ 895.932347][T20118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 895.932360][T20118] ? aa_sock_msg_perm+0xf1/0x1b0 [ 895.932373][T20118] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 895.932385][T20118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 895.932397][T20118] ____sys_sendmsg+0xa68/0xad0 [ 895.932416][T20118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 895.932433][T20118] ? kstrtoull+0x12f/0x1d0 [ 895.932448][T20118] ___sys_sendmsg+0x2a5/0x360 [ 895.932469][T20118] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.932484][T20118] ? get_pid_task+0x20/0x1f0 [ 895.932494][T20118] ? get_pid_task+0x20/0x1f0 [ 895.932502][T20118] ? get_pid_task+0x20/0x1f0 [ 895.932524][T20118] ? __fget_files+0x2a/0x420 [ 895.932538][T20118] ? __fget_files+0x3a0/0x420 [ 895.932557][T20118] __sys_sendmsg+0x183/0x260 [ 895.932573][T20118] ? __pfx___sys_sendmsg+0x10/0x10 [ 895.932598][T20118] __do_fast_syscall_32+0x20d/0x640 [ 895.932608][T20118] ? do_fast_syscall_32+0x33/0x70 [ 895.932618][T20118] ? asm_int80_emulation+0x1a/0x20 [ 895.932628][T20118] ? do_int80_emulation+0x274/0x4d0 [ 895.932637][T20118] ? trace_irq_disable+0x3b/0x150 [ 895.932654][T20118] do_fast_syscall_32+0x33/0x70 [ 895.932664][T20118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 895.932677][T20118] RIP: 0023:0xf707ef6c [ 895.932688][T20118] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 895.932696][T20118] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 895.932708][T20118] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 895.932716][T20118] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 895.932722][T20118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 895.932728][T20118] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 895.932734][T20118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 895.932748][T20118] [ 896.519823][ T5922] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 896.670181][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 896.746996][ T24] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 896.783771][ T5922] usb 5-1: config 0 interface 0 has no altsetting 0 [ 896.790507][ T5922] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 896.799547][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.821331][ T5922] usb 5-1: config 0 descriptor?? [ 896.895268][T20134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3992'. [ 896.909866][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 896.982454][ T24] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 896.991578][ T24] usb 3-1: config 0 has no interface number 0 [ 896.998105][ T24] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 897.027189][ T24] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 897.036948][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.045326][ T24] usb 3-1: Product: syz [ 897.049793][ T24] usb 3-1: Manufacturer: syz [ 897.058078][ T24] usb 3-1: SerialNumber: syz [ 897.356074][T20114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.652726][T20114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.658294][ T24] usb 3-1: config 0 descriptor?? [ 897.682007][ T24] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 897.700385][ T24] em28xx 3-1:0.132: Video interface 132 found: [ 898.068567][T20141] syzkaller0: entered promiscuous mode [ 898.076770][T20141] syzkaller0: entered allmulticast mode [ 898.109392][ T24] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 898.404517][T20154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 898.505725][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4000'. [ 898.773175][ T5922] usbhid 5-1:0.0: can't add hid device: -71 [ 898.779509][ T5922] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 898.805481][ T5922] usb 5-1: USB disconnect, device number 110 [ 898.860997][ T56] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 899.122001][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 899.132334][ T56] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 899.144401][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.188820][ T56] usb 2-1: config 0 descriptor?? [ 899.214238][ T24] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 899.231039][ T24] em28xx 3-1:0.132: board has no eeprom [ 899.319769][ T24] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 899.331968][ T24] em28xx 3-1:0.132: analog set to bulk mode. [ 899.348095][ T5922] em28xx 3-1:0.132: Registering V4L2 extension [ 899.444743][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 899.470356][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 899.487080][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 899.497262][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 899.616516][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 899.645984][ T10] usb 3-1: USB disconnect, device number 111 [ 899.655493][ T5922] em28xx 3-1:0.132: failed to trigger read from i2c address 0x86 (error=-19) [ 899.655754][ T10] em28xx 3-1:0.132: Disconnecting em28xx [ 899.698853][T20178] FAULT_INJECTION: forcing a failure. [ 899.698853][T20178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.729051][T20178] CPU: 0 UID: 0 PID: 20178 Comm: syz.5.4002 Tainted: G L syzkaller #0 PREEMPT(full) [ 899.729082][T20178] Tainted: [L]=SOFTLOCKUP [ 899.729089][T20178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 899.729100][T20178] Call Trace: [ 899.729108][T20178] [ 899.729116][T20178] dump_stack_lvl+0xe8/0x150 [ 899.729146][T20178] should_fail_ex+0x412/0x560 [ 899.729204][T20178] _copy_to_iter+0x1e4/0x17d0 [ 899.729241][T20178] ? __pfx__copy_to_iter+0x10/0x10 [ 899.729267][T20178] ? chacha_block_generic+0x53/0xc80 [ 899.729300][T20178] get_random_bytes_user+0x1cf/0x3d0 [ 899.729322][T20178] ? __pfx_get_random_bytes_user+0x10/0x10 [ 899.729346][T20178] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 899.729383][T20178] ? import_ubuf+0xfb/0x1d0 [ 899.729410][T20178] __ia32_sys_getrandom+0x17a/0x270 [ 899.729441][T20178] ? __pfx___ia32_sys_getrandom+0x10/0x10 [ 899.729481][T20178] __do_fast_syscall_32+0x20d/0x640 [ 899.729502][T20178] ? do_fast_syscall_32+0x33/0x70 [ 899.729520][T20178] ? asm_int80_emulation+0x1a/0x20 [ 899.729538][T20178] ? do_int80_emulation+0x274/0x4d0 [ 899.729555][T20178] ? trace_irq_disable+0x3b/0x150 [ 899.729584][T20178] do_fast_syscall_32+0x33/0x70 [ 899.729603][T20178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 899.729627][T20178] RIP: 0023:0xf7f18f6c [ 899.729645][T20178] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 899.729661][T20178] RSP: 002b:00000000f539450c EFLAGS: 00000206 ORIG_RAX: 0000000000000163 [ 899.729683][T20178] RAX: ffffffffffffffda RBX: 0000000080000240 RCX: 00000000ffffff9a [ 899.729695][T20178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 899.729704][T20178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 899.729714][T20178] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 899.729724][T20178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 899.729746][T20178] [ 899.800083][ T5922] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 899.997009][ T5922] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 900.004421][ T5922] em28xx 3-1:0.132: No AC97 audio processor [ 900.010832][ T5922] videodev: could not get a free minor [ 900.016438][ T5922] em28xx 3-1:0.132: unable to register video device (error=-23). [ 900.025180][ T5922] em28xx 3-1:0.132: Remote control support is not available for this card. [ 900.036463][ T10] em28xx 3-1:0.132: Closing input extension [ 900.058635][ T10] em28xx 3-1:0.132: Freeing device [ 900.082889][T20184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4007'. [ 900.175805][T20163] fuse: Unknown parameter 'group_i00000000000000000000' [ 900.442393][ T56] video4linux radio48: keene_cmd_set failed (-71) [ 900.459921][ T56] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 900.469445][ T56] usb 2-1: USB disconnect, device number 112 [ 901.048981][T20198] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 901.095990][T20201] netlink: 'syz.1.4012': attribute type 3 has an invalid length. [ 901.107590][T20201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4012'. [ 901.293892][T20209] fuse: Bad value for 'user_id' [ 901.299490][T20209] fuse: Bad value for 'user_id' [ 902.509793][ T5923] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 902.691326][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.702728][ T5923] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 902.718719][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.754655][ T5923] usb 5-1: config 0 descriptor?? [ 903.172083][T20220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.181290][T20220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.408431][ T5923] elecom 0003:056E:00FF.0036: item fetching failed at offset 0/3 [ 903.442127][ T5923] elecom 0003:056E:00FF.0036: probe with driver elecom failed with error -22 [ 903.671463][T20220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.685952][T20220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.801044][ T5873] usb 5-1: USB disconnect, device number 111 [ 903.815252][ T5923] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 904.085672][ T5923] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 904.099970][ T5923] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 904.334308][ T5923] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 904.350883][ T5923] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 904.367860][ T5923] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 904.441635][ T5923] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 904.452443][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 904.466868][ T5923] usb 6-1: Product: syz [ 904.472569][ T5923] usb 6-1: Manufacturer: syz [ 904.511503][ T5923] cdc_wdm 6-1:1.0: skipping garbage [ 904.519775][ T5923] cdc_wdm 6-1:1.0: skipping garbage [ 904.535820][ T5923] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 904.572248][ T5923] cdc_wdm 6-1:1.0: Unknown control protocol [ 904.669918][ T5873] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 904.969793][ T5873] usb 2-1: Using ep0 maxpacket: 8 [ 904.992709][ T5873] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 905.069470][ T5873] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 905.111878][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.163123][ T5873] usb 2-1: Product: syz [ 905.199963][ T5923] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 905.243878][ T5873] usb 2-1: Manufacturer: syz [ 905.259387][ T5873] usb 2-1: SerialNumber: syz [ 905.293710][ T5873] usb 2-1: config 0 descriptor?? [ 905.315467][ T5873] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 905.372963][ T5873] usb 2-1: setting power ON [ 905.377533][ T29] audit: type=1326 audit(1772021120.698:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20257 comm="syz.0.4028" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x0 [ 905.409175][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 905.414513][ T5873] dvb-usb: bulk message failed: -22 (2/0) [ 905.441495][ T5923] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 905.480892][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 905.516722][T20250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4026'. [ 905.526366][ T5873] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 905.532129][ T5923] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 905.566584][T20265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.579766][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.611316][T20265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.629839][ T5873] usb 2-1: media controller created [ 905.643136][ T5923] usb 5-1: Product: syz [ 905.656397][ T5923] usb 5-1: Manufacturer: syz [ 905.671208][ T5923] usb 5-1: SerialNumber: syz [ 905.747047][ T5923] usb 5-1: config 0 descriptor?? [ 905.769320][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 905.828700][ T5873] usb 2-1: selecting invalid altsetting 6 [ 906.008311][ T5873] usb 2-1: digital interface selection failed (-22) [ 906.040311][ T5873] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 906.155290][ T5873] usb 2-1: setting power OFF [ 906.161854][ T5873] dvb-usb: bulk message failed: -22 (2/0) [ 906.170617][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 906.187964][ T5923] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 906.263933][ T5873] (NULL device *): no alternate interface [ 906.322836][ T5923] usb 5-1: setting power ON [ 906.353537][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 906.373730][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 906.412416][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 906.441050][ T5923] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 906.473747][ T5923] usb 5-1: media controller created [ 906.875435][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 906.999649][ T5923] usb 5-1: selecting invalid altsetting 6 [ 907.022000][ T5923] usb 5-1: digital interface selection failed (-22) [ 907.041485][ T5923] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 907.095618][ T5923] usb 5-1: setting power OFF [ 907.105423][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 907.129830][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 907.224540][ T10] usb 6-1: USB disconnect, device number 103 [ 907.250186][ T5923] (NULL device *): no alternate interface [ 907.381588][ T56] usb 2-1: USB disconnect, device number 113 [ 907.474408][T20280] netlink: 'syz.2.4031': attribute type 10 has an invalid length. [ 907.482405][T20280] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4031'. [ 907.520019][T20280] bridge0: port 3(ipvlan1) entered blocking state [ 907.542994][T20280] bridge0: port 3(ipvlan1) entered disabled state [ 907.576796][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 907.583428][T20280] ipvlan1: entered allmulticast mode [ 907.614080][T20280] veth0_vlan: entered allmulticast mode [ 907.637799][T20282] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4032'. [ 907.642545][T20280] ipvlan1: left allmulticast mode [ 907.696577][T20280] veth0_vlan: left allmulticast mode [ 907.708262][T20280] net_ratelimit: 160 callbacks suppressed [ 907.708281][T20280] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 907.875841][T20286] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 908.369910][ T10] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 908.485798][T20309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4041'. [ 908.553286][ T56] usb 5-1: USB disconnect, device number 112 [ 909.100909][T20324] netlink: zone id is out of range [ 909.106152][T20324] netlink: zone id is out of range [ 909.112098][T20324] netlink: zone id is out of range [ 909.117237][T20324] netlink: zone id is out of range [ 909.133399][T20324] netlink: zone id is out of range [ 909.138525][T20324] netlink: zone id is out of range [ 909.150871][T20324] netlink: zone id is out of range [ 909.156279][T20324] netlink: zone id is out of range [ 909.162925][T20324] netlink: zone id is out of range [ 909.350010][ T5888] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 909.473847][T20338] netlink: 'syz.4.4047': attribute type 21 has an invalid length. [ 909.510557][T20338] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4047'. [ 909.549872][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 909.564939][ T5888] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 909.583194][ T5888] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 909.619264][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.644063][ T5888] usb 2-1: Product: syz [ 909.692525][ T5888] usb 2-1: Manufacturer: syz [ 909.717535][ T5888] usb 2-1: SerialNumber: syz [ 909.736508][ T5888] usb 2-1: config 0 descriptor?? [ 909.744368][ T5888] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 909.760995][ T5888] usb 2-1: setting power ON [ 909.767147][ T5888] dvb-usb: bulk message failed: -22 (2/0) [ 909.777644][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 909.795748][ T5888] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 909.858873][ T5888] usb 2-1: media controller created [ 909.888990][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 909.939368][ T5888] usb 2-1: selecting invalid altsetting 6 [ 909.951769][T20326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4043'. [ 909.983582][ T5888] usb 2-1: digital interface selection failed (-22) [ 910.016790][ T5888] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 910.034446][ T5888] usb 2-1: setting power OFF [ 910.039211][ T5888] dvb-usb: bulk message failed: -22 (2/0) [ 910.048772][ T5888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 910.062885][ T5888] (NULL device *): no alternate interface [ 910.158790][ T5888] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 910.739373][T20352] binder: 20347:20352 ioctl 40046205 0 returned -22 [ 910.819790][ T5922] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 910.909792][ T5923] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 910.980580][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 910.988045][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.000112][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.010810][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 911.020261][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.032807][ T5922] usb 3-1: config 0 descriptor?? [ 911.046600][ T5922] hub 3-1:0.0: USB hub found [ 911.070271][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 911.084211][ T5923] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 911.095759][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.104446][ T5923] usb 6-1: Product: syz [ 911.108758][ T5923] usb 6-1: Manufacturer: syz [ 911.119448][ T5923] usb 6-1: SerialNumber: syz [ 911.129543][ T5923] usb 6-1: config 0 descriptor?? [ 911.163141][ T5923] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 911.171128][ T5923] dvb-usb: bulk message failed: -22 (4/0) [ 911.181152][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 911.198049][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 911.204713][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 911.224966][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 911.237261][ T5923] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 911.282393][ T5923] usb 6-1: media controller created [ 911.315179][T20350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.330177][T20350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.333113][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 911.500759][ T5923] usb 6-1: selecting invalid altsetting 3 [ 911.509842][ T5923] ttusb2: set interface to alts=3 failed [ 911.553894][ T5923] DVB: Unable to find symbol tda10086_attach() [ 911.561602][ T5923] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 911.573601][ T5923] dvb-usb: bulk message failed: -22 (4/0) [ 911.580521][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 911.593930][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 911.601345][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 911.613502][ T5923] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 911.860747][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4055'. [ 911.862050][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4055'. [ 911.862716][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4055'. [ 911.953185][ T10] usb 2-1: USB disconnect, device number 114 [ 912.300183][ T5923] usb 5-1: new full-speed USB device number 113 using dummy_hcd [ 912.496081][ T5923] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 912.517478][ T5923] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 912.532046][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0 [ 912.547002][ T5923] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 912.564797][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 912.590494][ T5923] usb 5-1: Product: syz [ 912.594724][ T5923] usb 5-1: Manufacturer: syz [ 912.599589][ T5923] usb 5-1: SerialNumber: syz [ 912.607962][ T5923] usb 5-1: config 0 descriptor?? [ 912.619418][ T5923] usb 5-1: selecting invalid altsetting 0 [ 912.841349][T20376] net_ratelimit: 161 callbacks suppressed [ 912.841367][T20376] netlink: zone id is out of range [ 912.860023][T20376] netlink: zone id is out of range [ 912.869748][T20376] netlink: zone id is out of range [ 912.879785][T20376] netlink: zone id is out of range [ 912.898707][T20376] netlink: zone id is out of range [ 912.905337][T20376] netlink: zone id is out of range [ 912.911181][T20376] netlink: zone id is out of range [ 912.916743][T20376] netlink: zone id is out of range [ 912.924470][T20376] netlink: zone id is out of range [ 912.939837][T20376] netlink: zone id is out of range [ 913.508374][T20383] FAULT_INJECTION: forcing a failure. [ 913.508374][T20383] name failslab, interval 1, probability 0, space 0, times 0 [ 913.524769][T20383] CPU: 1 UID: 0 PID: 20383 Comm: syz.1.4061 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.524815][T20383] Tainted: [L]=SOFTLOCKUP [ 913.524822][T20383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.524834][T20383] Call Trace: [ 913.524846][T20383] [ 913.524855][T20383] dump_stack_lvl+0xe8/0x150 [ 913.524888][T20383] should_fail_ex+0x412/0x560 [ 913.524915][T20383] should_failslab+0xa8/0x100 [ 913.524938][T20383] ? skb_clone+0x212/0x3a0 [ 913.524966][T20383] kmem_cache_alloc_noprof+0x87/0x650 [ 913.524994][T20383] ? __netlink_lookup+0xc6/0x8b0 [ 913.525025][T20383] skb_clone+0x212/0x3a0 [ 913.525056][T20383] __netlink_deliver_tap+0x404/0x850 [ 913.525089][T20383] ? netlink_deliver_tap+0x2e/0x1b0 [ 913.525112][T20383] netlink_deliver_tap+0x19c/0x1b0 [ 913.525136][T20383] netlink_unicast+0x7e3/0x9b0 [ 913.525163][T20383] ? __pfx_netlink_unicast+0x10/0x10 [ 913.525185][T20383] ? netlink_sendmsg+0x650/0xb40 [ 913.525206][T20383] ? skb_put+0x11b/0x210 [ 913.525233][T20383] netlink_sendmsg+0x813/0xb40 [ 913.525261][T20383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.525284][T20383] ? aa_sock_msg_perm+0xf1/0x1b0 [ 913.525312][T20383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 913.525335][T20383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.525352][T20383] ____sys_sendmsg+0xa68/0xad0 [ 913.525385][T20383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.525409][T20383] ? kstrtoull+0x12f/0x1d0 [ 913.525436][T20383] ___sys_sendmsg+0x2a5/0x360 [ 913.525461][T20383] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.525485][T20383] ? get_pid_task+0x20/0x1f0 [ 913.525500][T20383] ? get_pid_task+0x20/0x1f0 [ 913.525512][T20383] ? get_pid_task+0x20/0x1f0 [ 913.525545][T20383] ? __fget_files+0x2a/0x420 [ 913.525566][T20383] ? __fget_files+0x3a0/0x420 [ 913.525599][T20383] __sys_sendmsg+0x183/0x260 [ 913.525622][T20383] ? __pfx___sys_sendmsg+0x10/0x10 [ 913.525659][T20383] __do_fast_syscall_32+0x20d/0x640 [ 913.525676][T20383] ? do_fast_syscall_32+0x33/0x70 [ 913.525690][T20383] ? asm_int80_emulation+0x1a/0x20 [ 913.525719][T20383] ? do_int80_emulation+0x274/0x4d0 [ 913.525738][T20383] ? trace_irq_disable+0x3b/0x150 [ 913.525782][T20383] do_fast_syscall_32+0x33/0x70 [ 913.525798][T20383] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 913.525817][T20383] RIP: 0023:0xf7fb2f6c [ 913.525831][T20383] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 913.525846][T20383] RSP: 002b:00000000f543450c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 913.525863][T20383] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 913.525874][T20383] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 913.525884][T20383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 913.525893][T20383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 913.525903][T20383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 913.525924][T20383] [ 914.051202][ T10] usb 5-1: USB disconnect, device number 113 [ 914.065693][ T5922] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 914.077263][ T5922] usbhid 3-1:0.0: can't add hid device: -71 [ 914.084399][ T5922] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 914.116756][ T5922] usb 3-1: USB disconnect, device number 112 [ 914.243787][ T5888] usb 6-1: USB disconnect, device number 105 [ 914.290332][ T5888] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 914.415982][T20394] syzkaller0: entered promiscuous mode [ 914.423052][T20394] syzkaller0: entered allmulticast mode [ 914.731095][T20403] syzkaller0: entered promiscuous mode [ 914.736582][T20403] syzkaller0: entered allmulticast mode [ 914.774678][T20405] tipc: Invalid UDP bearer configuration [ 914.775582][T20405] tipc: Enabling of bearer rejected, failed to enable media [ 914.926394][T20407] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 914.992735][T20411] netlink: 'syz.4.4071': attribute type 3 has an invalid length. [ 915.268399][T20422] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4076'. [ 915.299251][T20424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4077'. [ 915.344927][T20424] batadv0: entered promiscuous mode [ 915.360694][T20424] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 915.379383][T20424] batadv0: left promiscuous mode [ 915.569767][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 915.583910][T20436] netlink: 'syz.5.4080': attribute type 4 has an invalid length. [ 915.608091][T20437] netlink: 'syz.4.4081': attribute type 4 has an invalid length. [ 915.620010][ T29] audit: type=1400 audit(1772021130.918:6707): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20430 comm="syz.5.4080" [ 915.629862][ T5922] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 915.714571][ T29] audit: type=1400 audit(1772021131.038:6708): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20432 comm="syz.4.4081" [ 915.830576][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 915.856197][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 915.864050][ T5922] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 915.873589][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.881836][ T5922] usb 3-1: Product: syz [ 915.887962][ T5922] usb 3-1: Manufacturer: syz [ 915.892729][ T5922] usb 3-1: SerialNumber: syz [ 915.898415][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.911924][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 915.927494][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.931359][ T5922] usb 3-1: config 0 descriptor?? [ 915.950542][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 915.976442][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.980088][ T5922] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 916.039619][ T5922] dvb-usb: bulk message failed: -22 (4/0) [ 916.045998][ T5922] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 916.181590][T20429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.194486][T20429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.225838][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 916.238747][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.262363][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 916.471650][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.489870][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 916.510227][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.520446][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 916.573441][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.583730][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 916.614345][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.624871][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 916.635809][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 916.655458][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 916.655645][ T5922] dvb-usb: bulk message failed: -22 (5/0) [ 916.665043][ T10] usb 2-1: Product: syz [ 916.673936][ T10] usb 2-1: Manufacturer: syz [ 916.689129][ T5922] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 916.700834][ T10] usb 2-1: SerialNumber: syz [ 916.703305][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 916.743203][ T10] usb 2-1: config 0 descriptor?? [ 916.768308][ T5922] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 916.771882][ T10] yurex 2-1:0.0: Could not find endpoints [ 916.787157][ T5922] usb 3-1: media controller created [ 916.841232][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 916.913288][ T5922] usb 3-1: selecting invalid altsetting 3 [ 916.931083][ T5922] ttusb2: set interface to alts=3 failed [ 916.993163][T20450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 917.097824][ T5922] DVB: Unable to find symbol tda10086_attach() [ 917.118498][ T5922] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 917.141050][ T10] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 917.148968][ T5922] dvb-usb: bulk message failed: -22 (4/0) [ 917.160031][ T5922] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 917.194825][ T5922] dvb-usb: bulk message failed: -22 (5/0) [ 917.217146][ T5922] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 917.240043][ T5922] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 917.257787][ T5922] usb 3-1: USB disconnect, device number 113 [ 917.321918][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 917.352038][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.371878][ T5922] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 917.378723][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 917.410623][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.653079][ T10] usb 5-1: usb_control_msg returned -32 [ 917.669145][ T10] usbtmc 5-1:16.0: can't read capabilities [ 917.881585][T20476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 917.886155][T20474] netlink: 'syz.0.4092': attribute type 4 has an invalid length. [ 918.090023][ T29] audit: type=1400 audit(1772021133.338:6709): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20469 comm="syz.0.4092" [ 918.200651][T20485] syzkaller0: entered promiscuous mode [ 918.206296][T20485] syzkaller0: entered allmulticast mode [ 918.248296][T20485] net_ratelimit: 75 callbacks suppressed [ 918.248311][T20485] 0: reclassify loop, rule prio 0, protocol 800 [ 918.269197][ T5922] usb 2-1: USB disconnect, device number 115 [ 919.119931][ T5873] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 919.300438][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 919.323449][ T5873] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 919.368482][ T5873] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 919.501051][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.509180][ T5873] usb 6-1: Product: syz [ 919.527227][ T5873] usb 6-1: Manufacturer: syz [ 919.536236][ T5873] usb 6-1: SerialNumber: syz [ 919.559091][ T5873] usb 6-1: config 0 descriptor?? [ 919.589574][ T5873] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 919.615934][ T5873] usb 6-1: setting power ON [ 919.626419][ T5873] dvb-usb: bulk message failed: -22 (2/0) [ 919.642867][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 919.664064][ T5873] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 919.679087][ T5873] usb 6-1: media controller created [ 919.728305][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 919.830806][ T5873] usb 6-1: selecting invalid altsetting 6 [ 919.838386][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4100'. [ 919.865147][ T5873] usb 6-1: digital interface selection failed (-22) [ 919.878815][ T5873] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 919.916237][ T5922] usb 5-1: USB disconnect, device number 114 [ 919.932750][ T5873] usb 6-1: setting power OFF [ 919.952476][ T5873] dvb-usb: bulk message failed: -22 (2/0) [ 919.964709][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 919.977426][ T5873] (NULL device *): no alternate interface [ 920.088349][ T5873] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 920.340980][T20525] loop8: detected capacity change from 0 to 8 [ 920.373553][T20525] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 920.385740][T20525] loop8: partition table partially beyond EOD, truncated [ 920.417055][T20525] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 920.549394][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 921.016728][T20541] netlink: 'syz.2.4111': attribute type 4 has an invalid length. [ 921.040331][ T29] audit: type=1400 audit(1772021136.348:6710): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20536 comm="syz.2.4111" [ 921.279744][T20543] FAULT_INJECTION: forcing a failure. [ 921.279744][T20543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.325627][T20543] CPU: 1 UID: 0 PID: 20543 Comm: syz.1.4113 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.325657][T20543] Tainted: [L]=SOFTLOCKUP [ 921.325664][T20543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 921.325676][T20543] Call Trace: [ 921.325685][T20543] [ 921.325693][T20543] dump_stack_lvl+0xe8/0x150 [ 921.325731][T20543] should_fail_ex+0x412/0x560 [ 921.325758][T20543] _copy_to_user+0x31/0xb0 [ 921.325787][T20543] generic_map_lookup_batch+0xa39/0xeb0 [ 921.325825][T20543] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 921.325849][T20543] ? __fget_files+0x2a/0x420 [ 921.325878][T20543] ? __pfx_generic_map_lookup_batch+0x10/0x10 [ 921.325903][T20543] bpf_map_do_batch+0x285/0x630 [ 921.325922][T20543] ? security_bpf+0x7e/0x2d0 [ 921.325945][T20543] __sys_bpf+0x6b4/0x950 [ 921.325972][T20543] ? __pfx___sys_bpf+0x10/0x10 [ 921.326012][T20543] ? fput+0xa0/0xd0 [ 921.326036][T20543] ? ksys_write+0x242/0x270 [ 921.326061][T20543] __ia32_sys_bpf+0x7c/0x90 [ 921.326088][T20543] __do_fast_syscall_32+0x20d/0x640 [ 921.326106][T20543] ? do_fast_syscall_32+0x33/0x70 [ 921.326122][T20543] ? asm_int80_emulation+0x1a/0x20 [ 921.326140][T20543] ? do_int80_emulation+0x274/0x4d0 [ 921.326155][T20543] ? trace_irq_disable+0x3b/0x150 [ 921.326183][T20543] do_fast_syscall_32+0x33/0x70 [ 921.326201][T20543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 921.326224][T20543] RIP: 0023:0xf7fb2f6c [ 921.326241][T20543] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 921.326257][T20543] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 921.326277][T20543] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000800003c0 [ 921.326290][T20543] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 921.326302][T20543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 921.326312][T20543] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 921.326323][T20543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 921.326349][T20543] [ 922.066107][T15497] usb 6-1: USB disconnect, device number 106 [ 922.415410][T20559] netlink: 'syz.2.4118': attribute type 21 has an invalid length. [ 922.424489][T20559] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4118'. [ 923.437696][T20574] syzkaller0: entered promiscuous mode [ 923.461456][T20574] syzkaller0: entered allmulticast mode [ 923.596284][T20583] Cannot find del_set index 3 as target [ 923.750964][T20590] netlink: 'syz.2.4125': attribute type 4 has an invalid length. [ 923.775523][ T29] audit: type=1400 audit(1772021139.088:6711): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20581 comm="syz.2.4125" [ 923.900685][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4128'. [ 924.068529][T20589] binder: 20588:20589 ioctl c0306201 80000480 returned -14 [ 924.190613][T20606] usb usb8: usbfs: process 20606 (syz.0.4130) did not claim interface 0 before use [ 924.864547][T20620] macvtap1: entered promiscuous mode [ 924.871941][T20620] macvtap1: entered allmulticast mode [ 924.882086][T20620] dummy0: entered allmulticast mode [ 924.890071][T20620] dummy0: entered promiscuous mode [ 925.034238][T20620] team0: Device macvtap1 failed to register rx_handler [ 925.052894][T20620] dummy0: left allmulticast mode [ 925.058119][T20620] dummy0: left promiscuous mode [ 925.229582][T20629] loop6: detected capacity change from 0 to 2560 [ 925.238195][T20629] Buffer I/O error on dev loop6, logical block 0, async page read [ 925.258608][T20629] Buffer I/O error on dev loop6, logical block 0, async page read [ 925.269197][T20629] Buffer I/O error on dev loop6, logical block 0, async page read [ 925.277562][T20629] Buffer I/O error on dev loop6, logical block 0, async page read [ 925.286628][T20629] Buffer I/O error on dev loop6, logical block 0, async page read [ 925.323963][T20629] Buffer I/O error on dev loop6, logical block 0, async page read [ 925.341732][T20629] Buffer I/O error on dev loop6, logical block 0, async page read [ 925.351363][T20629] Buffer I/O error on dev loop6, logical block 0, async page read [ 925.359329][T20629] ldm_validate_partition_table(): Disk read failed. [ 925.366458][T20629] Buffer I/O error on dev loop6, logical block 0, async page read [ 925.376253][T20629] Buffer I/O error on dev loop6, logical block 0, async page read [ 925.385821][T20629] Dev loop6: unable to read RDB block 0 [ 925.392528][T20629] loop6: unable to read partition table [ 925.404852][T20629] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 925.663749][T20641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4143'. [ 925.969838][T15497] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 926.092723][T20650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 926.100033][T20650] IPv6: NLM_F_CREATE should be set when creating new route [ 926.149822][T15497] usb 6-1: Using ep0 maxpacket: 16 [ 926.159020][T15497] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 926.173525][T15497] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 926.191001][T15497] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 926.208718][T15497] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.217459][T15497] usb 6-1: Product: syz [ 926.225346][T15497] usb 6-1: Manufacturer: syz [ 926.230682][T15497] usb 6-1: SerialNumber: syz [ 926.242510][T15497] usb 6-1: config 0 descriptor?? [ 926.253795][T15497] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 926.263311][T15497] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 926.561796][T15497] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 926.575602][T15497] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 926.591133][T15497] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 926.606328][T15497] em28xx 6-1:0.0: No AC97 audio processor [ 926.635215][T15497] usb 6-1: USB disconnect, device number 107 [ 926.651782][T15497] em28xx 6-1:0.0: Disconnecting em28xx [ 926.676528][T15497] em28xx 6-1:0.0: Freeing device [ 927.110407][T20673] netlink: 'syz.5.4152': attribute type 4 has an invalid length. [ 927.191217][ T29] audit: type=1400 audit(1772021142.448:6712): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20668 comm="syz.5.4152" [ 927.575694][ T29] audit: type=1326 audit(1772021142.898:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20666 comm="syz.2.4162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 927.628966][ T29] audit: type=1326 audit(1772021142.898:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20666 comm="syz.2.4162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 927.761588][T20684] netlink: 'syz.4.4155': attribute type 4 has an invalid length. [ 927.804126][ T29] audit: type=1326 audit(1772021142.918:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20666 comm="syz.2.4162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 928.054100][ T29] audit: type=1326 audit(1772021142.918:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20666 comm="syz.2.4162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 928.141464][ T29] audit: type=1326 audit(1772021142.918:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20666 comm="syz.2.4162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707ef6c code=0x7ffc0000 [ 928.179283][ T29] audit: type=1400 audit(1772021143.098:6718): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20681 comm="syz.4.4155" [ 928.374494][T20691] netlink: 'syz.2.4156': attribute type 4 has an invalid length. [ 928.423165][ T29] audit: type=1400 audit(1772021143.728:6719): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20686 comm="syz.2.4156" [ 928.556708][T20698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 929.252267][T20709] netlink: 'syz.4.4164': attribute type 2 has an invalid length. [ 929.270724][T20709] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4164'. [ 929.956805][T20694] syz.1.4158 (20694): drop_caches: 1 [ 931.392240][T20753] team0: Device gtp0 is of different type [ 931.531973][T20756] netlink: 'syz.2.4174': attribute type 4 has an invalid length. [ 931.607995][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.615423][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.668378][ T29] audit: type=1400 audit(1772021146.978:6720): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20745 comm="syz.2.4174" [ 932.578317][T20778] usb usb8: usbfs: process 20778 (syz.4.4183) did not claim interface 0 before use [ 932.670080][ T5923] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 932.746370][T20782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4185'. [ 932.838239][ T5923] usb 2-1: Using ep0 maxpacket: 16 [ 932.845698][ T5923] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 932.879316][ T5923] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 932.886363][T20788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4186'. [ 932.903671][ T5923] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 932.922790][ T5923] usb 2-1: config 1 interface 0 has no altsetting 0 [ 932.933635][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 932.943581][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.954328][ T5923] usb 2-1: Product: syz [ 932.963125][ T5923] usb 2-1: Manufacturer: syz [ 932.972503][ T5923] usb 2-1: SerialNumber: syz [ 933.134622][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4188'. [ 933.431265][T20804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4191'. [ 933.723752][T20808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.743340][T20808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.993875][T20813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4194'. [ 934.010946][T20813] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4194'. [ 934.054976][T20813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4194'. [ 934.945383][T20821] netlink: 'syz.2.4195': attribute type 4 has an invalid length. [ 934.969369][ T29] audit: type=1400 audit(1772021150.288:6721): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20814 comm="syz.2.4195" [ 935.109928][T15497] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 935.271381][T15497] usb 5-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.291796][T15497] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 935.301465][T15497] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.312879][T15497] usb 5-1: Product: syz [ 935.319583][T15497] usb 5-1: Manufacturer: syz [ 935.337671][T15497] usb 5-1: SerialNumber: syz [ 935.456540][ T5923] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 116 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 935.496717][ T5923] usb 2-1: USB disconnect, device number 116 [ 935.545177][ T5923] usblp0: removed [ 935.798864][T15497] cdc_ncm 5-1:9.0: failed GET_NTB_PARAMETERS [ 935.805251][T15497] cdc_ncm 5-1:9.0: bind() failure [ 935.900709][T20836] netlink: 'syz.0.4203': attribute type 8 has an invalid length. [ 935.908625][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4203'. [ 935.944992][T15497] cdc_ncm 5-1:9.1: CDC Union missing and no IAD found [ 935.953253][T15497] cdc_ncm 5-1:9.1: bind() failure [ 935.965975][T20837] netlink: 'syz.1.4202': attribute type 4 has an invalid length. [ 936.010893][ T5923] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 936.059906][ T29] audit: type=1400 audit(1772021151.368:6722): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20831 comm="syz.1.4202" [ 936.123230][T20836] bond0: entered promiscuous mode [ 936.128410][T20836] bond_slave_0: entered promiscuous mode [ 936.151123][T20836] bond_slave_1: entered promiscuous mode [ 936.198448][T20836] gretap0: entered promiscuous mode [ 936.222403][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 936.234063][ T5923] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 936.244163][ T5923] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 8 [ 936.286835][ T5923] usb 6-1: config 1 interface 0 has no altsetting 0 [ 936.305566][T20836] bond0: left promiscuous mode [ 936.319258][T20836] bond_slave_0: left promiscuous mode [ 936.326191][ T5923] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 936.352994][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.360059][T20836] bond_slave_1: left promiscuous mode [ 936.371522][T20836] gretap0: left promiscuous mode [ 936.383195][ T5923] usb 6-1: Product: ఊ [ 936.395565][ T5923] usb 6-1: Manufacturer: చ [ 936.410728][ T5923] usb 6-1: SerialNumber: 䔗먞郞䪢ꎠꈾ㘹껗䤋⮄沼똋艮㕑븉쀬≐₁㋧࿉㒻㢯鋯墔㹘跣렑䘞厮ꃠ醌燞腽隺ȥ㻸䣑餈ꓒ쟏嗗拒ꎖ⁤䂹ͯ衸깲埈퍊鯎ꆸﰶ흄鸆锬鱯㲛ᩘ鮚Ῡ奕ꀰ梏㞙촲룋뜠뭛Ⰼ窻訋쩳搾鄞뛵괫ꌛ䔏긺໲ꤰ᱌蓪귳䃇 [ 936.485186][T20830] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 936.493197][T20830] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 936.517261][T15497] usb 5-1: USB disconnect, device number 115 [ 936.737987][T17385] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 936.776706][ T5923] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 936.777112][T20847] FAULT_INJECTION: forcing a failure. [ 936.777112][T20847] name failslab, interval 1, probability 0, space 0, times 0 [ 936.802267][T20847] CPU: 0 UID: 0 PID: 20847 Comm: syz.4.4206 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.802296][T20847] Tainted: [L]=SOFTLOCKUP [ 936.802303][T20847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 936.802315][T20847] Call Trace: [ 936.802323][T20847] [ 936.802331][T20847] dump_stack_lvl+0xe8/0x150 [ 936.802362][T20847] should_fail_ex+0x412/0x560 [ 936.802389][T20847] should_failslab+0xa8/0x100 [ 936.802414][T20847] __kmalloc_cache_noprof+0x88/0x660 [ 936.802436][T20847] ? hash_ipportnet_create+0x2fe/0x1040 [ 936.802468][T20847] hash_ipportnet_create+0x2fe/0x1040 [ 936.802503][T20847] ? __nla_parse+0x40/0x60 [ 936.802526][T20847] ? __pfx_hash_ipportnet_create+0x10/0x10 [ 936.802555][T20847] ip_set_create+0xae6/0x1a40 [ 936.802575][T20847] ? ip_set_create+0x4eb/0x1a40 [ 936.802604][T20847] ? __pfx_ip_set_create+0x10/0x10 [ 936.802654][T20847] nfnetlink_rcv_msg+0xc00/0x12c0 [ 936.802674][T20847] ? unwind_get_return_address+0x4d/0x90 [ 936.802699][T20847] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 936.802730][T20847] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 936.802791][T20847] netlink_rcv_skb+0x232/0x4b0 [ 936.802815][T20847] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 936.802836][T20847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 936.802867][T20847] ? bpf_lsm_capable+0x9/0x20 [ 936.802889][T20847] ? security_capable+0x7e/0x2c0 [ 936.802914][T20847] nfnetlink_rcv+0x2c0/0x27b0 [ 936.802938][T20847] ? __local_bh_enable_ip+0xd0/0x130 [ 936.802958][T20847] ? lockdep_hardirqs_on+0x7a/0x110 [ 936.802981][T20847] ? __dev_queue_xmit+0x274/0x38a0 [ 936.803004][T20847] ? __local_bh_enable_ip+0xd0/0x130 [ 936.803027][T20847] ? __dev_queue_xmit+0x274/0x38a0 [ 936.803065][T20847] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 936.803088][T20847] ? do_fast_syscall_32+0x33/0x70 [ 936.803113][T20847] ? __dev_queue_xmit+0x274/0x38a0 [ 936.803139][T20847] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 936.803163][T20847] ? __pfx___dev_queue_xmit+0x10/0x10 [ 936.803194][T20847] ? ref_tracker_free+0x693/0x840 [ 936.803214][T20847] ? __copy_skb_header+0xa3/0x4a0 [ 936.803239][T20847] ? __pfx_ref_tracker_free+0x10/0x10 [ 936.803260][T20847] ? __skb_clone+0x63/0x7a0 [ 936.803287][T20847] ? __skb_clone+0x483/0x7a0 [ 936.803317][T20847] ? skb_clone+0x246/0x3a0 [ 936.803345][T20847] ? __netlink_deliver_tap+0x807/0x850 [ 936.803367][T20847] ? netlink_deliver_tap+0x2e/0x1b0 [ 936.803392][T20847] ? netlink_deliver_tap+0x2e/0x1b0 [ 936.803418][T20847] netlink_unicast+0x80f/0x9b0 [ 936.803444][T20847] ? __pfx_netlink_unicast+0x10/0x10 [ 936.803466][T20847] ? netlink_sendmsg+0x650/0xb40 [ 936.803487][T20847] ? skb_put+0x11b/0x210 [ 936.803512][T20847] netlink_sendmsg+0x813/0xb40 [ 936.803542][T20847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.803568][T20847] ? aa_sock_msg_perm+0xf1/0x1b0 [ 936.803591][T20847] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 936.803613][T20847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.803634][T20847] ____sys_sendmsg+0xa68/0xad0 [ 936.803669][T20847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 936.803700][T20847] ? kstrtoull+0x12f/0x1d0 [ 936.803728][T20847] ___sys_sendmsg+0x2a5/0x360 [ 936.803756][T20847] ? __pfx____sys_sendmsg+0x10/0x10 [ 936.803784][T20847] ? get_pid_task+0x20/0x1f0 [ 936.803801][T20847] ? get_pid_task+0x20/0x1f0 [ 936.803816][T20847] ? get_pid_task+0x20/0x1f0 [ 936.803858][T20847] ? __fget_files+0x2a/0x420 [ 936.803883][T20847] ? __fget_files+0x3a0/0x420 [ 936.803917][T20847] __sys_sendmsg+0x183/0x260 [ 936.803946][T20847] ? __pfx___sys_sendmsg+0x10/0x10 [ 936.803993][T20847] __do_fast_syscall_32+0x20d/0x640 [ 936.804013][T20847] ? do_fast_syscall_32+0x33/0x70 [ 936.804038][T20847] ? asm_int80_emulation+0x1a/0x20 [ 936.804055][T20847] ? do_int80_emulation+0x274/0x4d0 [ 936.804068][T20847] ? trace_irq_disable+0x3b/0x150 [ 936.804093][T20847] do_fast_syscall_32+0x33/0x70 [ 936.804109][T20847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 936.804129][T20847] RIP: 0023:0xf7f27f6c [ 936.804144][T20847] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 936.804158][T20847] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 936.804176][T20847] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 936.804186][T20847] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 936.804195][T20847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 936.804204][T20847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 936.804213][T20847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 936.804234][T20847] [ 936.809936][ T5923] usb 6-1: USB disconnect, device number 108 [ 937.327621][T17385] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 937.336761][T17385] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.349240][T17385] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.409844][T17385] usb 3-1: config 0 interface 0 has no altsetting 0 [ 937.417965][T17385] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.490083][T17385] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.525277][T17385] usb 3-1: config 0 interface 0 has no altsetting 0 [ 937.555244][T17385] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.564337][T17385] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.576817][T17385] usb 3-1: config 0 interface 0 has no altsetting 0 [ 937.666781][T17385] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.676753][T17385] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.690239][T17385] usb 3-1: config 0 interface 0 has no altsetting 0 [ 937.700978][T17385] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.718908][T17385] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.730260][T17385] usb 3-1: config 0 interface 0 has no altsetting 0 [ 937.738850][T17385] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 937.750134][T17385] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 937.763808][T17385] usb 3-1: config 0 interface 0 has no altsetting 0 [ 937.772930][T17385] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 938.051535][T17385] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 938.135826][T17385] usb 3-1: config 0 interface 0 has no altsetting 0 [ 938.146431][T17385] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 938.166642][T17385] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 938.375551][T17385] usb 3-1: config 0 interface 0 has no altsetting 0 [ 938.436968][ T5923] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 938.476088][T17385] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 938.485791][T17385] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 938.499764][T17385] usb 3-1: Product: syz [ 938.506036][T17385] usb 3-1: Manufacturer: syz [ 938.589758][T17385] usb 3-1: SerialNumber: syz [ 938.650675][T17385] usb 3-1: config 0 descriptor?? [ 938.676312][T17385] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 938.730656][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 938.917666][ T5923] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 938.933197][ T5923] usb 2-1: config 0 has no interface number 0 [ 938.948003][ T5923] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 938.976938][ T5923] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 938.987257][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.009979][ T5923] usb 2-1: Product: syz [ 939.014279][ T5923] usb 2-1: Manufacturer: syz [ 939.018990][ T5923] usb 2-1: SerialNumber: syz [ 939.066081][ T5923] usb 2-1: config 0 descriptor?? [ 939.075808][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 939.076940][T15497] usb 3-1: USB disconnect, device number 114 [ 939.100649][T20867] ip6gre1: entered promiscuous mode [ 939.100726][ T5923] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 939.106041][T20867] ip6gre1: entered allmulticast mode [ 939.115922][ T5923] em28xx 2-1:0.132: Video interface 132 found: [ 939.166503][T15497] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 939.211815][T20869] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 939.487848][T20881] netlink: 'syz.0.4214': attribute type 4 has an invalid length. [ 939.527555][ T5923] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 939.529267][ T29] audit: type=1400 audit(1772021154.828:6723): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20877 comm="syz.0.4214" [ 939.802319][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4220'. [ 940.647852][ T5923] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 940.670493][ T5923] em28xx 2-1:0.132: board has no eeprom [ 940.922564][ T5923] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 941.006261][ T5923] em28xx 2-1:0.132: analog set to bulk mode. [ 941.059995][T15497] em28xx 2-1:0.132: Registering V4L2 extension [ 941.425617][T15497] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 941.454859][T15497] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 941.580457][ T56] usb 2-1: USB disconnect, device number 117 [ 941.587233][ T56] em28xx 2-1:0.132: Disconnecting em28xx [ 941.593298][T15497] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 942.419538][T15497] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 942.443794][T15497] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 942.498947][T15497] em28xx 2-1:0.132: No AC97 audio processor [ 942.516339][T15497] usb 2-1: Decoder not found [ 942.526398][T15497] em28xx 2-1:0.132: failed to create media graph [ 942.539963][T15497] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 942.591107][T15497] em28xx 2-1:0.132: Remote control support is not available for this card. [ 942.659816][ T56] em28xx 2-1:0.132: Closing input extension [ 942.805686][T20927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4226'. [ 942.839206][ T56] em28xx 2-1:0.132: Freeing device [ 943.949819][ T5923] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 943.976486][T20953] EXT4-fs: Conflicting test_dummy_encryption options [ 944.199915][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 944.258289][ T5923] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 944.314916][ T5923] usb 3-1: config 0 has no interface number 0 [ 944.321656][ T5923] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 944.348502][ T5923] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 944.359709][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.500335][ T5923] usb 3-1: Product: syz [ 944.517865][ T5923] usb 3-1: Manufacturer: syz [ 944.537562][ T5923] usb 3-1: SerialNumber: syz [ 944.725771][ T5923] usb 3-1: config 0 descriptor?? [ 944.811536][ T5923] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 944.969528][ T5923] em28xx 3-1:0.132: Video interface 132 found: [ 945.165865][T20970] tipc: Enabled bearer , priority 0 [ 945.173883][T20970] syzkaller0: entered promiscuous mode [ 945.179464][T20970] syzkaller0: entered allmulticast mode [ 945.269638][ T5923] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 945.937170][T20969] tipc: Resetting bearer [ 946.001006][T20969] tipc: Disabling bearer [ 946.013234][T20988] netlink: 'syz.1.4242': attribute type 4 has an invalid length. [ 946.087458][ T29] audit: type=1400 audit(1772021161.408:6724): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=20980 comm="syz.1.4242" [ 946.402220][ T5923] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 946.441711][ T5923] em28xx 3-1:0.132: board has no eeprom [ 946.504078][T20997] netlink: 136 bytes leftover after parsing attributes in process `syz.5.4244'. [ 946.580210][ T5923] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 946.596708][ T5923] em28xx 3-1:0.132: analog set to bulk mode. [ 946.618652][T15497] em28xx 3-1:0.132: Registering V4L2 extension [ 946.858461][T15497] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 946.976976][T20992] syz.5.4244 (20992): drop_caches: 2 [ 946.982994][ T29] audit: type=1326 audit(1772021161.998:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.0.4245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 947.028812][T15497] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 947.116976][T15497] em28xx 3-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 947.129763][ T29] audit: type=1326 audit(1772021162.008:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.0.4245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 947.159834][T15497] em28xx 3-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 947.331470][ T29] audit: type=1326 audit(1772021162.008:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.0.4245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 947.332654][ T5873] usb 3-1: USB disconnect, device number 115 [ 947.399805][ T29] audit: type=1326 audit(1772021162.008:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.0.4245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 947.459125][ T5873] em28xx 3-1:0.132: Disconnecting em28xx [ 947.486919][ T29] audit: type=1326 audit(1772021162.008:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.0.4245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 947.531495][ T56] usb 5-1: new low-speed USB device number 116 using dummy_hcd [ 947.601672][T21007] FAULT_INJECTION: forcing a failure. [ 947.601672][T21007] name failslab, interval 1, probability 0, space 0, times 0 [ 947.621991][ T29] audit: type=1326 audit(1772021162.008:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.0.4245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 947.681075][ T56] usb 5-1: device descriptor read/64, error -71 [ 947.695802][T21007] CPU: 0 UID: 0 PID: 21007 Comm: syz.2.4248 Tainted: G L syzkaller #0 PREEMPT(full) [ 947.695833][T21007] Tainted: [L]=SOFTLOCKUP [ 947.695840][T21007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 947.695852][T21007] Call Trace: [ 947.695860][T21007] [ 947.695868][T21007] dump_stack_lvl+0xe8/0x150 [ 947.695898][T21007] should_fail_ex+0x412/0x560 [ 947.695925][T21007] should_failslab+0xa8/0x100 [ 947.695950][T21007] __kmalloc_cache_noprof+0x88/0x660 [ 947.695972][T21007] ? gen_new_estimator+0x1e9/0x9f0 [ 947.695995][T21007] ? __asan_memset+0x22/0x50 [ 947.696025][T21007] gen_new_estimator+0x1e9/0x9f0 [ 947.696047][T21007] ? __pfx_fifo_init+0x10/0x10 [ 947.696072][T21007] ? qdisc_alloc+0x6ec/0x9e0 [ 947.696095][T21007] ? __pfx_gen_new_estimator+0x10/0x10 [ 947.696118][T21007] ? rcu_is_watching+0x15/0xb0 [ 947.696150][T21007] ? qdisc_create_dflt+0x2ca/0x510 [ 947.696176][T21007] qfq_change_class+0x796/0x14b0 [ 947.696206][T21007] ? __pfx_qfq_change_class+0x10/0x10 [ 947.696232][T21007] ? lockdep_rtnl_is_held+0x26/0x40 [ 947.696260][T21007] ? qdisc_lookup+0x179/0x6d0 [ 947.696291][T21007] tc_ctl_tclass+0xb7e/0x1690 [ 947.696325][T21007] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 947.696344][T21007] ? trace_contention_end+0x3d/0x150 [ 947.696374][T21007] ? __mutex_lock+0x319/0x1300 [ 947.696399][T21007] ? __local_bh_enable_ip+0xd0/0x130 [ 947.696425][T21007] ? __dev_queue_xmit+0x274/0x38a0 [ 947.696478][T21007] ? __pfx_tc_ctl_tclass+0x10/0x10 [ 947.696495][T21007] rtnetlink_rcv_msg+0x77e/0xbe0 [ 947.696523][T21007] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 947.696545][T21007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 947.696567][T21007] ? ref_tracker_free+0x693/0x840 [ 947.696589][T21007] ? __copy_skb_header+0xa3/0x4a0 [ 947.696617][T21007] ? __pfx_ref_tracker_free+0x10/0x10 [ 947.696639][T21007] ? __skb_clone+0x63/0x7a0 [ 947.696674][T21007] netlink_rcv_skb+0x232/0x4b0 [ 947.696698][T21007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 947.696724][T21007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 947.696757][T21007] ? netlink_deliver_tap+0x2e/0x1b0 [ 947.696787][T21007] netlink_unicast+0x80f/0x9b0 [ 947.696819][T21007] ? __pfx_netlink_unicast+0x10/0x10 [ 947.696841][T21007] ? netlink_sendmsg+0x650/0xb40 [ 947.696861][T21007] ? skb_put+0x11b/0x210 [ 947.696888][T21007] netlink_sendmsg+0x813/0xb40 [ 947.696920][T21007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.696946][T21007] ? aa_sock_msg_perm+0xf1/0x1b0 [ 947.696971][T21007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 947.696993][T21007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.697015][T21007] ____sys_sendmsg+0xa68/0xad0 [ 947.697050][T21007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 947.697081][T21007] ? kstrtoull+0x12f/0x1d0 [ 947.697109][T21007] ___sys_sendmsg+0x2a5/0x360 [ 947.697147][T21007] ? __pfx____sys_sendmsg+0x10/0x10 [ 947.697176][T21007] ? get_pid_task+0x20/0x1f0 [ 947.697194][T21007] ? get_pid_task+0x20/0x1f0 [ 947.697210][T21007] ? get_pid_task+0x20/0x1f0 [ 947.697253][T21007] ? __fget_files+0x2a/0x420 [ 947.697278][T21007] ? __fget_files+0x3a0/0x420 [ 947.697314][T21007] __sys_sendmsg+0x183/0x260 [ 947.697353][T21007] ? __pfx___sys_sendmsg+0x10/0x10 [ 947.697401][T21007] __do_fast_syscall_32+0x20d/0x640 [ 947.697422][T21007] ? do_fast_syscall_32+0x33/0x70 [ 947.697440][T21007] ? asm_int80_emulation+0x1a/0x20 [ 947.697457][T21007] ? do_int80_emulation+0x274/0x4d0 [ 947.697474][T21007] ? trace_irq_disable+0x3b/0x150 [ 947.697505][T21007] do_fast_syscall_32+0x33/0x70 [ 947.697524][T21007] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 947.697548][T21007] RIP: 0023:0xf707ef6c [ 947.697565][T21007] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 947.697579][T21007] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 947.697597][T21007] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 947.697609][T21007] RDX: 00000000040408c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.697619][T21007] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 947.697628][T21007] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 947.697638][T21007] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 947.697661][T21007] [ 948.124557][ T29] audit: type=1326 audit(1772021162.008:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.0.4245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 948.147127][ T29] audit: type=1326 audit(1772021162.008:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.0.4245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 948.169448][ T29] audit: type=1326 audit(1772021162.018:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20994 comm="syz.0.4245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 948.249805][ T56] usb 5-1: new low-speed USB device number 117 using dummy_hcd [ 948.393120][T15497] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 948.403358][ T56] usb 5-1: device descriptor read/64, error -71 [ 948.424728][T15497] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 948.446565][T15497] em28xx 3-1:0.132: No AC97 audio processor [ 948.490440][T15497] usb 3-1: Decoder not found [ 948.495163][T15497] em28xx 3-1:0.132: failed to create media graph [ 948.530087][T15497] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 948.540174][ T56] usb usb5-port1: attempt power cycle [ 948.558883][T15497] em28xx 3-1:0.132: Remote control support is not available for this card. [ 948.568936][T21018] ================================================================== [ 948.577023][T21018] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 948.584668][T21018] Read of size 8 at addr ffff88807d7e4748 by task v4l_id/21018 [ 948.592223][T21018] [ 948.594557][T21018] CPU: 1 UID: 0 PID: 21018 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 948.594584][T21018] Tainted: [L]=SOFTLOCKUP [ 948.594591][T21018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 948.594603][T21018] Call Trace: [ 948.594612][T21018] [ 948.594620][T21018] dump_stack_lvl+0xe8/0x150 [ 948.594649][T21018] print_report+0xba/0x230 [ 948.594670][T21018] ? v4l2_fh_open+0xac/0x420 [ 948.594688][T21018] kasan_report+0x117/0x150 [ 948.594709][T21018] ? v4l2_fh_open+0xac/0x420 [ 948.594736][T21018] v4l2_fh_open+0xac/0x420 [ 948.594754][T21018] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 948.594784][T21018] em28xx_v4l2_open+0x157/0x9a0 [ 948.594809][T21018] ? do_raw_spin_lock+0x12b/0x2f0 [ 948.594830][T21018] v4l2_open+0x1bf/0x3a0 [ 948.594851][T21018] chrdev_open+0x4cd/0x5e0 [ 948.594872][T21018] ? __pfx_chrdev_open+0x10/0x10 [ 948.594893][T21018] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 948.594923][T21018] ? __pfx_chrdev_open+0x10/0x10 [ 948.594942][T21018] do_dentry_open+0x785/0x14e0 [ 948.594971][T21018] vfs_open+0x3b/0x340 [ 948.594993][T21018] ? path_openat+0x2df0/0x3860 [ 948.595012][T21018] path_openat+0x2e08/0x3860 [ 948.595036][T21018] ? __pfx_stack_trace_save+0x10/0x10 [ 948.595056][T21018] ? stack_depot_save_flags+0x33/0x810 [ 948.595081][T21018] ? __pfx_path_openat+0x10/0x10 [ 948.595098][T21018] ? __x64_sys_openat+0x138/0x170 [ 948.595120][T21018] ? do_syscall_64+0x14d/0xf80 [ 948.595146][T21018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.595168][T21018] ? __lock_acquire+0x6b5/0x2cf0 [ 948.595193][T21018] do_file_open+0x23e/0x4a0 [ 948.595213][T21018] ? __pfx_do_file_open+0x10/0x10 [ 948.595239][T21018] ? _raw_spin_unlock+0x28/0x50 [ 948.595261][T21018] ? alloc_fd+0x64b/0x6c0 [ 948.595288][T21018] do_sys_openat2+0x113/0x200 [ 948.595312][T21018] ? __pfx_do_sys_openat2+0x10/0x10 [ 948.595336][T21018] ? exc_page_fault+0x6a/0xc0 [ 948.595362][T21018] ? do_user_addr_fault+0xc6f/0x1340 [ 948.595387][T21018] __x64_sys_openat+0x138/0x170 [ 948.595413][T21018] do_syscall_64+0x14d/0xf80 [ 948.595439][T21018] ? trace_irq_disable+0x3b/0x150 [ 948.595465][T21018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.595483][T21018] ? clear_bhb_loop+0x40/0x90 [ 948.595504][T21018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.595523][T21018] RIP: 0033:0x7f969eea7407 [ 948.595541][T21018] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 948.595557][T21018] RSP: 002b:00007ffcaff3f950 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 948.595578][T21018] RAX: ffffffffffffffda RBX: 00007f969f634880 RCX: 00007f969eea7407 [ 948.595592][T21018] RDX: 0000000000000000 RSI: 00007ffcaff3ff1b RDI: ffffffffffffff9c [ 948.595605][T21018] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 948.595617][T21018] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 948.595628][T21018] R13: 00007ffcaff3fba0 R14: 00007f969f79b000 R15: 00005606755fc4d8 [ 948.595649][T21018] [ 948.595656][T21018] [ 948.895987][T21018] Allocated by task 15497: [ 948.900387][T21018] kasan_save_track+0x3e/0x80 [ 948.905053][T21018] __kasan_kmalloc+0x93/0xb0 [ 948.909627][T21018] __kmalloc_cache_noprof+0x31c/0x660 [ 948.914999][T21018] em28xx_v4l2_init+0x10b/0x2e70 [ 948.919948][T21018] em28xx_init_extension+0x120/0x1c0 [ 948.925229][T21018] process_scheduled_works+0xb02/0x1830 [ 948.930773][T21018] worker_thread+0xa50/0xfc0 [ 948.935357][T21018] kthread+0x388/0x470 [ 948.939413][T21018] ret_from_fork+0x51e/0xb90 [ 948.944024][T21018] ret_from_fork_asm+0x1a/0x30 [ 948.948782][T21018] [ 948.951100][T21018] Freed by task 15497: [ 948.955147][T21018] kasan_save_track+0x3e/0x80 [ 948.959895][T21018] kasan_save_free_info+0x46/0x50 [ 948.965018][T21018] __kasan_slab_free+0x5c/0x80 [ 948.969768][T21018] kfree+0x1c1/0x630 [ 948.973661][T21018] em28xx_v4l2_init+0x1683/0x2e70 [ 948.978685][T21018] em28xx_init_extension+0x120/0x1c0 [ 948.983976][T21018] process_scheduled_works+0xb02/0x1830 [ 948.989526][T21018] worker_thread+0xa50/0xfc0 [ 948.994112][T21018] kthread+0x388/0x470 [ 948.998170][T21018] ret_from_fork+0x51e/0xb90 [ 949.002779][T21018] ret_from_fork_asm+0x1a/0x30 [ 949.007555][T21018] [ 949.009866][T21018] The buggy address belongs to the object at ffff88807d7e4000 [ 949.009866][T21018] which belongs to the cache kmalloc-8k of size 8192 [ 949.023903][T21018] The buggy address is located 1864 bytes inside of [ 949.023903][T21018] freed 8192-byte region [ffff88807d7e4000, ffff88807d7e6000) [ 949.037858][T21018] [ 949.040170][T21018] The buggy address belongs to the physical page: [ 949.046576][T21018] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d7e0 [ 949.055329][T21018] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 949.063810][T21018] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 949.071342][T21018] page_type: f5(slab) [ 949.075312][T21018] raw: 00fff00000000040 ffff88813fea9280 dead000000000122 0000000000000000 [ 949.083886][T21018] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 949.092550][T21018] head: 00fff00000000040 ffff88813fea9280 dead000000000122 0000000000000000 [ 949.101202][T21018] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 949.109853][T21018] head: 00fff00000000003 ffffea0001f5f801 00000000ffffffff 00000000ffffffff [ 949.118504][T21018] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 949.127154][T21018] page dumped because: kasan: bad access detected [ 949.133564][T21018] page_owner tracks the page as allocated [ 949.139259][T21018] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 20971, tgid 20968 (syz.5.4240), ts 945154387940, free_ts 945151919544 [ 949.160776][T21018] post_alloc_hook+0x231/0x280 [ 949.165532][T21018] get_page_from_freelist+0x24dc/0x2580 [ 949.171065][T21018] __alloc_frozen_pages_noprof+0x18d/0x380 [ 949.176859][T21018] allocate_slab+0x77/0x660 [ 949.181351][T21018] refill_objects+0x331/0x3c0 [ 949.186017][T21018] __pcs_replace_empty_main+0x2b9/0x620 [ 949.191549][T21018] __kmalloc_cache_noprof+0x392/0x660 [ 949.196918][T21018] landlock_init_hierarchy_log+0x9e/0x5f0 [ 949.202631][T21018] landlock_merge_ruleset+0x666/0x900 [ 949.207990][T21018] __se_sys_landlock_restrict_self+0x2ac/0x810 [ 949.214136][T21018] __do_fast_syscall_32+0x20d/0x640 [ 949.219327][T21018] do_fast_syscall_32+0x33/0x70 [ 949.224161][T21018] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 949.230477][T21018] page last free pid 20968 tgid 20968 stack trace: [ 949.236984][T21018] __free_frozen_pages+0xc2b/0xdb0 [ 949.242109][T21018] __slab_free+0x263/0x2b0 [ 949.246521][T21018] qlist_free_all+0x97/0x100 [ 949.251105][T21018] kasan_quarantine_reduce+0x148/0x160 [ 949.256550][T21018] __kasan_slab_alloc+0x22/0x80 [ 949.261388][T21018] kmem_cache_alloc_noprof+0x2bc/0x650 [ 949.266850][T21018] ptlock_alloc+0x20/0x70 [ 949.271176][T21018] pte_alloc_one+0x7a/0x370 [ 949.275679][T21018] __do_fault+0xd1/0x390 [ 949.279906][T21018] do_pte_missing+0x5c4/0x3750 [ 949.284662][T21018] handle_mm_fault+0x1bec/0x3310 [ 949.289590][T21018] do_user_addr_fault+0xa73/0x1340 [ 949.294693][T21018] exc_page_fault+0x6a/0xc0 [ 949.299193][T21018] asm_exc_page_fault+0x26/0x30 [ 949.304028][T21018] [ 949.306338][T21018] Memory state around the buggy address: [ 949.311949][T21018] ffff88807d7e4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 949.319996][T21018] ffff88807d7e4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 949.328082][T21018] >ffff88807d7e4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 949.336126][T21018] ^ [ 949.342523][T21018] ffff88807d7e4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 949.350571][T21018] ffff88807d7e4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 949.358614][T21018] ================================================================== [ 949.391112][ T5873] em28xx 3-1:0.132: Closing input extension [ 949.505098][T21018] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 949.512356][T21018] CPU: 1 UID: 0 PID: 21018 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 949.522949][T21018] Tainted: [L]=SOFTLOCKUP [ 949.527268][T21018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 949.537313][T21018] Call Trace: [ 949.540585][T21018] [ 949.543505][T21018] vpanic+0x56c/0xa60 [ 949.547484][T21018] ? __pfx_vpanic+0x10/0x10 [ 949.551987][T21018] panic+0xc5/0xd0 [ 949.555698][T21018] ? __pfx_panic+0x10/0x10 [ 949.560203][T21018] ? preempt_schedule_thunk+0x16/0x30 [ 949.565593][T21018] ? preempt_schedule_thunk+0x16/0x30 [ 949.571061][T21018] ? v4l2_fh_open+0xac/0x420 [ 949.575652][T21018] check_panic_on_warn+0x89/0xb0 [ 949.580676][T21018] ? v4l2_fh_open+0xac/0x420 [ 949.585253][T21018] end_report+0x73/0x180 [ 949.589489][T21018] ? v4l2_fh_open+0xac/0x420 [ 949.594065][T21018] kasan_report+0x128/0x150 [ 949.598568][T21018] ? v4l2_fh_open+0xac/0x420 [ 949.603231][T21018] v4l2_fh_open+0xac/0x420 [ 949.607683][T21018] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 949.613674][T21018] em28xx_v4l2_open+0x157/0x9a0 [ 949.618527][T21018] ? do_raw_spin_lock+0x12b/0x2f0 [ 949.623544][T21018] v4l2_open+0x1bf/0x3a0 [ 949.627783][T21018] chrdev_open+0x4cd/0x5e0 [ 949.632190][T21018] ? __pfx_chrdev_open+0x10/0x10 [ 949.637119][T21018] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 949.643491][T21018] ? __pfx_chrdev_open+0x10/0x10 [ 949.648415][T21018] do_dentry_open+0x785/0x14e0 [ 949.653181][T21018] vfs_open+0x3b/0x340 [ 949.657248][T21018] ? path_openat+0x2df0/0x3860 [ 949.662001][T21018] path_openat+0x2e08/0x3860 [ 949.666582][T21018] ? __pfx_stack_trace_save+0x10/0x10 [ 949.671943][T21018] ? stack_depot_save_flags+0x33/0x810 [ 949.677391][T21018] ? __pfx_path_openat+0x10/0x10 [ 949.682314][T21018] ? __x64_sys_openat+0x138/0x170 [ 949.687418][T21018] ? do_syscall_64+0x14d/0xf80 [ 949.692187][T21018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.698262][T21018] ? __lock_acquire+0x6b5/0x2cf0 [ 949.703285][T21018] do_file_open+0x23e/0x4a0 [ 949.707784][T21018] ? __pfx_do_file_open+0x10/0x10 [ 949.712805][T21018] ? _raw_spin_unlock+0x28/0x50 [ 949.717653][T21018] ? alloc_fd+0x64b/0x6c0 [ 949.721989][T21018] do_sys_openat2+0x113/0x200 [ 949.726845][T21018] ? __pfx_do_sys_openat2+0x10/0x10 [ 949.732032][T21018] ? exc_page_fault+0x6a/0xc0 [ 949.736706][T21018] ? do_user_addr_fault+0xc6f/0x1340 [ 949.741981][T21018] __x64_sys_openat+0x138/0x170 [ 949.746823][T21018] do_syscall_64+0x14d/0xf80 [ 949.751408][T21018] ? trace_irq_disable+0x3b/0x150 [ 949.756426][T21018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.762480][T21018] ? clear_bhb_loop+0x40/0x90 [ 949.767150][T21018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.773073][T21018] RIP: 0033:0x7f969eea7407 [ 949.777478][T21018] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 949.797072][T21018] RSP: 002b:00007ffcaff3f950 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 949.805473][T21018] RAX: ffffffffffffffda RBX: 00007f969f634880 RCX: 00007f969eea7407 [ 949.813434][T21018] RDX: 0000000000000000 RSI: 00007ffcaff3ff1b RDI: ffffffffffffff9c [ 949.821395][T21018] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 949.829354][T21018] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 949.837312][T21018] R13: 00007ffcaff3fba0 R14: 00007f969f79b000 R15: 00005606755fc4d8 [ 949.845368][T21018] [ 949.848804][T21018] Kernel Offset: disabled [ 949.853205][T21018] Rebooting in 86400 seconds..