last executing test programs: 10.079659565s ago: executing program 1 (id=1074): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x200000000002, 0x0, 0x13f, 0xf}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80104132, &(0x7f0000000300)) (fail_nth: 1) 9.402311483s ago: executing program 0 (id=1078): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) (async) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) (async) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x3, &(0x7f0000000400)='roo4c\xbe\xb1\x8f/hi\"9\xf2\xe7\xe0\xa7/*\xe21%)\x18\xb2r\xfc%(\xe4\x9c\f\xbf\xb5\x83\x18\xb6^X\xa0\xf6\xdd\x0f\x1d\xd0\x03\x14\xe3\x96\x0f\xc4\xd1\xdb\xfb\x8dU\x15\xcb\xf3f\xf2\xd0y3\vz/\\\xe9\xf5*\xa5\xdf\xdf\xbeP%4\xe0\xcc!\xff\x140\x8b\xdeX\xc4\xfe\x85\x80Xc\v\xe0\x8dG\xe0~\xde\x86=\xe2\xd0 \xbf\xf8\x0f\xd7\x99\xb8\t\x8amhG\xb5_\xe8\x87\x1b*I\x1a\x9ab>\xcf\x18\xcb!\xe9a\x01\xcd\x1e\xc6\x9d$d\x9f*@|\a\xe8\x17\xe8M2Z;\xd4\x03\xfe\x8a_G\xfd\xf8\xf2\xc1\x11\x9f\xfc)\xd5\xeaP\xe6\xaf|4ad\xd6\xca%0\xe0\xfcf[7m\xba\x1f\xff\a\x00\xcd\x1e\xaaj\xd2Pp8\x19\vJl!K\xfd\xe7\x9f\x1d\'\xc6\xd2\xe2\xf2[+\x83+\x8b\x8c\xf7\xb4C\xac\x02\xc4\xbf\x89\x93l\x9b\xd6s', &(0x7f0000000300), 0x39) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/cgroup\x00') setns(r8, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd2b, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8045}, 0x40000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x1, 0x8000, 0x0, 0x8, {{0x16, 0x4, 0x0, 0x32, 0x58, 0x68, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xd4, 0x3, 0x5}, @cipso={0x86, 0x1c, 0x0, [{0x2, 0x7, "8f782e23f6"}, {0x6, 0x4, '.\f'}, {0x1, 0x3, "97"}, {0x2, 0x8, "e24eb02390ab"}]}, @timestamp={0x44, 0x20, 0xa6, 0x0, 0x9, [0x7, 0x9, 0x8, 0x90, 0x21, 0x4, 0x1]}, @ssrr={0x89, 0x3, 0x8f}]}}}}}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x44, r6, 0x590, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048084}, 0xc094) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) openat$qrtrtun(0xffffff9c, &(0x7f00000001c0), 0x2240) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) 9.076050672s ago: executing program 0 (id=1079): syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x2, 0x3ed2, {0x0}, {}, 0x7, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r6, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) recvmmsg$unix(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1, 0x0, 0x0, 0xc000000}}], 0x1, 0x40000000, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000500)={0xa, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3]}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 8.608396562s ago: executing program 1 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) clock_getres(0x0, &(0x7f0000000240)) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000040000000000010000000000000", @ANYRES32, @ANYBLOB="c202000000ff59099581ffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) getsockopt$inet_opts(r8, 0x0, 0x6, 0x0, &(0x7f0000000000)) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r7, 0xffff8000) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, &(0x7f0000000280)) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000181200"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000003a000000b5ff0300fea158219a1b858b90988fbdc7c75b1b2a8d67bdf480f491ca4b1d66c8f7556b8ce1b1251d6f7401eadf48aa273db5921acae9e46ca784595bb3be7e491cd370b459", @ANYRES32=r2, @ANYBLOB="05005b001600000000005b00fec885c0d3c41e7b8964b46e892501fb4f029040c5e8d2059fd4c4d015d2d318b654c63e053f88fc070d2bc84f90312d1d15289d1468383d5961a1554151914b3d6fcd0eb1e99d6042cfdf88a7597c34db354dcf2f13a6b7868d0197348ccecaa17a78b099ac622d5714df6c806770500462831136dd4cf571246d9991e1c3a633c4f7ecc8f7a70a1a13e46c04ecf345d00da9d360"], 0x24}, 0x1, 0x0, 0x0, 0x8202462418a0c27d}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) close(0x4) 7.502993395s ago: executing program 2 (id=1082): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000340), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460", 0x25}], 0x1}, 0x24040050) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0xff0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x111}}}, 0x24}, 0x1, 0x0, 0x0, 0x8100}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x10015) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xa}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r4], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x5c}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe4) 7.288682161s ago: executing program 3 (id=1083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r2, 0x1b920db8c3911431, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40050) 7.184316201s ago: executing program 0 (id=1084): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 6.478297979s ago: executing program 2 (id=1085): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_emit_ethernet(0xe3, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000d500000000000190780a010102ac1414aa000090780065fffd32ca21e2c3bc8ff4c7be5934f7a73c4901d71a0f37853ee9d3faddc308ac42039199f2ae405689f70321011c4df4bd698ce2e55aff030000afd47aac905617630fd51a78e0746a1bd00febfe0383a41d32f08c0d46638b2b5619bab34a99dbcbe991cbf61e6bc086a5c7032a3e0077e45f9bd51c4868dd79b9f184785599e1b9abf47a2c51"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x406f413, 0x0) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0xfe, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x3, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@loopback, 0xfffffffe}, {@broadcast}, {@multicast2}, {@local}, {@multicast1}, {@multicast1}, {@multicast1, 0x6}]}]}}}}}}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f00000003c0)={0x7, 0x8, 0xfa9d, {0xffffffffffffffff, 0x6}}, 0x10) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x0, 0x10710, 0x1, 0xffffffff}, 0x0, 0x0) 5.923582872s ago: executing program 1 (id=1086): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r1, &(0x7f0000000280)=@known='user.incfs.metadata\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x6071, 0x0, 0x1ff, {[@fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x100, 0x3}]}}}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) write$dsp(r0, &(0x7f0000000180)="000000000000002189e4a8d8d0fcb23e784db090c8000000", 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, 0x80000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) 5.922620952s ago: executing program 3 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002fc0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x98}]}]}]}, 0x3c}}, 0x4) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000003180)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40101}, 0xc, &(0x7f0000003140)={&(0x7f0000003000)={0x10c, r1, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x401, 0x72}}}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x7}, {0x1, 0x7}, {0x2, 0x4}, {0x6}], "8dfad42b94a2a640"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x0, 0x6}, {0x0, 0x6}, {0xe, 0x2}, {0x8, 0x1}, {0xaa, 0x7}, {0x2, 0x4}, {0x2, 0x4}, {0xfe, 0x7}, {0xff, 0x7}, {0x2, 0x1}, {0xc, 0x1}], "6a7a622b85bfb07d"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xe3, 0x3}, {0x5, 0x6}, {0x81, 0x6}, {0x8, 0x2}, {0xdd}, {0x8, 0x5}, {0xde, 0x2}, {0x8}, {0x8, 0x1}, {0x6, 0x7}, {0x8, 0x7}, {0x6, 0x3}, {0x8, 0x2}, {0x2e, 0x2}], "04753c0b3ef2ca52"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0xec, 0x5}, {0x4, 0x6}, {0xb0, 0x5}, {0x8, 0x6}, {0x9}, {0x1, 0x5}, {0x7, 0x7}, {0x70}, {0x5}, {0x5, 0x7}, {0x7, 0x1}, {0x9, 0x5}, {0x10, 0x6}, {0x2, 0x2}, {0xff, 0x4}, {0x9e, 0x5}, {0x81}, {0x8, 0x1}, {0x1, 0x3}, {0x4, 0x6}], "3a50098c52d9a1d0"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x6, 0x4}, {0x1, 0x3}, {0xc9, 0x6}, {0x8, 0x2}, {0x9e, 0x7}, {0x5, 0x1}, {0x7, 0x6}], "27eb5ce4dd0b5264"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0xf1, 0x5}, {0x1}, {0x7, 0x1}, {0x7, 0x6}, {0xe, 0x3}, {0x97, 0x1}, {0x6, 0x4}, {}, {0x0, 0x5}, {0xa, 0x2}, {0xc, 0x2}, {0x0, 0x7}, {0xb6, 0x7}, {0x81, 0x4}, {0xd8}, {0x5a, 0x2}, {0x71}, {0xbc, 0x5}, {0x5, 0x3}, {0x4}], "043a97038027ade4"}}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc000}, 0x400d0) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x4a, &(0x7f0000000040), 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x12040, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002f40)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000004c0)=""/52, 0x34}, 0x3a}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/44, 0x2c}, {&(0x7f00000005c0)}, {&(0x7f0000000500)=""/191, 0xbf}], 0x3, &(0x7f0000000680)=""/168, 0xa8}, 0x5}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000007c0)=""/57, 0x39}, {&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000880)=""/5, 0x5}, {&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x6, &(0x7f0000000a40)=""/116, 0x74}, 0xec8}, {{&(0x7f0000002bc0)=@sco, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002c40)=""/72, 0x48}, {&(0x7f0000002cc0)=""/109, 0x6d}, {&(0x7f0000002d40)=""/17, 0x11}, {&(0x7f0000002d80)=""/136, 0x88}], 0x4, &(0x7f0000002e80)=""/149, 0x95}, 0x7}], 0x4, 0x8040, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000380)="0eb5", 0x2}], 0x1) 5.839961306s ago: executing program 4 (id=1088): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r6, &(0x7f0000002240)={0x2020}, 0x2020) fcntl$getownex(r2, 0x10, &(0x7f00000007c0)) write$cgroup_subtree(r6, 0x0, 0x2f) write$tun(r5, &(0x7f0000000440)=ANY=[], 0x30) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') preadv(r9, &(0x7f0000000800)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x36, 0x0) r10 = syz_usb_connect$cdc_ecm(0x0, 0x7a, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0xf, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x80, {{0x8, 0x24, 0x6, 0x0, 0x0, "8c27bf"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6, 0x7ff, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0xa}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x85, 0x2, 0x1, 0x5, 0x82}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xe, 0x0, 0xfc}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0xb, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x2, 0x3}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x1, 0x7, 0x3, 0xff, 0x2}, 0x26, &(0x7f0000000280)={0x5, 0xf, 0x26, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x0, 0x95, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "5457ef302763351e21d948ae0359f836"}, @ptm_cap={0x3}]}, 0x4, [{0x37, &(0x7f00000002c0)=@string={0x37, 0x3, "c011878c01c0af6dd8d8b67715c867a8481cb729ce5524d02ae74b2e2e1fc3b4b479270ea5f9f5816a728f9cff42ffb4c1a170379d"}}, {0x51, &(0x7f0000000300)=@string={0x51, 0x3, "271cbc40e5762f3482dac189a2d46de2481e85cdf70e9ecdb2d7391d0730c0b83c5b99a4653140a994c704b3603d291b36b4dc868df2ae5c4958c1ddb7e7178de6271ca1442171c35da7688ce9a394"}}, {0x21, &(0x7f0000000380)=@string={0x21, 0x3, "4ae8d29e3d6a2a324ef6c71d823ee631de182488da37df86b7195875ca23ef"}}, {0x57, &(0x7f00000003c0)=@string={0x57, 0x3, "2c6a2ca0090a7a5773365dff2f60ae6d91d24aac50ca77f554da583c69ce6cbd2125b018f6c664fecc8be32ddfcaabc2a5e8d5543755fe249d920b245585d0f3093801aff24a6f8778caefe8a8745d356abfe213ae"}}]}) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000640)={0xc, &(0x7f0000000500)={0x0, 0xa, 0xd2, {0xd2, 0x22, "7609ef06257cad086c7844309fd3d84bf2e12d196c8baa9e68e1aaa11d37baa1ca47176918b3902e520da1a5dafe92d46a56fc7ae8a66f3734cb0ec353315dbebad1574b6d1ba709a05db028ee8ccd7d49ce5799fc1d1f807e58d59f481691d46a380d79ebd49cfe1f50b58b50ea1897d1743e4c3a5e452bad62c4da2f02a40479c4b2fe2e9ae40e1642edf5aecc6620ba1f94f4c94c1049fa9ddd80e4f7099b178be3f28b1dca0e30fcdfcb010926c7abed20ec4e927074389238f96bc0f75df770c77b3f415ee086587e9434e72ed3"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x10, &(0x7f0000000680)={0x0, 0x6, 0x52, "e64890043609ff03aa94ecb2e5a00424f0c89ecd2477c6d459a6b7d5b1b91d228de69bb734ae44836bdee43712a3463d25d0d6ff9305790a9b06a3a88d2340c62cae98ccb43dd66dc758f8253297f2d817f5"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x7c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe117}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xd}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xb}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_FD={0x8, 0x1, r8}]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 5.507229857s ago: executing program 0 (id=1089): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000004c0)={0x2, 0x1, 0x0, [{0xfffffffffffffffb, 0x7, 0x1ff, 0x9, 0x2, 0x3, 0x40, '\x00', 0x8fc}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000001c0), 0xe00, 0x181080) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x49a2, 0x1, 0x7fff}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x41, 0x0) r9 = syz_io_uring_setup(0x22b, &(0x7f0000000080)={0x0, 0x5324, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r9, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a00340001010101010100000800490000ac0f0064b9bdd5c08974a02e7df98d737f48e9f6c6ed48f6f6fe1fab131a26ae9382b27ca7d92b4bfe11761585a86ff41b1f74311bbb871142dc5dcd90282c1949c3d93c32"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x941d630d24cbf15e}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040025bd7000fbdbdf2567000000080001004200000008000300", @ANYRES32=r12, @ANYBLOB="0800c400090000000802278e4cb0335ae30e972f3b5a00c4000e0500000000c30001000000d2bc46f5af7e739c32829c79444bd1086f489bb45390bc90a21e232e14c909004323d45b865414f160434c0c99357bc211f7"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r13 = fsopen(&(0x7f0000000000)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x1, @local, 0x2aee}, 0x1c) 5.116204115s ago: executing program 2 (id=1090): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000000000000000080045"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) 4.987816119s ago: executing program 4 (id=1091): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000018240)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000002c0)="f3dd394aa38f309d44ca19bbedef0150b3011f5cd50adbd1ea02e90fc7a3423bdadff56c746138d77c8bc74eed9821c9843962a46b24d80c399fe7f7b8c2e38673fe792a42e926258391ecb347284231482c226b5e52b3a1bba30e66361f0b48e18ea099996efe7c7bb0ca4f9542fe98e39c88991d4d8e5f5f4a6809fd6b755db5cd61d8d8754fc44906d22ca3de27f557154528b4e85d1079d616be03928d47c7ef64fbd0084ef5c50ec3923f94cb60f5", 0xb1}, {&(0x7f0000000400)="fef7e077f02dff57b5a99fc4e20cb05e3306f0c981e376cde091121dbd0341a56253f010b9f021e2d966469289c7d0a49044e57421573dd4709ea269cd4a57ad459b7eb74390e91a4d9f8ed127beeb372c410681dd1a9ca449a59f953accf716fb417bc1cc94a1191c526b93631854a49332373ab2be864c033747185fa2ddb3f00617851765653f290befa8d359b7f429cfa9fad6c6574adbd3f3d7d41d2c810596d4f572b769a44ba7fa87c8e03bff6342715814141ac3bd85d2ee2f08975f61625ec6142a324d6ac4bae6f18712db3aa7f0a70d228730f7d0bb", 0xdb}, {&(0x7f0000000500)="9c72cd917a988c28daefe2fa74c38f9901fb83dbb8044ceb362ceb61daa8f94c3477b53f916df74e18dab2661a70c05eadb61fe77a4e6cba3ba175fd7f3e58bf6663016670aaaed60fa0278ffff360b1df", 0x51}, {&(0x7f0000000080)="dc498531d38e28ba30ec394106a061487815959922addb58f124d44659455c76f5714d365755d9", 0x27}, {&(0x7f0000000580)="af6ca335878adaf95e343292d2418354c5b24ccfd1f45196e00fb3f92299099088241332654fc3a3abf3bae0474d6fbbb9d9f0b2ecf870f3410b4cf814ee125212d8baeedce836dc352fc010581184e7b40e67d011363418bf8b7356934cf8ad88e73d11093e135c5bfe23e16600c0adcd24740cc19a3adb51dc781fe68c8d3e20532c7dff12b32946f41940f2da572eb20c7cde5cf4b6fe2a78dc2217252cbcf0b204604e377d74a85a516c4cf7", 0xae}, {&(0x7f0000000380)="99e5cee6b3bc0d1ec19ead1cb0fffe0c48f8ca03ad47da99d5c4380cea5a340bba973fd9512bb9b08003b37f4f855709a6da93ae513755", 0x37}], 0x6, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x3c, 0x8010}}, {{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="a18fd886636c426ca762fc912055dc76d00bca89e0b6e5f97913a62d9ca7390fbe8e209b109730615f0b3316fb6071c659f7ee7d2df3f284fa411ccceb56f29a3d213bb8e1fac1bfe23ab803467faf2e7b11d94d31be8f986467e594f515b2eb738dc10d9a266a4f58a4105f756ba03d48430cab4a53b937c44c832a38c642e8306cb2f7cb13b884a825682282865567f599d3f12dc2a60e9af9356b", 0x9c}], 0x1, &(0x7f0000002e00)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x9c, 0x40000}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000037c0)="ea5ce801c296df41eaca887c33a04d486a3360ca9c61fd8f7ae62d9db8feb1da56812d8afc5030c5a74299cd2e80248883c33d82c874e9aa5dea1ef1b1fc0d5ea8857e25f0dea53513fc0f10d7d59bc11b7503e6b756d03be109039e40f6215414df946f32e8b3dcd2667f4d40d2c5e584d75716975386951ef43833957d491e3b779b5f8749be906c50f68a85e2566dbdb6d8aba02f38b4832d87cf659e7c5625c370e9bf2a3847e93041197a7f2af1d356ec0964813f8cd2f675b937c078d37c1f4bb819bcf469ab35f3f96b8f69c4458847f7de84c145ce92b6a47fc498f6af4d", 0xe2}, {&(0x7f00000038c0)="d692af1e4777f48b1aa267db4c16c7db67b7328b9ea9daea1a6e20c3e7962bfb47c0c03aeed3a98222951b9864cb898ef5905b27b27d7bacbb8ae4436850fb6099740959f4bda9df6f8520aa8041819e9e2edcfe5b350706ac8214ba00d0aab84f22f648499f968351e8886257cc49f39e21a2f41dcbd76a6fadb7c37ae9db1b4737a4c3e325904125", 0x89}], 0x2, &(0x7f0000008400)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x40000}}, {{&(0x7f000000f700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000f7c0)=[{&(0x7f0000011540)="17a7f8fa8785ae7ffbb4fa5334078b7760d78f217c1a5290097722019746da190a096d11fc7fc097f5b561569036b27619050592f7c74205f485305426949683f7f17183f977e5ad8b7cc28a979cc15613b847809867180a9067b6dcb01ac0870cd34f4947ea89d647198769c756667f3aa902c3275ad615b57e6cacedf6c9e5bb5d36641ef30ad362", 0x89}, {&(0x7f000000f780)="2dfd49d722b5395715ef6cee861d2e", 0xf}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000011600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000012980)=[{&(0x7f0000011680)="2d2fac0aaa397b4b8d151e78e6dae5ad04803bbc68e9cdbd5c21bd67964e22f641b0894d78fd140b3925778457090e426269959be32397941c9bf3d8df40ad5a9f1fc6bdee14255e8807be36f097b62513940c535cbe1d96e9a692183b6ed1dd8ffd8f8aa8083f831de25c701fa6208a27dd1ab68ad81c51e07f937ff82bf8e9de8ba1d290a4341e88cb3192e813c03888a7513c57ea68469a42132dec7b66be849a521df196796a833dd6f6215b38", 0xaf}, {&(0x7f0000011740)="70a66355719200c2c124772ba59d2cfad2524c219f12278d5bfb39c0fc83610fefb9577f57df5e3d1cb2078c54d59cadc2834c5f3338ccfc0325c1775d32979459eaf6d7dc89a4e43d", 0x49}, {&(0x7f00000117c0)="da14427a735e28262a9798a9ce697c1cc19adbbe2a7de4b3eb0ba7f195264911316182ec192712c017620b127017348886c3caef2002254fa4c40f76040a4d5837416f8b98c0200ac1a719ccde015229b5d030beaf7f30156cb98651a48f6722fa9d99eb4fafa784155b5c7aeb5003380fae779ac16e2816c4955fdace76156006066fd9352d2f4a045f569d16509fd1958292708a8833c6df22f58aaa8ed3903c4831215056086ecaf15e413b0eb57129e5ba3995a651f821f1ca5bccf7733badc81e7c6c723da9308b9c0a2fd320f7eb3d93e15b28e282d3152b2d92eef200030277e63f44dfec16dbd750ae9fab7e71016019704d1ae820894c844384be288f67c2fe4a369a119764967833861a9531b05b5c01dc267e8caad141ab9291d6f3d7505a2bd66ada7cd0c60527f9453c1b05c49b2f28540f09ef84c04bc82c24f5754ae81d578cb14d96e174b9e72ce0dc7f4832bf7f451b0de3897be26ed0c6d9e2ffdcc859b8ab60f9cea5ca8a6a4dcfff1dd5a8b8997541717d1ae1829e252e515e00e7396c3d21fdbad65e267f23a3696f05741951c7df21fa4a75f6904d2b34a1592e799c5925672ab4c19a268ab650dd3d74ac152505b498f05a777d864fb9e34ac33dae917c3fd427cbec9d93c6d5a63932f74a5afa110a308928fe18e0c9c834b4ebcd17a05ce15dbf7b02b3388baac922972f4833b01dea7e9a1b123df69cb33661e39452a4c7227a65dff63d94b132a4ad8c0ca49726589cabb1c0335daa2eae4efec591b3382d3ce4538d5a54e73f148356c2b9db0de2b72f869a11b8b3861e7c888848d5eb88e60c408a568c09a3d3142e693bf27a1e47648f07f51ef9bb90e7a570b2a58d58e55e8b9261b4a12a59ac0da3b608eb64cc149c9cae52ec37fcba78b1d74d83ed31150b24e8f9407f030d8911023174bfe1ac7eb76412f408c59523126ff8edd94bc820461d5bf350d85e8e0812abb9cf4329bd20274f3b2cec1c312a81612e83405daf8c34c654a4b8ec547326db19a29de04da49a35aedc6662424fb951ae218029f9939b733a53bce8b1ad3996e78bec920b3efc69acfa1f2b06f93991f259f9330c44f8f72f3259885a05861dff941aeda18cbf5b101ea5e257bc9840a1562bbda29cfdc63f065791d0d2dbbde0ca1c2fe4568fd13b2783f46f6c9d902bbc8262adf89c72d123d43964a81294592f0ca434d0f1188b53da6e26c5cdd16aaea461f9c1b7517afb98b665311b84e738ea76357e69b10fcc00c48789737d0d125e1150b8a172ed1c6051ca81a05c0ecfb65d3a009933e15ed68fbed6a7e4a52da60e8d5a36ad44b3870bb031f6f874d0471b8ef9291d38bbaa900aef02e151845aad768d204525e4e48692729cfe7c1005de82dedd93c63cde24297671e1b278c91d03f00d093b23f6b8292170b49b2417117625c83ccc69cc5841d714644aa826121cc18fd9a621a734510baed1814cd076b95bfedb41f26f0719d7445a45ca80b781676166954315ef3c52cea2712b7e29d58366c5faf3f125a8712fbc1b9f461ee31de1399a5ebfb33ca31dbb7ba9579d74ebef39250885b7ceb74dd9b7d494ec9b7164a34b3001667aca5df42a075956212c1e627f2949977cf6e553b1241c3e048fd351f1234f578640648160c441e5ac627154f90c98e8d912568be5f4dbf6e8908da2d6b57304f9fac92102ed91361583793069d59a2d7c63d783515a2ed3adf0aeca479268b734c1f7ed451d98f64924df0c7c229e5d376ac01fecad2610036bd71e12ca4968362ca7e5a0942547d46803011100b819ca981a5e8ee6ec37579381bb8da4c75a605482ce348dd1e3334411cb06933ed85fd26ddc55c2a97f03ee225280fadec47b3fb35efde2abcd5c1b9d1042fba5583ff6a47cc3f15477bc70f6a119b7dba3d2e20716470732525de0878e34ba89c5ac76340f1475dc64e26ce21e6b7e90e0bc54d54c6dd1c235785acd75c2f0135922120bff4a55c4fbf21ef35e68d7bb1a6957b3c51ece54019494610f787517bfc323d1903de326efde48d44277cd46fd91eba7b0bbf29910c6d9a919f6b1239acac6cc34cfa74e8bf7cdd4f42c018b005f97e7bfbb3cd1645217a1bd974856ef41a73e0400a42fe8afeb97cd28dd7368ded7c7ceeea20b60119c9eb97de859083fdd104d1247a3b3a20b1547b5990b684bc0908e2ed5027b3180b0b9773835d1496235d4528e3b4870538937afeb19d14bfbd1e9ec5aa12c5ee181e98e5f1f083aec2065d7c600afbe6925d83338b4cf79b0ab3fa0db02ca9c85adc20ae5101d7ae74751bf6e1a4f13ecb92eb0dcefdad15a47b65ce4eb96c0e0482411db86a9b701ae1a17ee89439cdac162b9d8e04fabf1b57c2ac97e997e59e4ee525afc638c9813ce6564ec371e76cdfc6d37285462e1df4d3995819bdacd81f94afd8514b5dec55e854fde34822b7df54af7179d6428bbf63b29fd70b7162f541d759807f645eb99e3d87ad5f3256893e0e79fdd30a6289fc84289dc4a203f90dac0c54d7b3563acc3ca99f3f09f3f756ef1ed520308ff123aa47db8361c3b7e1d4fc788cc2244e2e85da8b06bdf4bf84bdfef699241507bf2ea85856d505f06594d48513b0c1abd97126ba497350093b3d8c75534e1d1c1fafc0ed517c16b36d9eb527e67930e39268d135a5e1d413b67d1407071fdb57bdf91514e9325b7c0c1eeb54ead3e379c790664ef84e233c81ef09f01e96b60abfdc2bce55f3aea045e5f3020464f6d786e7f413b0a75fafea52efece4693ae5bd698b64a17a60402b6f6fcd5ca97f0f3c216f96408bdeced77dbdd42698b2b33304784578f50a13fe65d503ab06f27064cff24f08eaa74982bd890025faa0a0a6737d90e695534e008f8a7630002366683ef3167241f63b75d20be573923e61e9e5ddb5fcd9ab93526918bb719cf3dcfba882f75860a106780a84f271fb4e1ff1eb9c1fbc70d9ce340a1cf3011d145501f22d33470041e87e3cdb6272902db095fa2737d4136ef7d7b0ce00732442ee3089db0b1e02d0920d0e5549e3ff8223d0f280844db0fd7b8739da38ad3a6d208091bd9c2a11d5c66abdbbf01497e2824f71a32c2d005cbc1283df8d9ed0ad13872fd717b4e84121d3c122ea9d0f18f0e54714addc1b83704e4b54b78b58de56ec9f1e7ca36d1d4b5dfa5d1cd30114d4dd7aeadba4550e2fdc8fe85944317a64221b98a213150b35a17c6acfc2b66ec52cfcb99a34a7398c6f2283c1d9a7278706f546ff8853751a218304c0944e04f70fc048b0c34a618aeb4e2357336fe826b6e7d915e8b4a8f032d3d2ff0e0d4c678f8b7f8e78bb55f2edd19b0466c0b4dc5d7988fb52030a07dcae07e00d63a710e92a8fe1e55b094f848a91b325c8caf9ed4f896641d80ab5e6f695fe30f325769878656e6cd1cab2670976d20c183da0a9bb8d9742327072298630736cb2321c4f28ea046130123b6b4f42cfb0d643bbf3663bfcaf7d0997e9af0922dbbbecbcb3580d2883cb9bbeb098f91953ddf2bb59c67cba8fb02f39fd62426bd766b08c5ff1b3f7bf0ee9196a394f47f0c67aec6533b9d329c781901ed67ff6effa4c3a304de9fea5b1c5411b948e6f34b98df5ad21007a41844723ef5f0f682b049ce4f08259e869e8a390899150517a135d31187f56993ca2093908992249efe6132b2b2f3d421ae2c8a75607d77e05f07da13781ca88792004e8a076e1b0ff07715b5fdb1a7f80b5511a87571437f020da1f5fec410223db868f2190601545642ab4efcb05863fed6b6d1f0fb2079b34c0111f1b7fbdcf1de832ccfbfbf8cd5a282f8c45db3a081c00a48c467931808117441e6c6c3114b318907836b1b55fee96e9b62aae10100e74e148b7af7c572eaa2d468e531b3b546da8bd05d2ed08d5f1c3adea5aba7b7d3ba673d7aaffa63487312e0d8dde1984d553d7163953dfd358ba6e185fd6d37683a413fe641ed79d0dc35a17659ed6e6e399124e7f1b7e4daa733cb1ceec85c504956f44169ac0f96b89840eff0d558733f18ad6ae23529ee82abbf34afaee4ad1e5b8e0e2668b6a4a3536c3d1406726186a23c0d79a2474c5aaade11c0f2fb2bc741b3438bb68269e7840a6ca92c305cf729d8c27b8860517d9df989d045c956661dd44e7a3753d8ae19cb8d0fe3ae8ed9e30f20eb004d7ac5f9c9ea9e8792500d61457f062b9822685a915412d3d1213dd42843686a537a2006e9e4e518c2df29d2b09f9e77e2ad874294f90efe81ab45be7deb5e06f7ca53295bbfcbffcf616c4a233d7eef53686ab8f2b719cfcebff653ca44b17b1e850d66a0801ff0e2bc030a319e5ea3a239f4c209a04ff53ed1e7d431d213fdab449c11b574ff96a729594321b57d2e960f90449a97c4eaca50f0207a1afee017185bb7b3806ae1c3ea09e2ada2eaef9cd7b5d5e75c664c26fdae0bc38e7d260c7948a8320b277022c67340ea2300c53b26a62cbae5b6d8376d69bc32a9c63c0050b8efaaa9f348b66a64903eded91cbe33630493631d9b665ce7efaff9ed7898858b610c9fafbd0f3904396186014b08288d3d1671723187e0db14d0608ff6a2add8650c384d1d29e3c9b3466cc36a77f46f1ecafa0723d12ad142d8b2f3f4ba8dfb84f3ed5d0cd4387d35b99e641253f9db45e1569bbcdd538d3b0ae2ca5392d6612e15a5589a8fd907bbbb5e5db98c92c6f32c64926a216cc387754cf45c8c10d5576ceaa14fdd8de6734f289785e74d1905f6e728b5dc81b52aa150860b8eb24a6ee9463f7cbd85b82d9b291461298a2a3b909161032f19277b4643dfe824287e965be5ca9eb5613fedf2047bf6f7e9afea1e8bf996de5b589828dcdae5a0e3597248a8ae132980c35dfd9c56d6d3b8e8f9df9b7e4bbbf58312fb2113020b40df22384211024884b876fed661a41d3cd9f79f21a6211f96dc4047da29489763d26b4fd6636d5c4e218e585b1711608a31e2d1b6647d7a210da275c1f524bbf59169a89b3fd1793748a69152e947cc69a7c71102d00c9bae1c8c56a49fb28c19f3a5307fde2d0deab4d3bb100e6276fa31f28328792abccdae30fe23c9b033ac98b0d8127c544a4b3e742714c4d60914536a517ae923fb224b635ead2f8f4f3b7774c4c2e6f71648ccd8681f3fda73f86b3c2602160d3bb3d883714ca533e736f0cbbcaf8244bf33235919a4e7812119ea8737aadb096f9c3571bf0501273a94fb655f1d22a0c0389f7a4ea50b70f53127f40a0d92796319a13e78fb7c6def2e6f9c794a7c4236c5d830b4e511b0dac016c77f9f8f3800f6907b047bfd6e1d65e40c02c792c8e893d6c66447a0646e3e8f8d5106af9adbc60b54371f981762187adb8cc5fe1be7dfb24b804fdeb3581ef924ccc636a52e6027f79f7fcb81cd57cab367c1c0e0459fe77d1357efa8da19570916a2b0650ee8fe84334a07b0104f603d2ad046a30d8580f49cc28d41a4a2cb63aae0354d7f1c8e17261a087e6405984657ae87bd5c78580502c3bf83892b8058cb5f7fc34aa484d6ba3273d1b0d52780e27e9da6e7436e93e1ce0531c5ae2a1d2f4e1aa3b082ba99a60d017392f7715772d9fab8965510859a578be9745499f24c87d2fe22756340cad4b099233fa0103b498950fe1c463c688d5da5f8196a002dda4dab5b5e401e7394ce35d8585771ac4a3d44993fe482808071f558cd500397fc5d7124412bfea33f2c4148c8b1d835ff19d81b9e2408f08ef56bd04b1159770a11ba106af1ae6d9452e9f437413267ddc87e2ae6", 0x1000}, {&(0x7f00000127c0)="0123e8bea64f69d50de2e07721e02f583c9f870bad85a7e07a100db4307657e04b5c673b413231f38f4dc0c41a28f6b691e64836350c74feeab1af85c7c21f690f62d5e80bcdaa4927ba226b7805aea9a2754c9c7cd0b0d8a98d8cadff7740e7c895eacce2c7aaa85ca8597395736db6ab7f39de5d5e022faca365efeff7e2ad6ae40b88e561c2d25bfdf5dbe2b96e32cae7db24ecc85db4327ee946ee4dcb6009af24918e7cc6135257c503d79fb8880dc045dce9e527afaf1f0cde7fb759c35b16ef4fc3e08f1c8753ade1cfb1", 0xce}, {&(0x7f00000128c0)="a7ac895332af20b99c1da9c3bb7aa4aeb022726fbdbbe5c8787df1bddc9c046cfbe49a40e78ba4f34d477fe99ba6947e442daa0afec0d1f616c875ba62dba1cb70414ea2b2523067d5cb734ee84476f8a10dc59a3ad6ad9015ebd3bf84ae767863bf80b51dbef7f2aa349f7666a94595453e67305ad83a3490df10acbe629e3591", 0x81}], 0x5, &(0x7f0000012a00)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}], 0x48, 0x1}}, {{&(0x7f0000012a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000012bc0)=[{&(0x7f0000012b00)="0a920f94c908adbb9f9124d43d987e3976a862c1b603b3bac6e7d28d64c21d4fd57c1c94424ee98022a1824e55a52155fcea9b", 0x33}, {&(0x7f0000012b40)="96c3cbeb0464f6e756b5e76c5e1382c7afc3d008e940a2178d2359e81ebff495147fe9449d702d5f8bd153decc75e02b7c84d273e2915ea73eeaecd7561d3d4bc0a3c9050bacd193bea842c162b7baee0a6bd37cdf212c05c71de3520936c1192f42bf", 0x63}], 0x2, &(0x7f0000012c40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x68, 0x40}}, {{0x0, 0x0, &(0x7f0000014040)=[{&(0x7f0000012cc0)="6b5e7291723c1d44439b3c8fbaba771191709af5e4f9a2ba17568d1841bb808f39fa39c3fcbafbaf7349c00dd305f8d8ce1ebf6c61bf84", 0x37}, {&(0x7f0000012d00)="3f90c04e6946810827bed98c37c651c6de93e9acbe2ef32c5082b30784a528c0f6ecac49731a079f4c2bc0207544f37cd483b20a1e86199d120a98d31ddbd61126fd1b966a9c80e0895d63a7971060a9d8624ac4d5e7c08db1697999f45eb3e89ce15f0aeec75420cc9db675765ca73f3b0bff350afec30e6434a0a8548768694de05b16e18d4bfff38f7ada220c3e0fb32154b2a77ef1001f64337635a4557d74f2489e2e27f23c838ce6", 0xab}, {&(0x7f0000012dc0)="af3b25f55d37d0d80683e7be452fe11ec34d94ec3246d839b84d3fcc8b6a9b89ef49476fd620bb69f613a133f429f60c4fae6eb86fdbe67dd9af54ecfe1ababbea5a1613940783cb5f91898146e96962bb8e167d6d5b1bdac65e2689ec5c6f3996bb591f6823dd67bf5a6b04966dd793fa6e1517836cfea9d5e10a34aea3cb09a3", 0x81}, {&(0x7f0000012e80)="0678b4c56c0b80b3bd5953d40110fb8d80776e204562b953585fd7098759cdef170dcf9e622d3a1c8fbbe0e754bb983ff616a50e383e00a3862d220baee08cd719175d6f8d7d644107ea2e4328d1b563cd728edf", 0x54}, {&(0x7f0000012f00)}, {&(0x7f0000012f40)="a56ca1c53758c6545dd84132f02a50c3d19a5ba89103bacf8f0125c86a248f897c62a1a4b7aba37774157de790374c4058d5f6d367cd9c99dc8f66be07fad17daecb4a01255c781a70812f5d2cb18b3512e770259a95206dbb06a1eee803e7d1cfb0b0390dcd457f41ffa67e76f948ebb576f79b1adcb60d82355f3f0a43823a30322335decbf6ffd57e2dbb9373e62a8b16b80186cd093e5b49c632ebdd41b4b21a2e37fecfd1fa7e8f1a6fd6ee2d515ee36030bf2a0f8608edc0a5cf7c6eb809c61dc21dcf9279503d3f04ce1b12dd1994b4c6e98e3d805351a789eb13a9c68231ad334e82ebb545983a88c1", 0xed}, {&(0x7f0000013040)="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", 0x1000}], 0x7, &(0x7f0000018180)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x9c, 0x4000000}}], 0x7, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000018240)=[{{&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000002c0)="f3dd394aa38f309d44ca19bbedef0150b3011f5cd50adbd1ea02e90fc7a3423bdadff56c746138d77c8bc74eed9821c9843962a46b24d80c399fe7f7b8c2e38673fe792a42e926258391ecb347284231482c226b5e52b3a1bba30e66361f0b48e18ea099996efe7c7bb0ca4f9542fe98e39c88991d4d8e5f5f4a6809fd6b755db5cd61d8d8754fc44906d22ca3de27f557154528b4e85d1079d616be03928d47c7ef64fbd0084ef5c50ec3923f94cb60f5", 0xb1}, {&(0x7f0000000400)="fef7e077f02dff57b5a99fc4e20cb05e3306f0c981e376cde091121dbd0341a56253f010b9f021e2d966469289c7d0a49044e57421573dd4709ea269cd4a57ad459b7eb74390e91a4d9f8ed127beeb372c410681dd1a9ca449a59f953accf716fb417bc1cc94a1191c526b93631854a49332373ab2be864c033747185fa2ddb3f00617851765653f290befa8d359b7f429cfa9fad6c6574adbd3f3d7d41d2c810596d4f572b769a44ba7fa87c8e03bff6342715814141ac3bd85d2ee2f08975f61625ec6142a324d6ac4bae6f18712db3aa7f0a70d228730f7d0bb", 0xdb}, {&(0x7f0000000500)="9c72cd917a988c28daefe2fa74c38f9901fb83dbb8044ceb362ceb61daa8f94c3477b53f916df74e18dab2661a70c05eadb61fe77a4e6cba3ba175fd7f3e58bf6663016670aaaed60fa0278ffff360b1df", 0x51}, {&(0x7f0000000080)="dc498531d38e28ba30ec394106a061487815959922addb58f124d44659455c76f5714d365755d9", 0x27}, {&(0x7f0000000580)="af6ca335878adaf95e343292d2418354c5b24ccfd1f45196e00fb3f92299099088241332654fc3a3abf3bae0474d6fbbb9d9f0b2ecf870f3410b4cf814ee125212d8baeedce836dc352fc010581184e7b40e67d011363418bf8b7356934cf8ad88e73d11093e135c5bfe23e16600c0adcd24740cc19a3adb51dc781fe68c8d3e20532c7dff12b32946f41940f2da572eb20c7cde5cf4b6fe2a78dc2217252cbcf0b204604e377d74a85a516c4cf7", 0xae}, {&(0x7f0000000380)="99e5cee6b3bc0d1ec19ead1cb0fffe0c48f8ca03ad47da99d5c4380cea5a340bba973fd9512bb9b08003b37f4f855709a6da93ae513755", 0x37}], 0x6, &(0x7f0000000780)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x3c, 0x8010}}, {{&(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="a18fd886636c426ca762fc912055dc76d00bca89e0b6e5f97913a62d9ca7390fbe8e209b109730615f0b3316fb6071c659f7ee7d2df3f284fa411ccceb56f29a3d213bb8e1fac1bfe23ab803467faf2e7b11d94d31be8f986467e594f515b2eb738dc10d9a266a4f58a4105f756ba03d48430cab4a53b937c44c832a38c642e8306cb2f7cb13b884a825682282865567f599d3f12dc2a60e9af9356b", 0x9c}], 0x1, &(0x7f0000002e00)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x9c, 0x40000}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f00000037c0)="ea5ce801c296df41eaca887c33a04d486a3360ca9c61fd8f7ae62d9db8feb1da56812d8afc5030c5a74299cd2e80248883c33d82c874e9aa5dea1ef1b1fc0d5ea8857e25f0dea53513fc0f10d7d59bc11b7503e6b756d03be109039e40f6215414df946f32e8b3dcd2667f4d40d2c5e584d75716975386951ef43833957d491e3b779b5f8749be906c50f68a85e2566dbdb6d8aba02f38b4832d87cf659e7c5625c370e9bf2a3847e93041197a7f2af1d356ec0964813f8cd2f675b937c078d37c1f4bb819bcf469ab35f3f96b8f69c4458847f7de84c145ce92b6a47fc498f6af4d", 0xe2}, {&(0x7f00000038c0)="d692af1e4777f48b1aa267db4c16c7db67b7328b9ea9daea1a6e20c3e7962bfb47c0c03aeed3a98222951b9864cb898ef5905b27b27d7bacbb8ae4436850fb6099740959f4bda9df6f8520aa8041819e9e2edcfe5b350706ac8214ba00d0aab84f22f648499f968351e8886257cc49f39e21a2f41dcbd76a6fadb7c37ae9db1b4737a4c3e325904125", 0x89}], 0x2, &(0x7f0000008400)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70, 0x40000}}, {{&(0x7f000000f700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000f7c0)=[{&(0x7f0000011540)="17a7f8fa8785ae7ffbb4fa5334078b7760d78f217c1a5290097722019746da190a096d11fc7fc097f5b561569036b27619050592f7c74205f485305426949683f7f17183f977e5ad8b7cc28a979cc15613b847809867180a9067b6dcb01ac0870cd34f4947ea89d647198769c756667f3aa902c3275ad615b57e6cacedf6c9e5bb5d36641ef30ad362", 0x89}, {&(0x7f000000f780)="2dfd49d722b5395715ef6cee861d2e", 0xf}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000011600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000012980)=[{&(0x7f0000011680)="2d2fac0aaa397b4b8d151e78e6dae5ad04803bbc68e9cdbd5c21bd67964e22f641b0894d78fd140b3925778457090e426269959be32397941c9bf3d8df40ad5a9f1fc6bdee14255e8807be36f097b62513940c535cbe1d96e9a692183b6ed1dd8ffd8f8aa8083f831de25c701fa6208a27dd1ab68ad81c51e07f937ff82bf8e9de8ba1d290a4341e88cb3192e813c03888a7513c57ea68469a42132dec7b66be849a521df196796a833dd6f6215b38", 0xaf}, {&(0x7f0000011740)="70a66355719200c2c124772ba59d2cfad2524c219f12278d5bfb39c0fc83610fefb9577f57df5e3d1cb2078c54d59cadc2834c5f3338ccfc0325c1775d32979459eaf6d7dc89a4e43d", 0x49}, {&(0x7f00000117c0)="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", 0x1000}, {&(0x7f00000127c0)="0123e8bea64f69d50de2e07721e02f583c9f870bad85a7e07a100db4307657e04b5c673b413231f38f4dc0c41a28f6b691e64836350c74feeab1af85c7c21f690f62d5e80bcdaa4927ba226b7805aea9a2754c9c7cd0b0d8a98d8cadff7740e7c895eacce2c7aaa85ca8597395736db6ab7f39de5d5e022faca365efeff7e2ad6ae40b88e561c2d25bfdf5dbe2b96e32cae7db24ecc85db4327ee946ee4dcb6009af24918e7cc6135257c503d79fb8880dc045dce9e527afaf1f0cde7fb759c35b16ef4fc3e08f1c8753ade1cfb1", 0xce}, {&(0x7f00000128c0)="a7ac895332af20b99c1da9c3bb7aa4aeb022726fbdbbe5c8787df1bddc9c046cfbe49a40e78ba4f34d477fe99ba6947e442daa0afec0d1f616c875ba62dba1cb70414ea2b2523067d5cb734ee84476f8a10dc59a3ad6ad9015ebd3bf84ae767863bf80b51dbef7f2aa349f7666a94595453e67305ad83a3490df10acbe629e3591", 0x81}], 0x5, &(0x7f0000012a00)=[@cred={{0x18, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x18}}, @cred={{0x18}}], 0x48, 0x1}}, {{&(0x7f0000012a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000012bc0)=[{&(0x7f0000012b00)="0a920f94c908adbb9f9124d43d987e3976a862c1b603b3bac6e7d28d64c21d4fd57c1c94424ee98022a1824e55a52155fcea9b", 0x33}, {&(0x7f0000012b40)="96c3cbeb0464f6e756b5e76c5e1382c7afc3d008e940a2178d2359e81ebff495147fe9449d702d5f8bd153decc75e02b7c84d273e2915ea73eeaecd7561d3d4bc0a3c9050bacd193bea842c162b7baee0a6bd37cdf212c05c71de3520936c1192f42bf", 0x63}], 0x2, &(0x7f0000012c40)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x68, 0x40}}, {{0x0, 0x0, &(0x7f0000014040)=[{&(0x7f0000012cc0)="6b5e7291723c1d44439b3c8fbaba771191709af5e4f9a2ba17568d1841bb808f39fa39c3fcbafbaf7349c00dd305f8d8ce1ebf6c61bf84", 0x37}, {&(0x7f0000012d00)="3f90c04e6946810827bed98c37c651c6de93e9acbe2ef32c5082b30784a528c0f6ecac49731a079f4c2bc0207544f37cd483b20a1e86199d120a98d31ddbd61126fd1b966a9c80e0895d63a7971060a9d8624ac4d5e7c08db1697999f45eb3e89ce15f0aeec75420cc9db675765ca73f3b0bff350afec30e6434a0a8548768694de05b16e18d4bfff38f7ada220c3e0fb32154b2a77ef1001f64337635a4557d74f2489e2e27f23c838ce6", 0xab}, {&(0x7f0000012dc0)="af3b25f55d37d0d80683e7be452fe11ec34d94ec3246d839b84d3fcc8b6a9b89ef49476fd620bb69f613a133f429f60c4fae6eb86fdbe67dd9af54ecfe1ababbea5a1613940783cb5f91898146e96962bb8e167d6d5b1bdac65e2689ec5c6f3996bb591f6823dd67bf5a6b04966dd793fa6e1517836cfea9d5e10a34aea3cb09a3", 0x81}, {&(0x7f0000012e80)="0678b4c56c0b80b3bd5953d40110fb8d80776e204562b953585fd7098759cdef170dcf9e622d3a1c8fbbe0e754bb983ff616a50e383e00a3862d220baee08cd719175d6f8d7d644107ea2e4328d1b563cd728edf", 0x54}, {&(0x7f0000012f00)}, {&(0x7f0000012f40)="a56ca1c53758c6545dd84132f02a50c3d19a5ba89103bacf8f0125c86a248f897c62a1a4b7aba37774157de790374c4058d5f6d367cd9c99dc8f66be07fad17daecb4a01255c781a70812f5d2cb18b3512e770259a95206dbb06a1eee803e7d1cfb0b0390dcd457f41ffa67e76f948ebb576f79b1adcb60d82355f3f0a43823a30322335decbf6ffd57e2dbb9373e62a8b16b80186cd093e5b49c632ebdd41b4b21a2e37fecfd1fa7e8f1a6fd6ee2d515ee36030bf2a0f8608edc0a5cf7c6eb809c61dc21dcf9279503d3f04ce1b12dd1994b4c6e98e3d805351a789eb13a9c68231ad334e82ebb545983a88c1", 0xed}, {&(0x7f0000013040)="d34bcba5cc39208d32650fd9a925627c2f21c0fc54686debf9a77c143a99c021c97b7dc8c253ee31f1deb9ca9054d1e8d33244340bdcc790b6508ed731e4bd83e72f4a3d8516b6913fc9364a8546acc39d001531de6603a797a09dcbf3a8a32605173497e1817359a8bc8123eca68bae4150f62446ee47c8ecac06c0531b791d75252e252b556b73a6343c290a5d5d996d64b11c91771387e589b847fe4f736458f37fb7211011ce388ecc6c881ede81b37a5fff715dedc4a7515d6766df0738c001c99df06dabb877583e6e5cd508e80c483e764453319352677e49271565d71ac455343f8b2aae54169b658dbb778216b0500ee651b11be813ab128e8281815a7da0c34ad1efea5e1a7a44bc6f58761476f2b5f9d2b2d5529f708f8d667eb5503031bc8ad5dfdb0c3e0a356892f8972a50d44bb7d960becf530bf3e72010b1cf28eddd7301f36d9eef8f8f7bb812e08e960fd7149f2e1401cd479a8c8c31db07c5d1ca95acd9918699cf9eb8f8964892a6dc6cf0a8d5d132e9ef714e3d6a5d489df9882701bed7c9117471e5e2a4f67f17c9e5d0cecde089241ccc60579db66e643818ea2d11f0174b48bf42cfcd2130a3f4a5149a2b825068ebf91e1354f16924a0f99591caa9ca4840456b4db0d7e8713bd66a35ecedb71ed6b568a5c0bd5e04e45953fb60b4c8b2a7888caa50950a3ef93400358a002c81d22fd974e50298ceb1d6dbef900d64ae4697f0cf37339c88b49e931ccc6e7a78895132eac1b65a75a7b1e00859bac21345400bfb1e887c6ef24f8b1d4e30194b42d8517a70112bdf16bdd9f45ab40f77ddf70790e692e37d5b3c5f5fb63805d877504426c3e52b5a3bdc10352c617910a7f0bfee0960fcc7c226320298d33902ae0a3878195fc3106f9fbfded9c6b0ebb47fc520263d8f8cd10465ef91752858e9a556a3668c25ca544ffc865f0caabf6fa1120d1a3bb68395177fedd4a891b5163b68e5f6d339643bd62688f4d43fd18cd8a0aac296416048e7e8dc5ab655d1099361e56b26fc1696662bd6a99322f448e113c63e2d220f2075d06782463d81f9a6d8000fa98989f61b441104c38ef9ed5a4eb8f6997df8ce2233c9b3375fc216ac76f807f7356526a40b3fd443c6b9e7e6263ad2ceff98ebec05129bac22405c6d5671d3394cd2a332dab6cba246b4b1d094c8fd86c17cedfd0f8b0f42c8ba896c79881241108441a50e4e491552801d34c09c9cd85c1d1034afc30a7f01ea9f34563ea45a912e834dfb12dea5114338169d300f44b0975c2679209ca91abbde9ba0d5d1f6657d694506585c3064b7e8645e6983f52235a169ee2b9b61daf15afb2e43e82200884e2bc4597f5a426053cf33fe2d887915d12b7efb5926be2e42da150a070a333be970e8a7b423c8ca43ef7606dbea3dc6fc6634f8b732b73ec0a938b17cad915a280ba3e1589a9285403b75a6223f4c7e2f0bb57094542b79f20c6ea2aa60be1df264b4fe727e809f0781fa27cff069703c90daf82d8c629d6e508be6f831d2e4f13ee766c6645ecac9e917a607dd774606a36865b6f82419e38b4579cb95557352c9ec9f9874f10e527a3cb0bcaecac523d4c2dabcc38ddcd1501e8153f74d04cff03d087dcd92462aab2f74c620c8847e0f6a4a42f7f1531c89910d423b24c655351bd3d5ac20f8b2e52c8768b573c1bac9a4bc906208db082c8a214eaf505e11b29e1b8d147181e11aea38a4e5e9c3ae802d5c2cb95df16b8b474d5df099e9b5900957c2091272ae07fa3c47979605404e5f7a1cdc7cb1709a92dd9201b49215f9ed940561f227e0d2b653ec33302771a8f9778ae94fa9c1a9206b795ba487545593aa44d325b85192b63038ecc00705db400eb4c8508a336967654ecc07ffd66767838b4f80aa7e8216c9141a41f35ac2a66aac04e55870a2e9274f90666e614bb46c2944f1127331443b13498e24958693a0d7f73607bac87244a8f114f06a2f14961e837c75c2f78bf14f539038f0d502d9b5a00defb4801c02ad13f36bb658c536ed89aca324b0528e9404b811c464c12b169d67aa652c6e3ec8783ab467c817eed2e3e22610c8c927f9abcc6092c175a99a8fff11b537588e9235146c10aa930c023dfc960808bc57920d88f5102fb1a600ddc5f00e4eddcc32ad15004a46a6bcaa80946416ce0315d2b53656fb042588f5df524c220f169f75edbb7f52350179d2cd4aa378f5a74ef4f37175b2d251ecd003026892679dbe3a6b27a977ed82f5317d939479aa7042508b9204660b601eb6438e4053b7349376a67469fefda4fe043f892693e5480b669b0f957917bb48c155bee41ee1d4ee9bd26780884984051f57973e89b5f0423511625081442741228021ebc54dde832221378277d73cc83d136ad7d8cb2624df2559f90e1ebe7c2e12a2902e692a1e24e9770adbb0045a9f07abb924a1dc2aec923e5d8929a3d4b260bfb4762e491d1e46af9c50d0caf3762dd629bce5ac1faf5bb9927b7bf5d504f39118209915ff93b6d4dd2b2b03865220d578d63ad64582a56ecfc9ef03371fb35c9c91a0f052c4231348089a1fb39d676133660d47ba855eb16aff80922e322fbeb52fbf43053e8edc2606bc2a14f6e375b1708ca4e455d17167f7d7679fd2ae2f032e0b870244051ea8fd53a0667fa86a6e130a0a20c6a7cee612f7752fe753e84bcfb451c2670b2363eb0cc1001ce60d1076d5120cda5cd96c5bc95839ce70e2cba8f01a3e0e3c1039b7e8c7b390a22ba06edc17f39e641591441d41e9cd236cda79c2f276b54693ba45c38be7c11f2416c273a53e67b30e0d916e51db52d60f668297e6841c0183a88d9dbfc1582fd581ac02209971af7f9f7252a97f93841c8aaad9e85a33a2c670eb41b1e25fb096b6c97228a9034bc89842ec561924b9ca3aa444789ebebc5ad698e1ded51a01d96c655bc8e9fd9183a6097e44ba429d78176bbf9cd9f099cbc215928d946c2ec6c6bdeb16d513c784ec56b7622af1bbd483004d59d6926bd2bbad9e94111f671245d232215ab77a5b1aac22dc9646d2f58d7e2aaa7f0e8226211b147047fc31f66040770246b6d880d6363cf992031e4f9f7714934c7802055159debf8ab661045b7518336bcaa140774418077ef61fe37e57a26f8e9a13cd138fe91c4528564900c0c2ce5911c4dc0dd2000c4c3c7f0343f796624110ce33975715747033e914981c72d91b967e5104ecb4dee242791b9bcf8a8543baa831f676ae1be793fd5bf556d1fdc8808d9cd58ea9bddff50140c51ff3914d937b55a3494746f621d073efdc806e6531fc1ae4ff3bb59035d9b5509bae79e730ad2ed376d471bae718c634fc18df4b34aa2b463d0a689188fd47e660d2eba98ce8a5af18593eb54bc733aabed693db7c013b9babb0d5b3c47c04a4e6c285e67ecbc364b4ccd57afda7065c9bc5e52fdebfed26a1ad42a277bbe6251f837c41d492ff86936050ef7579cfbf2c1cf9e91ee969fd29c07d9138e5643367fd1a7770e8493ecbe57e8726618ef68861c3363668f9e00b0418039910a219b4128435643527c71a93012833498f7a1809a23c9de93a8f61af4e42e015b4bd8937b1e758a7b709edb4686f846d198977e77e24a7d03a7514b898e90bffd8d5b84947b20e1347e19919917eff19170338c531f900a189e7119a2398cc3037f586c2058b66b4a5a782befd0ebf0a5b6152bc47ea96af4ca0262053043e03a2710de57213eefb1a1687efedc7421eb41059887beef45480e89c6e73626f1602d7ef36745297d7d7d37c8986f0b59ee96900aeab83770171cde2f886181775be711b379ed5c9a98102b92f42aed13d82a41136599009597f553ef58b42aa49fccf0d85f28b54f0a4179bbed29df84b2a37668858d2f2cc03f661a87bc4591cef0c2132e1d1b95d8914f47c4c15359070e390b7583a0ee50b5d031326044682e9078eab561a3fa23b946e203905a3e5702ad5bca27b88981efc21f5325e8f68ec712ce776183775e3c95f31fec03f54ff989787a25976ea211ae2a666cdfe035c0f999a0642c73439e0fc850b5682e1c953675fde9b09b8b8915c61a14087dba62becd8ff0292c7a6c24f4207e7029af9f8420badf2a08bd1a9c045cee3c983e4d404ead60e6a4af8ca2fe3659532e205de585e9ca54eb2bbd70f3219bbc96bee85187995dc30a6d5e7a153b36d30deaabb89fb83d27ff5efbf0d22c1caac1824e276fce0e578ae0898af7cabd609def4baa5a0606f8d908c4fc871719719fdef11f9eb6ed69db630b7c33722786c5f788ad10662c091a6832bc2361fc3d01cb590670df92dcd0d6b9ebd54029b7d1641152387957503a8a06455ebb272ea0818d828f0341364d2d7e9e1a07c59c01d5f75d2ef1eac813055efce773497d1e26eb4ab1cbc078e9eb13bade4ce99178d7e75193bd7a32c02c39a904bc8eb6b379e528a18473643c0c1a646c4d026aea1641d136bfca7d3cd3cbb7ae82b12e6db6fb14189bebb06e86d6ac351c4cefce0861c9936e3d6b0f3310964527c31c56ad78ca15de90359f35a3d960d40d9c625cd414160632b8b7c46fb07f558f271d350b8a0fc0e72ce9a0c77aefbe904e960297d6bf2ebd43af896a50723df1aed0bb5e3f11af2f846656408d94e6126350366efbfa56ee6d70f8312b0494f3aee2ad194c16fdb2b6913a93d5a05e5f00152c0c7c6c09d02864d63a9944996ade57ae54e9a1613e965a8c03c222788abbd153f7e6180c327df67c938915c65d675af2980a8b4c1d7090a454a6b1a8c6a2742c5ff6b0356cbec9afbb54ed4e8151b00950d2070561646679732bbc9506cd0dc61730f2d94d0cf61bde39b78235f8e9a1291058984331db6979cec78a96b67e6740638e4e234a527025010291fc2d159f01fb79f78ab0aead42e8f70a8fe138ebd3eeb80f9f2bb1285b69e374dc8b46c50b9194163f6f2323f963e0fdc5b8c6bcb92c34deeaefd9f43ccbc7ddeb387cd352e684100561f32c3c6886cb812fcf3ea0d428ebf41aa013c733bf30a2b9224887e6954819e8cadf6256663b77f1998e65b9044425b2159d2b75f1cd09209253536c3a6a616b18fe512264020a08bda358beffb85a17af2f889ad94bfa2a8ad26396acf5760dd101f8c6fb4d5d136ee39fa860a74527e8d3508818ade5d86ddd22c0d653124d85839b90a5170662b5d15b995b5e559bfe6ccec1d6d3c3b74e9b489634440f8a3a64b9e8318d2e37ded0fe5802335056373a6651321107a4dd69a1f22f5eb71d35762b034dfc2365050ce0a5b8f43a5aece84647a575b1436b1e1485733b63cb37cb9cb7b6f5dfc6a198a642516e836c32fedb97e6a22c236fb1d0d1c8109f4966b0a061e804bdb940eeace644b18b149513c2818049e7d7cd37f8c6b2b911935053fd2817cccd0505f65c9decc800c1ad3a9fe1abe552952695086579fb710f52dd080b34920b9f333a3a128af7be00f4734ec35065a0dab40bd27a5e2f3cb06defad1d70fbbf4a50e9de5ded8b62f706123d0d5beefc3fc0783fb6a6236de6527ca900d667bdfb047a599edab68b8713c01cd03a0fe55e110abb0cfa89f4b028022ef14a618f951b468160a266b20606cdedcfbe8ef4892a66eb89a41fb3f0fa9bd117fa08b38bc13d5062379c0d80bce0cb1841df4dd37e55def7ab1a5890c4501402ecac32cf19725f175eb04859d705f55449ecfeb967caa8feda94906ec5acbda3227d58aa9aa0255f1ffb6ae1c99bb1b2f3d431d34842ea26eddf7239b1d", 0x1000}], 0x7, &(0x7f0000018180)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x9c, 0x4000000}}], 0x7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.pending_reads\x00', 0x80, 0xc0) r1 = msgget(0x2, 0x600) msgrcv(r1, 0xfffffffffffffffe, 0x0, 0x2, 0x3000) msgrcv(r1, 0x0, 0x0, 0x0, 0x2000) (async) msgrcv(r1, 0x0, 0x0, 0x0, 0x2000) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\b'], 0x8, 0x0) (async) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\b'], 0x8, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5}, 0x4) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x0, @empty}}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x3) ioctl$TCFLSH(r2, 0x540b, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x15, 0x0, 0x1, 0xff, 0x6, @multicast}, 0x14) (async) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x15, 0x0, 0x1, 0xff, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r6 = openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(r6, &(0x7f0000000d00)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000000d00)={0x2020}, 0x2020) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) (async) sendto$inet(r7, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) clock_gettime(0x0, &(0x7f0000002f40)) (async) clock_gettime(0x0, &(0x7f0000002f40)) listen(r3, 0xfff) accept4(r7, 0x0, 0x0, 0x0) 4.987270408s ago: executing program 2 (id=1092): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x204b) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x4000010, r3, 0xf5aee000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="200000003e0007010000f7ff000000"], 0x20}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[], 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x18, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.91240052s ago: executing program 1 (id=1093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$nullb(0xffffffffffffff9c, 0x0, 0x4a2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x5, 0x501) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240180c0}, 0x40085) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r5, @ANYBLOB="a6e56bff1bf43f1918b76008aece79cf54dcb5b2214b9bda31982ada561fae164e53d218f4ac726ae0dbb5dcc87ab58732b823631fdebde2d679a00a6b4bab14584dbcffff4a57e506e9ef522db32ac39058f0391e142bccd7a8a8dbdd31477ddbec38aa7ccd5faa9bb56f7e79535eb0442915f902f3cbb2244d84360800053d6dff5667a0fccdb3be229bdc6474d5c40bc73611fb4a4f260446046ed751398de0ca3367f2ddaa13d229d3d67f2f2ccf16760525f86cf7054b95bb9f035f8a86"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1ff, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x4, 0x13, r8, 0x82000000) gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 4.871880103s ago: executing program 3 (id=1094): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x0, @empty, 0x4e23, 0x2, 'sh\x00', 0xc, 0x6, 0xffffdbfc}, 0x2c) (fail_nth: 1) 4.556163417s ago: executing program 3 (id=1095): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3e, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = io_uring_setup(0x5ef5, &(0x7f00000002c0)={0x0, 0xe6c, 0x100, 0xfffffffb, 0x8000001}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_emit_ethernet(0x6f, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000610000000000119078000000422517de639876646d36bf000000000000011b59004d1078216cfbd55f39bb28e0d10355bbc1396e8b1c4d65959a7a4278ed31e06fd1dcbb9fc5827298514555dcf16c34dce8b5a936351fddfb533b5024d2b5028617e0ff02d6406b88d02787a45a9d57d1b48a47a0c2232fe40af1de2a132058f4995d87c7b8352b0074e070fedd07254c57"], 0x0) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x1ffffffe, 0xffffffff80806040, 0x8000, 0x5}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = dup2(r5, r3) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) r8 = getpid() sched_setaffinity(r8, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r7, 0x4}, {r7, 0x9106}], 0x2, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000180)=0xffffff7f) flock(r3, 0x6) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000000000)) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0020000", @ANYRES16=r9, @ANYBLOB="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"], 0x2a0}, 0x1, 0x0, 0x0, 0x80}, 0x1) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x200000000002, 0x0, 0x13f, 0xf}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r10, 0x80104132, &(0x7f0000000300)) 4.472101096s ago: executing program 4 (id=1096): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg(r1, &(0x7f00000006c0)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000140)="e718110511798546596ea2b80c4939a11d0a73aa9e6ef10efdd5cdceada096c707f89ae5e77c63fdbc", 0x29}, {&(0x7f00000001c0)="cd1122a623d6ffa953ff58d19f294e98795baa12c2d88a336251497ae8b557513c2acdd0b433844217fb6845fbbf2a5ef575a754f247a922d0a2d3ef2e8c92d190fb2042cae46a2a350ceabc560e7f6ca96327d19054371527b6d441133f7cce1e278c968db5fedd243a5260bd307e2acae4d6d54b814e6018009316a549e43d3b7c0d2d9bcedb6d9d32f74f652136a57d0917cfe8201d7bcdea2d11a5ce1aba895bfa4ca44c06e159ef7a65e3c2a10262e712b32c95d1870fbf6ed63f5a045d3171c1b7c46523a9d45d73523aaa8aef1e5f1f3f56665ecdcf0c66d0d50788a686026830b334e2bfa9dd1ba61af9f6130e544db2be079ca7b62ff1", 0xfb}, {&(0x7f00000002c0)="0f7b18352bd61992cf00370d7c4430ae492ffe4c94c2f3e3e7dcc81d0b685446eda760d7575e2ba916bfd95d147a2a3b1ba6a6f42c96485f0330fb24b37079dd530577d31a3a2bf5bb2c6647c00027cf108229a6a55e4407c08c0c73f029905ea207259c77c8b2c8f30a51cb0a", 0x6d}, {&(0x7f0000000340)="8a057f9153a26ae2cf15b3eb30e53491acc51e506e4143775da855390a6c5e1db0b88ff8f411ee5de7a5b9d16b08a660e5e5775a2d287dfc9b8ccb6f4b8691930b1a1e45d9a78890f0e9c03f900e476438643611177802a3c02b1f8a3b64781901c169d2231f73fec4893761a68c6bfb9eb572340816f093cd64006004060deef3bc00b5da1e04aa0465dc4ee2d9fc188256a359c9557455ec1db2298c33bd610fd1d8a2551077ceba307d8d16f31a9d90cda7ff9a4babedfaf3202fadd40eeadead921f003f763caf28385fa36ee8ccf428f0df9649a1bb09a29eed32b14647ab01a60d9a2233c5", 0xe8}, {&(0x7f0000000500)="c9457cdaf9cade934c4cc83443b1138c65449052dff61b63cfaf39a03cfc565b9a45f2064039c7304c6107d6ef25e6111c302ca55fefa13bc5a46189ed9a2e4b282839f9f0ee41b4b03bbff559871db1a48dc21625cd8e489f2cbe7cb511c243a0b15ec60e612941aadb665d876d1524129f4e3ec58e02480de763fa5103d82cb2a0e0ae5d573c3d7600bfed4f6b61bb2fb10bada1a01cbf8904f0370e0f9a4e2e72a9d528a87d18fa", 0xa9}, {&(0x7f00000005c0)="0a8c5e5456b4c69c9d1be43db60df6ea46dcfbdc21ffcc8ec1bf4043995a19759a788f8ef1e0519da58daf2cc73ff1b109bbc9ff870083db969164b0fb4fb47359fb59055405bd67dfe0037d3d9254513d63bfd19079721e55c2c436d2e4b3b503c611b0260e762b2328", 0x6a}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000480)="e5a63481fa28147ed4acb2b667d2b02d2d1c0d47ee0ee788ec150b469f1621da15a1c631", 0x24}, {&(0x7f0000000640)="c0ea52f7af74b38792f342df9fec5a0856526c1a2e8a", 0x16}, {&(0x7f0000000680)="5295691fff36520c139570d52afff86ad7e25bcc1c3819aebad53a575c859635e6", 0x21}], 0xa, &(0x7f0000001800)=[{0x94, 0x104, 0x1000, "27c75b44a4acabe2434b30a9de27d93fee0695e44dde6bb5cde9a184747b86da558bfd87869257b6c74b8b3d706eb16b1dc42360d666cfa5720d3e387251142db8f5269a36d01818cac574412123f9dfe53d00025c259fc00ffb125c5eacb37d2d1bf54c43c5d52aad57e5653c298087a5a98c78908695713450a2a5b7a79866a2be3a93006797"}, {0x10c, 0x6, 0x80, "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"}, {0x18, 0x102, 0x8, "494521d55899c5cdc8aeb9a7"}, {0x68, 0x113, 0x4fc3, "5c610e7b4fbe76955200e6b5c7a9b291f821b2547cd26c6a2821bc0fa4d825fa08f212504b6696b035fbae81c06eb6de62af24c6920da6fc2141fb31e93049e34241398146be2a51ded9daa9c6f508ff81e02275b52a710a8f"}, {0x60, 0x113, 0x1, "a121ec7cfbfbc8de8dd66a1420e96eb1bea1b2a6f9c29e0aa65375befffb563aafe05d4d08d54787e7a7b6bcd263fc3a33f88cf0ee4bc941cdaaa91c3a9066cfb5ea26fef8c34fd928447845db2d2ff718"}, {0x6c, 0x117, 0x6, "c3c8dd1853ba63c2293a405c8ef01e433abeded4cfd4480d63e2c742f61de37bc0704473709de522e77bc5a0abe4cec2e5a1028268c33d832e6c3e00bb9599c829ee4d79b75875d16c5e6c867ba56b3df4a22e870f6660b5fa9f15d9a68f423f"}], 0x2ec}, 0x8090) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 4.404973861s ago: executing program 4 (id=1097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r2, 0x1b920db8c3911431, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x6, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40050) 4.116983032s ago: executing program 4 (id=1098): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000640)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61147900000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 2.591552212s ago: executing program 1 (id=1099): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.347915575s ago: executing program 0 (id=1100): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.641011904s ago: executing program 3 (id=1101): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, 0x0, 0x1, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x40, 0x0, 0x4007}}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000100)={0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x1, 'sh\x00', 0x28, 0x7, 0xa}, 0x2c) sendmmsg$inet(r0, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040810) 1.568256846s ago: executing program 3 (id=1102): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64540, 0xd0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000003c0)={0x4, 0x7fff, 0x1, 0x0, 0x6}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x48, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x1, 0x0, 0x9, 0x8, 0x2, 0x200}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0xffffffff, 0x100000}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7010000000000007910a800000000001d0a0000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x394}, 0x10}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) fcntl$dupfd(r2, 0x0, r2) 1.404223135s ago: executing program 2 (id=1103): r0 = syz_io_uring_setup(0x234, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000a80)={0x10, 0xfffffff5, 0x3}, 0x10) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r3) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000440)="0000000000000002ff690000000000020000001403000000dcdc2850b536f0a31066436d806ac96919cccfc48ef7a26942b7d86cf12638a1b5fa4a1406b23f4a662ac34d", 0x44, r4) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}}, 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x3) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000040)=0x9, 0x4) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.269518546s ago: executing program 2 (id=1104): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7010fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x0) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400", @ANYRES16=r0, @ANYBLOB="51d02dbd7000"], 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x80) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @ioapic={0xf000, 0x80, 0x8, 0x1, 0x0, [{0x9, 0xfc, 0xf9, '\x00', 0x3}, {0x0, 0x8, 0x2, '\x00', 0x9}, {0x9, 0x5, 0x8, '\x00', 0x9}, {0x7, 0x4, 0x1, '\x00', 0x8d}, {0x3, 0x4, 0x4, '\x00', 0x4}, {0x1, 0x6, 0x1, '\x00', 0x6}, {0xf7, 0x20, 0x3, '\x00', 0xf}, {0x0, 0xc, 0x70, '\x00', 0x3}, {0x3, 0x46, 0x3, '\x00', 0xb}, {0xe, 0x8, 0x64, '\x00', 0x9}, {0x1, 0x7, 0x5, '\x00', 0xf}, {0x0, 0x1, 0x9, '\x00', 0x5}, {0x3, 0xf, 0x4, '\x00', 0x6}, {0x1, 0x4, 0x6, '\x00', 0x5}, {0xde, 0x40, 0x80, '\x00', 0x2}, {0x3, 0x7f, 0x66, '\x00', 0x21}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x5, 0x1, 0x2f, '\x00', 0x2}, {0x7a, 0xff, 0x2, '\x00', 0x5}, {0x0, 0x80, 0x4, '\x00', 0x7}, {0x26, 0x8, 0x6, '\x00', 0xd}, {0xd, 0xa, 0x0, '\x00', 0xf}, {0x7f, 0xff, 0x1, '\x00', 0x3}, {0x80, 0xa, 0x9, '\x00', 0x1}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) syz_usb_connect(0x0, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff030000000905820208"], 0x0) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="a0"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @empty, 0x6}, 0x1c) syz_usb_control_io(r3, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r7 = socket(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[{0xc, 0x1, 0xc}], 0xc}, 0x4000001) syz_usb_control_io$hid(r3, 0x0, 0x0) 1.077018868s ago: executing program 1 (id=1105): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x1, 0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000140)={0x8000005, 0x6}) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) shutdown(r3, 0x1) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xf803, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0131010000000000380012800e00010069703665727370616e000000240002801400050000000000000000000000ffff7f000001040012000500160001000000"], 0x58}}, 0x0) socket(0x1e, 0x1, 0x0) 840.941349ms ago: executing program 0 (id=1106): openat$snapshot(0xffffffffffffff9c, 0x0, 0x2501, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setuid(0xee01) tkill(0x0, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0) epoll_create1(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000001c0)=0x6, 0x4) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x2404f009}, 0x40010) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, 0x1}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000007c0)=ANY=[], 0xffe0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 0s ago: executing program 4 (id=1107): syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x2, 0x3ed2, {0x0}, {}, 0x7, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x7, 0x1}, 0x1c) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r6, 0x1f85, 0x40110a, 0x4d, 0x0, 0x85) recvmmsg$unix(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x40000000, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f0000000040)=[{r7, 0x8744}], 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f00000001c0)={0x1, 0x3}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) kernel console output (not intermixed with test programs): .093112][ T8549] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 268.104835][ T8569] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.113545][ T8549] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 268.154960][ T8569] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.178662][ T8569] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.198318][ T8569] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.242421][ T8569] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.289046][ T8569] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.326489][ T8569] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.350561][ T8569] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.461031][ T8569] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 268.509905][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'. [ 268.535465][ T5944] vhci_hcd: vhci_device speed not set [ 268.992965][ T8583] netlink: 88 bytes leftover after parsing attributes in process `syz.4.708'. [ 270.178632][ T5945] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 270.346766][ T5945] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.365306][ T5945] usb 2-1: config 0 has no interface number 0 [ 270.406921][ T5945] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 270.675064][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.694029][ T5945] usb 2-1: config 0 descriptor?? [ 270.695579][ T5960] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 270.726980][ T5945] usb 2-1: selecting invalid altsetting 1 [ 270.735416][ T5945] dvb_ttusb_budget: ttusb_init_controller: error [ 270.741781][ T5945] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 270.950643][ T5945] DVB: Unable to find symbol cx22700_attach() [ 270.983460][ T5960] usb 5-1: Using ep0 maxpacket: 8 [ 271.084780][ T5960] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 271.107228][ T5960] usb 5-1: config 179 has no interface number 0 [ 271.121829][ T5960] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 271.345041][ T5960] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 271.367505][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'. [ 271.407290][ T5960] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 271.446407][ T5960] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 271.495359][ T5945] DVB: Unable to find symbol tda10046_attach() [ 271.504650][ T5945] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 271.534701][ T5960] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 271.611291][ T5960] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.663883][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.700225][ T8614] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 272.011682][ T5960] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input25 [ 272.204371][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.235801][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.487664][ T24] usb 5-1: USB disconnect, device number 39 [ 272.493659][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 272.493691][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 272.518564][ T8633] fuse: Unknown parameter 'batadv0' [ 272.595700][ T5960] usb 2-1: USB disconnect, device number 59 [ 272.960110][ T8641] netlink: 88 bytes leftover after parsing attributes in process `syz.2.722'. [ 273.785207][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 273.945224][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 273.964677][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.975064][ T24] usb 3-1: config 0 has no interface number 0 [ 273.981195][ T24] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.014721][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 274.039947][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.080194][ T24] usb 3-1: config 0 descriptor?? [ 274.110500][ T24] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 274.319745][ T24] usb 3-1: USB disconnect, device number 38 [ 274.326014][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 274.633950][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.730'. [ 274.783146][ T8656] program syz.4.728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.884997][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 275.035481][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 275.042970][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 275.079171][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 275.158875][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.200589][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 275.210417][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 275.230794][ T9] usb 4-1: Product: syz [ 275.250394][ T9] usb 4-1: Manufacturer: syz [ 275.272316][ T9] usb 4-1: SerialNumber: syz [ 275.332105][ T9] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input26 [ 275.485152][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 275.717634][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.739954][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.835406][ T43] usb 5-1: Product: syz [ 275.877325][ T43] usb 5-1: Manufacturer: syz [ 275.911690][ T43] usb 5-1: SerialNumber: syz [ 276.225498][ T9] usb 4-1: USB disconnect, device number 35 [ 276.231563][ T30] audit: type=1326 audit(1758584574.162:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 276.353650][ T9] appletouch 4-1:1.0: input: appletouch disconnected [ 276.425521][ T30] audit: type=1326 audit(1758584574.162:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 276.447412][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.624998][ T30] audit: type=1326 audit(1758584574.162:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 276.646868][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.674326][ T8677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 276.801759][ T30] audit: type=1326 audit(1758584574.162:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 277.133233][ T30] audit: type=1326 audit(1758584574.162:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 277.263344][ T30] audit: type=1326 audit(1758584574.162:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 277.302876][ T30] audit: type=1326 audit(1758584574.172:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 277.303118][ T43] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 277.348566][ T8688] FAULT_INJECTION: forcing a failure. [ 277.348566][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 277.446610][ T8688] CPU: 0 UID: 0 PID: 8688 Comm: syz.3.736 Not tainted syzkaller #0 PREEMPT(full) [ 277.446637][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.446648][ T8688] Call Trace: [ 277.446656][ T8688] [ 277.446664][ T8688] dump_stack_lvl+0x189/0x250 [ 277.446690][ T8688] ? __pfx____ratelimit+0x10/0x10 [ 277.446709][ T8688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.446725][ T8688] ? __pfx__printk+0x10/0x10 [ 277.446747][ T8688] ? __pfx___might_resched+0x10/0x10 [ 277.446763][ T8688] ? fs_reclaim_acquire+0x7d/0x100 [ 277.446784][ T8688] should_fail_ex+0x414/0x560 [ 277.446811][ T8688] should_failslab+0xa8/0x100 [ 277.446835][ T8688] __kmalloc_cache_noprof+0x70/0x3d0 [ 277.446857][ T8688] ? fuse_file_alloc+0x56/0x230 [ 277.446884][ T8688] fuse_file_alloc+0x56/0x230 [ 277.446908][ T8688] fuse_create_open+0x1fc/0xc80 [ 277.446936][ T8688] ? do_raw_spin_unlock+0x122/0x240 [ 277.446962][ T8688] ? __pfx_fuse_create_open+0x10/0x10 [ 277.446982][ T8688] ? fuse_change_entry_timeout+0x2d2/0x430 [ 277.447021][ T8688] ? fuse_lookup+0x553/0x640 [ 277.447064][ T8688] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 277.447083][ T8688] ? from_kgid+0x1b0/0x650 [ 277.447110][ T8688] fuse_atomic_open+0x294/0x440 [ 277.447136][ T8688] ? __pfx_fuse_atomic_open+0x10/0x10 [ 277.447159][ T8688] path_openat+0xf66/0x3830 [ 277.447178][ T8688] ? arch_stack_walk+0xfc/0x150 [ 277.447296][ T8688] ? __pfx_path_openat+0x10/0x10 [ 277.447333][ T8688] ? do_fast_syscall_32+0x34/0x80 [ 277.447374][ T8688] do_filp_open+0x1fa/0x410 [ 277.447394][ T8688] ? __lock_acquire+0xab9/0xd20 [ 277.447417][ T8688] ? __pfx_do_filp_open+0x10/0x10 [ 277.447541][ T8688] ? _raw_spin_unlock+0x28/0x50 [ 277.447563][ T8688] ? alloc_fd+0x64c/0x6c0 [ 277.447593][ T8688] do_sys_openat2+0x121/0x1c0 [ 277.447615][ T8688] ? __pfx_do_sys_openat2+0x10/0x10 [ 277.447633][ T8688] ? ksys_write+0x22a/0x250 [ 277.447663][ T8688] __ia32_sys_creat+0x8f/0xc0 [ 277.447685][ T8688] __do_fast_syscall_32+0xb6/0x2b0 [ 277.447702][ T8688] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.447722][ T8688] do_fast_syscall_32+0x34/0x80 [ 277.447738][ T8688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.447755][ T8688] RIP: 0023:0xf7fd2539 [ 277.447771][ T8688] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 277.447783][ T8688] RSP: 002b:00000000f54a555c EFLAGS: 00000206 ORIG_RAX: 0000000000000008 [ 277.447800][ T8688] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 277.447811][ T8688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.447820][ T8688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.447831][ T8688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 277.447841][ T8688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.447869][ T8688] [ 277.453041][ T43] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 277.757336][ T30] audit: type=1326 audit(1758584574.172:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 278.120869][ T30] audit: type=1326 audit(1758584574.172:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 278.162947][ T43] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 278.211585][ T30] audit: type=1326 audit(1758584574.182:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8664 comm="syz.2.734" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff4539 code=0x7fc00000 [ 278.370750][ T43] usb 5-1: USB disconnect, device number 40 [ 278.377578][ T43] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 280.337164][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 280.521968][ T43] usb 3-1: device descriptor read/64, error -71 [ 281.020918][ T43] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 281.255082][ T43] usb 3-1: device descriptor read/64, error -71 [ 281.283397][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 281.379440][ T43] usb usb3-port1: attempt power cycle [ 281.834990][ T43] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 281.871709][ T8746] FAULT_INJECTION: forcing a failure. [ 281.871709][ T8746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.937152][ T43] usb 3-1: device descriptor read/8, error -71 [ 281.964476][ T8746] CPU: 0 UID: 0 PID: 8746 Comm: syz.1.750 Not tainted syzkaller #0 PREEMPT(full) [ 281.964502][ T8746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.964512][ T8746] Call Trace: [ 281.964521][ T8746] [ 281.964529][ T8746] dump_stack_lvl+0x189/0x250 [ 281.964557][ T8746] ? __pfx____ratelimit+0x10/0x10 [ 281.964576][ T8746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.964596][ T8746] ? __pfx__printk+0x10/0x10 [ 281.964618][ T8746] ? __might_fault+0xb0/0x130 [ 281.964659][ T8746] should_fail_ex+0x414/0x560 [ 281.964689][ T8746] _copy_from_user+0x2d/0xb0 [ 281.964711][ T8746] get_compat_msghdr+0xad/0x4a0 [ 281.964740][ T8746] ? __pfx_get_compat_msghdr+0x10/0x10 [ 281.964771][ T8746] ___sys_sendmsg+0x193/0x2a0 [ 281.964795][ T8746] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.964822][ T8746] ? rcu_read_lock_any_held+0xb3/0x120 [ 281.964854][ T8746] ? sb_end_write+0xe9/0x1c0 [ 281.964882][ T8746] ? __pfx_vfs_write+0x10/0x10 [ 281.964910][ T8746] __sys_sendmsg+0x164/0x220 [ 281.964929][ T8746] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.964960][ T8746] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.964979][ T8746] __do_fast_syscall_32+0xb6/0x2b0 [ 281.964999][ T8746] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.965020][ T8746] do_fast_syscall_32+0x34/0x80 [ 281.965039][ T8746] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.965060][ T8746] RIP: 0023:0xf7f34539 [ 281.965076][ T8746] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 281.965091][ T8746] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 281.965110][ T8746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0 [ 281.965122][ T8746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.965132][ T8746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.965142][ T8746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 281.965151][ T8746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.965174][ T8746] [ 282.415165][ T43] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 282.461208][ T8754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 282.476569][ T43] usb 3-1: device descriptor read/8, error -71 [ 282.670350][ T43] usb usb3-port1: unable to enumerate USB device [ 283.127482][ T8765] netlink: 'syz.2.755': attribute type 3 has an invalid length. [ 283.172764][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 283.439822][ T8766] netlink: 148 bytes leftover after parsing attributes in process `syz.0.754'. [ 285.534472][ T8800] openvswitch: netlink: Duplicate or invalid key (type 0). [ 285.564378][ T8800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.705094][ T5966] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 285.855383][ T43] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 285.875387][ T5966] usb 4-1: Using ep0 maxpacket: 16 [ 285.886129][ T5966] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.902024][ T5966] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.923389][ T5966] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.936192][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.954835][ T5966] usb 4-1: Product: syz [ 285.965079][ T5966] usb 4-1: Manufacturer: syz [ 285.976806][ T5966] usb 4-1: SerialNumber: syz [ 285.994988][ T43] usb 3-1: device descriptor read/64, error -71 [ 286.237800][ T43] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 286.271883][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'. [ 286.296799][ T5966] usb 4-1: 0:2 : does not exist [ 286.332020][ T5966] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 286.401762][ T5966] usb 4-1: USB disconnect, device number 36 [ 286.417428][ T43] usb 3-1: device descriptor read/64, error -71 [ 286.474603][ T8823] netlink: 'syz.4.769': attribute type 12 has an invalid length. [ 286.489730][ T5921] udevd[5921]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.559846][ T43] usb usb3-port1: attempt power cycle [ 286.624248][ T5936] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 286.707430][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 286.785463][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 286.804313][ T5936] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 286.820968][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.838421][ T8829] vlan0: entered allmulticast mode [ 286.844061][ T5936] usb 1-1: Product: syz [ 286.850868][ T5936] usb 1-1: Manufacturer: syz [ 286.868192][ T5936] usb 1-1: SerialNumber: syz [ 286.882755][ T5936] usb 1-1: config 0 descriptor?? [ 286.886141][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 286.903151][ T5936] gspca_main: se401-2.14.0 probing 047d:5003 [ 286.965731][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 286.985699][ T43] usb 3-1: device descriptor read/8, error -71 [ 287.395469][ T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 287.435566][ T43] usb 3-1: device descriptor read/8, error -71 [ 287.450689][ T8832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.771'. [ 287.529369][ T8835] tipc: Enabled bearer , priority 0 [ 287.539351][ T5936] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 287.542108][ T8835] syzkaller0: entered promiscuous mode [ 287.554220][ T43] usb usb3-port1: unable to enumerate USB device [ 287.576970][ T8835] syzkaller0: entered allmulticast mode [ 287.592866][ T5936] usb 1-1: USB disconnect, device number 42 [ 287.630036][ T8835] FAULT_INJECTION: forcing a failure. [ 287.630036][ T8835] name failslab, interval 1, probability 0, space 0, times 0 [ 287.643121][ T8835] CPU: 1 UID: 0 PID: 8835 Comm: syz.1.772 Not tainted syzkaller #0 PREEMPT(full) [ 287.643144][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.643155][ T8835] Call Trace: [ 287.643163][ T8835] [ 287.643170][ T8835] dump_stack_lvl+0x189/0x250 [ 287.643196][ T8835] ? __pfx____ratelimit+0x10/0x10 [ 287.643215][ T8835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.643234][ T8835] ? __pfx__printk+0x10/0x10 [ 287.643266][ T8835] should_fail_ex+0x414/0x560 [ 287.643294][ T8835] should_failslab+0xa8/0x100 [ 287.643320][ T8835] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 287.643341][ T8835] ? __alloc_skb+0x112/0x2d0 [ 287.643369][ T8835] __alloc_skb+0x112/0x2d0 [ 287.643389][ T8835] ? inet6_rt_notify+0xaf/0x470 [ 287.643403][ T8835] inet6_rt_notify+0x170/0x470 [ 287.643427][ T8835] fib6_del+0x1094/0x1550 [ 287.643470][ T8835] ? __pfx_fib6_del+0x10/0x10 [ 287.643491][ T8835] ? is_bpf_text_address+0x26/0x2b0 [ 287.643516][ T8835] ? kernel_text_address+0xa5/0xe0 [ 287.643550][ T8835] fib6_clean_node+0x29f/0x590 [ 287.643575][ T8835] ? __pfx_fib6_clean_node+0x10/0x10 [ 287.643595][ T8835] ? __lock_acquire+0xab9/0xd20 [ 287.643622][ T8835] ? __local_bh_enable_ip+0x12d/0x1c0 [ 287.643643][ T8835] fib6_walk_continue+0x67b/0x910 [ 287.643679][ T8835] fib6_walk+0x149/0x290 [ 287.643703][ T8835] __fib6_clean_all+0x234/0x380 [ 287.643723][ T8835] ? __fib6_clean_all+0x9b/0x380 [ 287.643745][ T8835] ? __pfx_fib6_ifdown+0x10/0x10 [ 287.643761][ T8835] ? __pfx___fib6_clean_all+0x10/0x10 [ 287.643787][ T8835] ? __pfx_fib6_clean_node+0x10/0x10 [ 287.643809][ T8835] ? __pfx_fib6_ifdown+0x10/0x10 [ 287.643833][ T8835] ? __mutex_trylock_common+0x153/0x260 [ 287.643855][ T8835] rt6_disable_ip+0x120/0x720 [ 287.643876][ T8835] ? rcu_is_watching+0x15/0xb0 [ 287.643895][ T8835] ? trace_contention_end+0x39/0x120 [ 287.643913][ T8835] ? __pfx_rt6_disable_ip+0x10/0x10 [ 287.643940][ T8835] addrconf_ifdown+0x15d/0x1880 [ 287.643962][ T8835] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 287.643989][ T8835] ? tls_dev_event+0x717/0xec0 [ 287.644009][ T8835] ? __pfx_addrconf_ifdown+0x10/0x10 [ 287.644046][ T8835] addrconf_notify+0x1bc/0x1010 [ 287.644069][ T8835] notifier_call_chain+0x1b3/0x3e0 [ 287.644095][ T8835] netif_set_mtu_ext+0x594/0x7d0 [ 287.644121][ T8835] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 287.644138][ T8835] ? __mutex_trylock_common+0x153/0x260 [ 287.644160][ T8835] ? __pfx___mutex_trylock_common+0x10/0x10 [ 287.644183][ T8835] ? rcu_is_watching+0x15/0xb0 [ 287.644200][ T8835] ? trace_contention_end+0x39/0x120 [ 287.644225][ T8835] netif_set_mtu+0xa4/0x150 [ 287.644244][ T8835] ? __pfx_netif_set_mtu+0x10/0x10 [ 287.644261][ T8835] ? __lock_acquire+0xab9/0xd20 [ 287.644296][ T8835] ? netdev_name_node_lookup+0xdf/0x120 [ 287.644329][ T8835] dev_set_mtu+0x126/0x260 [ 287.644353][ T8835] dev_ioctl+0x7b4/0x1150 [ 287.644384][ T8835] sock_do_ioctl+0x22c/0x300 [ 287.644411][ T8835] ? __pfx_sock_do_ioctl+0x10/0x10 [ 287.644445][ T8835] ? unix_ioctl+0x1f8/0x6f0 [ 287.644464][ T8835] ? unix_compat_ioctl+0x15/0x30 [ 287.644488][ T8835] compat_sock_ioctl+0xb8d/0xc80 [ 287.644517][ T8835] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 287.644543][ T8835] ? __fget_files+0x3a0/0x420 [ 287.644559][ T8835] ? __fget_files+0x2a/0x420 [ 287.644579][ T8835] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 287.644602][ T8835] __ia32_compat_sys_ioctl+0x540/0x840 [ 287.644626][ T8835] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 287.644646][ T8835] ? __fget_files+0x3a0/0x420 [ 287.644666][ T8835] ? fput+0xa0/0xd0 [ 287.644685][ T8835] ? ksys_write+0x22a/0x250 [ 287.644715][ T8835] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.644736][ T8835] __do_fast_syscall_32+0xb6/0x2b0 [ 287.644756][ T8835] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.644778][ T8835] do_fast_syscall_32+0x34/0x80 [ 287.644794][ T8835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 287.644814][ T8835] RIP: 0023:0xf7f34539 [ 287.644830][ T8835] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 287.644843][ T8835] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 287.644861][ T8835] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000008922 [ 287.644877][ T8835] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 287.644886][ T8835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.644894][ T8835] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 287.644903][ T8835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.644926][ T8835] [ 288.087964][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.103971][ T8835] tipc: Resetting bearer [ 288.116628][ T8834] tipc: Resetting bearer [ 288.149926][ T8834] tipc: Disabling bearer [ 288.205163][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 288.290183][ T8843] netlink: 'syz.4.774': attribute type 1 has an invalid length. [ 288.328561][ T8843] bond2: entered promiscuous mode [ 288.333644][ T8843] bond2: entered allmulticast mode [ 288.372409][ T8843] bond2: (slave geneve2): making interface the new active one [ 288.380036][ T8843] geneve2: entered promiscuous mode [ 288.385495][ T8843] geneve2: entered allmulticast mode [ 288.392671][ T8843] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 288.405497][ T24] usb 4-1: device descriptor read/64, error -71 [ 288.654270][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 288.694080][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 288.694080][ T5936] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 288.735033][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.777'. [ 288.823201][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'. [ 288.857095][ T5936] usb 1-1: unable to get BOS descriptor or descriptor too short [ 288.869436][ T5936] usb 1-1: config 6 has an invalid interface number: 158 but max is 0 [ 288.895863][ T8857] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 288.904377][ T5936] usb 1-1: config 6 has no interface number 0 [ 288.931833][ T5936] usb 1-1: config 6 interface 158 has no altsetting 0 [ 288.945988][ T24] usb 4-1: device descriptor read/64, error -71 [ 288.962323][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 288.974796][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.781'. [ 288.986152][ T8860] netlink: 164 bytes leftover after parsing attributes in process `syz.2.781'. [ 288.986223][ T5936] usb 1-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 288.995630][ T8860] netlink: 160 bytes leftover after parsing attributes in process `syz.2.781'. [ 289.055389][ T24] usb usb4-port1: attempt power cycle [ 289.078862][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.121307][ T5936] usb 1-1: Product: syz [ 289.130866][ T5936] usb 1-1: Manufacturer: syz [ 289.139107][ T5936] usb 1-1: SerialNumber: syz [ 289.415066][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 289.435597][ T24] usb 4-1: device descriptor read/8, error -71 [ 289.535139][ T5944] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 289.675089][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 289.695670][ T24] usb 4-1: device descriptor read/8, error -71 [ 289.748161][ T5944] usb 2-1: config 0 has an invalid interface number: 27 but max is 2 [ 289.756701][ T5944] usb 2-1: config 0 has an invalid interface number: 236 but max is 2 [ 289.765049][ T5944] usb 2-1: config 0 has an invalid interface number: 89 but max is 2 [ 289.773238][ T5944] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 289.781979][ T5944] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 289.792209][ T5944] usb 2-1: config 0 has no interface number 0 [ 289.798564][ T5944] usb 2-1: config 0 has no interface number 1 [ 289.804673][ T5944] usb 2-1: config 0 has no interface number 2 [ 289.805440][ T24] usb usb4-port1: unable to enumerate USB device [ 289.810893][ T5944] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0xE has an invalid bInterval 250, changing to 4 [ 289.829954][ T5944] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0xB has an invalid bInterval 248, changing to 4 [ 289.841832][ T5944] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0x5 has an invalid bInterval 248, changing to 4 [ 289.854359][ T5944] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 289.865982][ T5944] usb 2-1: config 0 interface 27 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 289.877520][ T5944] usb 2-1: config 0 interface 27 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 16 [ 289.890745][ T5944] usb 2-1: too many endpoints for config 0 interface 236 altsetting 5: 63, using maximum allowed: 30 [ 289.901793][ T5944] usb 2-1: config 0 interface 236 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 289.912738][ T5944] usb 2-1: config 0 interface 236 altsetting 5 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 289.923748][ T5944] usb 2-1: config 0 interface 236 altsetting 5 has a duplicate endpoint with address 0xA, skipping [ 289.935343][ T5944] usb 2-1: config 0 interface 236 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 289.946149][ T5944] usb 2-1: config 0 interface 236 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 289.956991][ T5944] usb 2-1: config 0 interface 236 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 289.967833][ T5944] usb 2-1: config 0 interface 236 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 289.978870][ T5944] usb 2-1: config 0 interface 236 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 289.989705][ T5944] usb 2-1: config 0 interface 236 altsetting 5 has 10 endpoint descriptors, different from the interface descriptor's value: 63 [ 290.003016][ T5944] usb 2-1: config 0 interface 89 altsetting 12 has a duplicate endpoint with address 0x4, skipping [ 290.013789][ T5944] usb 2-1: config 0 interface 89 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 290.025944][ T5944] usb 2-1: config 0 interface 89 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 290.037921][ T5944] usb 2-1: config 0 interface 89 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 290.049021][ T5944] usb 2-1: config 0 interface 89 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 290.059882][ T5944] usb 2-1: config 0 interface 89 altsetting 12 has a duplicate endpoint with address 0xF, skipping [ 290.070707][ T5944] usb 2-1: config 0 interface 89 altsetting 12 has a duplicate endpoint with address 0xA, skipping [ 290.081467][ T5944] usb 2-1: config 0 interface 89 altsetting 12 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 290.092814][ T5944] usb 2-1: config 0 interface 89 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 290.108684][ T5944] usb 2-1: config 0 interface 89 altsetting 12 has 9 endpoint descriptors, different from the interface descriptor's value: 13 [ 290.124076][ T5944] usb 2-1: config 0 interface 236 has no altsetting 0 [ 290.138156][ T5944] usb 2-1: config 0 interface 89 has no altsetting 0 [ 290.154264][ T5944] usb 2-1: New USB device found, idVendor=1608, idProduct=000f, bcdDevice=cc.dd [ 290.173193][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.184068][ T5944] usb 2-1: Product: syz [ 290.200151][ T5944] usb 2-1: Manufacturer: syz [ 290.204825][ T5944] usb 2-1: SerialNumber: syz [ 290.214689][ T5944] usb 2-1: config 0 descriptor?? [ 290.456168][ T5944] io_edgeport 2-1:0.27: required endpoints missing [ 290.483972][ T5944] io_edgeport 2-1:0.236: required endpoints missing [ 290.497282][ T5944] io_edgeport 2-1:0.89: required endpoints missing [ 290.530345][ T5944] usb 2-1: USB disconnect, device number 60 [ 290.616720][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 290.861673][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 290.889159][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 290.897544][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.914230][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.929070][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.944548][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.131346][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 291.214834][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.608808][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 291.614322][ T9] usbtmc 5-1:16.0: can't read capabilities [ 291.666816][ T5936] rtsx_usb 1-1:6.158: probe with driver rtsx_usb failed with error -71 [ 291.765842][ T5936] usb 1-1: USB disconnect, device number 43 [ 292.385723][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.489791][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.569594][ T8881] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 292.572808][ T5944] usb 5-1: USB disconnect, device number 41 [ 292.695244][ T8908] __nla_validate_parse: 2 callbacks suppressed [ 292.695259][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.793'. [ 293.880397][ T8922] netlink: 88 bytes leftover after parsing attributes in process `syz.0.795'. [ 293.904974][ T24] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 294.125356][ T24] usb 2-1: device descriptor read/64, error -71 [ 294.385228][ T24] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 294.403759][ T8944] dvmrp0: entered allmulticast mode [ 294.423524][ T8941] IPVS: set_ctl: invalid protocol: 100 100.1.1.2:20002 [ 294.675040][ T24] usb 2-1: device descriptor read/64, error -71 [ 294.774253][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.806'. [ 294.785830][ T24] usb usb2-port1: attempt power cycle [ 295.037841][ T8938] dvmrp0: left allmulticast mode [ 295.159465][ T24] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 295.256446][ T24] usb 2-1: device descriptor read/8, error -71 [ 295.495081][ T24] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 295.525768][ T24] usb 2-1: device descriptor read/8, error -71 [ 295.695455][ T24] usb usb2-port1: unable to enumerate USB device [ 295.826643][ T8973] netlink: 72 bytes leftover after parsing attributes in process `syz.3.812'. [ 295.835982][ T8973] netlink: 292 bytes leftover after parsing attributes in process `syz.3.812'. [ 295.925105][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 295.925123][ T30] audit: type=1326 audit(1758584593.932:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7fc00000 [ 296.094091][ T30] audit: type=1326 audit(1758584593.932:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fc5539 code=0x7fc00000 [ 296.183540][ T30] audit: type=1326 audit(1758584593.932:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7fc00000 [ 296.300263][ T30] audit: type=1326 audit(1758584593.932:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7fc00000 [ 296.361555][ T30] audit: type=1326 audit(1758584593.932:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7fc00000 [ 296.416682][ T30] audit: type=1326 audit(1758584593.932:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7fc00000 [ 296.438675][ T30] audit: type=1326 audit(1758584593.932:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7fc00000 [ 296.463348][ T30] audit: type=1326 audit(1758584593.932:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7fc00000 [ 296.485357][ T30] audit: type=1326 audit(1758584593.932:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7fc00000 [ 296.515941][ T30] audit: type=1326 audit(1758584593.932:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8954 comm="syz.0.808" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5539 code=0x7fc00000 [ 296.695435][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 296.856525][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 296.865395][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 296.882001][ T9] usb 3-1: config 0 has no interface number 0 [ 296.907680][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 296.932069][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 296.955000][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.974832][ T9] usb 3-1: Product: syz [ 296.979479][ T9] usb 3-1: Manufacturer: syz [ 296.984189][ T9] usb 3-1: SerialNumber: syz [ 297.010632][ T9] usb 3-1: config 0 descriptor?? [ 297.032015][ T9] smsc75xx v1.0.0 [ 297.073397][ T8989] netlink: 88 bytes leftover after parsing attributes in process `syz.1.815'. [ 297.105038][ T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 297.274971][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 297.306925][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.327612][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.335421][ T5936] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 297.358094][ T24] usb 1-1: New USB device found, idVendor=0403, idProduct=4e30, bcdDevice= 0.00 [ 297.379525][ T8994] CIFS: iocharset name too long [ 297.388611][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.410897][ T8994] FAULT_INJECTION: forcing a failure. [ 297.410897][ T8994] name failslab, interval 1, probability 0, space 0, times 0 [ 297.426928][ T8994] CPU: 1 UID: 0 PID: 8994 Comm: syz.1.821 Not tainted syzkaller #0 PREEMPT(full) [ 297.426952][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.426963][ T8994] Call Trace: [ 297.426970][ T8994] [ 297.426978][ T8994] dump_stack_lvl+0x189/0x250 [ 297.427003][ T8994] ? __pfx____ratelimit+0x10/0x10 [ 297.427021][ T8994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.427041][ T8994] ? __pfx__printk+0x10/0x10 [ 297.427076][ T8994] should_fail_ex+0x414/0x560 [ 297.427107][ T8994] should_failslab+0xa8/0x100 [ 297.427132][ T8994] __kmalloc_cache_noprof+0x70/0x3d0 [ 297.427153][ T8994] ? sctp_add_bind_addr+0x8c/0x370 [ 297.427174][ T8994] sctp_add_bind_addr+0x8c/0x370 [ 297.427194][ T8994] sctp_copy_local_addr_list+0x30b/0x4e0 [ 297.427223][ T8994] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 297.427247][ T8994] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 297.427272][ T8994] ? sctp_v6_is_any+0x64/0x80 [ 297.427291][ T8994] ? sctp_copy_one_addr+0x93/0x360 [ 297.427311][ T8994] sctp_bind_addr_copy+0xb3/0x3c0 [ 297.427329][ T8994] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 297.427355][ T8994] sctp_connect_new_asoc+0x2e0/0x690 [ 297.427379][ T8994] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 297.427400][ T8994] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 297.427419][ T8994] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 297.427446][ T8994] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 297.427467][ T8994] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 297.427490][ T8994] __sctp_connect+0x5ba/0xd50 [ 297.427523][ T8994] ? __pfx___sctp_connect+0x10/0x10 [ 297.427553][ T8994] sctp_inet_connect+0x12e/0x1e0 [ 297.427575][ T8994] __sys_connect+0x316/0x440 [ 297.427594][ T8994] ? __fget_files+0x3a0/0x420 [ 297.427611][ T8994] ? __pfx___sys_connect+0x10/0x10 [ 297.427653][ T8994] __ia32_sys_connect+0x7a/0x90 [ 297.427673][ T8994] __do_fast_syscall_32+0xb6/0x2b0 [ 297.427693][ T8994] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.427716][ T8994] do_fast_syscall_32+0x34/0x80 [ 297.427735][ T8994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.427755][ T8994] RIP: 0023:0xf7f34539 [ 297.427770][ T8994] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 297.427785][ T8994] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 297.427804][ T8994] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000000 [ 297.427816][ T8994] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 297.427826][ T8994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.427836][ T8994] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.427846][ T8994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.427874][ T8994] [ 297.431106][ T24] usb 1-1: config 0 descriptor?? [ 297.535020][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 297.721787][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 297.735273][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 297.745007][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 297.755521][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 297.825845][ T5936] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.854977][ T5936] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 297.864577][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.897894][ T5936] usb 5-1: config 0 descriptor?? [ 298.087155][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 298.104827][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 298.154649][ T5936] usbhid 5-1:0.0: can't add hid device: -71 [ 298.172020][ T24] usb 1-1: USB disconnect, device number 44 [ 298.174704][ T5936] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 298.227779][ T5936] usb 5-1: USB disconnect, device number 42 [ 298.585171][ T5966] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 298.750304][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 298.768616][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 298.804856][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 298.820797][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 298.884490][ T5966] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 298.959215][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.986587][ T5966] usb 2-1: config 0 descriptor?? [ 299.081779][ T9025] binder: 9024:9025 ioctl c0046209 0 returned -22 [ 299.492621][ T5966] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 299.511935][ T5944] usb 3-1: USB disconnect, device number 47 [ 299.525945][ T5966] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 299.710468][ T9040] CIFS: iocharset name too long [ 299.901945][ T5936] IPVS: starting estimator thread 0... [ 300.054508][ T9050] IPVS: using max 34 ests per chain, 81600 per kthread [ 300.129237][ T5960] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 300.411199][ T5960] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 300.420844][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.462168][ T5960] usb 4-1: Product: syz [ 300.571868][ T5960] usb 4-1: Manufacturer: syz [ 300.705787][ T5960] usb 4-1: SerialNumber: syz [ 300.720234][ T5960] usb 4-1: config 0 descriptor?? [ 300.745774][ T5960] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 300.864377][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 300.943977][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 301.015837][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 301.033328][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 301.058518][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 301.076361][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 301.094845][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 301.109729][ T9058] input: syz0 as /devices/virtual/input/input28 [ 301.122824][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 301.168722][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 301.182137][ T9054] IPv6: addrconf: prefix option has invalid lifetime [ 301.250665][ T9046] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 301.286586][ T9046] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 301.374989][ T5959] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 301.526330][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 301.541789][ T5959] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 301.552608][ T5966] usb 2-1: USB disconnect, device number 65 [ 301.575504][ T5959] usb 5-1: config 250 has an invalid interface number: 0 but max is -1 [ 301.629233][ T5959] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 301.652248][ T9066] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.843'. [ 301.665354][ T5959] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 301.678273][ T5959] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 301.688481][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 301.697722][ T5959] usb 5-1: Product: syz [ 301.701947][ T5959] usb 5-1: SerialNumber: syz [ 301.730924][ T5959] hub 5-1:250.0: bad descriptor, ignoring hub [ 301.739133][ T5959] hub 5-1:250.0: probe with driver hub failed with error -5 [ 301.938328][ T9058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.971954][ T9058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.085273][ T5966] usb 5-1: USB disconnect, device number 43 [ 302.094413][ T9072] netlink: 88 bytes leftover after parsing attributes in process `syz.2.842'. [ 302.095008][ T5959] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 302.277598][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.292327][ T5959] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 302.303128][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.321689][ T5959] usb 2-1: config 0 descriptor?? [ 302.690797][ T5936] usb 4-1: USB disconnect, device number 41 [ 302.697579][ T30] kauditd_printk_skb: 774 callbacks suppressed [ 302.697616][ T30] audit: type=1326 audit(1758584600.732:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.848" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff4539 code=0x0 [ 302.725131][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.137116][ T9102] FAULT_INJECTION: forcing a failure. [ 303.137116][ T9102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.341330][ T9102] CPU: 1 UID: 0 PID: 9102 Comm: syz.3.854 Not tainted syzkaller #0 PREEMPT(full) [ 303.341362][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 303.341372][ T9102] Call Trace: [ 303.341380][ T9102] [ 303.341388][ T9102] dump_stack_lvl+0x189/0x250 [ 303.341415][ T9102] ? __pfx____ratelimit+0x10/0x10 [ 303.341434][ T9102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.341453][ T9102] ? __pfx__printk+0x10/0x10 [ 303.341476][ T9102] ? __might_fault+0xb0/0x130 [ 303.341508][ T9102] should_fail_ex+0x414/0x560 [ 303.341537][ T9102] _copy_from_user+0x2d/0xb0 [ 303.341559][ T9102] copy_uabi_to_xstate+0x397/0x970 [ 303.341583][ T9102] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 303.341599][ T9102] ? __local_bh_enable_ip+0x12d/0x1c0 [ 303.341622][ T9102] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 303.341644][ T9102] ? x86_task_fpu+0x4c/0x90 [ 303.341668][ T9102] fpu__restore_sig+0xf75/0x1100 [ 303.341691][ T9102] ? fpu__restore_sig+0xa42/0x1100 [ 303.341718][ T9102] ? __pfx_fpu__restore_sig+0x10/0x10 [ 303.341769][ T9102] ia32_restore_sigcontext+0x449/0x5b0 [ 303.341792][ T9102] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 303.341812][ T9102] ? _raw_spin_lock_irq+0xae/0xf0 [ 303.341835][ T9102] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 303.341868][ T9102] ? _raw_spin_unlock_irq+0x23/0x50 [ 303.341891][ T9102] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.341912][ T9102] __ia32_compat_sys_rt_sigreturn+0x140/0x200 [ 303.341931][ T9102] ? __task_pid_nr_ns+0x28/0x470 [ 303.341960][ T9102] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 303.341983][ T9102] ? do_int80_emulation+0xec/0x390 [ 303.342004][ T9102] ? asm_int80_emulation+0x1a/0x20 [ 303.342020][ T9102] do_int80_emulation+0x126/0x390 [ 303.342040][ T9102] ? clear_bhb_loop+0x60/0xb0 [ 303.342055][ T9102] ? clear_bhb_loop+0x60/0xb0 [ 303.342075][ T9102] asm_int80_emulation+0x1a/0x20 [ 303.342091][ T9102] RIP: 0023:0xf7fd2539 [ 303.342106][ T9102] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 303.342122][ T9102] RSP: 002b:00000000f54c655c EFLAGS: 00000206 [ 303.342138][ T9102] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001 [ 303.342148][ T9102] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.342159][ T9102] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.342169][ T9102] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.342178][ T9102] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.342205][ T9102] [ 304.316813][ T9121] bridge0: entered promiscuous mode [ 304.322715][ T9121] vlan3: entered promiscuous mode [ 304.589882][ T30] audit: type=1800 audit(1758584602.622:1625): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.862" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 304.661509][ T5959] usbhid 2-1:0.0: can't add hid device: -71 [ 304.683606][ T5959] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 304.707596][ T5959] usb 2-1: USB disconnect, device number 66 [ 305.175220][ T5959] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 305.355375][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 305.389229][ T5959] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 305.398191][ T5959] usb 2-1: config 0 has no interface number 0 [ 305.404282][ T5959] usb 2-1: config 0 interface 184 has no altsetting 0 [ 305.590828][ T5959] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 305.600796][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.617049][ T5959] usb 2-1: Product: syz [ 305.621360][ T5959] usb 2-1: Manufacturer: syz [ 305.626121][ T5959] usb 2-1: SerialNumber: syz [ 305.638102][ T5959] usb 2-1: config 0 descriptor?? [ 305.646817][ T5959] smsc75xx v1.0.0 [ 305.884648][ T5960] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 306.060853][ T5960] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.136014][ T5960] usb 5-1: config 0 has no interfaces? [ 306.193038][ T5960] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 306.203392][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.211461][ T5960] usb 5-1: Product: syz [ 306.216958][ T5960] usb 5-1: Manufacturer: syz [ 306.221560][ T5960] usb 5-1: SerialNumber: syz [ 306.413871][ T5959] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 306.435236][ T5960] usb 5-1: config 0 descriptor?? [ 306.443222][ T5959] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 306.968038][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 306.980425][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 307.272796][ T9172] binder: 9171:9172 ioctl c0046209 0 returned -22 [ 307.513334][ T5959] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 307.535026][ T5959] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 307.757678][ T5959] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 307.801316][ T5959] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -32 [ 308.444695][ T9] usb 5-1: USB disconnect, device number 44 [ 308.541350][ T9194] netlink: 'syz.4.877': attribute type 219 has an invalid length. [ 308.618494][ T5936] usb 2-1: USB disconnect, device number 67 [ 309.057292][ T9198] dvmrp0: entered allmulticast mode [ 309.093348][ T9198] IPVS: set_ctl: invalid protocol: 100 100.1.1.2:20002 [ 309.195162][ T5944] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 309.199545][ T9197] dvmrp0: left allmulticast mode [ 309.534200][ T5944] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 309.546737][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.555120][ T5944] usb 5-1: Product: syz [ 309.559301][ T5944] usb 5-1: Manufacturer: syz [ 309.563907][ T5944] usb 5-1: SerialNumber: syz [ 310.988435][ T5944] net_ratelimit: 56 callbacks suppressed [ 310.988458][ T5944] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 311.028805][ T5944] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 311.073201][ T5944] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 311.104595][ T5944] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 311.420785][ T9231] netlink: 'syz.0.887': attribute type 1 has an invalid length. [ 311.455871][ T9231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.887'. [ 311.520105][ T9191] syz.2.874 (9191): drop_caches: 2 [ 311.755097][ T5936] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 311.880784][ T9241] dvmrp0: entered allmulticast mode [ 311.890877][ T9241] IPVS: set_ctl: invalid protocol: 100 100.1.1.2:20002 [ 311.906179][ T9239] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 311.915082][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 311.946799][ T5936] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 311.956433][ T5936] usb 2-1: config 0 has no interface number 0 [ 311.962570][ T5936] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 123, changing to 10 [ 311.997815][ T5936] usb 2-1: config 0 interface 85 has no altsetting 0 [ 312.007120][ T5936] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 312.016939][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.037733][ T5936] usb 2-1: Product: syz [ 312.043647][ T5936] usb 2-1: Manufacturer: syz [ 312.049361][ T5928] usb 5-1: USB disconnect, device number 45 [ 312.050476][ T5936] usb 2-1: SerialNumber: syz [ 312.069561][ T5936] usb 2-1: config 0 descriptor?? [ 312.146271][ T9249] binder: 9248:9249 ioctl c0306201 80000540 returned -22 [ 312.345014][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 312.507106][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.522909][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 312.547768][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.574970][ T9] usb 1-1: config 0 descriptor?? [ 312.589150][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 312.665000][ T5944] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 312.690713][ T5936] appletouch 2-1:0.85: Geyser mode initialized. [ 312.696747][ T9240] dvmrp0: left allmulticast mode [ 312.732472][ T5936] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input30 [ 312.846089][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 312.912657][ T5944] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 312.944679][ T5944] usb 4-1: config 6 has an invalid descriptor of length 255, skipping remainder of the config [ 312.984115][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 313.008935][ T5944] usb 4-1: config 6 has no interface number 0 [ 313.029773][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 313.037174][ T5944] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 313.052664][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 313.087809][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 313.100341][ T5944] usb 4-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.114255][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 313.141055][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 313.151022][ T5936] usb 2-1: USB disconnect, device number 68 [ 313.167242][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 313.175967][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 313.190569][ T5944] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 313.203969][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.245222][ T5944] usb 4-1: Product: syz [ 313.255408][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 313.262552][ T5944] usb 4-1: Manufacturer: syz [ 313.279134][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 313.287991][ T5944] usb 4-1: SerialNumber: syz [ 313.614006][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 313.621081][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 313.633861][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 313.666851][ T5944] hso 4-1:6.2: Failed to find INT IN ep [ 313.685827][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 313.693730][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 313.720164][ T5936] appletouch 2-1:0.85: input: appletouch disconnected [ 313.740998][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 313.782440][ T9] pwc: Registered as video103. [ 314.017455][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 314.082256][ T9] usb 1-1: USB disconnect, device number 45 [ 314.102014][ T9278] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.897'. [ 314.125576][ T9280] FAULT_INJECTION: forcing a failure. [ 314.125576][ T9280] name failslab, interval 1, probability 0, space 0, times 0 [ 314.193697][ T9280] CPU: 0 UID: 0 PID: 9280 Comm: syz.1.902 Not tainted syzkaller #0 PREEMPT(full) [ 314.193722][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 314.193736][ T9280] Call Trace: [ 314.193743][ T9280] [ 314.193750][ T9280] dump_stack_lvl+0x189/0x250 [ 314.193775][ T9280] ? __pfx____ratelimit+0x10/0x10 [ 314.193793][ T9280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.193809][ T9280] ? __pfx__printk+0x10/0x10 [ 314.193831][ T9280] ? __pfx___might_resched+0x10/0x10 [ 314.193847][ T9280] ? fs_reclaim_acquire+0x7d/0x100 [ 314.193871][ T9280] should_fail_ex+0x414/0x560 [ 314.193899][ T9280] should_failslab+0xa8/0x100 [ 314.193922][ T9280] kmem_cache_alloc_noprof+0x73/0x3c0 [ 314.193941][ T9280] ? security_file_alloc+0x34/0x330 [ 314.193965][ T9280] security_file_alloc+0x34/0x330 [ 314.193986][ T9280] init_file+0x93/0x2f0 [ 314.194005][ T9280] alloc_empty_file+0x6e/0x1d0 [ 314.194024][ T9280] alloc_file_pseudo+0x13d/0x210 [ 314.194044][ T9280] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 314.194065][ T9280] ? alloc_fd+0x64c/0x6c0 [ 314.194093][ T9280] sock_alloc_file+0xb8/0x2e0 [ 314.194114][ T9280] ? __sys_socket+0x12c/0x1b0 [ 314.194131][ T9280] __sys_socket+0x13d/0x1b0 [ 314.194150][ T9280] __ia32_compat_sys_socketcall+0x6df/0x9c0 [ 314.194171][ T9280] ? __fget_files+0x3a0/0x420 [ 314.194189][ T9280] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 314.194207][ T9280] ? fput+0xa0/0xd0 [ 314.194223][ T9280] ? ksys_write+0x22a/0x250 [ 314.194253][ T9280] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.194274][ T9280] __do_fast_syscall_32+0xb6/0x2b0 [ 314.194294][ T9280] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.194314][ T9280] do_fast_syscall_32+0x34/0x80 [ 314.194332][ T9280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.194358][ T9280] RIP: 0023:0xf7f34539 [ 314.194373][ T9280] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 314.194388][ T9280] RSP: 002b:00000000f54254d0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 314.194406][ T9280] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f54254e0 [ 314.194418][ T9280] RDX: 00000000f73c5ff4 RSI: 000000000000002e RDI: 0000000000000000 [ 314.194429][ T9280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.194438][ T9280] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.194449][ T9280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.194474][ T9280] [ 314.721342][ T9283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.903'. [ 315.189903][ T9299] binder: 9298:9299 ioctl c0046209 0 returned -22 [ 315.368975][ T9268] netlink: 88 bytes leftover after parsing attributes in process `syz.2.900'. [ 315.687744][ T9311] IPv6: NLM_F_CREATE should be specified when creating new route [ 315.695629][ T5936] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 315.705565][ T9311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.713192][ T9311] IPv6: NLM_F_CREATE should be set when creating new route [ 315.840980][ T9] usb 4-1: USB disconnect, device number 42 [ 315.905039][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 315.923082][ T5936] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 315.957399][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.961687][ T9320] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 315.986767][ T9321] netlink: 'syz.2.915': attribute type 10 has an invalid length. [ 316.016573][ T5936] usb 1-1: config 0 descriptor?? [ 316.440476][ T5936] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 316.451619][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 316.486667][ T5936] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 316.506216][ T9328] netlink: 88 bytes leftover after parsing attributes in process `syz.4.913'. [ 316.515408][ T5936] usb 1-1: media controller created [ 316.577059][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.682485][ T5936] az6027: usb out operation failed. (-71) [ 316.737393][ T5936] az6027: usb out operation failed. (-71) [ 316.795091][ T5936] stb0899_attach: Driver disabled by Kconfig [ 316.807643][ T5936] az6027: no front-end attached [ 316.807643][ T5936] [ 316.827273][ T5936] az6027: usb out operation failed. (-71) [ 316.870641][ T5936] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 316.932118][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 317.028476][ T5936] dvb-usb: schedule remote query interval to 400 msecs. [ 317.065017][ T5936] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 317.135283][ T5936] usb 1-1: USB disconnect, device number 46 [ 317.255139][ T30] audit: type=1326 audit(1758584615.282:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 317.279549][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.279716][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.314157][ T30] audit: type=1326 audit(1758584615.282:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 317.323639][ T5936] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 317.345553][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.562183][ T30] audit: type=1326 audit(1758584615.282:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 317.718706][ T30] audit: type=1326 audit(1758584615.282:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 317.813848][ T30] audit: type=1326 audit(1758584615.282:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=61 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 317.918327][ T30] audit: type=1326 audit(1758584615.282:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 318.002337][ T30] audit: type=1326 audit(1758584615.332:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 318.129344][ T30] audit: type=1326 audit(1758584615.332:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 318.159880][ T9379] input: syz0 as /devices/virtual/input/input33 [ 318.233859][ T30] audit: type=1326 audit(1758584615.332:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 318.313113][ T9387] netlink: zone id is out of range [ 318.325673][ T9387] netlink: zone id is out of range [ 318.339531][ T30] audit: type=1326 audit(1758584615.342:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9354 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7ffc0000 [ 318.361458][ C1] vkms_vblank_simulate: vblank timer overrun [ 318.394419][ T9387] netlink: zone id is out of range [ 318.410079][ T9387] netlink: zone id is out of range [ 318.490788][ T9387] netlink: zone id is out of range [ 318.534306][ T9387] netlink: zone id is out of range [ 318.593715][ T9387] netlink: zone id is out of range [ 318.649480][ T9387] netlink: zone id is out of range [ 318.733810][ T9398] netlink: 56 bytes leftover after parsing attributes in process `syz.3.938'. [ 318.827221][ T9387] netlink: zone id is out of range [ 318.832477][ T9387] netlink: zone id is out of range [ 319.134978][ T5928] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 319.295086][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 319.302653][ T5928] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 319.332597][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.431688][ T5928] usb 2-1: config 0 descriptor?? [ 319.470020][ T5928] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 320.079922][ T5928] gspca_sonixj: reg_r err -32 [ 320.084748][ T5928] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 320.470675][ T9434] binder: 9433:9434 ioctl c0046209 0 returned -22 [ 321.035364][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 321.058659][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 321.068207][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 321.078305][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 321.086129][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 321.875963][ T5966] usb 2-1: USB disconnect, device number 69 [ 321.925418][ T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 322.052485][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.955'. [ 322.155438][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 322.166652][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 322.189574][ T9] usb 1-1: config 0 has no interface number 0 [ 322.201400][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 322.218370][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.231082][ T9] usb 1-1: Product: syz [ 322.235654][ T9] usb 1-1: Manufacturer: syz [ 322.240380][ T9] usb 1-1: SerialNumber: syz [ 322.262169][ T9] usb 1-1: config 0 descriptor?? [ 322.270540][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 322.293541][ T6223] bond0 (unregistering): Released all slaves [ 322.322756][ T6223] bond1 (unregistering): Released all slaves [ 322.493110][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 322.549669][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 322.589349][ T6223] : left promiscuous mode [ 322.847542][ T6223] tipc: Left network mode [ 322.903725][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 323.075437][ T5966] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 323.185728][ T5874] Bluetooth: hci3: command tx timeout [ 323.250984][ T5966] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.292313][ T5966] usb 2-1: config 1 interface 0 altsetting 73 bulk endpoint 0x1 has invalid maxpacket 1023 [ 323.312812][ T5966] usb 2-1: config 1 interface 0 has no altsetting 0 [ 323.338039][ T5966] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 323.359575][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.378822][ T5966] usb 2-1: Product: syz [ 323.398182][ T5966] usb 2-1: Manufacturer: syz [ 323.411210][ T5966] usb 2-1: SerialNumber: syz [ 323.442805][ T9482] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.487303][ T5928] usb 1-1: USB disconnect, device number 47 [ 323.487333][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 323.558085][ T5928] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 323.590075][ T5928] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 323.635660][ T5928] quatech2 1-1:0.51: device disconnected [ 323.798317][ T9452] chnl_net:caif_netlink_parms(): no params data found [ 323.916693][ T5966] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 70 if 0 alt 73 proto 1 vid 0x0525 pid 0xA4A8 [ 323.978617][ T5966] usb 2-1: USB disconnect, device number 70 [ 324.004121][ T5966] usblp0: removed [ 324.015158][ T5944] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 324.151548][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.160787][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.168651][ T9452] bridge_slave_0: entered allmulticast mode [ 324.176081][ T9452] bridge_slave_0: entered promiscuous mode [ 324.186916][ T5944] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.198592][ T6223] hsr_slave_0: left promiscuous mode [ 324.200191][ T5944] usb 5-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 324.213073][ T6223] hsr_slave_1: left promiscuous mode [ 324.213091][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.227146][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 324.254828][ T5944] usb 5-1: Product: syz [ 324.259143][ T5944] usb 5-1: Manufacturer: syz [ 324.263756][ T5944] usb 5-1: SerialNumber: syz [ 324.286848][ T5944] usb 5-1: config 0 descriptor?? [ 324.306952][ T5944] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 324.420725][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 324.440553][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.472105][ T9] usb 4-1: Product: syz [ 324.483170][ T9] usb 4-1: Manufacturer: syz [ 324.488414][ T9] usb 4-1: SerialNumber: syz [ 324.515355][ T9] usb 4-1: config 0 descriptor?? [ 324.527834][ T5944] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 324.534664][ T5944] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 324.597012][ T5944] usb 5-1: USB disconnect, device number 46 [ 324.795404][ T9] usb 4-1: USB disconnect, device number 43 [ 325.255273][ T5874] Bluetooth: hci3: command tx timeout [ 325.628659][ T9535] netlink: 88 bytes leftover after parsing attributes in process `syz.1.970'. [ 327.357264][ T5874] Bluetooth: hci3: command tx timeout [ 327.550718][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.558153][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.565489][ T9452] bridge_slave_1: entered allmulticast mode [ 327.578436][ T9452] bridge_slave_1: entered promiscuous mode [ 327.595256][ T9523] bridge1: entered promiscuous mode [ 327.823856][ T9566] binder: BINDER_SET_CONTEXT_MGR already set [ 327.830668][ T9566] binder: 9564:9566 ioctl 4018620d 80000040 returned -16 [ 327.906544][ T9561] tipc: Enabled bearer , priority 0 [ 327.915900][ T9562] syzkaller0: entered promiscuous mode [ 327.921392][ T9562] syzkaller0: entered allmulticast mode [ 327.959424][ T9452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.025821][ T9452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.425250][ T5936] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 328.465615][ T9563] tipc: Resetting bearer [ 328.530589][ T9452] team0: Port device team_slave_0 added [ 328.605483][ T5944] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 328.628201][ T9452] team0: Port device team_slave_1 added [ 328.652468][ T5936] usb 5-1: config 0 has no interfaces? [ 328.664526][ T5936] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 328.684336][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.708909][ T5936] usb 5-1: Product: syz [ 328.713122][ T5936] usb 5-1: Manufacturer: syz [ 328.731073][ T5936] usb 5-1: SerialNumber: syz [ 328.762964][ T5936] usb 5-1: config 0 descriptor?? [ 328.832348][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 328.852910][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 328.882449][ T5944] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 328.901948][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.909925][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.942663][ T9452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.944080][ T5944] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 328.977890][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.986270][ T5944] usb 2-1: Product: syz [ 329.003401][ T5944] usb 2-1: Manufacturer: syz [ 329.010776][ T5944] usb 2-1: SerialNumber: syz [ 329.029206][ T9561] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 329.037861][ T5936] tipc: Node number set to 341807269 [ 329.047711][ T5944] usb 2-1: config 0 descriptor?? [ 329.063686][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.064069][ T5944] hub 2-1:0.0: bad descriptor, ignoring hub [ 329.085129][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.111393][ T5944] hub 2-1:0.0: probe with driver hub failed with error -5 [ 329.125781][ T9452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.135370][ T5944] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 329.201476][ T5944] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 329.227914][ T5936] usb 5-1: USB disconnect, device number 47 [ 329.285052][ T9560] tipc: Resetting bearer [ 329.289533][ T5944] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 329.328483][ T9560] tipc: Disabling bearer [ 329.355241][ T5944] usb 2-1: USB disconnect, device number 71 [ 329.399134][ T9452] hsr_slave_0: entered promiscuous mode [ 329.415419][ T5874] Bluetooth: hci3: command tx timeout [ 329.430660][ T9452] hsr_slave_1: entered promiscuous mode [ 329.441571][ T9452] debugfs: 'hsr0' already exists in 'hsr' [ 329.453657][ T9452] Cannot create hsr debugfs directory [ 330.203070][ T9605] netlink: 88 bytes leftover after parsing attributes in process `syz.3.984'. [ 330.257037][ T9609] FAULT_INJECTION: forcing a failure. [ 330.257037][ T9609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.330180][ T9609] CPU: 1 UID: 0 PID: 9609 Comm: syz.4.987 Not tainted syzkaller #0 PREEMPT(full) [ 330.330205][ T9609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 330.330220][ T9609] Call Trace: [ 330.330227][ T9609] [ 330.330234][ T9609] dump_stack_lvl+0x189/0x250 [ 330.330267][ T9609] ? __pfx____ratelimit+0x10/0x10 [ 330.330283][ T9609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.330301][ T9609] ? __pfx__printk+0x10/0x10 [ 330.330334][ T9609] should_fail_ex+0x414/0x560 [ 330.330362][ T9609] _copy_to_user+0x31/0xb0 [ 330.330385][ T9609] simple_read_from_buffer+0xe1/0x170 [ 330.330411][ T9609] proc_fail_nth_read+0x1b3/0x220 [ 330.330434][ T9609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.330456][ T9609] ? rw_verify_area+0x2a6/0x4d0 [ 330.330474][ T9609] ? __lock_acquire+0xab9/0xd20 [ 330.330493][ T9609] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 330.330512][ T9609] vfs_read+0x200/0xa30 [ 330.330531][ T9609] ? fdget_pos+0x247/0x320 [ 330.330550][ T9609] ? __pfx___mutex_lock+0x10/0x10 [ 330.330570][ T9609] ? __pfx_vfs_read+0x10/0x10 [ 330.330592][ T9609] ? __fget_files+0x2a/0x420 [ 330.330611][ T9609] ? __fget_files+0x3a0/0x420 [ 330.330626][ T9609] ? __fget_files+0x2a/0x420 [ 330.330650][ T9609] ksys_read+0x145/0x250 [ 330.330672][ T9609] ? __pfx_ksys_read+0x10/0x10 [ 330.330697][ T9609] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.330717][ T9609] __do_fast_syscall_32+0xb6/0x2b0 [ 330.330737][ T9609] ? lockdep_hardirqs_on+0x9c/0x150 [ 330.330758][ T9609] do_fast_syscall_32+0x34/0x80 [ 330.330777][ T9609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 330.330797][ T9609] RIP: 0023:0xf7fd5539 [ 330.330813][ T9609] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 330.330828][ T9609] RSP: 002b:00000000f54c6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 330.330846][ T9609] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54c6620 [ 330.330858][ T9609] RDX: 000000000000000f RSI: 00000000f7465ff4 RDI: 0000000000000000 [ 330.330869][ T9609] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 330.330879][ T9609] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 330.330889][ T9609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 330.330916][ T9609] [ 330.767802][ T9452] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 330.848593][ T9452] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 330.987718][ T9452] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 331.154707][ T9452] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 331.183628][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.992'. [ 331.195127][ T9625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 331.267975][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.992'. [ 331.359840][ T5944] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 331.476174][ T5936] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 331.555773][ T5945] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 331.563394][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 331.571100][ T5944] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 331.601336][ T5944] usb 1-1: config 0 has no interface number 0 [ 331.608521][ T5944] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 331.637384][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 331.662314][ T5936] usb 2-1: config 0 has no interfaces? [ 331.676125][ T5944] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 331.724856][ T5936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 331.741801][ T5944] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 331.756011][ T5945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.783331][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.803194][ T5945] usb 5-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=6f.f6 [ 331.813565][ T5936] usb 2-1: Product: syz [ 331.824478][ T5944] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.840111][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.854399][ T5936] usb 2-1: Manufacturer: syz [ 331.872682][ T5936] usb 2-1: SerialNumber: syz [ 331.878426][ T5945] usb 5-1: Product: syz [ 331.882152][ T9452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.892780][ T5945] usb 5-1: Manufacturer: syz [ 331.904860][ T5944] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 331.917135][ T5936] usb 2-1: config 0 descriptor?? [ 331.933038][ T5945] usb 5-1: SerialNumber: syz [ 331.937803][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.951717][ T5945] usb 5-1: config 0 descriptor?? [ 331.959750][ T5944] usb 1-1: Product: syz [ 331.965654][ T5945] usb 5-1: NDI device with a latency value of 1 [ 331.974779][ T5944] usb 1-1: Manufacturer: syz [ 332.010064][ T5944] usb 1-1: SerialNumber: syz [ 332.012070][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 332.012085][ T30] audit: type=1326 audit(1758584630.042:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 332.086156][ T5944] usb 1-1: config 0 descriptor?? [ 332.113558][ T30] audit: type=1326 audit(1758584630.082:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 332.175708][ T5945] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 332.212236][ T30] audit: type=1326 audit(1758584630.082:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 332.218276][ T5945] ftdi_sio ttyUSB0: unknown device type: 0x6ff6 [ 332.355717][ T5944] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 332.382544][ T5945] usb 5-1: USB disconnect, device number 48 [ 332.385119][ T9452] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.405543][ T30] audit: type=1326 audit(1758584630.082:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 332.429691][ T5945] ftdi_sio 5-1:0.0: device disconnected [ 332.456680][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.463929][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.484843][ T30] audit: type=1326 audit(1758584630.082:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 332.589036][ T9621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.598222][ T9621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.698230][ T5945] usb 1-1: USB disconnect, device number 48 [ 332.705519][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.712606][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.744783][ T30] audit: type=1326 audit(1758584630.082:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 332.801537][ T30] audit: type=1326 audit(1758584630.082:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 332.828019][ T30] audit: type=1326 audit(1758584630.082:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 332.992958][ T30] audit: type=1326 audit(1758584630.082:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 333.068515][ T9653] PKCS7: Unknown OID: [5] (bad) [ 333.073486][ T9653] PKCS7: Only support pkcs7_signedData type [ 333.113379][ T9452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.191711][ T30] audit: type=1326 audit(1758584630.082:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9618 comm="syz.3.990" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 333.324508][ T9452] veth0_vlan: entered promiscuous mode [ 333.395329][ T9452] veth1_vlan: entered promiscuous mode [ 333.567992][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 333.574659][ T9452] veth0_macvtap: entered promiscuous mode [ 333.644031][ T9452] veth1_macvtap: entered promiscuous mode [ 333.741202][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.757646][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 333.810481][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.917693][ T5960] usb 2-1: USB disconnect, device number 72 [ 333.918992][ T1085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.039625][ T1085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.119678][ T9670] netlink: 40 bytes leftover after parsing attributes in process `syz.0.997'. [ 334.137246][ T1085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.174332][ T1085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.531379][ T6226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.554405][ T6226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.585933][ T5944] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 334.744115][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.753274][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.823677][ T5944] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.853709][ T5944] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.889364][ T5944] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.929225][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.471372][ T5944] usb 2-1: usb_control_msg returned -32 [ 335.471423][ T5944] usbtmc 2-1:16.0: can't read capabilities [ 335.746951][ T5959] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 335.938555][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 335.949277][ T5959] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 335.964103][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.004025][ T5959] usb 3-1: Product: syz [ 336.012106][ T9714] dvmrp0: entered allmulticast mode [ 336.024571][ T5959] usb 3-1: Manufacturer: syz [ 336.042306][ T5944] usb 2-1: USB disconnect, device number 73 [ 336.048341][ T5959] usb 3-1: SerialNumber: syz [ 336.063372][ T5959] usb 3-1: config 0 descriptor?? [ 336.088892][ T9714] IPVS: set_ctl: invalid protocol: 100 100.1.1.2:20002 [ 336.293710][ T9699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.314135][ T9699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.376063][ T5959] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 336.402627][ T9729] net_ratelimit: 20 callbacks suppressed [ 336.402647][ T9729] openvswitch: netlink: IP tunnel dst address not specified [ 336.431778][ T9713] dvmrp0: left allmulticast mode [ 336.663254][ T9737] mmap: syz.2.945 (9737) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 336.995314][ T5936] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 337.048921][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 337.048939][ T30] audit: type=1326 audit(1758584635.082:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9746 comm="syz.4.1015" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x0 [ 337.165041][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 337.180646][ T5936] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 337.199746][ T5936] usb 1-1: config 0 has no interface number 0 [ 337.212898][ T5936] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 337.253138][ T5936] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 337.292877][ T5936] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 337.336030][ T5936] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 337.363706][ T5936] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 337.386538][ T5936] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.413183][ T5936] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 337.443330][ T5936] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 337.470615][ T5936] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.506084][ T5959] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 337.516238][ T5936] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 337.536808][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.561121][ T5936] usb 1-1: Product: syz [ 337.581100][ T5936] usb 1-1: Manufacturer: syz [ 337.593345][ T5936] usb 1-1: SerialNumber: syz [ 337.631095][ T5936] usb 1-1: config 0 descriptor?? [ 337.650003][ T9740] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 337.688191][ T5936] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 337.712839][ T5936] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 337.940939][ T5936] usb 1-1: USB disconnect, device number 49 [ 338.188343][ T5959] usb 3-1: USB disconnect, device number 48 [ 338.400390][ T9784] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1022'. [ 338.486126][ T5936] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 338.669898][ T9785] program syz.2.1022 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.706811][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 338.722526][ T5936] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 338.738541][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.803665][ T5936] usb 5-1: Product: syz [ 338.867922][ T5936] usb 5-1: Manufacturer: syz [ 338.903532][ T9789] netlink: 'syz.0.1023': attribute type 9 has an invalid length. [ 339.016210][ T5936] usb 5-1: SerialNumber: syz [ 339.023814][ T5936] usb 5-1: config 0 descriptor?? [ 339.050578][ T5936] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 339.262737][ T9777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.281587][ T9777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.572570][ T5936] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 339.582935][ T9798] netlink: 'syz.1.1026': attribute type 2 has an invalid length. [ 339.591857][ T5936] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 339.639947][ T5936] usb 5-1: USB disconnect, device number 49 [ 340.695922][ T9817] FAULT_INJECTION: forcing a failure. [ 340.695922][ T9817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.764516][ T9817] CPU: 0 UID: 0 PID: 9817 Comm: syz.2.1030 Not tainted syzkaller #0 PREEMPT(full) [ 340.764541][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.764551][ T9817] Call Trace: [ 340.764558][ T9817] [ 340.764565][ T9817] dump_stack_lvl+0x189/0x250 [ 340.764592][ T9817] ? __pfx____ratelimit+0x10/0x10 [ 340.764610][ T9817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.764630][ T9817] ? __pfx__printk+0x10/0x10 [ 340.764650][ T9817] ? __might_fault+0xb0/0x130 [ 340.764681][ T9817] should_fail_ex+0x414/0x560 [ 340.764707][ T9817] _copy_from_iter+0x1de/0x1790 [ 340.764741][ T9817] ? __pfx__copy_from_iter+0x10/0x10 [ 340.764760][ T9817] ? __build_skb_around+0x257/0x3e0 [ 340.764782][ T9817] ? netlink_sendmsg+0x642/0xb30 [ 340.764799][ T9817] ? skb_put+0x11b/0x210 [ 340.764821][ T9817] netlink_sendmsg+0x6b2/0xb30 [ 340.764848][ T9817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.764868][ T9817] ? __import_iovec+0x5d4/0x7f0 [ 340.764888][ T9817] ? aa_sock_msg_perm+0xf1/0x1d0 [ 340.764905][ T9817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.764921][ T9817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.764937][ T9817] __sock_sendmsg+0x21c/0x270 [ 340.764964][ T9817] ____sys_sendmsg+0x505/0x830 [ 340.764990][ T9817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.765023][ T9817] ___sys_sendmsg+0x21f/0x2a0 [ 340.765044][ T9817] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.765095][ T9817] ? __fget_files+0x2a/0x420 [ 340.765109][ T9817] ? __fget_files+0x3a0/0x420 [ 340.765133][ T9817] __sys_sendmsg+0x164/0x220 [ 340.765155][ T9817] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.765187][ T9817] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.765207][ T9817] __do_fast_syscall_32+0xb6/0x2b0 [ 340.765227][ T9817] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.765247][ T9817] do_fast_syscall_32+0x34/0x80 [ 340.765273][ T9817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 340.765290][ T9817] RIP: 0023:0xf7f03539 [ 340.765305][ T9817] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 340.765318][ T9817] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 340.765335][ T9817] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 340.765347][ T9817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.765357][ T9817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.765366][ T9817] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 340.765376][ T9817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.765400][ T9817] [ 341.019374][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.236280][ T9836] input: syz1 as /devices/virtual/input/input36 [ 341.704067][ T30] audit: type=1326 audit(1758584639.722:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 341.857673][ T30] audit: type=1326 audit(1758584639.722:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 341.976873][ T30] audit: type=1326 audit(1758584639.722:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 342.314356][ T30] audit: type=1326 audit(1758584639.722:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 342.424972][ T30] audit: type=1326 audit(1758584639.722:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 342.535130][ T30] audit: type=1326 audit(1758584639.722:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 342.639025][ T30] audit: type=1326 audit(1758584639.722:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 342.675302][ T30] audit: type=1326 audit(1758584639.722:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 342.719868][ T30] audit: type=1326 audit(1758584639.722:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 342.794170][ T30] audit: type=1326 audit(1758584639.722:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 342.850738][ T30] audit: type=1326 audit(1758584639.722:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 342.893658][ T30] audit: type=1326 audit(1758584639.722:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 342.942063][ T30] audit: type=1326 audit(1758584639.732:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9818 comm="syz.4.1031" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd5539 code=0x7fc00000 [ 343.326629][ T9867] tipc: Enabling of bearer rejected, failed to enable media [ 343.545319][ T24] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 343.936988][ T24] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 343.945377][ T24] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 344.098456][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 344.145040][ T24] usb 3-1: config 1 has no interface number 0 [ 344.182161][ T24] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.256976][ T9876] IPVS: set_ctl: invalid protocol: 100 100.1.1.2:20002 [ 344.263980][ T24] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.300096][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 344.344236][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.434836][ T24] usb 3-1: Product: syz [ 344.443387][ T24] usb 3-1: Manufacturer: syz [ 344.455012][ T24] usb 3-1: SerialNumber: syz [ 344.485587][ T24] cdc_wdm 3-1:1.128: skipping garbage [ 344.638720][ T24] cdc_wdm 3-1:1.128: cdc-wdm0: USB WDM device [ 344.681217][ T24] cdc_wdm 3-1:1.128: Unknown control protocol [ 344.787573][ T5959] usb 3-1: USB disconnect, device number 49 [ 345.892642][ T9888] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1047'. [ 346.441489][ T982] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 346.665383][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 346.681928][ T982] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.702063][ T982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 346.845157][ T982] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 346.873886][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.931292][ T9917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1057'. [ 346.937619][ T982] usb 3-1: config 0 descriptor?? [ 347.086024][ T9921] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 347.361183][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.370258][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.395571][ T982] hid-retrode 0003:0403:97C1.0010: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 347.615512][ T5936] usb 3-1: USB disconnect, device number 50 [ 348.855341][ T5944] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 349.055292][ T9963] FAULT_INJECTION: forcing a failure. [ 349.055292][ T9963] name failslab, interval 1, probability 0, space 0, times 0 [ 349.094519][ T9963] CPU: 1 UID: 0 PID: 9963 Comm: syz.1.1074 Not tainted syzkaller #0 PREEMPT(full) [ 349.094545][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.094556][ T9963] Call Trace: [ 349.094563][ T9963] [ 349.094571][ T9963] dump_stack_lvl+0x189/0x250 [ 349.094597][ T9963] ? __pfx____ratelimit+0x10/0x10 [ 349.094615][ T9963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.094635][ T9963] ? __pfx__printk+0x10/0x10 [ 349.094663][ T9963] ? __pfx___might_resched+0x10/0x10 [ 349.094679][ T9963] ? fs_reclaim_acquire+0x7d/0x100 [ 349.094701][ T9963] should_fail_ex+0x414/0x560 [ 349.094729][ T9963] should_failslab+0xa8/0x100 [ 349.094754][ T9963] __kmalloc_noprof+0xcb/0x4f0 [ 349.094772][ T9963] ? kfree+0x4d/0x440 [ 349.094789][ T9963] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 349.094814][ T9963] tomoyo_realpath_from_path+0xe3/0x5d0 [ 349.094834][ T9963] ? tomoyo_domain+0xd9/0x130 [ 349.094859][ T9963] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 349.094884][ T9963] tomoyo_path_number_perm+0x1e8/0x5a0 [ 349.094905][ T9963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 349.094940][ T9963] ? __lock_acquire+0xab9/0xd20 [ 349.094980][ T9963] ? __fget_files+0x2a/0x420 [ 349.095000][ T9963] ? __fget_files+0x3a0/0x420 [ 349.095014][ T9963] ? __fget_files+0x2a/0x420 [ 349.095031][ T9963] security_file_ioctl_compat+0xcb/0x2d0 [ 349.095053][ T9963] __ia32_compat_sys_ioctl+0x128/0x840 [ 349.095075][ T9963] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 349.095094][ T9963] ? __fget_files+0x3a0/0x420 [ 349.095114][ T9963] ? fput+0xa0/0xd0 [ 349.095130][ T9963] ? ksys_write+0x22a/0x250 [ 349.095156][ T9963] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.095178][ T9963] __do_fast_syscall_32+0xb6/0x2b0 [ 349.095197][ T9963] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.095216][ T9963] do_fast_syscall_32+0x34/0x80 [ 349.095231][ T9963] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 349.095250][ T9963] RIP: 0023:0xf7f34539 [ 349.095265][ T9963] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 349.095280][ T9963] RSP: 002b:00000000f542655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 349.095296][ T9963] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080104132 [ 349.095307][ T9963] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 349.095317][ T9963] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 349.095327][ T9963] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 349.095336][ T9963] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 349.095362][ T9963] [ 349.344986][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 349.361393][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.387254][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.399553][ T9963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 349.445007][ T5944] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 349.554247][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.610900][ T5944] usb 3-1: config 0 descriptor?? [ 349.765482][ T30] kauditd_printk_skb: 381 callbacks suppressed [ 349.765501][ T30] audit: type=1326 audit(1758584647.782:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 349.831861][ T9955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.841125][ T9955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.875732][ T30] audit: type=1326 audit(1758584647.782:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 349.902736][ T30] audit: type=1326 audit(1758584647.782:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 349.918381][ T5944] usbhid 3-1:0.0: can't add hid device: -71 [ 349.985018][ T30] audit: type=1326 audit(1758584647.782:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 350.022052][ T30] audit: type=1326 audit(1758584647.782:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 350.026489][ T5944] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 350.476336][ T5944] usb 3-1: USB disconnect, device number 51 [ 351.000762][ T30] audit: type=1326 audit(1758584647.782:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 351.139283][ T30] audit: type=1326 audit(1758584647.782:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 351.338344][ T30] audit: type=1326 audit(1758584647.782:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 351.398785][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1080'. [ 351.467524][ T30] audit: type=1326 audit(1758584647.782:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 351.597774][ T30] audit: type=1326 audit(1758584647.782:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9957 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000 [ 352.125043][ T5944] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 352.275071][ T5944] usb 1-1: Using ep0 maxpacket: 8 [ 352.289823][ T5944] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.338600][ T5944] usb 1-1: config 0 has no interface number 0 [ 352.351635][ T5944] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.393272][ T5944] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 352.420873][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.453472][ T5944] usb 1-1: config 0 descriptor?? [ 352.510963][ T5944] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 352.702020][ T5944] usb 1-1: USB disconnect, device number 50 [ 352.708175][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 353.988047][ T5936] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 354.189249][T10051] FAULT_INJECTION: forcing a failure. [ 354.189249][T10051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.202830][T10051] CPU: 1 UID: 0 PID: 10051 Comm: syz.3.1094 Not tainted syzkaller #0 PREEMPT(full) [ 354.202847][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.202853][T10051] Call Trace: [ 354.202857][T10051] [ 354.202862][T10051] dump_stack_lvl+0x189/0x250 [ 354.202879][T10051] ? __pfx____ratelimit+0x10/0x10 [ 354.202890][T10051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.202902][T10051] ? __pfx__printk+0x10/0x10 [ 354.202917][T10051] ? __might_fault+0xb0/0x130 [ 354.202942][T10051] should_fail_ex+0x414/0x560 [ 354.202960][T10051] _copy_from_user+0x2d/0xb0 [ 354.202973][T10051] do_ip_vs_set_ctl+0x2d3/0xa60 [ 354.202989][T10051] ? rcu_is_watching+0x15/0xb0 [ 354.202999][T10051] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 354.203010][T10051] ? trace_contention_end+0x39/0x120 [ 354.203030][T10051] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 354.203045][T10051] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 354.203057][T10051] ? __pfx___mutex_lock+0x10/0x10 [ 354.203073][T10051] nf_setsockopt+0x26f/0x290 [ 354.203088][T10051] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 354.203099][T10051] smc_setsockopt+0x22f/0xab0 [ 354.203113][T10051] ? __pfx_smc_setsockopt+0x10/0x10 [ 354.203122][T10051] ? aa_sock_opt_perm+0xff/0x1b0 [ 354.203134][T10051] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 354.203145][T10051] ? __pfx_smc_setsockopt+0x10/0x10 [ 354.203155][T10051] do_sock_setsockopt+0x179/0x1b0 [ 354.203170][T10051] __ia32_sys_setsockopt+0x13f/0x1b0 [ 354.203184][T10051] __do_fast_syscall_32+0xb6/0x2b0 [ 354.203196][T10051] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.203208][T10051] do_fast_syscall_32+0x34/0x80 [ 354.203218][T10051] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 354.203230][T10051] RIP: 0023:0xf7fd2539 [ 354.203239][T10051] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 354.203248][T10051] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 354.203259][T10051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 354.203265][T10051] RDX: 0000000000000482 RSI: 0000000080000180 RDI: 000000000000002c [ 354.203271][T10051] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 354.203277][T10051] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 354.203282][T10051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 354.203296][T10051] [ 354.205184][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 354.555151][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 354.693793][ T5936] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 354.704576][ T5936] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 354.715954][ T5936] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 354.728018][ T5936] usb 1-1: config 0 interface 0 has no altsetting 0 [ 354.752383][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.838324][ T5936] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 354.848023][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.857292][ T5936] usb 1-1: Product: syz [ 354.860757][ T24] usb 3-1: config 0 has no interfaces? [ 354.862810][ T5936] usb 1-1: Manufacturer: syz [ 354.872736][ T5936] usb 1-1: SerialNumber: syz [ 354.881494][ T5936] usb 1-1: config 0 descriptor?? [ 354.899667][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.930142][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.946779][ T5959] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 355.202465][ T24] usb 3-1: config 0 descriptor?? [ 355.209475][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 355.209491][ T30] audit: type=1326 audit(1758584653.082:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7fc00000 [ 355.219128][ T5936] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 355.251437][ T30] audit: type=1326 audit(1758584653.092:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f34539 code=0x7fc00000 [ 355.339164][ T30] audit: type=1326 audit(1758584653.092:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7fc00000 [ 355.348160][ T5220] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 355.361959][ T5959] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 355.380519][ T5959] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 355.415104][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 355.430992][ T30] audit: type=1326 audit(1758584653.092:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7fc00000 [ 355.439323][ T5220] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 355.455002][ T5960] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 355.482765][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 355.513808][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 355.534985][ T30] audit: type=1326 audit(1758584653.092:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7fc00000 [ 355.565922][ T5959] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 355.576801][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 355.589094][T10037] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 355.609142][ T30] audit: type=1326 audit(1758584653.092:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7fc00000 [ 355.638558][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.647797][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.667916][ T5959] usb 4-1: Product: syz [ 355.668452][T10070] tls_set_device_offload_rx: netdev not found [ 355.672117][ T5959] usb 4-1: Manufacturer: syz [ 355.683971][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 355.697881][ T5220] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 355.698603][ T5960] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 355.716232][ T6267] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 355.743950][ T5220] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 355.767697][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.791069][ T5960] usb 5-1: config 0 has no interface number 0 [ 355.803700][ T30] audit: type=1326 audit(1758584653.092:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7fc00000 [ 355.838288][ T5959] cdc_wdm 4-1:1.0: skipping garbage [ 355.843935][ T5959] cdc_wdm 4-1:1.0: skipping garbage [ 355.845509][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.849655][ T5960] usb 5-1: config 0 interface 89 has no altsetting 0 [ 355.877968][ T5220] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 355.891428][ T5959] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 355.935068][ T5959] cdc_wdm 4-1:1.0: Unknown control protocol [ 355.945205][ T30] audit: type=1326 audit(1758584653.092:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7fc00000 [ 355.970989][ T5960] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 355.984490][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.994790][ T5960] usb 5-1: Product: syz [ 356.010612][ T5220] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 356.036083][ T5960] usb 5-1: Manufacturer: syz [ 356.074978][ T30] audit: type=1326 audit(1758584653.092:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7fc00000 [ 356.084767][ T5944] usb 1-1: USB disconnect, device number 51 [ 356.103582][ T5960] usb 5-1: SerialNumber: syz [ 356.239364][ T30] audit: type=1326 audit(1758584653.092:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7fc00000 [ 356.262468][ T5960] usb 5-1: config 0 descriptor?? [ 356.271945][ T5960] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 356.283761][ T5960] em28xx 5-1:0.89: Video interface 89 found: bulk [ 356.359864][ T24] usb 4-1: USB disconnect, device number 44 [ 356.765134][ T5944] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 356.892495][ T5960] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 356.915031][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 356.920168][ T982] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 356.931093][ T5944] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.939978][ T5944] usb 2-1: config 0 has no interface number 0 [ 356.946399][ T5944] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.958099][ T5944] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 356.967367][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.979494][ T5944] usb 2-1: config 0 descriptor?? [ 356.989304][ T5944] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 357.085044][ T982] usb 1-1: Using ep0 maxpacket: 8 [ 357.092875][ T982] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 357.101796][ T982] usb 1-1: config 0 has no interface number 0 [ 357.108329][ T982] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 357.120429][ T982] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 357.129595][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.143331][ T982] usb 1-1: config 0 descriptor?? [ 357.157269][ T982] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 357.190684][ T982] usb 2-1: USB disconnect, device number 74 [ 357.196902][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 357.367289][ T5944] usb 1-1: USB disconnect, device number 52 [ 357.510729][ T5960] em28xx 5-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 357.521835][ T5960] em28xx 5-1:0.89: board has no eeprom [ 357.571206][ T24] usb 3-1: USB disconnect, device number 52 [ 358.115014][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 358.386324][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 358.399932][ T24] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 358.399961][ T24] usb 3-1: config 0 has no interface number 0 [ 358.400029][ T24] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 358.400054][ T24] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 358.407852][ T24] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 358.407927][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.407947][ T24] usb 3-1: Product: syz [ 358.407961][ T24] usb 3-1: Manufacturer: syz [ 358.407975][ T24] usb 3-1: SerialNumber: syz [ 358.432388][ T24] usb 3-1: config 0 descriptor?? [ 358.433252][T10090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 358.433413][T10090] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 358.513689][ T24] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 92:28:4a:ed:e0:5c [ 358.605492][ T5960] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 358.605524][ T5960] em28xx 5-1:0.89: analog set to bulk mode. [ 358.606097][ T24] em28xx 5-1:0.89: Registering V4L2 extension [ 358.640310][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.889757][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.943520][ T24] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 358.959223][ T24] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 358.971108][ T5944] usb 5-1: USB disconnect, device number 50 [ 358.980436][ T5944] em28xx 5-1:0.89: Disconnecting em28xx [ 359.005332][ T24] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 359.039884][ T24] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 359.084274][ T24] em28xx 5-1:0.89: No AC97 audio processor [ 359.100028][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.133835][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.451725][ T24] usb 5-1: Decoder not found [ 359.457276][T10090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.497514][ T24] em28xx 5-1:0.89: failed to create media graph [ 359.503794][ T24] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 359.521871][T10090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.560284][ T5945] usb 3-1: USB disconnect, device number 53 [ 359.574296][ T5945] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 359.611375][ T24] em28xx 5-1:0.89: Registering snapshot button... [ 359.639728][T10108] ================================================================== [ 359.647837][T10108] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xc7/0x430 [ 359.655206][T10108] Read of size 8 at addr ffff888055030740 by task v4l_id/10108 [ 359.662734][T10108] [ 359.665044][T10108] CPU: 0 UID: 0 PID: 10108 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 359.665061][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 359.665070][T10108] Call Trace: [ 359.665077][T10108] [ 359.665083][T10108] dump_stack_lvl+0x189/0x250 [ 359.665102][T10108] ? rcu_is_watching+0x15/0xb0 [ 359.665116][T10108] ? __kasan_check_byte+0x12/0x40 [ 359.665134][T10108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.665148][T10108] ? rcu_is_watching+0x15/0xb0 [ 359.665160][T10108] ? lock_release+0x4b/0x3e0 [ 359.665197][T10108] ? __virt_addr_valid+0x1c8/0x5c0 [ 359.665213][T10108] ? __virt_addr_valid+0x4a5/0x5c0 [ 359.665230][T10108] print_report+0xca/0x240 [ 359.665243][T10108] ? v4l2_fh_open+0xc7/0x430 [ 359.665256][T10108] kasan_report+0x118/0x150 [ 359.665273][T10108] ? v4l2_fh_open+0xc7/0x430 [ 359.665288][T10108] v4l2_fh_open+0xc7/0x430 [ 359.665303][T10108] em28xx_v4l2_open+0x157/0x9a0 [ 359.665326][T10108] v4l2_open+0x20f/0x360 [ 359.665342][T10108] chrdev_open+0x4c9/0x5e0 [ 359.665355][T10108] ? __pfx_chrdev_open+0x10/0x10 [ 359.665368][T10108] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 359.665389][T10108] ? __pfx_chrdev_open+0x10/0x10 [ 359.665399][T10108] do_dentry_open+0x950/0x13f0 [ 359.665418][T10108] vfs_open+0x3b/0x340 [ 359.665430][T10108] ? path_openat+0x2ecd/0x3830 [ 359.665446][T10108] path_openat+0x2ee5/0x3830 [ 359.665460][T10108] ? arch_stack_walk+0xfc/0x150 [ 359.665487][T10108] ? stack_depot_save_flags+0x40/0x860 [ 359.665510][T10108] ? __pfx_path_openat+0x10/0x10 [ 359.665525][T10108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.665544][T10108] do_filp_open+0x1fa/0x410 [ 359.665559][T10108] ? __lock_acquire+0xab9/0xd20 [ 359.665576][T10108] ? __pfx_do_filp_open+0x10/0x10 [ 359.665598][T10108] ? _raw_spin_unlock+0x28/0x50 [ 359.665616][T10108] ? alloc_fd+0x64c/0x6c0 [ 359.665637][T10108] do_sys_openat2+0x121/0x1c0 [ 359.665652][T10108] ? __pfx_do_sys_openat2+0x10/0x10 [ 359.665665][T10108] ? exc_page_fault+0x76/0xf0 [ 359.665680][T10108] ? do_user_addr_fault+0xc8a/0x1390 [ 359.665700][T10108] __x64_sys_openat+0x138/0x170 [ 359.665716][T10108] do_syscall_64+0xfa/0x3b0 [ 359.665730][T10108] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.665743][T10108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.665756][T10108] ? clear_bhb_loop+0x60/0xb0 [ 359.665771][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.665784][T10108] RIP: 0033:0x7f528c4a7407 [ 359.665797][T10108] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 359.665810][T10108] RSP: 002b:00007ffe7e28ca30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 359.665825][T10108] RAX: ffffffffffffffda RBX: 00007f528cbc8880 RCX: 00007f528c4a7407 [ 359.665836][T10108] RDX: 0000000000000000 RSI: 00007ffe7e28cf1c RDI: ffffffffffffff9c [ 359.665846][T10108] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 359.665854][T10108] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 359.665863][T10108] R13: 00007ffe7e28cc80 R14: 00007f528cd2f000 R15: 000055f5b40194d8 [ 359.665879][T10108] [ 359.665884][T10108] [ 359.973012][T10108] Allocated by task 24: [ 359.977151][T10108] kasan_save_track+0x3e/0x80 [ 359.981819][T10108] __kasan_kmalloc+0x93/0xb0 [ 359.986398][T10108] __kmalloc_cache_noprof+0x230/0x3d0 [ 359.991761][T10108] em28xx_v4l2_init+0x10b/0x2e70 [ 359.996685][T10108] em28xx_init_extension+0x120/0x1c0 [ 360.001956][T10108] process_scheduled_works+0xae1/0x17b0 [ 360.007481][T10108] worker_thread+0x8a0/0xda0 [ 360.012050][T10108] kthread+0x70e/0x8a0 [ 360.016099][T10108] ret_from_fork+0x439/0x7d0 [ 360.020667][T10108] ret_from_fork_asm+0x1a/0x30 [ 360.025414][T10108] [ 360.027717][T10108] Freed by task 24: [ 360.031500][T10108] kasan_save_track+0x3e/0x80 [ 360.036173][T10108] kasan_save_free_info+0x46/0x50 [ 360.041199][T10108] __kasan_slab_free+0x5b/0x80 [ 360.045964][T10108] kfree+0x18e/0x440 [ 360.049854][T10108] em28xx_v4l2_init+0x1683/0x2e70 [ 360.054866][T10108] em28xx_init_extension+0x120/0x1c0 [ 360.060141][T10108] process_scheduled_works+0xae1/0x17b0 [ 360.065929][T10108] worker_thread+0x8a0/0xda0 [ 360.070502][T10108] kthread+0x70e/0x8a0 [ 360.074652][T10108] ret_from_fork+0x439/0x7d0 [ 360.079240][T10108] ret_from_fork_asm+0x1a/0x30 [ 360.084002][T10108] [ 360.086313][T10108] The buggy address belongs to the object at ffff888055030000 [ 360.086313][T10108] which belongs to the cache kmalloc-8k of size 8192 [ 360.100351][T10108] The buggy address is located 1856 bytes inside of [ 360.100351][T10108] freed 8192-byte region [ffff888055030000, ffff888055032000) [ 360.114306][T10108] [ 360.116617][T10108] The buggy address belongs to the physical page: [ 360.123037][T10108] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55030 [ 360.131782][T10108] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 360.140264][T10108] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 360.147802][T10108] page_type: f5(slab) [ 360.151770][T10108] raw: 00fff00000000040 ffff88801a442280 ffffea0000b77000 0000000000000002 [ 360.160335][T10108] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 360.168897][T10108] head: 00fff00000000040 ffff88801a442280 ffffea0000b77000 0000000000000002 [ 360.177547][T10108] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 360.186201][T10108] head: 00fff00000000003 ffffea0001540c01 00000000ffffffff 00000000ffffffff [ 360.194853][T10108] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 360.203505][T10108] page dumped because: kasan: bad access detected [ 360.209915][T10108] page_owner tracks the page as allocated [ 360.215608][T10108] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9831, tgid 9818 (syz.4.1031), ts 341798872745, free_ts 341699793205 [ 360.236946][T10108] post_alloc_hook+0x240/0x2a0 [ 360.241701][T10108] get_page_from_freelist+0x21e4/0x22c0 [ 360.247228][T10108] __alloc_frozen_pages_noprof+0x181/0x370 [ 360.253017][T10108] alloc_pages_mpol+0x232/0x4a0 [ 360.257853][T10108] allocate_slab+0x8a/0x370 [ 360.262336][T10108] ___slab_alloc+0xbeb/0x1420 [ 360.266999][T10108] __kmalloc_cache_noprof+0x296/0x3d0 [ 360.272352][T10108] audit_log_d_path+0xb5/0x190 [ 360.277095][T10108] audit_log_d_path_exe+0x42/0x70 [ 360.282101][T10108] audit_log_task+0x2b3/0x3c0 [ 360.286761][T10108] audit_seccomp+0x86/0x190 [ 360.291248][T10108] __seccomp_filter+0x17d0/0x1a40 [ 360.296255][T10108] syscall_trace_enter+0xaa/0x160 [ 360.301272][T10108] __do_fast_syscall_32+0x99/0x2b0 [ 360.306377][T10108] do_fast_syscall_32+0x34/0x80 [ 360.311210][T10108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.317518][T10108] page last free pid 9840 tgid 9840 stack trace: [ 360.323823][T10108] __free_frozen_pages+0xbc4/0xd30 [ 360.328919][T10108] __put_partials+0x156/0x1a0 [ 360.333576][T10108] put_cpu_partial+0x17c/0x250 [ 360.338320][T10108] __slab_free+0x2d5/0x3c0 [ 360.342717][T10108] qlist_free_all+0x97/0x140 [ 360.347291][T10108] kasan_quarantine_reduce+0x148/0x160 [ 360.352731][T10108] __kasan_slab_alloc+0x22/0x80 [ 360.357564][T10108] __kmalloc_noprof+0x224/0x4f0 [ 360.362403][T10108] security_task_alloc+0x4d/0x360 [ 360.367415][T10108] copy_process+0x1530/0x3c00 [ 360.372082][T10108] kernel_clone+0x21e/0x840 [ 360.376569][T10108] __se_sys_clone3+0x256/0x2d0 [ 360.381317][T10108] do_int80_emulation+0x126/0x390 [ 360.386323][T10108] asm_int80_emulation+0x1a/0x20 [ 360.391255][T10108] [ 360.393559][T10108] Memory state around the buggy address: [ 360.399169][T10108] ffff888055030600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.407216][T10108] ffff888055030680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.415258][T10108] >ffff888055030700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.423295][T10108] ^ [ 360.429426][T10108] ffff888055030780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.437467][T10108] ffff888055030800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 360.445510][T10108] ================================================================== [ 360.526962][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input38 [ 360.660271][ T24] em28xx 5-1:0.89: Remote control support is not available for this card. [ 360.681030][T10108] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 360.688261][T10108] CPU: 1 UID: 0 PID: 10108 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 360.697267][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 360.707311][T10108] Call Trace: [ 360.710572][T10108] [ 360.713487][T10108] dump_stack_lvl+0x99/0x250 [ 360.718060][T10108] ? __asan_memcpy+0x40/0x70 [ 360.722626][T10108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.727805][T10108] ? __pfx__printk+0x10/0x10 [ 360.732377][T10108] vpanic+0x281/0x750 [ 360.736334][T10108] ? preempt_schedule+0xae/0xc0 [ 360.741161][T10108] ? __pfx_vpanic+0x10/0x10 [ 360.745657][T10108] ? preempt_schedule_common+0x83/0xd0 [ 360.751109][T10108] ? preempt_schedule+0xae/0xc0 [ 360.755937][T10108] ? __pfx_preempt_schedule+0x10/0x10 [ 360.761287][T10108] panic+0xb9/0xc0 [ 360.764985][T10108] ? __pfx_panic+0x10/0x10 [ 360.769378][T10108] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 360.775259][T10108] ? v4l2_fh_open+0xc7/0x430 [ 360.779843][T10108] check_panic_on_warn+0x89/0xb0 [ 360.784764][T10108] ? v4l2_fh_open+0xc7/0x430 [ 360.789330][T10108] end_report+0x78/0x160 [ 360.793553][T10108] kasan_report+0x129/0x150 [ 360.798040][T10108] ? v4l2_fh_open+0xc7/0x430 [ 360.802611][T10108] v4l2_fh_open+0xc7/0x430 [ 360.807003][T10108] em28xx_v4l2_open+0x157/0x9a0 [ 360.811833][T10108] v4l2_open+0x20f/0x360 [ 360.816052][T10108] chrdev_open+0x4c9/0x5e0 [ 360.820442][T10108] ? __pfx_chrdev_open+0x10/0x10 [ 360.825353][T10108] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 360.831659][T10108] ? __pfx_chrdev_open+0x10/0x10 [ 360.836577][T10108] do_dentry_open+0x950/0x13f0 [ 360.841321][T10108] vfs_open+0x3b/0x340 [ 360.845365][T10108] ? path_openat+0x2ecd/0x3830 [ 360.850118][T10108] path_openat+0x2ee5/0x3830 [ 360.854725][T10108] ? arch_stack_walk+0xfc/0x150 [ 360.859585][T10108] ? stack_depot_save_flags+0x40/0x860 [ 360.865044][T10108] ? __pfx_path_openat+0x10/0x10 [ 360.869979][T10108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.876027][T10108] do_filp_open+0x1fa/0x410 [ 360.880508][T10108] ? __lock_acquire+0xab9/0xd20 [ 360.885339][T10108] ? __pfx_do_filp_open+0x10/0x10 [ 360.890344][T10108] ? _raw_spin_unlock+0x28/0x50 [ 360.895174][T10108] ? alloc_fd+0x64c/0x6c0 [ 360.899491][T10108] do_sys_openat2+0x121/0x1c0 [ 360.904154][T10108] ? __pfx_do_sys_openat2+0x10/0x10 [ 360.909332][T10108] ? exc_page_fault+0x76/0xf0 [ 360.913989][T10108] ? do_user_addr_fault+0xc8a/0x1390 [ 360.919259][T10108] __x64_sys_openat+0x138/0x170 [ 360.924088][T10108] do_syscall_64+0xfa/0x3b0 [ 360.928572][T10108] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.933744][T10108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.939784][T10108] ? clear_bhb_loop+0x60/0xb0 [ 360.944458][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.950326][T10108] RIP: 0033:0x7f528c4a7407 [ 360.954718][T10108] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 360.974300][T10108] RSP: 002b:00007ffe7e28ca30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 360.982695][T10108] RAX: ffffffffffffffda RBX: 00007f528cbc8880 RCX: 00007f528c4a7407 [ 360.990647][T10108] RDX: 0000000000000000 RSI: 00007ffe7e28cf1c RDI: ffffffffffffff9c [ 360.998599][T10108] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 361.006551][T10108] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 361.014505][T10108] R13: 00007ffe7e28cc80 R14: 00007f528cd2f000 R15: 000055f5b40194d8 [ 361.022462][T10108] [ 361.025736][T10108] Kernel Offset: disabled [ 361.030045][T10108] Rebooting in 86400 seconds..