last executing test programs: 4m51.248247853s ago: executing program 2 (id=2180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4000009}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000080)={0x3a}, 0x8) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000a40)={0x0, 0xffffffffffffffbe, &(0x7f0000000a00)={&(0x7f0000000480)={0x20, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40084}, 0x810) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80100002e00090023bd7000fbdbdf2505000000b401"], 0x1c8}, 0x1, 0x0, 0x0, 0x42804}, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0x898a, 0xfffffff8, 0x40}, 0x10) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001a00010006000000ffdbdf250220000200000000002000"], 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x70}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r9, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) 4m51.031312923s ago: executing program 2 (id=2181): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010000104000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4m50.806320707s ago: executing program 2 (id=2182): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000001c0)={0x2, 0x1, [0xe152b22, 0x8, 0x9, 0x26d, 0xffff, 0x211, 0x80000000]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70a0000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m50.743413902s ago: executing program 2 (id=2184): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000280)="ad", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x79, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="ec", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) r2 = openat$vsock(0xffffff9c, &(0x7f0000000000), 0x141001, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000400)=0x200000) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r3) keyctl$clear(0x7, r3) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) 4m48.678577656s ago: executing program 2 (id=2193): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000001100)={0x5, @raw_data="bb73f7a76fa270a27de6a8340aa0912dad29f6f25c8f891f26fe96ac09f56c6308448530dff9171fd1a19fdf457ccfb503d51ee686aa43e854127df71f6f55880848c7709739b58cdace5ebe6ff7ec955bdf97e52f67539325373b5f1fef3708b782c91abdf4520a6e3aaeb1d01bd902323cd6bc888b72c3d6da73f0e08b8fa8cbae077a359c95e86f3e33c54af7ded61e24804529b192fb88e5db44d60b89611be75fb0a72c30fd147d13ec4d06c9b933695e585232b4c27c4f6fe79c826ed180bccd73487b7fb1"}) 4m48.643998653s ago: executing program 2 (id=2195): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) pselect6(0x40, &(0x7f0000000080)={0xc}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x5c}}, 0x20000000) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000040), 0x4) 4m33.520880077s ago: executing program 32 (id=2195): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) pselect6(0x40, &(0x7f0000000080)={0xc}, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64], 0x5c}}, 0x20000000) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f0000000040), 0x4) 52.389935139s ago: executing program 5 (id=3644): setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000000)=0x80000000, 0x4) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x39, 0x0, "9a26ecbda9e43daf72073ddc03a24df9388777db629ff2ceb12c62997a7bd30252c33e5269404f04093b745d467ac761f76ce957729781b8573f1e41bb7d8ef0677a54cac71fa5d1e8aa8bcf07289a4b"}, 0xd8) (async) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) (async) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, 0xa8, 0x3) (async) r2 = openat$nvram(0xffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f0000000300)) (async) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000340)={[0x4, 0xffff1000, 0x0, 0x3000], 0x9, 0xd3, 0x8ff7}) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) (rerun: 64) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) exit(0x651c8c8f) (async, rerun: 64) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000540)=0x7) (async, rerun: 64) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000580)={0x28, 0x2, 0x0, {0x1, 0x5, 0x2}}, 0x28) (async) exit(0xcfa) (async) dup2(r2, r0) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) fcntl$setlease(r4, 0x400, 0x2) (async) exit(0x1) (async) r5 = epoll_create1(0x80000) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r6, 0x101, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xd, 0x7c}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0xc010) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x883c7d7061234b88}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, 0x140e, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000880)={0x1fd, 0x4, 0xf000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) read$FUSE(r2, &(0x7f00000008c0)={0x2020, 0x0, 0x0}, 0x2020) fstat(r5, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = getgid() write$FUSE_ENTRY(r2, &(0x7f0000002980)={0x90, 0x0, r8, {0x6, 0x3, 0x9, 0x0, 0xd, 0x7ff, {0x6, 0xf, 0x100000000, 0x7, 0x1ff, 0xe, 0x5, 0x1, 0x5, 0x6000, 0x7, r9, r10, 0xffffffff, 0xfffffff9}}}, 0x90) 52.162532175s ago: executing program 5 (id=3646): r0 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)={0xa, 0x8000, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000380)="d0", 0x1}], 0x1}}], 0x1, 0x4000040) (fail_nth: 7) 51.883130442s ago: executing program 5 (id=3648): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r5 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x18040, 0x0) fcntl$setsig(r5, 0xa, 0x36) r6 = getpid() syz_pidfd_open(r6, 0x0) 50.761636425s ago: executing program 5 (id=3657): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffd61) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r2, 0x10, 0x1, @in={0x2, 0x4e22, @multicast2}}}, 0xa0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f0000000700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000900)={{r3, 0x0, 0x4, 0x2, 0x6, 0x8fce, 0xdfa, 0x7ff, 0x6, 0x0, 0xd14, 0x5, 0x100000001, 0x1000, 0x4}, 0x18, [0x0, 0x0, 0x0]}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe0}}, 0x810) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=""/77, 0x4d}], 0x1}, 0x12001) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r8, &(0x7f0000000380)='3', 0x1) syz_usb_disconnect(r5) 49.982816791s ago: executing program 5 (id=3662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x1, 0x29, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000800000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) sendmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000dc0)="e3ed17adc49aab9f48d1c8708f76fd03eebfd0", 0x13}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24004801) close_range(r3, 0xffffffffffffffff, 0x0) 49.167363834s ago: executing program 5 (id=3665): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x5, 0x63, 0x80005, 0x4, 0xfffffffc, 0x1, "23000000001500001f010200002100", 0xc, 0x0, 0x5, 0xfe, 0x0, 0x0, 0xa}) 48.898642156s ago: executing program 33 (id=3665): r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x5, 0x63, 0x80005, 0x4, 0xfffffffc, 0x1, "23000000001500001f010200002100", 0xc, 0x0, 0x5, 0xfe, 0x0, 0x0, 0xa}) 11.029945438s ago: executing program 4 (id=3846): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0xfffffffc, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfb, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c60000000000000dfeff2c707f8f00ff", 0x58}], 0x1) 10.781759694s ago: executing program 4 (id=3847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x100001, 0x80001) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x0, r2}) r3 = eventfd2(0x8, 0x80000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x1, r3}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00002000f5ff", 0x6, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) eventfd2(0x100001, 0x80001) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x0, r2}) (async) eventfd2(0x8, 0x80000) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x1, r3}) (async) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) (async) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00002000f5ff", 0x6, 0xfffffffffffffffd) (async) 10.206894403s ago: executing program 4 (id=3848): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x3f, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000000)={0x1, @sliced={0x5, [0x9, 0x8, 0x9, 0x2, 0x231, 0xec, 0x2, 0x7ff, 0x3, 0x2, 0xaef6, 0x1ff, 0x3ff, 0x1, 0xcd0, 0x1, 0x4, 0x9, 0x4, 0xfffb, 0x9, 0x4, 0xfbff, 0x0, 0x401, 0x19f, 0x3, 0x8c, 0x8, 0x6, 0x1, 0x2, 0xea, 0x9, 0xe, 0x3, 0xeaf, 0x4, 0x8, 0x7, 0x3, 0x3, 0x5150, 0xad, 0xb, 0x9, 0x88bc, 0x800], 0x6}}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r6, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r7, &(0x7f00000004c0)=""/76, 0x4c, 0xbbfc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='--\x00') 7.630419951s ago: executing program 6 (id=3861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x1, 0x29, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) sendmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000dc0)="e3ed17adc49aab9f48d1c8708f76fd03eebfd0", 0x13}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24004801) close_range(r3, 0xffffffffffffffff, 0x0) 6.968892534s ago: executing program 6 (id=3862): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="2700050c03000001"], 0x24}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002911ad080a1110115dab010203010902240001010000000904000002c688ff0009050f020000000000090506"], 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) nanosleep(&(0x7f0000000080), 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000019080)) (async) r5 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00') (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f00000190c0)={0x0, 'vlan1\x00', {0x401}, 0x7f}) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x1}], 0x1, 0x0, 0x0, 0x4c010}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) read$char_usb(r6, &(0x7f0000000240)=""/9, 0x9) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100) (async) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x1020000, 0x0) 6.890633035s ago: executing program 3 (id=3863): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 6.740127564s ago: executing program 6 (id=3864): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 6.721472344s ago: executing program 3 (id=3865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x1, 0x803, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0xfffd, @multicast1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) 6.48609358s ago: executing program 3 (id=3866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) read(r2, &(0x7f0000000000)=""/70, 0xfffffe1b) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf148cca0586998874d9c7e0000000000008100020086dd60ff00f500180600fe8000000000000000000000000000bbfe8000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e041f40"], 0x0) (async) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaf148cca0586998874d9c7e0000000000008100020086dd60ff00f500180600fe8000000000000000000000000000bbfe8000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c20000907800001e041f40"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x101) syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x101020) (async) r6 = syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x101020) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffd, 0x6, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="2a05518600d7", 0x0, 0x1, 0x64, 0x1, 0x0}) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f00000000c0)=""/8, 0x8, 0x40002720, 0x0, 0x0) shutdown(r4, 0x1) 6.389567167s ago: executing program 3 (id=3868): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r4 = openat$procfs(0xffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000002c0)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r3, 0x6, &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f3b3063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a0000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) syz_usb_control_io(r5, 0x0, &(0x7f0000000b00)={0xffffffffffffff5b, &(0x7f0000000340)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}], 0x1c) 6.389076892s ago: executing program 4 (id=3869): r0 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)="480000001400190d09004beafd0d8c56360481ee09b832dd00000000590000a2bc5603ca00000f7f89000000200000001e01ff0000000309ff5bffff00c7e5ed5e00005000000000", 0x48}], 0x1) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) io_setup(0x20, &(0x7f0000001140)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2501, 0x55104}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x0) 6.361067177s ago: executing program 6 (id=3870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r7, &(0x7f0000005300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[{0xc, 0x1, 0x24}], 0xc}}], 0x1, 0x5d2dd0c54751f8e3) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r1, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0xac}, 0x1, 0x20, 0x0, 0x8040}, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005fdfc50821048f00deba0000000109022600010000000009040100020202ff"], 0x0) 6.325080516s ago: executing program 0 (id=3871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x84, 0x80}, 0x880) 5.793718915s ago: executing program 0 (id=3872): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@migrate={0x118, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in=@remote, 0xfffc, 0x0, 0x0, 0x4, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@private2, @in6=@mcast2, @in6=@private2, @in6=@local, 0x6c, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback={0x7000000}, @in6=@empty, 0x0, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 5.525435097s ago: executing program 1 (id=3874): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {"00000000000000000000000000000200"}, 0x1, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) 5.47532498s ago: executing program 0 (id=3875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x1, 0x29, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0xffffffffffffff0f}, 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r4, r5}) sendmmsg(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000dc0)="e3ed17adc49aab9f48d1c8708f76fd03eebfd0", 0x13}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24004801) close_range(r3, 0xffffffffffffffff, 0x0) 5.065832719s ago: executing program 1 (id=3876): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 5.065235619s ago: executing program 0 (id=3877): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x18, 0x1405, 0x3, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x880) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0xe0000000000000, 0xfefffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/124, 0x7c, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x20, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.204749916s ago: executing program 4 (id=3879): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000640)={{0xb, 0x3, 0xc1, 0x5, 'syz0\x00', 0xb}, 0x0, [0x2, 0x10e8af, 0x1, 0xcc0, 0xe, 0x101, 0x7f, 0xa6da, 0x2, 0x1, 0x10000009, 0x8, 0x8, 0xfffefff7, 0x8, 0x3, 0x10000005, 0x4, 0x40f, 0x1080, 0x962, 0xffffffff, 0xe, 0x400, 0x7fffffff, 0xc360, 0x80000001, 0x1100, 0xe0e3, 0x8a81, 0x10000008, 0x10000, 0x9, 0x10, 0x107430, 0x2, 0x7ff, 0x60a, 0x1, 0x3, 0x8, 0x5, 0xead1, 0x8, 0x9, 0xffffffff, 0x6, 0x0, 0x3, 0x2, 0x0, 0x4, 0x9000, 0xe93, 0x2, 0x6, 0x7, 0x91, 0x50a, 0x0, 0x5, 0x7ff, 0x1000, 0xffffffff, 0xfffffffc, 0x5, 0x7c, 0x2, 0x9, 0x2, 0x5, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x28000, 0xa, 0xfffffff9, 0x7, 0x10, 0x7, 0x4, 0xfffffffd, 0x0, 0x40, 0x2, 0x6, 0xfff, 0x3, 0x3b9, 0x6, 0x100004, 0x4660917f, 0x487d, 0x8000, 0x1, 0x4, 0x3, 0x0, 0x4, 0x4, 0xe, 0x1, 0x2cd, 0xa, 0xc, 0x4, 0x1, 0x2, 0x3ce, 0x7, 0x8, 0x9, 0x0, 0x100106, 0xfffffffa, 0xffffbf90, 0x0, 0x7, 0x2, 0x0, 0x7, 0x400, 0x809, 0xffffffff, 0x73938332, 0x5]}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x1800000, 0x202201) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) mknod(0x0, 0x8001420, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_tid_address(0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) shutdown(r1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x200000e, 0x2172, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r5) ptrace$poke(0x2, r5, &(0x7f00000011c0), 0xfffffffffffffffd) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r5, &(0x7f0000000100), 0x4003) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="220000000400000004000000424a120a853668f2", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="6f7ef8c4b5c90329f22feb6e6b7d373ff362e9089027ac29438913c58f653762428db7d416bac134ff7f9ad6d9ce7db0d3c4d5cdf6d8882ea86e9eb4957a0bcc3d6f4869a6ae7dc16157537055c9c29912cc36c9a40310d67e9d794a67116da5d4951e00f28070e884ff9192f9297bcefe5b0368dbc4b90700df980b2788b662959a1278c4c23f7f24e81f42ebe6a56bcba5d99b407308e02a22cb9438c0cdd7eb9b55b34c5c38da77b9990657c31f435ff9e813401f2eabed8c236e06ba8a3c959fd947bb5705ce8b486d457c177e0560158f5220ffc2ddc975c994a90cb34e25bf258b6986634784bddc686ca712e4cba3d0ed119f", @ANYRES32=r2], 0x50) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x5}) r6 = dup(r2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) sendfile(r6, r6, 0x0, 0xffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.102584597s ago: executing program 6 (id=3880): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.957417034s ago: executing program 1 (id=3881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000480)=[@mss={0x2, 0x3}, @mss={0x2, 0xaf0}, @timestamp, @mss={0x2, 0x8}, @window={0x3, 0x8000, 0x81}, @sack_perm, @timestamp], 0x7) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r6, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x29, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75c2"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmmsg(r6, &(0x7f0000000400)=[{{&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000580)=""/170, 0xaa}], 0x5, &(0x7f0000000640)=""/204, 0xcc}, 0x6969}], 0x1, 0x10000, &(0x7f0000000440)) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.724862662s ago: executing program 6 (id=3882): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000007c0)={0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r3, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x205b) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x0, 0x1, 0x400000000000, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006c40)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)={0x90, 0x0, 0x2000005, {0x1000000001, 0x6, 0x5, 0x1ff, 0x1, 0x0, {0x0, 0x2, 0x10, 0x1, 0x7fffffffffffffff, 0x0, 0x94ea, 0x1, 0x0, 0x2000, 0xfffffffc, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) renameat2(r7, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, &(0x7f0000000040)='./file1\x00', 0x2) syz_fuse_handle_req(r3, &(0x7f0000008c40)="a84b92772d864a57b0c850d34f8dfcdfc28449d846f0a76df28f83b378dd5a6fda034f7f464407a2af2b1e3dd77ced165cdcd9253f2a90901200c5a99d125d3d36f9fc57081a2d8aa00be9839f2c67eb9b2aeb8e3861ac327c674deec047eb4af9bbe8aef1bd18df227e2eec5407e2286961f0ee84492c6ba8a0ac23ee145d5eef66fe14980ec7fff8d1df304a561161dd0cb43d286f3cfb1e400d3e6e75cdf664a920810a709450a725d9440aa80dc2948b8914d959476371047ea3950ee373bd332fe287fe0817400228a1a3e1441266a64ad8db0c670380b0d169901f36c3fa65df0226a0913887b44e8f21d2cecdfafe4e9fad664bac5710d37f60d34fa72d91be185e5a6e5e1accc7cbbab2da85f1c0db4e6e9ce5aea94d38e294214c9f64c6ac7257b5d8edd7a4a1bf062e5619be232983cddae24ad2de7a2fed46a1cb4ec0876ffe205094e389d767776f8798d746631046a8ca91b14fe6cd9fdbd913053ac14ce7ccdd1abc20f411a573f1a823c0b55123611cf73e03cdcad63078dba7f313c03a27c2381d459dce224a3603744d7b064adca662adc15893f65ac14cd6c42b7065b95ae5b47eb29314e680474eb7b6ed45282f7eca684f524dd1bef0d6fd510801f75d1bb9aa667db6bc181b2e3c94f31fb594f91d362b5bc1aedbd55d21ce6b7c0f24aa072fd594d43c898f7f6da7e6d12884eba1ad5888d827cf261d9eab9bdf76222dccc9c4b4fd50abe95fd2587d7512a745c394454957294201e64ffaa6fffe8e38721e92fc07921c192d26c35f6e7636107fee286f67272cc48a0195df379f6b6e14871db5fd60388cb64b32c2abd10ed59db554d595cd8630e369bd909791007a5a0122365b9cbb9c984e12073c8e3ad0a93fd46dee00e2ccab7240fc962a03cc225d40a547c346d4b7811853eacbb7d438e2ef3be080876dfd70a583217866476e9744f7c05e465c77c25264d111ebd64d026c73dbff317a033666a8aa5e0752fdf854a4592ffa2851c6ebd5512e6306bb65ce5492141b08812c502c01e7b48ccafd6776b2d210b9e2115ff6dbb80b42eb146d4309a132ee39a0efb15665782c117bf16330e5e963b2a6b385f426da94324b6d59c2e0c3691c8eb4e07b7d29e848eb36e92b9b3ba9a83128d6b367020fe84387231c3e55167f0d28eaffffaebdc5cd7e494235f427c3d8a14345834cc37ee8077d884d08651e7464901d1a2f28a164800e886f5278f1bfb82c2d7d40a9c893e4b657a73c206244c06abc147c12754afedb9b451aa1efd4f60ed77975d6ab9c8c2debe98e94953ff016733b5f9a5e0f4a66ab68185fb36081eb2ceb0917965564e4d399714b96380e3a31af2ba7f7421312e6cda8543ab9888a09c7554655cbc32bd4d20ba21b658626fc1466804b5933f19fc9188f55fc339b08a74a624d22915dd1731ee77d0e82c4af359ebfc09ea882298ae981a6f08d34da85e4429460cd3f34efd5bf6003afb47c5242933f98c92316dbfbf1a5b081d4961076471e7447f797067099cb769ca5e5d7120a3ebdd75b5fa5cdd48426f3fa1284eb506a1d565771115c12c56f7480b968b0198d439c04ce3436683777f2d9a2c560f3bce7aed738cb7139c7eb65b72abcb5b2c85a90eb4874c0694725a32fe0f224fc019dba6502c70aa4a285b42eae42e7895dc8528a8e237544dfc7029ce88110fd50b3e5df343198fcc871f1187d2c656419b98bbf808f35099aa93f4ac96c80d4e6cbaf0112c89954c77ab51fb50d9477a395700aee1ba7c22334b871f2b3e99e633a941471263615fffa8055136fefb8f9921a51bb17d096a9d07353d69a0cecc12d1184815b04ecb70c983892e1d7e23be905276f2f1827864cd801e2df58fdf80dec5b3731e47c1ef5dd83bb4b9c414585ebf9caa8c052ab2a6c775ef119fd1fac00e1fd9294077473d849608bb0fccb5c81873c5a740fb879f468a793fce265fa9c5fe5919d53f7ec576e56ccada8def3d1d9727474196af0c1181f2dcb9ef64f7dac299e8b3f776f0fa32f8fb0e9ca7fe6fc9bf7efcd7d44c8fab1fb0666726446dad8978994b943581fb617a9b161d0c16d4e86aa89bb809d1e95bed62df7fe70e367bdaf984e5b13fc5f467ef51fe5a74a472d6a8928be888d982ae3401430c35cf47daf3c02144b2cac514e48aeada13f7c8a85ea7580e6ad401d87850d5d76eeea2c6267ceb70ba4030142032fd53ff75129b03fa54096a200e8272dadfe14daf97ad1338c0c73d5164960a3562cfe8b244fc03a795291e62a05adea64d6e3bc6de98f3e612def1cacfcb0da9bc72e2a6ce7133af702a8b2cf44cd455d999bb676121ad412682d71bae9263b7a2e1db33be083430479c0ed7fcd14cc1d26ea68e0e30e40900795a7f031370a5cceabdd52f7720f666a6922281adf1a0720d7580ef809b43df1c58262621493a90e69150e0fffc00bac1cfbe4170a669910a8fa38bfc071752138c8da4b719e8887e9b9582726f6bdf28af4ee84438092da4baa1251d10d0fddec37cf80b3410866ba527f69c28f0404b033adbc4e9efb938cd57014864e5b679964d9a681a03e991df77d2036fd100d02d51183d628cfdfd752c0eb7e77ba5b5f4baf955fcbc21d0902f5a03df468447e6588ffe7c3deeb4070b25b65c035faa7a45519bea67d7e279ed33d7f390fd481c5b6b8e97208ac4cb08671d3cb47903b3b93a727092e63c00ae58e39a021eb6a105113e71f49678a55e41f5da139e1fc7c391c0f59520820b411a036b96afd7ef3980a2e56b65db0a96fe6ffe7833eb3c9add917ab7789a714b28207c22d325a6d155f447a8d466e4ea7ac62f7ac631b73c892bfe9596ae91b6fadd92b62373957f6a6ea68ee06331357e3679d66cd96b9839e6e0d0079d6e6a1011f4f51d8d79e32d5e626a64f4193e909fd7cd35d23674b576eb06fbd01db5b1a9e42cff9852f22b0d4789eaf7d84b42db985582409621b9078f60e762a1e7f2a74a63543e8f77593d574fb867afd7fa5dd3f08b3702ab6d74895707f2abcfb3845db411ba7e7c1dc9fcb04f46d12ca36a54df11a7884c7f8bc184747a39eda36b1790bdd323b23bbd4d408423dba85b6c2c6ad94c08059b2b73e4b48f3aea5a559d7f4cac72781e606732f35c48d9ea0de97e65a192bf049e4c91ee4881d908221f6ea2cf0820e7b1e7444133f1e26cd571a2b5ba315573c9bbea8aaf9a92f2aef66706d519a41dc5fdc1044d3c9fe7ded6a32f7de2a892db0463699e3850acaf2cd08d0f0bfd463b9762ed7d1e5dfabb65c41175a3a00476990340f6550a2e9c90928f058087e56be07c017b83a9b1c8c136308c1607a934e5cff8868d5acdb247777e219f8e65e100ad059203c6f51378484227ab87729d5dedbb6d8fa674234e143b9e61ee605764329fd549bd08287a142da7f818e427dde6521ecea330133b55bf3ef8a089d218cf71e9a638958ad6bd56a29e2d0838796f21145335bc2aa2a0a2bf94980417595298bb9a60a0a658ed19b6e1d40408d84f157d397cb1dd9ed6b681fd0e4d9bbec766b940e8e634d68872567842a35844dd7051e24ad606e7806956cf5283e5ce5263300dec98dcc28486ce98ab65036b1e430f9e46a35365867b1eb7734b88466a4e642526c0ab2760cbb9a9e98eb0e31ffd6eb8367e66ee48e9b84709a44c1f6d7a35d0cfd04e0766c4463209a3e401872aa3227e87547ef4a9d60b70664fb3c63339bbfb813798a440e9c9d97546c1083a740c23e8fa1895c5bc1ac8e5e4f7b2d1d49c10365be083e6721327554b6e5012bd9b0b66fc4579ac80aa23162bb1b8de3a6a117ec868bda64550b1a80943003223d1a8efefee3aebd629f76a6f8821c6c0fc5d83801b3de7b56b021c8d7e6145447b4de4fe5a7aa788330f9e00c92785e699ecd706acb08e4ece6c9a0f2033419096e443fdd5846ba618b40fe0a8c8f15c0a3da70261b0cc716c5a7df7da72d19e1a5832264c0f310936b71bdc366e7a9be978549cc1db281dcdbc11982a34b2c03d3d58d019ca2fc3ea919b75f53443ef41251bf01994032b0dbad35036aa1d14c8d36ec6b50e3bddfa5fdfa1b505c467431a4d5df79e629c7e9e5b7ab32d646b8a689abe1815b35cd700051ca9ae8548c1f6ef5ebe2a0b696c1f3f7ef848b936eecaacc6ee7f8966f9f88345c77fdb96575cc4282285f5c28843680bfbaa3f6b9527c3b63fe6ef35d3c6a2b8b6489235ead6bc68282062976dac94c84d339f56677070d19446cc5993cb5970c00e469ef183766f028812af9127376be71b464499da00126c5bef86ff584ea2dea22cf7d93c6f2abb2c3709d320ec794fc9ed4481b65859b3147051196061d75a633e7bfebb0e9b1355c612dd4abfe41b5bdbb4089b45f373885d252c0b57c06f80ee03b923622f588c20a8068de9e0437586263a273bf37082fac27d91a091b2a9da2af161a0215b4bccd4895f633ac0080562ade66db2e472ad1a0fba16a1d4f19199924b03b22ed3df5d3655c0f82c970d3d8f306dcd9797e24273006b5eec728e99f6bf18b43db2b5cb70adec84ccf2130e04dea1331cdc5c0142fe931bd22ee3fb57165f6c6a80c0a90f590d63c0f0bcae69d3c0c4fdfdec7d5053919c7b2f083b669dcc51558ab8df70f916c7d0d2cbe19a588fcbe8bf08ccc2b742e924c545a056189278c002a14038975181b300c5fe90b92c5d65a70260f14d8064ab169ae992054663979ac9db5325fdd038afb7b9b9e3b96905caee09226b4b791ba14275a0efa1f2a3f1d72b81b61a7803a12184f80d2147b3c432395c167e92b944c19063d129ada44cf4571cfb897b048437f4832387ec308c45038b953b99993a93feeb02733f8e1c907ad6215230e697c1dec6eb2b1d8c4e97c9eec1dbc62c70865e529b3087619ab2e00d4660a1f8f987476d5585ddb27980a01b504f918a91596628523ca8d18f68caafae695649369a6e53f1d467721ddd97a91465b70246397e9549227eff0957589c9fc299e52455f6f61364aac0eef1b2d7f43ede37bc69133e6e80a241ee8191002ab34e936420eac829dec25faf488506db5017ca5546b0c55d11448dc83e600d9605cda83a6cf25a02e6eaba63e45da6bc96bdee8f3ea94d3052cbe1286a8f2059d7328451f5dc4fa0f20e5e9378c673c068f92a20a8fab16727dc63face055a488fbe5c96994346bc3adcb224ae0db78ec2e3ee42f036bf81ceab4206af224e3b8956f574ee9c8a3105e6c7eb31bc762de1b1c1c49b7af2391a83a9acf6ae57d8b22f3bb2a6b0758e8ea10a5c5d3081add8134bd31478a90d86d1198f4e0a0f8e9b0f999ff4074c9605212b7ea97884b6404e47dad02cb967b4033b516b03fd7a0c925e0f73c8bf0316ba16d15bca68f7febf0c63ce4ca60ec7926d86aa7250c488fbc05aba7df1efa1ad7e9defd48fa346857d775f87f127963943205857de143f110886f3a08486121f327a459eb39f2270ecb065d39016644c6573436556bd746790aa60d901ccfc3b8af9e53d367332fc07da024bf4d219c210ffe3b16dd5521bf9f01f39b3ddb49d73765bcf42eaad2ad4e7802b589d2fc2778c000123b56efb8395fcba2a68fac466200fc18d99a494f837ea8f8c3c23b9e89f06c3629095f562e35993782370de47dbe642b4c66b6b640d430a91af2c32fdfea37a2c0b18eca783c797ac30f9c76d6e92c9af4b18244a2d9edf09cfc5934dbbe97f99d6f726e619a99717d4854051d31b59d5d9303902d45dd663ef8a7854c9c15900c9a9f7a883bb2b922bdc8a1bee36c5c2a056139d19b0d2c03e88733cd7688f72f8f99fcc07e5b379d59f085720c8017c43db4157420588f9b6f5111899c2d23e862907a532a76be6f4c1352b57261b59859bbc1409cd9f37826f3e1a0c8af567e9b1d65028b4ca75c3a479615974fa8cbded2c6130a0d486d5224265b1e6595548a8556541e9da3e3f77ea365bd9a6bdca635d7ab24f39ea7d34ebfcd0af202b54dc38f6fe143a307e3a724d51558a93cb89c0160bee1afaa00fe4c915e1409b3484c7f20d4099c6cc7bee679c0c6b08eeef072fa7ca87297aec3bce0c80e0f528a21da928ca29101fb69d7e7f786f9d8b98c8fb7184abc022682efd4881732287f86beba984d364f29084c4b20a42f6e8ece5cacd0c5439290cf61959f836445dbfffb381110d78d55fa3f1d65ffd45c337416a9c349f2b3de8da69c234c57b88d62950db0ac49c00710bf264643bda2d35356b638f4d6abe972ebbc5c986efe2815c06de77cf7ed93feddbf9e10a98ae7f2f4dbfb0b5f20bfcf7a9b9b1430ecbcee5a354d1356aa8f464ccab40a9f877c99505db1579f0a28bdd5d79b1306432320407db8b40f6e6b8bfd5e20de5a36e50e402f94a091c5a304b722102c35fe5e783b03535a1f8bf3d835b14d5242b486f59bf8238a926e69ee36a779d302077ea729d2c51e4f0144f526bcdde1e8a99bdaa5583b8465533c99f2c8542db003370fbbc55150cdf40f0affad39b36399de36c693ea4267291258e83783c265e1fd594799264a89522e06a54ac1397816c81fa1d42602acd3e689d6feb45e9d44cfa2d5b14234c73a07e3abd851c0a9eabb1e90dbeb16eb41678c5d5b3cd75057414edb9169f21794748a31ce29b8c2735f61e75b7b147fdf75c6cc5348963f3924e3b3723732a9b8114442871bb2d96da1d2627b8edcaec5fba0d0e9f8d7f20218f7ec7ad370c7ec1d7a72483951ac5ffee560dd57ac2d36614c2cc50d765cf5534b11cc7b3bfccb0d3a1a4e71b9f714d0248b45109cc871af1a335417e2a7cd39dd49b995c76e89ed0c54f442e5afa83c55524dc564c5224f03c231afe097356d2a49869bdf8b48fb606e0820fd6a699f387079a600facdf35b9b5dc24267abe65e569b9c87af2fe7f9d1a8fe335054d16f53c34198e23816ebe76e59d18c0237a2b22e76b703a73cbd71cd85ae3656d05f5aeefcff36edbcf6b733ef84e929707ad9282821651449b4d87d006c45de259efaac57ad84a863d61fd1528dfe9d725a9af96c52a1d5dab4e331531cf273ae3a8c76bc29e68746b8e065d3726a66d036e01327d79db6d6bac7162cb57ac6556fae246faa1cb05f0937cfe0a74fd475be5247594e9ac1353e0ccbd5b70143e847260cd8db5cbc9b87d6b563a2a6b4032b5ad859674657b8fce5e75eb76a2466893afb1135d19647c3e3f0074828d2c87cd30b02d5d331ae4c61e30f09167c43ae59dd272ca42f4db2837f3456fbc8e1da3bc3d4c58beea5290de8b004f6eea1815679252ef6181d1da04b7b003acefbfb4219e1909a262d3da7c54f417b28dcdcfbedb2db0b3f412f86c6fa36b16d668b24ab3ec9f445f8bca4f1e6521ec860370dc36b8f4a786d31ec5b40654d42386d3821f7e1ffb3af0921e10bcba3c6bc142ec1fc1926885fb0b39890f160c21584ecceab8463ed6af19032267d5c25856011cb2a13180443341604ed7c0cbc1431011817863f903a90d86088a31baf365d1ace5cd92e0f870192546115f125279cba5d3f82946e01dd0ff2673c10478666a6e8b5082d42f888e5ddbf50b9821c53040e6bd821ef11ba0b1d42b3a827b729592ab82f0c347ddb126f596cff6ac7547ad51924f8b16a6801f4392b6acced6c204c609c373b08d87d25cb58d230cbeb3bec4194b8e3257212e2302ba976244e48087ea7b3ea29f06f57a5e677e853256396cc3e2407a0af38a6c365a050a6d605cbab3897e7a1931a66334efe0426b7d2aa4b1abe31723fdaeb8e91b91fb28b307abad919169e96777ab297cdda696e42a478ffc16346d17d3846c64831226f72e9cee17220e422247fb70fa7cda05e893aec902862b91bb11670335b325a0fdd59c59b2ea2665a622aed86418e09d1568721fdaf09c46b33e67153899f60b31377872509da26e242e264d1a3e07e6779cec052be03fdc09f129239170ef1ca7873b8878880f84889ecc492881de50a70b37952f041738aa6e8265bb0e8b1ed6153b175e09339401d6497dfe06df747457ab3a6f3f037eec0dbdc357c39b905e64c21122affa609621a2b59fd72f3f8594bdd51d862378bd37e61bc62bb96ad038ac3716e71b9232f6cfcbf2e812be29ad99137273c10af7ccb6b2a3c9f867d31f8d94133dc4f128a55ecc95fb51af5a4120b54ff4754465cc6bb2dc0aab7645cf57f843f0293cc97786ff734aebd461bb1b2c2276add88130bd2d5d80704ae22f4ca37099593a576f27bbe76939f9330d43ac54fddac873c6df6914dfda2389252a047850eba7804c3d7d2169f244d82befbeb1374cbb7146960c1f728418f32a4e1d957013713c48d8e9ff52b3ff2e38ffaf818c311d0a8118fdf41bf7b00d8cd8da862784206df07fe1781d7846c4ba0d545e4e271483285a1a72767d39e30fb82e0e9ec791dcb7f2c95b7998cbd14522542013bb9b226a5cdd380b59b4d22127be985563d49fa2deb6126290f11831cafbc22d8d9bb186998678b1cee4c2ffb76c87230158ed447233d5a078ac169728d9124584f62f5bb809540840363fd23b9be3f2837c39e02ac321613d01afb2933a38bdfb2cb725bde0f48db85c212c6ea4aa9c9fef8ee4759d0d9ffbed7586d0e89687bd56e90058335dd291ed00debad54dbed742301ef05c36cb66ce5dd0b5261abcbe038b14a8a1f03380f9636509f6d0cf797f036cb79078f9886caca1f340a3b101ce92a34c1ead1503b1c4ca82b289a7f1e73fb9698d06d4b90d187f9ca3cb127e476ec505b87b7e18b97e3d2c5df1f0bc4b42b97574488a5ce4d6cf14e40e4e6ac182f5eb843a3a9630531ccdaadc2fa84429eea3756f166bf0c019c656c2bf9e0e43120889c49d817716434928f505c19f720af4878d4836434c6e3a26ab9aa1ed569b07ca076140d700e8a84b791cb61b27c20147e08337c5daeda74922076b30b41ffbe0fedacc0d3a5be9aa1154503e1376f1a0d9174be209ca3fd1187ba787bc45a72966f5f7cf0d031ae4165b88d60c47ccee3ebf71ec3e2183fac9b3034d0eabd1cc66e231ac9db5c8f92633e9878b02042bfcec07f2a48e912c7d8e97fabfb08a1510f9446a8bf94563e9fcfb693dca5f3377d70e36cf0866d7a0647075ae1f127e5ce108322242841504b6c9fe839c4227227db2e0d55debed854ebc2d91d8b594f6dca3400f14ecaa5421cfa70a5befdad6fe39c47942bc5f271d3cb2c542eca78156c6798d98e45c7e46effbfeb2f380974ce4463113a797672c1a54b7cc1576fdfa821942f48c48b5632c8ea559545343a03d221c233cd86f34a7d88574af39533a4819f6f29c4fae85ec0ad382d60e439fdbd43ef547bbd7aef001b4ad0d6a5297fc1ed1b126c70419c484cc2e897cc9df921e6625dc3d29ab41b821b45120e67ee5a1be69cd77fd5d3f3d2d296ef32d93e3e15f20e001b7215090bd38f2f8b9b548392f13233bc90d6e26ef254d97a50ce6c9f15ce1dbfb9753d47985fdbd0619c40f1579edb49687b6a0949e7b5939b3bf6602d7789ec1c2ba45033c4e326aa3772645df54ccad0ebdbf8a59693e9e7f394ff20265805b65f0624a566a8cefeaa00e8efbf545f718f47c6c3ecff38c4a53eee91a4caf7efc8e4ec1047b7efebff652836d71999813676d0e3d306e014aef68e857e89a872024af7480dd9e9dd9e0803ee9ce19081778d1b738ea0e5fbf3b1833cd595f0f3c942f1cec1caaabd516e217881e4cb1a93e620cb9349ab288db488d1bd7c251a6072b1fd3f890ee0ab6a3071e715549efc6797a330c31b42e44c09f65b2ef8f589de35d291a6dddf9a12e3d48db0166075f7417aed9cc00059741f35ef43ba760952a6c864eb48dacdbe3cd1c410837847d501c46742c6c880602309974a76799c4b54c666ad23b6b604d1bdbc0aec2ab5a455707683b2e62a62ba4e70bc24b35096d70146e8a27d2e9c54937664f8d56df2e2ca989e263fe117f16e5d3a5aa779ea28b8ead1cd4847c76317d3f516638eb11eb033b9dfcb1a0dbb06f4b06d854410935c3d2273aa49afe8dd5023cbc56d73f0b546bb48cd79e59d2eb38f52634ca4e1493d06b651628b8a11819c7a5ef3892e2106ca3e7801b4805cf1f8568dbfdf63e2220328544a22e3d19549d257e24ac7474373c311b3cd2d633e6e099f1b85bee196c6f7bfc483bc32bb551756b53716623276dfda9cdd01384f4b2a05619042115193c640c2479031a15f8557be56148e60318942fcb3209a9497aa3893caf046d776aab5239c47bfe1161f4a6c6e1eebb6998662f5cbf7dfbed87c0234c077e4a0011e0669bc53ec812c4dfb96be892cdac13871e9cdb222b0361e6d12b48b42a66900c380d26f8f4aa6a2d51182340f6e7e6d093ea8f5dba0bf124107dfe4e2945964163d7f6ab153be8059603db52af0260a673f48cf0f3655da2acc9119575e14b9f3cd61d45d831301e2ab1368ce4875ca5b90511d2fdc788b4343df9a75d8f6b63ddd29eb57758b7a8d0390c336e80217d74bd8a8625a3ebbd5a2da93d5202d51611ab6bbca45ceef812c36f84c827cc1ea7047bf91c8ab49e199a705d72cdd333049be56831d1b65beec825cd55afdbc53f44a184eaec77ae5ca705354176e1234ad2c2408afe835a79f2a6d210af2b98e022c93a2eed90ca828a141b09193782074d9a08490d538f2f9753a64816002787b89f142303ca2564d3c86ee17239c052f269e763233ae65431478f3846d318023a3dc06d9c0203e2166489bbc9235230d0f66b2e58deac7e65c505a6647408e78f7cddb6d7872d0f0373ffc1293a4380393dc46742f2b471daf5cb2f684549a0abed03197ddba7acdd3cc529f16be1223f368f025f2db1af46190cd2fb7c1d14b9930df07e310be9d97ec00595bad618633b6f885260429489290d99069faca46b7e56f5997323c260e80365338ce2475fb58412e420a3c6bc7c80ca26b5535e5c91a477c73a8249d4f647ed883510675d81bad98801f5d3092b796c8da80c501da906376b987502c5d0c04e701b17d11be5f4ef80630c2df3f047326716d15fe7611f0cfbbdb9a823b868cf847a0c4bf0cbb93a1b59461ac62cbe71fa06698b850c0320edd6b422f345b4f692e23551d6b63bd1df90b8cad4051fe3543f42aef04ef248a628f1e875d40f05c854daa4acbe44f07bb74098f7a631abd4b048e05b6b68c7c929d3dfba8f1031bf648d46d7a4d1ad839b3ccfc02e33bd00d1ffdbb18cf09b03734e2f9d944252793cefe50b54a849e883d71fc53c1dd2763c3ecaa5543ec4e6051d0ba61e9efee495cc82c1a1468835b7add508edcc9ac1e945e76922b34b9ba854d1c053da10259a9325ed02090d3f701abb460864c81f05a9ddf1e3a76ec5456c138c467d8c3193c9a7bbda5d532663ab48724a98e80a9ec21c4d14f27fa41e8c96ae516315059a1b6d454fa2f0b3479c71cde11e189b49a940ed75b695b1c9b5ed1ffb7e35632d413c5dd59701b43840a6c9d55664122bc2582b00d52972aa1332eeef0e391ae646903908980fac3548994c2c2c150", 0x2000, &(0x7f0000002380)={&(0x7f00000021c0)={0x50, 0x0, 0x4d, {0x7, 0x2b, 0x3, 0x100000, 0x3, 0xfffb, 0x3, 0x2e67, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$sierra_net(r2, &(0x7f0000000180)={0xc, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}}, &(0x7f0000000880)={0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="200ad2000000aac8d2a6adcccbcd95227463200008dfc9f3448f203bbdbd1332944882998e0029dc90d8c5c891aa681afa31098661eef53e2b3670900a55b058bc06466b91dd72e6660c4ed02f00b46c25d6a7b2b72194ff70818d088b18f2138241f737e3919ac752d8bf04306a0de314991cd9caa31d106e1753a6f3f61f53cfa8c8aa41d52fb023e163ec324a128c8e1666202a7abb15566c01f4b32faa3966449f54d1c5e3fda823acb9e5da4ee302a16a1d2f825f55e77cb213a14ab7efd1996aa5a86c31b6f90c3918dce2ee4b6a694afa62e3ff1123"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 1.985997553s ago: executing program 3 (id=3883): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121700, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df000000000000010902"], 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1", "000000000000000100"]}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000740)=@attr_other={0x0, 0x1, 0x1, 0x0}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) r6 = syz_io_uring_setup(0x4a03, &(0x7f0000000140)={0x0, 0x103cfa, 0x8000, 0x3, 0x14a}, &(0x7f0000000300)=0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xcc}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, 0x0, 0x0) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000013c0)={0x4, 0xfffa, 0x8001, 0x7f, 0x13, "40999f49f937a4fd"}) 1.776102661s ago: executing program 1 (id=3884): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x20, 0x67, 0x9e, 0x8, 0xc72, 0x14, 0xc776, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x1, 0x28, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 741.442869ms ago: executing program 0 (id=3885): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@migrate={0x118, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in=@remote, 0xfffc, 0x0, 0x0, 0x4, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@private2, @in6=@mcast2, @in6=@private2, @in6=@local, 0x6c, 0x3, 0x0, 0x0, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}, @user_kmaddress={0x2c, 0x13, {@in6=@loopback={0x20000000}, @in6=@empty, 0x0, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 489.800878ms ago: executing program 0 (id=3886): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0xe0000000000000, 0xfefffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) pread64(r5, &(0x7f00000002c0)=""/124, 0x7c, 0x7) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000140)=0x2040, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x20, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xbd, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0x33, 0x8, r6, @void, @value=r6}, 0x20) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) execve(0x0, 0x0, 0x0) epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket(0x8, 0x6, 0x1) socket$alg(0x26, 0x5, 0x0) 489.323319ms ago: executing program 3 (id=3887): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000030800450000300000000000069078ac1414bbac1414aa4e22400148485849aee7cbe2a58c8eba56618e468601fc0f46967204a00b4322eba03a7c72566c476d4e58c34b4925fa6e742d720dfa95c6e04b0e46bd7c07e8eaac5b8376d5b9bc4e733aeeb57f0cb348242902fcf33ba8cd25dae2004fd7c4b7845eef44ce72e9e7369f4829a11aed1b84e420f66aed73af5ad66042968361ff1682966b56b3d9c8e93eeb233eeab905fe3757107ef8f5158e41ab5317803c30599926b91ff2b551101e122f03429f4dbea1f7e973d4fd1e24ceb53f6972da71d69d03bf72cdb941d2faad0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a0000000500007fff0000"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4a23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0x2}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r1, r2, 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001d36343ec64060f0001a2000000090800000000000000000000000206dc6fff00"], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$unix(0x1, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000180)=0x14) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='thermal_power_cpu_get_power\x00', r5, 0x0, 0xfffffffffffffffe}, 0xfffffffffffffda0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1) close(r7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 41.194801ms ago: executing program 1 (id=3888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x300}, 0x0) 0s ago: executing program 4 (id=3889): r0 = socket$packet(0x11, 0x3, 0x300) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000000)="480000001400190d09004beafd0d8c56360481ee09b832dd00000000590000a2bc5603ca00000f7f89000000200000001e01ff0000000309ff5bffff00c7e5ed5e00005000000000", 0x48}], 0x1) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, 0x0) io_setup(0x20, &(0x7f0000001140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2501, 0x55104}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): 648.586312][T16970] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 648.586325][T16970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.586355][T16970] [ 649.149076][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 649.149094][ T30] audit: type=1326 audit(1767848012.285:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 649.192034][ T30] audit: type=1326 audit(1767848012.285:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 649.214836][ T30] audit: type=1326 audit(1767848012.285:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 649.267412][ T30] audit: type=1326 audit(1767848012.285:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=263 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 649.291209][ T30] audit: type=1326 audit(1767848012.285:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 649.332403][ T30] audit: type=1326 audit(1767848012.285:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 649.357027][ T30] audit: type=1326 audit(1767848012.295:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 649.383345][T16984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3377'. [ 649.580802][ T30] audit: type=1326 audit(1767848012.295:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 649.603243][ T30] audit: type=1326 audit(1767848012.295:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 649.682555][T16987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3379'. [ 649.775642][ T30] audit: type=1326 audit(1767848012.295:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.5.3374" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 650.402547][T17016] macvlan0: entered promiscuous mode [ 650.822947][T17025] FAULT_INJECTION: forcing a failure. [ 650.822947][T17025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.839356][T17025] CPU: 0 UID: 0 PID: 17025 Comm: syz.3.3390 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.839387][T17025] Tainted: [L]=SOFTLOCKUP [ 650.839395][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.839407][T17025] Call Trace: [ 650.839415][T17025] [ 650.839424][T17025] dump_stack_lvl+0xe8/0x150 [ 650.839455][T17025] should_fail_ex+0x414/0x560 [ 650.839489][T17025] _copy_from_user+0x2d/0xb0 [ 650.839515][T17025] input_event_from_user+0xf9/0x280 [ 650.839538][T17025] ? __pfx_input_event_from_user+0x10/0x10 [ 650.839570][T17025] evdev_write+0x2a6/0x480 [ 650.839596][T17025] ? __pfx_evdev_write+0x10/0x10 [ 650.839617][T17025] ? bpf_lsm_file_permission+0x9/0x20 [ 650.839636][T17025] ? security_file_permission+0x75/0x290 [ 650.839658][T17025] ? rw_verify_area+0x255/0x4d0 [ 650.839704][T17025] ? __pfx_evdev_write+0x10/0x10 [ 650.839732][T17025] vfs_write+0x27e/0xb30 [ 650.839759][T17025] ? __pfx_vfs_write+0x10/0x10 [ 650.839779][T17025] ? __fget_files+0x2a/0x420 [ 650.839806][T17025] ? __fget_files+0x2a/0x420 [ 650.839828][T17025] ? __fget_files+0x3a0/0x420 [ 650.839850][T17025] ? __fget_files+0x2a/0x420 [ 650.839882][T17025] ksys_write+0x145/0x250 [ 650.839903][T17025] ? __pfx_ksys_write+0x10/0x10 [ 650.839933][T17025] __do_fast_syscall_32+0x1dc/0x570 [ 650.839955][T17025] ? lockdep_hardirqs_on+0x7b/0x110 [ 650.839972][T17025] ? do_fast_syscall_32+0x34/0x80 [ 650.839999][T17025] ? irqentry_exit+0x10f/0x670 [ 650.840023][T17025] do_fast_syscall_32+0x34/0x80 [ 650.840045][T17025] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 650.840068][T17025] RIP: 0023:0xf704d539 [ 650.840086][T17025] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 650.840104][T17025] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 650.840125][T17025] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 650.840138][T17025] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.840149][T17025] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 650.840161][T17025] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 650.840173][T17025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 650.840203][T17025] [ 651.268383][T17033] FAULT_INJECTION: forcing a failure. [ 651.268383][T17033] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 651.306872][T17038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3394'. [ 651.322981][T17038] bond0: entered promiscuous mode [ 651.328205][T17038] bond_slave_0: entered promiscuous mode [ 651.334048][T17038] bond_slave_1: entered promiscuous mode [ 651.346910][T17033] CPU: 1 UID: 0 PID: 17033 Comm: syz.0.3392 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.346928][T17033] Tainted: [L]=SOFTLOCKUP [ 651.346933][T17033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.346940][T17033] Call Trace: [ 651.346945][T17033] [ 651.346950][T17033] dump_stack_lvl+0xe8/0x150 [ 651.346969][T17033] should_fail_ex+0x414/0x560 [ 651.346989][T17033] prepare_alloc_pages+0x22b/0x650 [ 651.347006][T17033] __alloc_frozen_pages_noprof+0x123/0x370 [ 651.347020][T17033] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 651.347034][T17033] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 651.347050][T17033] ? policy_nodemask+0x27c/0x720 [ 651.347065][T17033] alloc_pages_mpol+0x232/0x4a0 [ 651.347080][T17033] vma_alloc_folio_noprof+0xe4/0x200 [ 651.347094][T17033] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 651.347112][T17033] folio_prealloc+0x30/0x180 [ 651.347129][T17033] do_wp_page+0x1231/0x5810 [ 651.347152][T17033] ? ___pte_offset_map+0x29/0x240 [ 651.347172][T17033] ? __pfx_do_wp_page+0x10/0x10 [ 651.347185][T17033] ? do_raw_spin_lock+0x121/0x290 [ 651.347200][T17033] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.347220][T17033] handle_mm_fault+0x14c5/0x32b0 [ 651.347234][T17033] ? __pte_offset_map_lock+0x13e/0x210 [ 651.347255][T17033] ? handle_mm_fault+0xdb/0x32b0 [ 651.347274][T17033] ? __pfx_handle_mm_fault+0x10/0x10 [ 651.347289][T17033] ? follow_page_pte+0xd03/0x13e0 [ 651.347308][T17033] ? __pfx_follow_page_pte+0x10/0x10 [ 651.347328][T17033] __get_user_pages+0x1650/0x29f0 [ 651.347357][T17033] __gup_longterm_locked+0xde4/0x1660 [ 651.347377][T17033] ? sanity_check_pinned_pages+0x1241/0x1300 [ 651.347394][T17033] gup_fast_fallback+0x1d26/0x2290 [ 651.347423][T17033] ? __pfx_gup_fast_fallback+0x10/0x10 [ 651.347435][T17033] ? ____sys_recvmsg+0x1c9/0x460 [ 651.347448][T17033] ? __sys_recvmsg+0x161/0x220 [ 651.347458][T17033] ? __do_fast_syscall_32+0x1dc/0x570 [ 651.347470][T17033] ? do_fast_syscall_32+0x34/0x80 [ 651.347483][T17033] ? pin_user_pages_fast+0x4d/0xb0 [ 651.347498][T17033] iov_iter_extract_pages+0x35f/0x5e0 [ 651.347515][T17033] extract_iter_to_sg+0xe46/0x24e0 [ 651.347534][T17033] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 651.347546][T17033] ? rcu_is_watching+0x15/0xb0 [ 651.347559][T17033] ? trace_kmalloc+0x1f/0xb0 [ 651.347569][T17033] ? sock_kmalloc+0xd6/0x160 [ 651.347584][T17033] ? __asan_memset+0x22/0x50 [ 651.347601][T17033] af_alg_get_rsgl+0x436/0x810 [ 651.347622][T17033] skcipher_recvmsg+0x3d1/0x11d0 [ 651.347637][T17033] ? aa_sk_perm+0x7ee/0x920 [ 651.347655][T17033] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 651.347669][T17033] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 651.347678][T17033] ? security_socket_recvmsg+0x7e/0x2e0 [ 651.347699][T17033] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 651.347711][T17033] sock_recvmsg+0x22c/0x270 [ 651.347729][T17033] ____sys_recvmsg+0x1c9/0x460 [ 651.347747][T17033] ? __pfx_____sys_recvmsg+0x10/0x10 [ 651.347758][T17033] ? get_compat_msghdr+0x37e/0x4a0 [ 651.347778][T17033] ? __lock_acquire+0x6b6/0x2cf0 [ 651.347792][T17033] ___sys_recvmsg+0x1b5/0x510 [ 651.347804][T17033] ? get_pid_task+0x20/0x1f0 [ 651.347816][T17033] ? get_pid_task+0x20/0x1f0 [ 651.347831][T17033] ? __pfx____sys_recvmsg+0x10/0x10 [ 651.347846][T17033] ? __fget_files+0x2a/0x420 [ 651.347867][T17033] ? __fget_files+0x3a0/0x420 [ 651.347885][T17033] __sys_recvmsg+0x161/0x220 [ 651.347899][T17033] ? __pfx___sys_recvmsg+0x10/0x10 [ 651.347917][T17033] ? __pfx_ksys_write+0x10/0x10 [ 651.347932][T17033] __do_fast_syscall_32+0x1dc/0x570 [ 651.347943][T17033] ? lockdep_hardirqs_on+0x7b/0x110 [ 651.347953][T17033] ? do_fast_syscall_32+0x34/0x80 [ 651.347964][T17033] ? irqentry_exit+0x10f/0x670 [ 651.347977][T17033] do_fast_syscall_32+0x34/0x80 [ 651.347988][T17033] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 651.348001][T17033] RIP: 0023:0xf7f72539 [ 651.348010][T17033] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 651.348019][T17033] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 651.348032][T17033] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800005c0 [ 651.348040][T17033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 651.348046][T17033] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 651.348052][T17033] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 651.348059][T17033] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 651.348074][T17033] [ 651.365653][T17038] bond0: left promiscuous mode [ 651.521157][T17042] netlink: 'syz.0.3397': attribute type 10 has an invalid length. [ 651.584768][T17038] bond_slave_0: left promiscuous mode [ 651.831152][T17038] bond_slave_1: left promiscuous mode [ 651.869303][T17042] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.876474][T17042] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.918845][T17042] bond0: (slave bridge0): Releasing backup interface [ 651.975838][T15494] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 652.131655][T15494] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 652.140228][T15494] usb 6-1: config 0 has no interface number 0 [ 652.198070][T15494] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 652.245614][T15494] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.299112][T15494] usb 6-1: config 0 descriptor?? [ 652.336930][T15494] ttusbir 6-1:0.83: cannot find expected altsetting [ 652.661820][T17053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.710107][T17053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.005255][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3391'. [ 653.338051][T15494] usb 6-1: USB disconnect, device number 30 [ 653.675896][ T5911] usb 2-1: new low-speed USB device number 99 using dummy_hcd [ 653.713164][T17096] FAULT_INJECTION: forcing a failure. [ 653.713164][T17096] name failslab, interval 1, probability 0, space 0, times 0 [ 653.727908][T17096] CPU: 1 UID: 0 PID: 17096 Comm: syz.4.3408 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.727940][T17096] Tainted: [L]=SOFTLOCKUP [ 653.727948][T17096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.727961][T17096] Call Trace: [ 653.727969][T17096] [ 653.727978][T17096] dump_stack_lvl+0xe8/0x150 [ 653.728009][T17096] should_fail_ex+0x414/0x560 [ 653.728044][T17096] should_failslab+0xa8/0x100 [ 653.728070][T17096] __kmalloc_noprof+0xdf/0x800 [ 653.728088][T17096] ? sock_kmalloc+0xd6/0x160 [ 653.728117][T17096] sock_kmalloc+0xd6/0x160 [ 653.728144][T17096] skcipher_recvmsg+0x571/0x11d0 [ 653.728185][T17096] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 653.728211][T17096] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 653.728229][T17096] ? security_socket_recvmsg+0x7e/0x2e0 [ 653.728257][T17096] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 653.728281][T17096] sock_recvmsg+0x22c/0x270 [ 653.728313][T17096] ____sys_recvmsg+0x1c9/0x460 [ 653.728345][T17096] ? __pfx_____sys_recvmsg+0x10/0x10 [ 653.728367][T17096] ? get_compat_msghdr+0x37e/0x4a0 [ 653.728402][T17096] ? __lock_acquire+0x6b6/0x2cf0 [ 653.728430][T17096] ___sys_recvmsg+0x1b5/0x510 [ 653.728459][T17096] ? get_pid_task+0x20/0x1f0 [ 653.728482][T17096] ? get_pid_task+0x20/0x1f0 [ 653.728515][T17096] ? __pfx____sys_recvmsg+0x10/0x10 [ 653.728543][T17096] ? __fget_files+0x2a/0x420 [ 653.728583][T17096] ? __fget_files+0x3a0/0x420 [ 653.728617][T17096] __sys_recvmsg+0x161/0x220 [ 653.728643][T17096] ? __pfx___sys_recvmsg+0x10/0x10 [ 653.728676][T17096] ? __pfx_ksys_write+0x10/0x10 [ 653.728705][T17096] __do_fast_syscall_32+0x1dc/0x570 [ 653.728728][T17096] ? lockdep_hardirqs_on+0x7b/0x110 [ 653.728746][T17096] ? do_fast_syscall_32+0x34/0x80 [ 653.728767][T17096] ? irqentry_exit+0x10f/0x670 [ 653.728790][T17096] do_fast_syscall_32+0x34/0x80 [ 653.728816][T17096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.728839][T17096] RIP: 0023:0xf7fd6539 [ 653.728856][T17096] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 653.728875][T17096] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 653.728896][T17096] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800005c0 [ 653.728911][T17096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 653.728924][T17096] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 653.728935][T17096] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 653.728948][T17096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.728977][T17096] [ 654.217673][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short [ 654.226703][ T5911] usb 2-1: config index 0 descriptor too short (expected 33540, got 36) [ 654.235080][ T5911] usb 2-1: config 108 has too many interfaces: 60, using maximum allowed: 32 [ 654.244131][ T5911] usb 2-1: config 108 has an invalid descriptor of length 0, skipping remainder of the config [ 654.254794][ T5911] usb 2-1: config 108 has 1 interface, different from the descriptor's value: 60 [ 654.265610][ T5911] usb 2-1: config 108 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 654.278707][ T5911] usb 2-1: config 108 interface 0 has no altsetting 0 [ 654.290635][ T5911] usb 2-1: string descriptor 0 read error: -22 [ 654.296937][ T5911] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 654.306121][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=235, SerialNumber=2 [ 654.476145][T17106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3410'. [ 654.535415][T17106] bond0: entered promiscuous mode [ 654.543366][T17106] bond_slave_0: entered promiscuous mode [ 654.555873][T17106] bond_slave_1: entered promiscuous mode [ 654.592696][ T5911] usb 2-1: USB disconnect, device number 99 [ 654.598769][T17106] bond0: left promiscuous mode [ 654.603780][T17106] bond_slave_0: left promiscuous mode [ 654.615797][T17106] bond_slave_1: left promiscuous mode [ 654.699484][T17113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3412'. [ 654.717479][T17113] netlink: 'syz.3.3412': attribute type 10 has an invalid length. [ 654.791503][T17113] team0: Port device bridge0 removed [ 654.832855][T17113] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 655.042838][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3414'. [ 655.192497][T17129] netlink: 528 bytes leftover after parsing attributes in process `syz.0.3415'. [ 655.495587][T14892] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 655.552079][T17142] FAULT_INJECTION: forcing a failure. [ 655.552079][T17142] name failslab, interval 1, probability 0, space 0, times 0 [ 655.575720][T17142] CPU: 1 UID: 0 PID: 17142 Comm: syz.4.3420 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.575751][T17142] Tainted: [L]=SOFTLOCKUP [ 655.575758][T17142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 655.575768][T17142] Call Trace: [ 655.575776][T17142] [ 655.575784][T17142] dump_stack_lvl+0xe8/0x150 [ 655.575813][T17142] should_fail_ex+0x414/0x560 [ 655.575848][T17142] should_failslab+0xa8/0x100 [ 655.575873][T17142] __kmalloc_noprof+0xdf/0x800 [ 655.575892][T17142] ? skcipher_next_slow+0xee/0x230 [ 655.575917][T17142] ? skcipher_walk_next+0x7b3/0xbe0 [ 655.575944][T17142] skcipher_next_slow+0xee/0x230 [ 655.575972][T17142] ecb_decrypt+0x20e/0x290 [ 655.575994][T17142] ? kfree+0x1c0/0x660 [ 655.576022][T17142] ? __pfx_ecb_decrypt+0x10/0x10 [ 655.576064][T17142] skcipher_recvmsg+0xb37/0x11d0 [ 655.576104][T17142] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 655.576129][T17142] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 655.576146][T17142] ? security_socket_recvmsg+0x7e/0x2e0 [ 655.576176][T17142] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 655.576199][T17142] sock_recvmsg+0x22c/0x270 [ 655.576233][T17142] ____sys_recvmsg+0x1c9/0x460 [ 655.576266][T17142] ? __pfx_____sys_recvmsg+0x10/0x10 [ 655.576288][T17142] ? get_compat_msghdr+0x37e/0x4a0 [ 655.576324][T17142] ? __lock_acquire+0x6b6/0x2cf0 [ 655.576352][T17142] ___sys_recvmsg+0x1b5/0x510 [ 655.576374][T17142] ? get_pid_task+0x20/0x1f0 [ 655.576397][T17142] ? get_pid_task+0x20/0x1f0 [ 655.576425][T17142] ? __pfx____sys_recvmsg+0x10/0x10 [ 655.576454][T17142] ? __fget_files+0x2a/0x420 [ 655.576495][T17142] ? __fget_files+0x3a0/0x420 [ 655.576530][T17142] __sys_recvmsg+0x161/0x220 [ 655.576564][T17142] ? __pfx___sys_recvmsg+0x10/0x10 [ 655.576597][T17142] ? __pfx_ksys_write+0x10/0x10 [ 655.576617][T17142] ? rcu_is_watching+0x15/0xb0 [ 655.576650][T17142] __do_fast_syscall_32+0x1dc/0x570 [ 655.576673][T17142] ? lockdep_hardirqs_on+0x7b/0x110 [ 655.576692][T17142] ? do_fast_syscall_32+0x34/0x80 [ 655.576714][T17142] ? irqentry_exit+0x10f/0x670 [ 655.576738][T17142] do_fast_syscall_32+0x34/0x80 [ 655.576761][T17142] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 655.576785][T17142] RIP: 0023:0xf7fd6539 [ 655.576802][T17142] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 655.576821][T17142] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 655.576843][T17142] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800005c0 [ 655.576858][T17142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.576870][T17142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 655.576882][T17142] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 655.576895][T17142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 655.576924][T17142] [ 655.655580][T14892] usb 2-1: Using ep0 maxpacket: 8 [ 655.885590][ T5911] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 655.954177][T17146] netlink: 'syz.4.3422': attribute type 10 has an invalid length. [ 655.966227][T17146] team0: Port device bridge0 removed [ 655.983359][T14892] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 656.004456][T14892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 656.018163][T14892] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 656.029195][T14892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.037772][T14892] usb 2-1: Product: syz [ 656.042197][T14892] usb 2-1: Manufacturer: syz [ 656.050641][T14892] usb 2-1: SerialNumber: syz [ 656.051227][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3423'. [ 656.068438][T14892] usb 2-1: config 0 descriptor?? [ 656.095558][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 656.102680][ T5911] usb 1-1: config 0 has an invalid interface number: 155 but max is 0 [ 656.111330][ T5911] usb 1-1: config 0 has no interface number 0 [ 656.118874][T14892] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 656.131513][ T5911] usb 1-1: config 0 interface 155 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 656.169688][ T5911] usb 1-1: New USB device found, idVendor=067b, idProduct=0609, bcdDevice=ea.ec [ 656.196880][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.205158][ T5911] usb 1-1: Product: syz [ 656.233688][ T5911] usb 1-1: Manufacturer: syz [ 656.238825][ T5911] usb 1-1: SerialNumber: syz [ 656.255882][ T5911] usb 1-1: config 0 descriptor?? [ 656.266256][T17140] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 656.330842][T14892] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 656.343163][T14892] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 656.357038][T14892] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 656.371328][T14892] usb 2-1: USB disconnect, device number 100 [ 656.392812][T17157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3426'. [ 656.431687][T17157] bond0: entered promiscuous mode [ 656.438690][T17157] bond_slave_0: entered promiscuous mode [ 656.448611][T17157] bond_slave_1: entered promiscuous mode [ 656.460396][T17157] bond0: left promiscuous mode [ 656.467716][T17157] bond_slave_0: left promiscuous mode [ 656.473640][T17157] bond_slave_1: left promiscuous mode [ 656.591828][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3429'. [ 656.700252][T17169] netlink: 528 bytes leftover after parsing attributes in process `syz.3.3431'. [ 656.881811][T17173] dvmrp0: entered allmulticast mode [ 657.094468][ T5911] pl2303 1-1:0.155: required endpoints missing [ 657.128060][ T5911] usb 1-1: USB disconnect, device number 126 [ 657.696944][T17195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3440'. [ 657.742454][T17195] bond0: entered promiscuous mode [ 657.770005][T17195] bond_slave_0: entered promiscuous mode [ 657.780328][T17195] bond_slave_1: entered promiscuous mode [ 657.797497][T17195] bond0: left promiscuous mode [ 657.802337][T17195] bond_slave_0: left promiscuous mode [ 657.816014][T17195] bond_slave_1: left promiscuous mode [ 657.946158][ T5911] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 658.085625][ T5911] usb 5-1: device descriptor read/64, error -71 [ 658.250612][T17219] __nla_validate_parse: 2 callbacks suppressed [ 658.250630][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'. [ 658.338274][ T5830] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 658.346676][ T5911] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 658.495665][T13381] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 658.505531][ T5911] usb 5-1: device descriptor read/64, error -71 [ 658.516139][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 658.526808][ T5830] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 658.547393][ T5830] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 658.565908][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 658.579739][ T5830] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 658.590868][ T5830] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.615168][ T5830] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 658.625266][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.637492][ T5911] usb usb5-port1: attempt power cycle [ 658.645606][T13381] usb 1-1: device descriptor read/64, error -71 [ 658.861637][ T5830] usb 4-1: GET_CAPABILITIES returned 0 [ 658.875544][T14892] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 658.875764][ T5830] usbtmc 4-1:16.0: can't read capabilities [ 658.895553][T13381] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 658.985523][ T5911] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 659.006189][ T5911] usb 5-1: device descriptor read/8, error -71 [ 659.025654][T14892] usb 2-1: Using ep0 maxpacket: 8 [ 659.036404][T14892] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 659.050337][T14892] usb 2-1: config 0 has no interface number 1 [ 659.065235][T14892] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 659.065867][T13381] usb 1-1: device descriptor read/64, error -71 [ 659.089323][T14892] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 659.111203][T14892] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 659.134667][T14892] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 659.153725][T14892] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 659.176937][T14892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 659.196156][T13381] usb usb1-port1: attempt power cycle [ 659.205884][T14892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 659.226443][T14892] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 659.240667][T14892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.245596][ T5911] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 659.256609][T14892] usb 2-1: Product: syz [ 659.261217][T14892] usb 2-1: Manufacturer: syz [ 659.269980][T14892] usb 2-1: SerialNumber: syz [ 659.286390][ T5911] usb 5-1: device descriptor read/8, error -71 [ 659.295599][T14892] usb 2-1: config 0 descriptor?? [ 659.305684][T17228] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 659.326570][T17240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3450'. [ 659.328477][T14892] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.368728][T14892] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 659.407255][ T5911] usb usb5-port1: unable to enumerate USB device [ 659.453030][T14892] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 659.521775][T14892] usb 2-1: USB disconnect, device number 101 [ 659.546042][T13381] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 659.566745][T13381] usb 1-1: device descriptor read/8, error -71 [ 659.805601][T13381] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 659.814699][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3457'. [ 659.826424][T13381] usb 1-1: device descriptor read/8, error -71 [ 659.868387][T17244] netlink: 528 bytes leftover after parsing attributes in process `syz.5.3458'. [ 659.920119][T17246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3459'. [ 659.934206][T17246] bond0: entered promiscuous mode [ 659.940394][T13381] usb usb1-port1: unable to enumerate USB device [ 659.946659][T17246] bond_slave_0: entered promiscuous mode [ 659.953098][T17246] bond_slave_1: entered promiscuous mode [ 659.960141][T17246] bond0: left promiscuous mode [ 659.965087][T17246] bond_slave_0: left promiscuous mode [ 659.970999][T17246] bond_slave_1: left promiscuous mode [ 660.108759][T17250] netlink: 'syz.5.3461': attribute type 10 has an invalid length. [ 660.119602][T17250] team0: Port device bridge0 removed [ 660.196074][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3462'. [ 660.530876][T13381] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 660.686840][T13381] usb 2-1: Using ep0 maxpacket: 8 [ 660.703102][T13381] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 660.715716][T14892] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 660.729419][T13381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.738472][T13381] usb 2-1: Product: syz [ 660.742809][T13381] usb 2-1: Manufacturer: syz [ 660.751613][T13381] usb 2-1: SerialNumber: syz [ 660.766244][T13381] usb 2-1: config 0 descriptor?? [ 660.796369][T13381] gspca_main: se401-2.14.0 probing 047d:5003 [ 660.875620][T14892] usb 5-1: Using ep0 maxpacket: 16 [ 660.882940][T14892] usb 5-1: config 0 has no interfaces? [ 660.889291][T14892] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 660.899117][T14892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.920263][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 660.920280][ T30] audit: type=1326 audit(1767848024.165:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.5.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 660.952492][T14892] usb 5-1: config 0 descriptor?? [ 660.957930][ T30] audit: type=1326 audit(1767848024.195:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.5.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 660.984962][T17272] netlink: 'syz.5.3469': attribute type 5 has an invalid length. [ 660.999658][ T30] audit: type=1326 audit(1767848024.195:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.5.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 661.022779][ T30] audit: type=1326 audit(1767848024.195:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.5.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 661.045636][ T30] audit: type=1326 audit(1767848024.205:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.5.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 661.075200][ T30] audit: type=1326 audit(1767848024.235:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.5.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 661.098945][ T30] audit: type=1326 audit(1767848024.235:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.5.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 661.122485][ T30] audit: type=1326 audit(1767848024.235:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.5.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 661.155576][ T30] audit: type=1326 audit(1767848024.235:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.5.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 661.178879][ T30] audit: type=1326 audit(1767848024.235:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17268 comm="syz.5.3469" exe="/root/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 661.200740][T17258] x_tables: duplicate underflow at hook 3 [ 661.299630][T14892] usb 5-1: USB disconnect, device number 117 [ 661.417994][T13381] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input86 [ 661.620666][ T5911] usb 2-1: USB disconnect, device number 102 [ 661.938462][T17287] netlink: 528 bytes leftover after parsing attributes in process `syz.4.3473'. [ 662.007474][T17289] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3474'. [ 662.032307][T17289] bond0: entered promiscuous mode [ 662.042638][T17289] bond_slave_0: entered promiscuous mode [ 662.051620][T17289] bond_slave_1: entered promiscuous mode [ 662.062341][T17289] bond0: left promiscuous mode [ 662.067280][T17289] bond_slave_0: left promiscuous mode [ 662.074603][T17289] bond_slave_1: left promiscuous mode [ 662.267687][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 662.326616][T17291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3475'. [ 662.336829][T17291] sctp: [Deprecated]: syz.1.3475 (pid 17291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 662.336829][T17291] Use struct sctp_sack_info instead [ 662.366512][T17295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3476'. [ 662.427810][T17295] bond0: entered promiscuous mode [ 662.437821][T17295] bond_slave_0: entered promiscuous mode [ 662.456301][T17295] bond_slave_1: entered promiscuous mode [ 662.475268][T17295] bond0: left promiscuous mode [ 662.495624][T17295] bond_slave_0: left promiscuous mode [ 662.501345][T17295] bond_slave_1: left promiscuous mode [ 662.625725][ T5911] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 662.795523][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 662.803416][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short [ 662.816813][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.835605][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 662.854871][ T5911] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 662.896258][ T5911] usb 2-1: language id specifier not provided by device, defaulting to English [ 662.917615][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.945541][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.965333][ T5911] usb 2-1: Product: syz [ 662.976381][ T5911] usb 2-1: Manufacturer: 屛뗝⏱钆睚É띔矚鰾娔셢莕ῗൡ蘥뜴㤊䤎眑鬤陃ꦂ缳Ἅ㝡䇌뮣踛磬曣㜛⍑ [ 663.015523][ T5911] usb 2-1: SerialNumber: syz [ 663.269212][ T5911] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 663.279001][ T5911] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 663.306587][ T5911] cdc_ncm 2-1:1.0: bind() failure [ 663.427407][ T5911] usb 2-1: USB disconnect, device number 103 [ 663.985553][ T5911] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 663.996133][T17319] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 664.030727][T17319] team0: Device macvtap1 is already an upper device of the team interface [ 664.106195][T17217] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 664.116545][T17238] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 664.137839][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.149868][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.179782][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 664.243379][ T5911] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 664.269474][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.294121][ T5911] usb 1-1: config 0 descriptor?? [ 664.356212][T14892] usb 4-1: USB disconnect, device number 94 [ 664.663548][T17334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3491'. [ 664.681927][T17334] bond0: entered promiscuous mode [ 664.687598][T17334] bond_slave_0: entered promiscuous mode [ 664.695836][T17334] bond_slave_1: entered promiscuous mode [ 664.705659][T17334] bond0: left promiscuous mode [ 664.710469][T17334] bond_slave_0: left promiscuous mode [ 664.719833][T17334] bond_slave_1: left promiscuous mode [ 664.759992][ T5911] usbhid 1-1:0.0: can't add hid device: -71 [ 664.774750][ T5911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 664.807339][ T5911] usb 1-1: USB disconnect, device number 5 [ 664.967701][T17348] input: syz0 as /devices/virtual/input/input87 [ 665.075538][T13381] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 665.285838][ T5911] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 665.307597][T13381] usb 6-1: too many configurations: 131, using maximum allowed: 8 [ 665.317547][T13381] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 665.325114][T13381] usb 6-1: can't read configurations, error -61 [ 665.455517][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 665.744064][ T5911] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 665.765575][ T5911] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 665.790775][ T5911] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 665.806113][ T5911] usb 5-1: Product: syz [ 665.815509][ T5911] usb 5-1: Manufacturer: syz [ 665.825500][ T5911] usb 5-1: SerialNumber: syz [ 665.837612][ T5911] usb 5-1: config 0 descriptor?? [ 665.873299][T17358] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 665.949797][T13381] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 666.035523][T14892] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 666.076186][ T5911] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 666.083326][ T5911] gspca_sunplus: reg_w_riv err -71 [ 666.100427][ T5911] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 666.109797][T13381] usb 6-1: too many configurations: 131, using maximum allowed: 8 [ 666.123905][T13381] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 666.137970][T13381] usb 6-1: can't read configurations, error -61 [ 666.150773][ T5911] usb 5-1: USB disconnect, device number 118 [ 666.160482][T13381] usb usb6-port1: attempt power cycle [ 666.205692][T14892] usb 4-1: Using ep0 maxpacket: 16 [ 666.212574][T14892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.226404][T14892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.237129][T14892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 666.250373][T14892] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 666.269507][T14892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.286350][T14892] usb 4-1: config 0 descriptor?? [ 666.505638][T13381] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 666.546834][T13381] usb 6-1: too many configurations: 131, using maximum allowed: 8 [ 666.856772][T13381] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 666.895539][T13381] usb 6-1: can't read configurations, error -61 [ 667.035050][T13381] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 667.105905][T17376] random: crng reseeded on system resumption [ 667.135627][T13381] usb 6-1: too many configurations: 131, using maximum allowed: 8 [ 667.136841][T17376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.195294][T13381] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 667.197641][T17376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.278598][T17367] fuse: Bad value for 'fd' [ 667.453025][T13381] usb 6-1: can't read configurations, error -61 [ 667.509855][T17382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3506'. [ 667.525075][T17382] bond0: entered promiscuous mode [ 667.530528][T17382] bond_slave_0: entered promiscuous mode [ 667.539270][T17382] bond_slave_1: entered promiscuous mode [ 667.570555][T14892] usbhid 4-1:0.0: can't add hid device: -71 [ 667.580476][T14892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 667.591362][T17382] bond0: left promiscuous mode [ 667.603422][T13381] usb usb6-port1: unable to enumerate USB device [ 667.605104][T14892] usb 4-1: USB disconnect, device number 95 [ 667.618499][T17382] bond_slave_0: left promiscuous mode [ 667.625152][T17382] bond_slave_1: left promiscuous mode [ 667.955995][T14892] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 667.990167][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3508'. [ 668.118080][T14892] usb 4-1: config 1 has an invalid descriptor of length 209, skipping remainder of the config [ 668.135028][T17395] netlink: 'syz.5.3512': attribute type 10 has an invalid length. [ 668.135521][T14892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 668.177247][T14892] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 668.193718][T14892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.210320][T14892] usb 4-1: Product:  [ 668.214654][T14892] usb 4-1: Manufacturer: ᒉ灊쨊咳㫫 [ 668.229729][T14892] usb 4-1: SerialNumber: syz [ 668.777064][T14892] usb 4-1: 0:2 : does not exist [ 668.836268][T14892] usb 4-1: USB disconnect, device number 96 [ 668.883237][ T6236] udevd[6236]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.281351][T17413] input: syz0 as /devices/virtual/input/input88 [ 669.394878][T17418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3520'. [ 669.536014][T17415] input: syz0 as /devices/virtual/input/input89 [ 669.757875][ T5911] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 669.905523][ T5911] usb 4-1: device descriptor read/64, error -71 [ 670.142061][T17438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3527'. [ 670.155530][ T5911] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 670.285537][ T5911] usb 4-1: device descriptor read/64, error -71 [ 670.396031][ T5911] usb usb4-port1: attempt power cycle [ 671.086740][ T5911] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 671.116708][ T5911] usb 4-1: device descriptor read/8, error -71 [ 671.367638][ T5911] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 671.398257][ T5911] usb 4-1: device descriptor read/8, error -71 [ 671.443883][T17464] netlink: 528 bytes leftover after parsing attributes in process `syz.1.3535'. [ 671.526037][ T5911] usb usb4-port1: unable to enumerate USB device [ 671.621187][T17456] input: syz0 as /devices/virtual/input/input90 [ 671.741127][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3541'. [ 672.070787][T17493] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3546'. [ 672.105722][ T5911] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 672.425687][ T5911] usb 6-1: Using ep0 maxpacket: 8 [ 672.432981][ T5911] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=e2.f2 [ 672.442399][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.450652][T17502] netlink: 'syz.1.3549': attribute type 10 has an invalid length. [ 672.469448][ T5911] usb 6-1: config 0 descriptor?? [ 672.573549][T17505] netlink: 528 bytes leftover after parsing attributes in process `syz.3.3550'. [ 672.692313][T17486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.701054][T17486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.738231][T17486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.746886][T17486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.768621][ T5911] (null): keene_cmd_main failed (-71) [ 672.815601][ T5911] video4linux radio48: keene_cmd_main failed (-71) [ 672.827467][ T5911] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 673.021939][ T5911] usb 6-1: USB disconnect, device number 35 [ 673.579482][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'. [ 673.715060][T17535] syzkaller1: entered promiscuous mode [ 673.735739][T17535] syzkaller1: entered allmulticast mode [ 673.746220][T15494] usb 5-1: new full-speed USB device number 119 using dummy_hcd [ 673.799996][T17524] input: syz0 as /devices/virtual/input/input91 [ 673.886499][T15494] usb 5-1: device descriptor read/64, error -71 [ 673.930667][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3563'. [ 673.930692][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3563'. [ 673.930710][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3563'. [ 673.930728][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3563'. [ 674.150515][T15494] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 674.295518][T15494] usb 5-1: device descriptor read/64, error -71 [ 674.695164][T15494] usb usb5-port1: attempt power cycle [ 674.731213][T17559] fuse: Bad value for 'fd' [ 675.287265][T17568] __nla_validate_parse: 71 callbacks suppressed [ 675.287280][T17568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3568'. [ 675.530276][T15494] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 675.531435][T13381] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 675.586157][T15494] usb 5-1: device descriptor read/8, error -71 [ 675.734586][T13381] usb 2-1: device descriptor read/64, error -71 [ 675.835534][T15494] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 675.923175][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 675.986205][T13381] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 676.009643][T15494] usb 5-1: device descriptor read/8, error -71 [ 676.135565][T13381] usb 2-1: device descriptor read/64, error -71 [ 676.138681][T15494] usb usb5-port1: unable to enumerate USB device [ 676.285880][T13381] usb usb2-port1: attempt power cycle [ 676.371274][T17595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3580'. [ 676.486034][T17595] bond0: entered promiscuous mode [ 676.495226][T17599] netlink: 528 bytes leftover after parsing attributes in process `syz.4.3581'. [ 676.516526][T17595] bond_slave_0: entered promiscuous mode [ 676.543187][T17595] bond_slave_1: entered promiscuous mode [ 676.599482][T17595] bond0: left promiscuous mode [ 676.638567][T17595] bond_slave_0: left promiscuous mode [ 676.647523][T13381] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 676.656459][T17595] bond_slave_1: left promiscuous mode [ 676.696245][T13381] usb 2-1: device descriptor read/8, error -71 [ 676.956354][T13381] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 676.989186][T13381] usb 2-1: device descriptor read/8, error -71 [ 677.094517][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 677.106068][T13381] usb usb2-port1: unable to enumerate USB device [ 677.280377][T17626] netlink: 528 bytes leftover after parsing attributes in process `syz.5.3593'. [ 677.394241][T17634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3595'. [ 677.541981][T17641] ======================================================= [ 677.541981][T17641] WARNING: The mand mount option has been deprecated and [ 677.541981][T17641] and is ignored by this kernel. Remove the mand [ 677.541981][T17641] option from the mount to silence this warning. [ 677.541981][T17641] ======================================================= [ 677.588696][T17641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3598'. [ 677.626110][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 677.639855][T15494] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 677.705813][T14892] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 677.807123][T15494] usb 2-1: config 0 has no interfaces? [ 677.814669][T15494] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 677.823808][T15494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.833644][T15494] usb 2-1: Product: syz [ 677.837903][T15494] usb 2-1: Manufacturer: syz [ 677.842501][T15494] usb 2-1: SerialNumber: syz [ 677.857619][T15494] usb 2-1: config 0 descriptor?? [ 677.877422][T14892] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 677.887330][T14892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.900210][T14892] usb 1-1: config 0 descriptor?? [ 677.911389][T14892] gspca_main: spca508-2.14.0 probing 8086:0110 [ 678.075252][T17628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.093051][T17628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.113223][T14892] gspca_spca508: reg_read err -32 [ 678.119538][T17638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.130389][T17638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.139929][T14892] gspca_spca508: reg_read err -32 [ 678.196766][T17655] bond2: Removing last ns target with arp_interval on [ 678.288296][T15494] usb 2-1: USB disconnect, device number 108 [ 678.347243][T14892] gspca_spca508: reg_read err -71 [ 678.362054][T14892] gspca_spca508: reg_read err -71 [ 678.373957][T17659] input: syz1 as /devices/virtual/input/input92 [ 678.385771][T14892] gspca_spca508: reg write: error -71 [ 678.391172][T14892] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 678.452656][T14892] usb 1-1: USB disconnect, device number 6 [ 678.733761][T17672] netlink: 528 bytes leftover after parsing attributes in process `syz.3.3609'. [ 679.154091][T17687] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 679.367766][T13381] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 679.431483][T17694] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 679.444783][T17694] bond3 (unregistering): Released all slaves [ 679.549561][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3617'. [ 679.567489][T13381] usb 4-1: config 128 has no interfaces? [ 679.575580][T13381] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 679.600570][T13381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.621215][T13381] usb 4-1: Product: syz [ 679.625402][T13381] usb 4-1: Manufacturer: syz [ 679.638733][T17700] FAULT_INJECTION: forcing a failure. [ 679.638733][T17700] name failslab, interval 1, probability 0, space 0, times 0 [ 679.652443][T13381] usb 4-1: SerialNumber: syz [ 679.659656][T17700] CPU: 1 UID: 0 PID: 17700 Comm: syz.0.3618 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.659689][T17700] Tainted: [L]=SOFTLOCKUP [ 679.659697][T17700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.659709][T17700] Call Trace: [ 679.659717][T17700] [ 679.659725][T17700] dump_stack_lvl+0xe8/0x150 [ 679.659754][T17700] should_fail_ex+0x414/0x560 [ 679.659788][T17700] should_failslab+0xa8/0x100 [ 679.659813][T17700] __kmalloc_cache_noprof+0x84/0x700 [ 679.659831][T17700] ? sctp_v6_to_sk_saddr+0x100/0x1c0 [ 679.659860][T17700] ? sctp_association_new+0x89/0x25e0 [ 679.659879][T17700] ? __asan_memcpy+0x40/0x70 [ 679.659911][T17700] sctp_association_new+0x89/0x25e0 [ 679.659930][T17700] ? sctp_do_bind+0x65f/0x9d0 [ 679.659955][T17700] ? __ipv6_addr_type+0x118/0x2f0 [ 679.659987][T17700] sctp_connect_new_asoc+0x2c5/0x690 [ 679.660009][T17700] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 679.660035][T17700] ? __local_bh_enable_ip+0xd0/0x130 [ 679.660053][T17700] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 679.660073][T17700] ? security_sctp_bind_connect+0x7e/0x2e0 [ 679.660096][T17700] sctp_sendmsg+0x155c/0x2840 [ 679.660122][T17700] ? __pfx_sctp_sendmsg+0x10/0x10 [ 679.660139][T17700] ? aa_sk_perm+0x15f/0x920 [ 679.660163][T17700] ? aa_sk_perm+0x7ee/0x920 [ 679.660190][T17700] ? __pfx_aa_sk_perm+0x10/0x10 [ 679.660216][T17700] ? sock_rps_record_flow+0x19/0x410 [ 679.660242][T17700] ? inet_sendmsg+0x2f4/0x370 [ 679.660270][T17700] __sock_sendmsg+0x19c/0x270 [ 679.660300][T17700] ____sys_sendmsg+0x52d/0x820 [ 679.660328][T17700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.660365][T17700] ___sys_sendmsg+0x21f/0x2a0 [ 679.660398][T17700] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.660419][T17700] ? kstrtoull+0x12f/0x1d0 [ 679.660450][T17700] ? kstrtouint+0x6e/0xe0 [ 679.660501][T17700] ? __fget_files+0x2a/0x420 [ 679.660524][T17700] ? __fget_files+0x3a0/0x420 [ 679.660557][T17700] __sys_sendmmsg+0x28e/0x430 [ 679.660584][T17700] ? __pfx___sys_sendmmsg+0x10/0x10 [ 679.660606][T17700] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 679.660649][T17700] ? ksys_write+0x22a/0x250 [ 679.660671][T17700] ? __pfx_ksys_write+0x10/0x10 [ 679.660696][T17700] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 679.660725][T17700] __do_fast_syscall_32+0x1dc/0x570 [ 679.660747][T17700] ? lockdep_hardirqs_on+0x7b/0x110 [ 679.660764][T17700] ? do_fast_syscall_32+0x34/0x80 [ 679.660784][T17700] ? irqentry_exit+0x10f/0x670 [ 679.660808][T17700] do_fast_syscall_32+0x34/0x80 [ 679.660830][T17700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 679.660854][T17700] RIP: 0023:0xf7f72539 [ 679.660870][T17700] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 679.660887][T17700] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 679.660908][T17700] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002580 [ 679.660923][T17700] RDX: 0000000000000001 RSI: 0000000004000040 RDI: 0000000000000000 [ 679.660934][T17700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.660946][T17700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 679.660958][T17700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.660986][T17700] [ 679.986274][T17677] ipvlan0: entered promiscuous mode [ 680.079976][T13381] usb 4-1: USB disconnect, device number 101 [ 680.394852][T17720] macvlan0: entered promiscuous mode [ 680.635598][T15494] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 680.922139][T17730] __nla_validate_parse: 3 callbacks suppressed [ 680.922158][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3631'. [ 680.937371][T15494] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 680.946855][T15494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.047655][T15494] usb 2-1: config 0 descriptor?? [ 681.056107][T15494] cp210x 2-1:0.0: cp210x converter detected [ 681.142681][T17733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.164801][T13381] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 681.205015][T17733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.225410][T17735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3632'. [ 681.290250][T15494] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 681.313221][T15494] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 681.331235][T13381] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 681.342396][T15494] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 681.371314][T13381] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 681.382078][ T5911] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 681.392542][T15494] usb 2-1: cp210x converter now attached to ttyUSB0 [ 681.416588][T13381] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 681.439331][T13381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.452852][T15494] usb 2-1: USB disconnect, device number 109 [ 681.472372][T17728] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 681.491297][T13381] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.506416][T15494] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 681.529617][T17744] netlink: 528 bytes leftover after parsing attributes in process `syz.1.3635'. [ 681.536766][T15494] cp210x 2-1:0.0: device disconnected [ 682.089404][T13381] usb 5-1: USB disconnect, device number 123 [ 682.118030][T17761] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 682.289756][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3643'. [ 682.645661][T17775] FAULT_INJECTION: forcing a failure. [ 682.645661][T17775] name failslab, interval 1, probability 0, space 0, times 0 [ 682.677851][T17775] CPU: 1 UID: 0 PID: 17775 Comm: syz.5.3646 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.677883][T17775] Tainted: [L]=SOFTLOCKUP [ 682.677891][T17775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.677903][T17775] Call Trace: [ 682.677911][T17775] [ 682.677919][T17775] dump_stack_lvl+0xe8/0x150 [ 682.677950][T17775] should_fail_ex+0x414/0x560 [ 682.677986][T17775] should_failslab+0xa8/0x100 [ 682.678011][T17775] __kmalloc_cache_noprof+0x84/0x700 [ 682.678030][T17775] ? __genradix_ptr_alloc+0x463/0x4a0 [ 682.678056][T17775] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 682.678089][T17775] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 682.678125][T17775] sctp_association_new+0x15d3/0x25e0 [ 682.678159][T17775] sctp_connect_new_asoc+0x2c5/0x690 [ 682.678182][T17775] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 682.678208][T17775] ? __local_bh_enable_ip+0xd0/0x130 [ 682.678226][T17775] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 682.678246][T17775] ? security_sctp_bind_connect+0x7e/0x2e0 [ 682.678270][T17775] sctp_sendmsg+0x155c/0x2840 [ 682.678301][T17775] ? __pfx_sctp_sendmsg+0x10/0x10 [ 682.678318][T17775] ? aa_sk_perm+0x15f/0x920 [ 682.678343][T17775] ? aa_sk_perm+0x7ee/0x920 [ 682.678371][T17775] ? __pfx_aa_sk_perm+0x10/0x10 [ 682.678396][T17775] ? sock_rps_record_flow+0x19/0x410 [ 682.678424][T17775] ? inet_sendmsg+0x2f4/0x370 [ 682.678451][T17775] __sock_sendmsg+0x19c/0x270 [ 682.678488][T17775] ____sys_sendmsg+0x52d/0x820 [ 682.678516][T17775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.678555][T17775] ___sys_sendmsg+0x21f/0x2a0 [ 682.678581][T17775] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.678604][T17775] ? kstrtoull+0x12f/0x1d0 [ 682.678636][T17775] ? kstrtouint+0x6e/0xe0 [ 682.678691][T17775] ? __fget_files+0x2a/0x420 [ 682.678714][T17775] ? __fget_files+0x3a0/0x420 [ 682.678749][T17775] __sys_sendmmsg+0x28e/0x430 [ 682.678778][T17775] ? __pfx___sys_sendmmsg+0x10/0x10 [ 682.678799][T17775] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 682.678849][T17775] ? ksys_write+0x22a/0x250 [ 682.678869][T17775] ? __pfx_ksys_write+0x10/0x10 [ 682.678895][T17775] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 682.678923][T17775] __do_fast_syscall_32+0x1dc/0x570 [ 682.678945][T17775] ? lockdep_hardirqs_on+0x7b/0x110 [ 682.678962][T17775] ? do_fast_syscall_32+0x34/0x80 [ 682.678983][T17775] ? irqentry_exit+0x10f/0x670 [ 682.679007][T17775] do_fast_syscall_32+0x34/0x80 [ 682.679030][T17775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 682.679054][T17775] RIP: 0023:0xf70bd539 [ 682.679072][T17775] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 682.679090][T17775] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 682.679112][T17775] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002580 [ 682.679125][T17775] RDX: 0000000000000001 RSI: 0000000004000040 RDI: 0000000000000000 [ 682.679137][T17775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 682.679149][T17775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 682.679160][T17775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 682.679188][T17775] [ 682.680582][T17778] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3647'. [ 683.011974][T17778] bond0: entered promiscuous mode [ 683.017159][T17778] bond_slave_0: entered promiscuous mode [ 683.023046][T17778] bond_slave_1: entered promiscuous mode [ 683.035097][T17778] bond0: left promiscuous mode [ 683.042465][T17778] bond_slave_0: left promiscuous mode [ 683.050702][T17778] bond_slave_1: left promiscuous mode [ 683.266696][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 683.266715][ T30] audit: type=1326 audit(1767848046.485:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.5.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 683.298455][ T30] audit: type=1326 audit(1767848046.485:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.5.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 683.332852][ T30] audit: type=1326 audit(1767848046.485:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.5.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 683.356025][ T30] audit: type=1326 audit(1767848046.485:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.5.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 683.394567][ T30] audit: type=1326 audit(1767848046.485:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.5.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 683.419898][ T30] audit: type=1326 audit(1767848046.485:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.5.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 683.447971][ T30] audit: type=1326 audit(1767848046.485:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.5.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 683.477999][ T30] audit: type=1326 audit(1767848046.485:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.5.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 683.581568][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'. [ 683.611518][T17789] netlink: 528 bytes leftover after parsing attributes in process `syz.4.3650'. [ 683.634186][ T30] audit: type=1326 audit(1767848046.485:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.5.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 683.702763][ T30] audit: type=1326 audit(1767848046.485:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17779 comm="syz.5.3648" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 683.921626][T14892] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 684.095545][T14892] usb 2-1: Using ep0 maxpacket: 8 [ 684.104505][T14892] usb 2-1: config 0 has an invalid interface number: 38 but max is 0 [ 684.112685][T14892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.122933][T14892] usb 2-1: config 0 has no interface number 0 [ 684.131170][T14892] usb 2-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 684.389864][T14892] usb 2-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 684.415414][T14892] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 684.424732][T14892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.433014][T14892] usb 2-1: Product: syz [ 684.437283][T14892] usb 2-1: Manufacturer: syz [ 684.452239][T14892] usb 2-1: SerialNumber: syz [ 684.465133][T14892] usb 2-1: config 0 descriptor?? [ 684.479070][T14892] xbox_remote_probe: Unexpected endpoint_in [ 684.541359][T17803] fuse: Bad value for 'fd' [ 684.650785][T17814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3661'. [ 684.676810][T17814] bond0: entered promiscuous mode [ 684.688124][T17814] bond_slave_0: entered promiscuous mode [ 684.696993][T17814] bond_slave_1: entered promiscuous mode [ 684.701272][T17791] cifs: Unknown parameter 'f,' [ 684.707650][T17814] bond0: left promiscuous mode [ 684.712530][T17814] bond_slave_0: left promiscuous mode [ 684.722777][T17814] bond_slave_1: left promiscuous mode [ 684.734873][ T5911] usb 2-1: USB disconnect, device number 110 [ 685.725582][T15494] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 685.733862][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3664'. [ 685.806408][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.812861][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.895901][T15494] usb 1-1: Using ep0 maxpacket: 8 [ 685.904382][T15494] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 685.936466][T15494] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 685.959503][T15494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 685.986866][T15494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 686.015549][T15494] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.041519][T15494] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 686.060047][T15494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.210311][T15494] usb 1-1: Product: syz [ 686.214955][T15494] usb 1-1: Manufacturer: syz [ 686.220147][T15494] usb 1-1: SerialNumber: syz [ 686.222502][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'. [ 686.496434][T15494] usb 1-1: config 0 descriptor?? [ 686.496715][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 686.513567][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.522050][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.532180][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.542298][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 686.741472][T17839] macvlan0: entered promiscuous mode [ 686.762312][T15494] iowarrior 1-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 686.909501][T15494] usb 1-1: USB disconnect, device number 7 [ 687.032015][ T68] bridge_slave_1: left allmulticast mode [ 687.040780][ T68] bridge_slave_1: left promiscuous mode [ 687.061130][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.479884][ T68] bridge_slave_0: left allmulticast mode [ 687.597766][ T68] bridge_slave_0: left promiscuous mode [ 687.605842][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.618841][T17832] input: syz0 as /devices/virtual/input/input93 [ 688.167623][T17851] fuse: Bad value for 'fd' [ 688.461602][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.564109][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.576181][ T68] bond0 (unregistering): Released all slaves [ 688.586400][T14707] Bluetooth: hci0: command tx timeout [ 688.606946][ T68] bond1 (unregistering): (slave lo): Releasing backup interface [ 688.628718][ T68] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 688.712545][ T68] bond1 (unregistering): Released all slaves [ 688.741251][ T68] bond2 (unregistering): Released all slaves [ 688.927237][T17861] bond1: Removing last ns target with arp_interval on [ 689.128023][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3678'. [ 689.838180][T17879] FAULT_INJECTION: forcing a failure. [ 689.838180][T17879] name failslab, interval 1, probability 0, space 0, times 0 [ 689.851468][T17879] CPU: 0 UID: 0 PID: 17879 Comm: syz.4.3681 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.851500][T17879] Tainted: [L]=SOFTLOCKUP [ 689.851508][T17879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 689.851521][T17879] Call Trace: [ 689.851529][T17879] [ 689.851538][T17879] dump_stack_lvl+0xe8/0x150 [ 689.851568][T17879] should_fail_ex+0x414/0x560 [ 689.851603][T17879] should_failslab+0xa8/0x100 [ 689.851628][T17879] __kmalloc_cache_noprof+0x84/0x700 [ 689.851649][T17879] ? sctp_add_bind_addr+0x8c/0x370 [ 689.851682][T17879] sctp_add_bind_addr+0x8c/0x370 [ 689.851712][T17879] sctp_copy_local_addr_list+0x30b/0x4e0 [ 689.851743][T17879] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 689.851774][T17879] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 689.851802][T17879] ? sctp_v6_is_any+0x64/0x80 [ 689.851838][T17879] ? sctp_copy_one_addr+0x93/0x360 [ 689.851868][T17879] sctp_bind_addr_copy+0x189/0x3c0 [ 689.851901][T17879] sctp_connect_new_asoc+0x2e0/0x690 [ 689.851925][T17879] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 689.851952][T17879] ? __local_bh_enable_ip+0xd0/0x130 [ 689.851971][T17879] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 689.851992][T17879] ? security_sctp_bind_connect+0x7e/0x2e0 [ 689.852016][T17879] sctp_sendmsg+0x155c/0x2840 [ 689.852047][T17879] ? __pfx_sctp_sendmsg+0x10/0x10 [ 689.852064][T17879] ? aa_sk_perm+0x15f/0x920 [ 689.852089][T17879] ? aa_sk_perm+0x7ee/0x920 [ 689.852117][T17879] ? __pfx_aa_sk_perm+0x10/0x10 [ 689.852143][T17879] ? sock_rps_record_flow+0x19/0x410 [ 689.852172][T17879] ? inet_sendmsg+0x2f4/0x370 [ 689.852201][T17879] __sock_sendmsg+0x19c/0x270 [ 689.852232][T17879] ____sys_sendmsg+0x52d/0x820 [ 689.852258][T17879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.852291][T17879] ___sys_sendmsg+0x21f/0x2a0 [ 689.852315][T17879] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.852332][T17879] ? kstrtoull+0x12f/0x1d0 [ 689.852360][T17879] ? kstrtouint+0x6e/0xe0 [ 689.852411][T17879] ? __fget_files+0x2a/0x420 [ 689.852433][T17879] ? __fget_files+0x3a0/0x420 [ 689.852464][T17879] __sys_sendmmsg+0x28e/0x430 [ 689.852492][T17879] ? __pfx___sys_sendmmsg+0x10/0x10 [ 689.852523][T17879] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 689.852579][T17879] ? ksys_write+0x22a/0x250 [ 689.852599][T17879] ? __pfx_ksys_write+0x10/0x10 [ 689.852629][T17879] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 689.852657][T17879] __do_fast_syscall_32+0x1dc/0x570 [ 689.852678][T17879] ? lockdep_hardirqs_on+0x7b/0x110 [ 689.852696][T17879] ? do_fast_syscall_32+0x34/0x80 [ 689.852718][T17879] ? irqentry_exit+0x10f/0x670 [ 689.852742][T17879] do_fast_syscall_32+0x34/0x80 [ 689.852763][T17879] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 689.852786][T17879] RIP: 0023:0xf7fd6539 [ 689.852802][T17879] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 689.852825][T17879] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 689.852845][T17879] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002580 [ 689.852859][T17879] RDX: 0000000000000001 RSI: 0000000004000040 RDI: 0000000000000000 [ 689.852872][T17879] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 689.852883][T17879] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 689.852895][T17879] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 689.852921][T17879] [ 690.317978][T17886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3682'. [ 690.479940][T17838] chnl_net:caif_netlink_parms(): no params data found [ 690.537677][ T68] hsr_slave_0: left promiscuous mode [ 690.564033][ T68] hsr_slave_1: left promiscuous mode [ 690.569661][T17894] fuse: Bad value for 'fd' [ 690.570213][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.581247][T13381] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 690.613098][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.666930][T14707] Bluetooth: hci0: command tx timeout [ 690.737502][T13381] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 690.780146][T13381] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 690.795666][T13381] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 690.832956][T13381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.871307][T17885] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 690.893397][T13381] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 691.125489][T17897] input: syz0 as /devices/virtual/input/input94 [ 691.328103][T15494] usb 5-1: USB disconnect, device number 124 [ 691.514675][ T68] team0 (unregistering): Port device team_slave_1 removed [ 691.627171][ T68] team0 (unregistering): Port device team_slave_0 removed [ 692.730729][T17900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3687'. [ 692.740551][T17902] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 692.746054][T14707] Bluetooth: hci0: command tx timeout [ 692.985624][T14707] Bluetooth: hci2: command 0x0406 tx timeout [ 692.996611][T17941] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3693'. [ 693.061304][T17941] bond0: entered promiscuous mode [ 693.066882][T17941] bond_slave_0: entered promiscuous mode [ 693.073489][T17941] bond_slave_1: entered promiscuous mode [ 693.102927][T17941] bond0: left promiscuous mode [ 693.109530][T17941] bond_slave_0: left promiscuous mode [ 693.115336][T17941] bond_slave_1: left promiscuous mode [ 693.271594][T17838] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.288425][T17838] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.399046][T17838] bridge_slave_0: entered allmulticast mode [ 693.416820][T17838] bridge_slave_0: entered promiscuous mode [ 693.507556][T17955] fuse: Bad value for 'fd' [ 693.562454][T17949] bond2: Removing last ns target with arp_interval on [ 693.602676][T17838] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.610484][T17838] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.644478][T17838] bridge_slave_1: entered allmulticast mode [ 693.663278][T17838] bridge_slave_1: entered promiscuous mode [ 693.829013][T17838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.873295][T17838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.009566][T17838] team0: Port device team_slave_0 added [ 694.018979][T17838] team0: Port device team_slave_1 added [ 694.062850][T17838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.074669][T17838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.145569][T17838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.157704][T17838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.164656][T17838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.294341][T17838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.493119][T17838] hsr_slave_0: entered promiscuous mode [ 694.518580][T17838] hsr_slave_1: entered promiscuous mode [ 694.835643][ T5835] Bluetooth: hci0: command tx timeout [ 695.644229][T17963] input: syz0 as /devices/virtual/input/input95 [ 695.768742][ T5915] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 695.887648][T17838] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 695.921817][T17838] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 695.945535][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 695.954645][ T5915] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 695.966218][T17838] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 695.987125][ T5915] usb 2-1: config 0 has no interface number 0 [ 696.004872][ T5915] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 696.024945][T17838] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 696.033490][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.053404][ T5915] usb 2-1: Product: syz [ 696.063518][ T5915] usb 2-1: Manufacturer: syz [ 696.078778][ T5915] usb 2-1: SerialNumber: syz [ 696.094752][ T5915] usb 2-1: config 0 descriptor?? [ 696.119078][ T5915] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 696.135541][ T5915] pctv452e: pctv452e_power_ctrl: 1 [ 696.135541][ T5915] [ 696.155598][ T5915] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 696.155598][ T5915] [ 696.178843][T17998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3704'. [ 696.195814][ T5915] dvb-usb: bulk message failed: -22 (5/0) [ 696.214477][ T5915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 696.263701][ T5915] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 696.290261][ T5915] usb 2-1: media controller created [ 696.315313][ T5915] dvb-usb: bulk message failed: -22 (8/0) [ 696.349210][ T5915] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 696.380934][ T5915] dvb-usb: MAC address reading failed. [ 696.430445][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 696.465164][T17838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.845098][T17838] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.882682][ T5915] DVB: Unable to find symbol stb0899_attach() [ 696.895285][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.895880][ T5915] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 696.902504][ T6480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.018838][T18026] ip6t_REJECT: ECHOREPLY is not supported [ 697.043065][T18029] netlink: 'syz.0.3708': attribute type 10 has an invalid length. [ 697.389320][T18029] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.396441][T18029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.403974][T18029] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.411163][T18029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.437387][T18029] team0: Port device bridge0 added [ 697.503063][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.510291][ T6480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.565565][ T5915] rc_core: IR keymap rc-tt-1500 not found [ 697.698563][ T5915] Registered IR keymap rc-empty [ 697.719881][ T5915] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 698.002455][ T5915] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input96 [ 698.043554][ T5915] dvb-usb: schedule remote query interval to 100 msecs. [ 698.051151][ T5915] pctv452e: pctv452e_power_ctrl: 0 [ 698.051151][ T5915] [ 698.070541][ T5915] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 698.088196][T17838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.157841][ T5915] dvb-usb: bulk message failed: -22 (4/0) [ 698.165754][ T5915] dvb-usb: error -22 while querying for an remote control event. [ 698.232329][T18035] fuse: Bad value for 'fd' [ 698.331310][T17838] veth0_vlan: entered promiscuous mode [ 698.339794][T18037] input: syz1 as /devices/virtual/input/input97 [ 698.401197][ T5915] dvb-usb: bulk message failed: -22 (4/0) [ 698.417306][ T5915] dvb-usb: error -22 while querying for an remote control event. [ 698.483743][T17838] veth1_vlan: entered promiscuous mode [ 698.537375][T18037] netlink: 'syz.0.3709': attribute type 1 has an invalid length. [ 698.547790][ T5915] dvb-usb: bulk message failed: -22 (4/0) [ 698.555969][ T5915] dvb-usb: error -22 while querying for an remote control event. [ 698.838051][T15494] dvb-usb: bulk message failed: -22 (4/0) [ 698.843899][T15494] dvb-usb: error -22 while querying for an remote control event. [ 698.877626][T17838] veth0_macvtap: entered promiscuous mode [ 698.893218][T17838] veth1_macvtap: entered promiscuous mode [ 699.005143][T17838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.006824][T15494] dvb-usb: bulk message failed: -22 (4/0) [ 699.208172][T17838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.318369][T15414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.357485][T15494] dvb-usb: error -22 while querying for an remote control event. [ 699.366241][T15414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.411344][T15414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.435398][T15414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.472873][T18047] Invalid argument reading file caps for ./file0 [ 699.528452][T15494] dvb-usb: bulk message failed: -22 (4/0) [ 699.562604][T15494] dvb-usb: error -22 while querying for an remote control event. [ 699.583505][T13381] usb 2-1: USB disconnect, device number 111 [ 699.745117][T13381] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 699.834907][ T5975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.859747][ T5975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.875952][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 700.017164][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.043693][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.095580][T13381] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 700.255496][T13381] usb 2-1: Using ep0 maxpacket: 16 [ 700.264312][T13381] usb 2-1: config 0 has no interfaces? [ 700.271768][T13381] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 700.291017][T13381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.334200][T13381] usb 2-1: config 0 descriptor?? [ 700.336152][T15494] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 700.486409][T15494] usb 5-1: device descriptor read/64, error -71 [ 700.590261][T18082] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 700.677671][ T5915] usb 2-1: USB disconnect, device number 112 [ 700.735754][T15494] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 700.772691][T18060] input: syz0 as /devices/virtual/input/input98 [ 700.875595][T15494] usb 5-1: device descriptor read/64, error -71 [ 700.987277][T15494] usb usb5-port1: attempt power cycle [ 700.996298][ T5911] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 701.167393][ T5911] usb 7-1: config 0 has no interfaces? [ 701.172993][ T5911] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 701.199308][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.243451][ T5911] usb 7-1: config 0 descriptor?? [ 701.326127][T15494] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 701.346078][T15494] usb 5-1: device descriptor read/8, error -71 [ 701.440430][T18103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3720'. [ 701.497843][T18105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3721'. [ 701.564076][T18108] FAULT_INJECTION: forcing a failure. [ 701.564076][T18108] name failslab, interval 1, probability 0, space 0, times 0 [ 701.578006][T18108] CPU: 1 UID: 0 PID: 18108 Comm: syz.0.3722 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.578025][T18108] Tainted: [L]=SOFTLOCKUP [ 701.578030][T18108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 701.578037][T18108] Call Trace: [ 701.578042][T18108] [ 701.578047][T18108] dump_stack_lvl+0xe8/0x150 [ 701.578065][T18108] should_fail_ex+0x414/0x560 [ 701.578085][T18108] should_failslab+0xa8/0x100 [ 701.578099][T18108] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 701.578117][T18108] ? __alloc_skb+0x1dc/0x3a0 [ 701.578127][T18108] ? __local_bh_enable_ip+0xd0/0x130 [ 701.578139][T18108] ? __alloc_skb+0x198/0x3a0 [ 701.578150][T18108] __alloc_skb+0x1dc/0x3a0 [ 701.578162][T18108] _sctp_make_chunk+0x59/0x290 [ 701.578180][T18108] sctp_make_init+0x58b/0xd30 [ 701.578193][T18108] ? is_bpf_text_address+0x292/0x2b0 [ 701.578215][T18108] ? __pfx_sctp_make_init+0x10/0x10 [ 701.578235][T18108] ? stack_trace_save+0x9c/0xe0 [ 701.578250][T18108] ? __pfx_stack_trace_save+0x10/0x10 [ 701.578267][T18108] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 701.578282][T18108] sctp_do_sm+0x1e7/0x5c40 [ 701.578294][T18108] ? __pfx_sctp_pname+0x10/0x10 [ 701.578306][T18108] ? kasan_save_track+0x4f/0x80 [ 701.578315][T18108] ? kasan_save_track+0x3e/0x80 [ 701.578324][T18108] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 701.578334][T18108] ? sctp_sendmsg_to_asoc+0x1307/0x18d0 [ 701.578344][T18108] ? ____sys_sendmsg+0x52d/0x820 [ 701.578356][T18108] ? ___sys_sendmsg+0x21f/0x2a0 [ 701.578366][T18108] ? __sys_sendmmsg+0x28e/0x430 [ 701.578377][T18108] ? __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 701.578390][T18108] ? __do_fast_syscall_32+0x1dc/0x570 [ 701.578402][T18108] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 701.578417][T18108] ? __pfx_sctp_do_sm+0x10/0x10 [ 701.578449][T18108] ? __sk_mem_raise_allocated+0x290/0x1270 [ 701.578462][T18108] ? __genradix_ptr+0x1e1/0x220 [ 701.578479][T18108] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 701.578492][T18108] sctp_sendmsg_to_asoc+0x1088/0x18d0 [ 701.578506][T18108] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 701.578524][T18108] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 701.578534][T18108] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 701.578548][T18108] ? __local_bh_enable_ip+0xd0/0x130 [ 701.578557][T18108] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 701.578568][T18108] ? security_sctp_bind_connect+0x7e/0x2e0 [ 701.578581][T18108] sctp_sendmsg+0x1941/0x2840 [ 701.578597][T18108] ? __pfx_sctp_sendmsg+0x10/0x10 [ 701.578607][T18108] ? aa_sk_perm+0x15f/0x920 [ 701.578626][T18108] ? aa_sk_perm+0x7ee/0x920 [ 701.578640][T18108] ? __pfx_aa_sk_perm+0x10/0x10 [ 701.578654][T18108] ? sock_rps_record_flow+0x19/0x410 [ 701.578670][T18108] ? inet_sendmsg+0x2f4/0x370 [ 701.578685][T18108] __sock_sendmsg+0x19c/0x270 [ 701.578702][T18108] ____sys_sendmsg+0x52d/0x820 [ 701.578717][T18108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 701.578737][T18108] ___sys_sendmsg+0x21f/0x2a0 [ 701.578751][T18108] ? __pfx____sys_sendmsg+0x10/0x10 [ 701.578762][T18108] ? kstrtoull+0x12f/0x1d0 [ 701.578779][T18108] ? kstrtouint+0x6e/0xe0 [ 701.578807][T18108] ? __fget_files+0x2a/0x420 [ 701.578820][T18108] ? __fget_files+0x3a0/0x420 [ 701.578837][T18108] __sys_sendmmsg+0x28e/0x430 [ 701.578852][T18108] ? __pfx___sys_sendmmsg+0x10/0x10 [ 701.578869][T18108] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 701.578893][T18108] ? ksys_write+0x22a/0x250 [ 701.578904][T18108] ? __pfx_ksys_write+0x10/0x10 [ 701.578917][T18108] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 701.578931][T18108] __do_fast_syscall_32+0x1dc/0x570 [ 701.578943][T18108] ? lockdep_hardirqs_on+0x7b/0x110 [ 701.578952][T18108] ? do_fast_syscall_32+0x34/0x80 [ 701.578968][T18108] ? irqentry_exit+0x10f/0x670 [ 701.578989][T18108] do_fast_syscall_32+0x34/0x80 [ 701.579010][T18108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 701.579032][T18108] RIP: 0023:0xf7f72539 [ 701.579049][T18108] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 701.579059][T18108] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 701.579071][T18108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002580 [ 701.579079][T18108] RDX: 0000000000000001 RSI: 0000000004000040 RDI: 0000000000000000 [ 701.579086][T18108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 701.579092][T18108] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 701.579098][T18108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.579114][T18108] [ 701.587489][T15494] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 702.077352][T15494] usb 5-1: device descriptor read/8, error -71 [ 702.185803][T15494] usb usb5-port1: unable to enumerate USB device [ 702.428952][T18124] input: syz1 as /devices/virtual/input/input99 [ 702.517836][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3734'. [ 702.684296][T18124] netlink: 'syz.1.3724': attribute type 1 has an invalid length. [ 702.899063][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3726'. [ 703.473889][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3728'. [ 703.508250][ T5915] usb 7-1: USB disconnect, device number 2 [ 703.746641][T18144] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3730'. [ 704.116485][T18144] bond0: entered promiscuous mode [ 704.184574][T18144] bond_slave_0: entered promiscuous mode [ 704.201083][T18144] bond_slave_1: entered promiscuous mode [ 704.247621][T18144] bond0: left promiscuous mode [ 704.285912][T18144] bond_slave_0: left promiscuous mode [ 704.302679][T18144] bond_slave_1: left promiscuous mode [ 704.769057][T18141] input: syz0 as /devices/virtual/input/input100 [ 704.785761][T15494] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 704.905887][ T5911] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 704.945534][T15494] usb 2-1: Using ep0 maxpacket: 16 [ 704.957049][T15494] usb 2-1: config 0 has no interfaces? [ 704.962545][T15494] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 704.978859][T15494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.996498][T13381] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 704.999937][T15494] usb 2-1: config 0 descriptor?? [ 705.066483][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 705.078165][ T5911] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 705.095469][ T5911] usb 7-1: config 2 has no interface number 0 [ 705.101587][ T5911] usb 7-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 705.114411][ T5911] usb 7-1: config 2 interface 88 has no altsetting 0 [ 705.123373][ T5911] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 705.133019][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.141160][ T5911] usb 7-1: Product: syz [ 705.145341][ T5911] usb 7-1: Manufacturer: syz [ 705.150881][T13381] usb 1-1: Using ep0 maxpacket: 32 [ 705.170010][ T5911] usb 7-1: SerialNumber: syz [ 705.176993][T13381] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 705.187573][T13381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.207970][T18149] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 705.325295][T13381] usb 1-1: config 0 descriptor?? [ 705.398012][T15494] usb 2-1: USB disconnect, device number 113 [ 705.541049][T18149] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 705.556779][T13381] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 705.586617][T13381] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 705.665031][T13381] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 705.680282][T13381] usb 1-1: media controller created [ 705.694262][T18173] netlink: 'syz.4.3738': attribute type 1 has an invalid length. [ 705.802177][T13381] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 705.906913][T13381] az6027: usb out operation failed. (-71) [ 705.926358][T13381] az6027: usb out operation failed. (-71) [ 705.950605][T13381] stb0899_attach: Driver disabled by Kconfig [ 705.978546][T13381] az6027: no front-end attached [ 705.978546][T13381] [ 705.987048][T13381] az6027: usb out operation failed. (-71) [ 706.002210][T13381] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 706.026527][T13381] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input101 [ 706.100568][T18175] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 706.117244][T13381] dvb-usb: schedule remote query interval to 400 msecs. [ 706.127894][T13381] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 706.170506][T13381] usb 1-1: USB disconnect, device number 8 [ 706.178481][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3738'. [ 706.245886][T18179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3739'. [ 706.331968][ T5911] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 706.354595][T18175] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 706.369039][ T5911] asix 7-1:2.88: probe with driver asix failed with error -71 [ 706.411729][T13381] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 706.445026][ T5911] usb 7-1: USB disconnect, device number 3 [ 706.520725][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3741'. [ 706.608150][T18173] bond2: (slave gretap1): making interface the new active one [ 706.632468][T18173] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 706.762285][T18179] bond0: entered promiscuous mode [ 706.767796][T18179] bond_slave_0: entered promiscuous mode [ 706.775734][T18179] bond_slave_1: entered promiscuous mode [ 706.794828][T18179] bond0: left promiscuous mode [ 706.807466][T18179] bond_slave_0: left promiscuous mode [ 706.821655][T18179] bond_slave_1: left promiscuous mode [ 707.274024][T18202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 707.447064][T18209] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 708.467219][T18221] syzkaller0: entered promiscuous mode [ 708.477085][T18221] syzkaller0: entered allmulticast mode [ 709.012115][T15494] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 709.198320][T15494] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 709.210014][T15494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 709.221553][T15494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 709.242786][T18241] macvlan0: entered promiscuous mode [ 709.266591][T15494] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 709.279846][T15494] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 709.290279][T15494] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.299281][T15494] usb 1-1: Product: syz [ 709.303544][T15494] usb 1-1: Manufacturer: syz [ 709.311382][T15494] usb 1-1: SerialNumber: syz [ 709.326210][T15494] usb 1-1: config 0 descriptor?? [ 709.336908][T15494] iguanair 1-1:0.0: failed to get version [ 709.344688][T15494] iguanair 1-1:0.0: probe with driver iguanair failed with error -90 [ 709.542624][T13381] usb 1-1: USB disconnect, device number 9 [ 709.805562][T15494] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 709.978786][T15494] usb 2-1: no configurations [ 709.983679][T15494] usb 2-1: can't read configurations, error -22 [ 709.986726][T18251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3758'. [ 710.002461][T18251] bond0: entered promiscuous mode [ 710.007534][T18251] bond_slave_0: entered promiscuous mode [ 710.013416][T18251] bond_slave_1: entered promiscuous mode [ 710.025274][T18251] bond0: left promiscuous mode [ 710.031055][T18251] bond_slave_0: left promiscuous mode [ 710.048226][T18251] bond_slave_1: left promiscuous mode [ 710.210852][T15494] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 710.396247][T15494] usb 2-1: no configurations [ 710.400910][T15494] usb 2-1: can't read configurations, error -22 [ 710.416782][T15494] usb usb2-port1: attempt power cycle [ 710.705632][T13381] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 710.855589][T15494] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 710.867050][T13381] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 710.875391][T13381] usb 1-1: config 0 has no interface number 0 [ 710.881611][T13381] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 710.894122][T13381] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 710.896196][T15494] usb 2-1: no configurations [ 710.906355][T13381] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 710.910738][T15494] usb 2-1: can't read configurations, error -22 [ 710.922170][T13381] usb 1-1: config 0 interface 11 has no altsetting 0 [ 710.935258][T13381] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 710.944565][T13381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.954697][T13381] usb 1-1: config 0 descriptor?? [ 710.960915][T18265] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 710.970330][T13381] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 710.980067][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 710.989808][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 710.997812][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 711.005532][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 711.013205][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 711.021779][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 711.030546][T13381] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 711.041729][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 711.049735][ T5830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 711.064876][T15494] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 711.081597][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 711.106524][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 711.128035][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 711.143836][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 711.148923][T15494] usb 2-1: no configurations [ 711.163498][T15494] usb 2-1: can't read configurations, error -22 [ 711.165352][T13381] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 711.171143][T15494] usb usb2-port1: unable to enumerate USB device [ 711.188680][T13381] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 711.206214][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 711.211483][T18265] usb 1-1: USB disconnect, device number 10 [ 711.222145][ T5830] usb 5-1: config 0 has no interfaces? [ 711.227699][ T5830] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 711.246771][T18265] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 711.256486][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.287511][ T5830] usb 5-1: config 0 descriptor?? [ 711.358151][T18265] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 711.424807][T18265] keyspan 1-1:0.11: device disconnected [ 711.491320][T18290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3771'. [ 711.696671][T15494] usb 5-1: USB disconnect, device number 3 [ 711.925526][ T5830] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 712.156612][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 712.175674][ T5830] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 712.190701][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 712.205674][ T5830] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 712.216305][ T5830] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 712.225359][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.236088][ T5830] usb 4-1: config 0 descriptor?? [ 712.356821][T18310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3774'. [ 712.374086][T18311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3775'. [ 712.433292][T18311] bond0: entered promiscuous mode [ 712.449706][ T5830] hdpvr 4-1:0.0: firmware version 0x1c dated 1l;S11!vOp [ 712.449706][ T5830] 4(p [ 712.449706][ T5830] d2}%]~^r [ 712.453501][T18311] bond_slave_0: entered promiscuous mode [ 712.513602][ T5830] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 712.561338][T18311] bond_slave_1: entered promiscuous mode [ 712.587177][T18311] bond0: left promiscuous mode [ 712.594944][T18324] netlink: 'syz.0.3778': attribute type 10 has an invalid length. [ 712.598969][T18311] bond_slave_0: left promiscuous mode [ 712.639334][T18311] bond_slave_1: left promiscuous mode [ 712.665225][ T5830] hdpvr 4-1:0.0: device init failed [ 712.694959][ T5830] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 712.708626][T18324] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.715928][T18324] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.740684][ T5830] usb 4-1: USB disconnect, device number 103 [ 713.978530][T18357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.997167][T18357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.190082][T18357] netlink: 'syz.3.3783': attribute type 21 has an invalid length. [ 714.198028][T18357] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3783'. [ 714.220444][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3783'. [ 714.365491][T13381] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 714.495891][T13381] usb 4-1: device descriptor read/64, error -71 [ 714.825691][T13381] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 714.966136][T13381] usb 4-1: device descriptor read/64, error -71 [ 715.075916][T13381] usb usb4-port1: attempt power cycle [ 715.301305][T18381] netlink: 528 bytes leftover after parsing attributes in process `syz.1.3788'. [ 715.324017][T18382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 715.368695][T18382] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 715.375314][T18382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 715.426077][T18382] vhci_hcd vhci_hcd.0: Device attached [ 715.427612][T18391] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 715.455574][T13381] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 715.484054][T18382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 715.486152][T13381] usb 4-1: device descriptor read/8, error -71 [ 715.501998][T18382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 715.527859][T18382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 715.544793][T18382] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(20) [ 715.551386][T18382] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 715.592202][T18382] vhci_hcd vhci_hcd.0: Device attached [ 715.650909][T18398] netlink: 'syz.0.3792': attribute type 10 has an invalid length. [ 715.667632][ T5830] usb 41-2: new high-speed USB device number 4 using vhci_hcd [ 715.785600][T13381] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 715.826197][T13381] usb 4-1: device descriptor read/8, error -71 [ 715.928121][ T5911] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 715.950942][T13381] usb usb4-port1: unable to enumerate USB device [ 716.096435][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 716.108038][ T5911] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 716.116969][ T5911] usb 5-1: config 0 has no interface number 0 [ 716.124403][ T5911] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 716.142111][ T5911] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 716.156058][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.168370][ T5911] usb 5-1: Product: syz [ 716.174888][ T5911] usb 5-1: Manufacturer: syz [ 716.182959][ T5911] usb 5-1: SerialNumber: syz [ 716.199752][ T5911] usb 5-1: config 0 descriptor?? [ 716.222522][T18391] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 716.331546][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3795'. [ 716.441165][T18382] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 716.662783][T18382] random: crng reseeded on system resumption [ 716.690931][T18430] netlink: 'syz.6.3796': attribute type 1 has an invalid length. [ 717.315859][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3796'. [ 718.259645][ T5911] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 718.272853][ T5911] asix 5-1:0.188: probe with driver asix failed with error -71 [ 718.289264][ T5911] usb 5-1: USB disconnect, device number 4 [ 718.313672][T18395] vhci_hcd: connection closed [ 718.313947][ T1976] vhci_hcd vhci_hcd.4: stop threads [ 718.327737][T18384] vhci_hcd: connection reset by peer [ 718.355863][ T1976] vhci_hcd vhci_hcd.4: release socket [ 718.390075][ T1976] vhci_hcd vhci_hcd.4: disconnect device [ 718.407462][ T1976] vhci_hcd vhci_hcd.4: stop threads [ 718.424982][ T1976] vhci_hcd vhci_hcd.4: release socket [ 718.463412][ T1976] vhci_hcd vhci_hcd.4: disconnect device [ 718.664349][T18473] netlink: 'syz.3.3806': attribute type 3 has an invalid length. [ 718.933541][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3807'. [ 719.683206][T18497] netlink: 'syz.3.3810': attribute type 10 has an invalid length. [ 719.720797][T18497] bond0: (slave bridge0): Releasing backup interface [ 719.821626][T18497] team0: Port device bridge0 added [ 719.955518][T18503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3812'. [ 719.982365][T18503] bond0: entered promiscuous mode [ 720.043851][T18503] bond_slave_0: entered promiscuous mode [ 720.050291][T18503] bond_slave_1: entered promiscuous mode [ 720.063523][T18503] bond0: left promiscuous mode [ 720.072932][T18503] bond_slave_0: left promiscuous mode [ 720.089925][T18503] bond_slave_1: left promiscuous mode [ 720.916653][ T5830] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 721.016334][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3820'. [ 721.105660][T18526] netlink: 'syz.3.3821': attribute type 21 has an invalid length. [ 721.163346][T18526] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3821'. [ 721.291885][T18532] netlink: 'syz.3.3824': attribute type 10 has an invalid length. [ 721.443505][T18541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3827'. [ 721.468538][T18541] bond0: entered promiscuous mode [ 721.473675][T18541] bond_slave_0: entered promiscuous mode [ 721.479914][T18541] bond_slave_1: entered promiscuous mode [ 721.504661][T18541] bond0: left promiscuous mode [ 721.509721][T18541] bond_slave_0: left promiscuous mode [ 721.565497][T15494] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 721.585064][T18541] bond_slave_1: left promiscuous mode [ 721.780024][T15494] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 721.788935][T15494] usb 5-1: config 0 has no interface number 0 [ 721.800636][T15494] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 721.836373][T15494] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 721.875263][T15494] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 721.930765][T15494] usb 5-1: config 0 interface 11 has no altsetting 0 [ 721.957068][T15494] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 721.997408][T15494] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.025666][ T890] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 722.185271][T15494] usb 5-1: config 0 descriptor?? [ 722.195491][ T890] usb 7-1: Using ep0 maxpacket: 16 [ 722.202480][T18535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 722.222101][T15494] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 722.233035][ T890] usb 7-1: config 0 has no interfaces? [ 722.238905][ T890] usb 7-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 722.261791][ T890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.272408][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 722.291083][ T890] usb 7-1: config 0 descriptor?? [ 722.296682][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 722.304490][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 722.313348][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 722.330373][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 722.340452][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 722.543709][T15494] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 722.558542][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 722.612078][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 722.620754][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 722.645397][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 722.663026][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 722.671800][T15494] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 722.690048][ T890] usb 7-1: USB disconnect, device number 4 [ 722.751403][T15494] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 722.788212][T15494] usb 5-1: USB disconnect, device number 5 [ 722.806481][T15494] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 722.865766][T15494] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 722.897342][T15494] keyspan 5-1:0.11: device disconnected [ 722.913063][T18571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3836'. [ 723.284852][T18579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3840'. [ 723.450911][T18581] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 724.097737][T18608] dns_resolver: Unsupported server list version (32) [ 724.713620][T18590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3845'. [ 724.933003][T18621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3849'. [ 725.083304][T18621] bond0: entered promiscuous mode [ 725.120692][T18621] bond_slave_0: entered promiscuous mode [ 725.164768][T18621] bond_slave_1: entered promiscuous mode [ 725.255853][T18621] bond0: left promiscuous mode [ 725.259345][T18629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3852'. [ 725.276605][T18621] bond_slave_0: left promiscuous mode [ 725.285505][T18621] bond_slave_1: left promiscuous mode [ 725.334562][T18622] pim6reg: entered allmulticast mode [ 725.413653][T18629] bond0: entered promiscuous mode [ 725.419027][T18629] bond_slave_0: entered promiscuous mode [ 725.427792][T18629] bond_slave_1: entered promiscuous mode [ 725.446472][T18629] bond0: left promiscuous mode [ 725.453608][T18629] bond_slave_0: left promiscuous mode [ 725.461464][T18629] bond_slave_1: left promiscuous mode [ 726.684018][T18651] fuse: Bad value for 'fd' [ 726.970931][T18659] netlink: 'syz.0.3859': attribute type 322 has an invalid length. [ 727.984258][T18670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3863'. [ 727.994565][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3862'. [ 728.151473][T18677] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3864'. [ 728.212487][T18677] bond0: entered promiscuous mode [ 728.222868][T18677] bond_slave_0: entered promiscuous mode [ 728.230099][T18677] bond_slave_1: entered promiscuous mode [ 728.242476][T18679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3865'. [ 728.263379][T18677] bond0: left promiscuous mode [ 728.278617][T18677] bond_slave_0: left promiscuous mode [ 728.291777][T18677] bond_slave_1: left promiscuous mode [ 728.668228][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 728.668244][ T30] audit: type=1326 audit(1767848091.915:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 729.044425][ T30] audit: type=1326 audit(1767848091.915:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 729.115513][ T5830] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 729.136649][T18703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3872'. [ 729.148388][ T30] audit: type=1326 audit(1767848091.915:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 729.194197][ T30] audit: type=1326 audit(1767848091.915:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 729.275516][ T5915] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 729.295704][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 729.336695][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.376096][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.394250][ T30] audit: type=1326 audit(1767848091.915:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 729.406558][ T5830] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 729.475525][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 729.510556][ T5915] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 729.524079][ T5915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.534508][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.542742][ T30] audit: type=1326 audit(1767848091.915:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 729.556665][ T5830] usb 4-1: config 0 descriptor?? [ 729.581689][ T5915] usb 7-1: config 0 has no interface number 0 [ 729.603826][ T5915] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 729.662078][ T30] audit: type=1326 audit(1767848091.915:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 729.686617][ T5915] usb 7-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 729.737508][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.775351][T18714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3876'. [ 729.787529][ T5915] usb 7-1: config 0 descriptor?? [ 729.792720][ T30] audit: type=1326 audit(1767848091.915:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 729.820696][T18714] bond0: entered promiscuous mode [ 729.836324][T18714] bond_slave_0: entered promiscuous mode [ 729.846599][T18714] bond_slave_1: entered promiscuous mode [ 729.854875][ T5915] usb 7-1: bad CDC descriptors [ 729.865345][T18714] bond0: left promiscuous mode [ 729.873931][ T5915] cdc_acm 7-1:0.1: Zero length descriptor references [ 730.015937][ T30] audit: type=1326 audit(1767848091.915:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 730.016815][T18714] bond_slave_0: left promiscuous mode [ 730.039174][ T5915] cdc_acm 7-1:0.1: probe with driver cdc_acm failed with error -22 [ 730.110661][ T30] audit: type=1326 audit(1767848091.915:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.3.3868" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 730.133199][T18714] bond_slave_1: left promiscuous mode [ 730.521436][ T5830] ft260 0003:0403:6030.001F: unknown main item tag 0x7 [ 730.749097][ T5830] ft260 0003:0403:6030.001F: failed to retrieve chip version [ 730.759267][ T5830] ft260 0003:0403:6030.001F: probe with driver ft260 failed with error -32 [ 731.511439][ T5830] usb 7-1: USB disconnect, device number 5 [ 731.748531][T18731] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3880'. [ 731.790544][T18731] bond0: entered promiscuous mode [ 731.796198][T18731] bond_slave_0: entered promiscuous mode [ 731.806143][T18731] bond_slave_1: entered promiscuous mode [ 731.833324][T18731] bond0: left promiscuous mode [ 731.885631][T18731] bond_slave_0: left promiscuous mode [ 731.902905][T18731] bond_slave_1: left promiscuous mode [ 731.925504][ T5830] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 732.029716][T18735] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 732.125526][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 732.132359][ T5830] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 732.140741][ T5830] usb 5-1: config 0 has no interface number 0 [ 732.150331][ T5830] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 732.183192][ T5830] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 732.194182][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.202626][ T5830] usb 5-1: Product: syz [ 732.209363][ T5830] usb 5-1: Manufacturer: syz [ 732.215538][ T5830] usb 5-1: SerialNumber: syz [ 732.313502][ T5830] usb 5-1: config 0 descriptor?? [ 732.321395][ T5830] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 732.331453][ T5830] em28xx 5-1:0.132: Video interface 132 found: [ 732.445518][T15494] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 732.595483][T15494] usb 7-1: Using ep0 maxpacket: 8 [ 732.612653][T15494] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 732.625327][T15494] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.652785][T15494] usb 7-1: Product: syz [ 732.661930][T15494] usb 7-1: Manufacturer: syz [ 732.712123][ T5889] usb 4-1: USB disconnect, device number 108 [ 732.718938][T15494] usb 7-1: SerialNumber: syz [ 732.743945][ T5830] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 732.747682][T15494] usb 7-1: config 0 descriptor?? [ 732.778700][T15494] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 733.155953][ T5889] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 733.295833][ T5916] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 733.316443][ T5889] usb 4-1: Using ep0 maxpacket: 16 [ 733.323496][ T5889] usb 4-1: config 0 has no interfaces? [ 733.329456][ T5889] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 733.345638][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.368111][ T5889] usb 4-1: config 0 descriptor?? [ 733.456991][ T5916] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 733.466076][ T5916] usb 2-1: config 0 has no interface number 0 [ 733.474216][ T5916] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 733.483683][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.491730][ T5916] usb 2-1: Product: syz [ 733.496047][ T5916] usb 2-1: Manufacturer: syz [ 733.500674][ T5916] usb 2-1: SerialNumber: syz [ 733.508299][ T5916] usb 2-1: config 0 descriptor?? [ 733.639385][ T5927] usb 4-1: USB disconnect, device number 109 [ 733.721716][ T5916] peak_usb 2-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 733.781268][T18737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.791325][T18737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.850957][ T5830] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 733.859755][ T5830] em28xx 5-1:0.132: board has no eeprom [ 733.925557][ T5830] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 733.949502][ T5830] em28xx 5-1:0.132: analog set to bulk mode. [ 733.956611][ T5916] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 733.970394][ T5927] em28xx 5-1:0.132: Registering V4L2 extension [ 733.977552][ T5916] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 733.999514][ T5916] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 734.111290][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 734.132538][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 734.145361][T18748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3885'. [ 734.145373][ T5916] peak_usb 2-1:0.56: probe with driver peak_usb failed with error -22 [ 734.163682][ T5916] usb 2-1: USB disconnect, device number 118 [ 734.185362][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 734.227673][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 734.292250][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 734.304565][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 734.318793][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 734.336259][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 734.394428][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 734.404420][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 734.416779][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 734.437212][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 734.615678][ T5915] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 734.684899][T15494] gspca_sonixj: reg_r err -32 [ 734.708333][ T5927] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 734.708367][ T5889] usb 5-1: USB disconnect, device number 6 [ 734.745926][T15494] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 734.799317][ T5889] em28xx 5-1:0.132: Disconnecting em28xx [ 734.805920][ T5927] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 734.815674][ T5927] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 734.831084][T18760] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 734.859633][ T5915] usb 4-1: device descriptor read/64, error -71 [ 734.870271][ T5927] em28xx 5-1:0.132: No AC97 audio processor [ 734.898518][ T5927] usb 5-1: Decoder not found [ 734.903146][ T5927] em28xx 5-1:0.132: failed to create media graph [ 734.921840][T18760] bond1: (slave lo): Enslaving as an active interface with an up link [ 734.970415][ T5927] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 734.978785][T18760] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 735.043191][T18766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.075968][T18766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.080123][ T5927] em28xx 5-1:0.132: Remote control support is not available for this card. [ 735.095354][T18763] ================================================================== [ 735.103452][T18763] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 735.110850][T18763] Read of size 8 at addr ffff88803393c740 by task v4l_id/18763 [ 735.118400][T18763] [ 735.120732][T18763] CPU: 0 UID: 0 PID: 18763 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 735.120762][T18763] Tainted: [L]=SOFTLOCKUP [ 735.120770][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.120783][T18763] Call Trace: [ 735.120792][T18763] [ 735.120801][T18763] dump_stack_lvl+0xe8/0x150 [ 735.120831][T18763] print_report+0xca/0x240 [ 735.120853][T18763] ? v4l2_fh_open+0xac/0x420 [ 735.120880][T18763] kasan_report+0x118/0x150 [ 735.120903][T18763] ? v4l2_fh_open+0xac/0x420 [ 735.120931][T18763] v4l2_fh_open+0xac/0x420 [ 735.120964][T18763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 735.120988][T18763] em28xx_v4l2_open+0x157/0x9a0 [ 735.121012][T18763] ? do_raw_spin_lock+0x121/0x290 [ 735.121039][T18763] v4l2_open+0x1bf/0x3a0 [ 735.121069][T18763] chrdev_open+0x4cc/0x5e0 [ 735.121093][T18763] ? __pfx_chrdev_open+0x10/0x10 [ 735.121115][T18763] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 735.121147][T18763] ? __pfx_chrdev_open+0x10/0x10 [ 735.121171][T18763] do_dentry_open+0x7ce/0x1420 [ 735.121202][T18763] vfs_open+0x3b/0x340 [ 735.121225][T18763] ? path_openat+0x33f3/0x3dd0 [ 735.121247][T18763] path_openat+0x340e/0x3dd0 [ 735.121271][T18763] ? __pfx_stack_trace_save+0x10/0x10 [ 735.121306][T18763] ? __pfx_filemap_map_pages+0x10/0x10 [ 735.121329][T18763] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 735.121360][T18763] ? getname_flags+0xb8/0x540 [ 735.121386][T18763] ? __pfx_path_openat+0x10/0x10 [ 735.121406][T18763] ? __lock_acquire+0x6b6/0x2cf0 [ 735.121431][T18763] do_filp_open+0x1fa/0x410 [ 735.121450][T18763] ? __pfx_do_filp_open+0x10/0x10 [ 735.121474][T18763] ? _raw_spin_unlock+0x28/0x50 [ 735.121501][T18763] ? alloc_fd+0x64c/0x6c0 [ 735.121528][T18763] do_sys_openat2+0x121/0x200 [ 735.121554][T18763] ? __pfx_do_sys_openat2+0x10/0x10 [ 735.121580][T18763] ? exc_page_fault+0x71/0xd0 [ 735.121601][T18763] ? do_user_addr_fault+0xc85/0x1380 [ 735.121622][T18763] __x64_sys_openat+0x138/0x170 [ 735.121651][T18763] do_syscall_64+0xec/0xf80 [ 735.121671][T18763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.121692][T18763] ? trace_irq_disable+0x37/0x100 [ 735.121718][T18763] ? clear_bhb_loop+0x60/0xb0 [ 735.121740][T18763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.121761][T18763] RIP: 0033:0x7f82438a7407 [ 735.121780][T18763] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 735.121799][T18763] RSP: 002b:00007fff230dd0b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 735.121822][T18763] RAX: ffffffffffffffda RBX: 00007f8244072880 RCX: 00007f82438a7407 [ 735.121838][T18763] RDX: 0000000000000000 RSI: 00007fff230def1b RDI: ffffffffffffff9c [ 735.121853][T18763] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 735.121866][T18763] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 735.121879][T18763] R13: 00007fff230dd300 R14: 00007f82441d9000 R15: 00005578deb0b4d8 [ 735.121903][T18763] [ 735.121911][T18763] [ 735.416372][T18763] Allocated by task 5927: [ 735.420697][T18763] kasan_save_track+0x3e/0x80 [ 735.425381][T18763] __kasan_kmalloc+0x93/0xb0 [ 735.429975][T18763] __kmalloc_cache_noprof+0x3e2/0x700 [ 735.435345][T18763] em28xx_v4l2_init+0x10b/0x2e70 [ 735.440286][T18763] em28xx_init_extension+0x120/0x1c0 [ 735.445574][T18763] process_scheduled_works+0xad1/0x1770 [ 735.451122][T18763] worker_thread+0x8a0/0xda0 [ 735.455707][T18763] kthread+0x711/0x8a0 [ 735.459784][T18763] ret_from_fork+0x510/0xa50 [ 735.464370][T18763] ret_from_fork_asm+0x1a/0x30 [ 735.469115][T18763] [ 735.471414][T18763] Freed by task 5927: [ 735.475366][T18763] kasan_save_track+0x3e/0x80 [ 735.480016][T18763] kasan_save_free_info+0x46/0x50 [ 735.485017][T18763] __kasan_slab_free+0x5c/0x80 [ 735.489758][T18763] kfree+0x1c0/0x660 [ 735.493634][T18763] em28xx_v4l2_init+0x1683/0x2e70 [ 735.498633][T18763] em28xx_init_extension+0x120/0x1c0 [ 735.503896][T18763] process_scheduled_works+0xad1/0x1770 [ 735.509419][T18763] worker_thread+0x8a0/0xda0 [ 735.513983][T18763] kthread+0x711/0x8a0 [ 735.518026][T18763] ret_from_fork+0x510/0xa50 [ 735.522591][T18763] ret_from_fork_asm+0x1a/0x30 [ 735.527330][T18763] [ 735.529632][T18763] The buggy address belongs to the object at ffff88803393c000 [ 735.529632][T18763] which belongs to the cache kmalloc-8k of size 8192 [ 735.543656][T18763] The buggy address is located 1856 bytes inside of [ 735.543656][T18763] freed 8192-byte region [ffff88803393c000, ffff88803393e000) [ 735.557685][T18763] [ 735.559985][T18763] The buggy address belongs to the physical page: [ 735.566371][T18763] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33938 [ 735.575104][T18763] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 735.583574][T18763] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 735.591094][T18763] page_type: f5(slab) [ 735.595051][T18763] raw: 00fff00000000040 ffff88813ffa7280 dead000000000122 0000000000000000 [ 735.603609][T18763] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 735.612168][T18763] head: 00fff00000000040 ffff88813ffa7280 dead000000000122 0000000000000000 [ 735.620811][T18763] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 735.629456][T18763] head: 00fff00000000003 ffffea0000ce4e01 00000000ffffffff 00000000ffffffff [ 735.638101][T18763] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 735.646743][T18763] page dumped because: kasan: bad access detected [ 735.653137][T18763] page_owner tracks the page as allocated [ 735.658832][T18763] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 18729, tgid 18728 (syz.4.3879), ts 732731213265, free_ts 732728615536 [ 735.681737][T18763] post_alloc_hook+0x234/0x290 [ 735.686482][T18763] get_page_from_freelist+0x24e0/0x2580 [ 735.692004][T18763] __alloc_frozen_pages_noprof+0x181/0x370 [ 735.697783][T18763] alloc_pages_mpol+0x232/0x4a0 [ 735.702608][T18763] allocate_slab+0x86/0x3b0 [ 735.707097][T18763] ___slab_alloc+0xe53/0x1820 [ 735.711747][T18763] __slab_alloc+0x65/0x100 [ 735.716135][T18763] __kmalloc_cache_noprof+0x41e/0x700 [ 735.721479][T18763] audit_log_d_path+0xb8/0x1a0 [ 735.726216][T18763] audit_log_d_path_exe+0x42/0x70 [ 735.731213][T18763] audit_log_task+0x2b3/0x3c0 [ 735.735861][T18763] audit_seccomp+0x86/0x190 [ 735.740342][T18763] __seccomp_filter+0xcf0/0x1e20 [ 735.745252][T18763] syscall_trace_enter+0xaa/0x160 [ 735.750250][T18763] __do_fast_syscall_32+0x1bf/0x570 [ 735.755426][T18763] do_fast_syscall_32+0x34/0x80 [ 735.760268][T18763] page last free pid 5924 tgid 5924 stack trace: [ 735.766566][T18763] __free_frozen_pages+0xbc8/0xd30 [ 735.771654][T18763] __put_partials+0x146/0x170 [ 735.776308][T18763] __slab_free+0x294/0x320 [ 735.780701][T18763] qlist_free_all+0x97/0x100 [ 735.785348][T18763] kasan_quarantine_reduce+0x148/0x160 [ 735.790779][T18763] __kasan_slab_alloc+0x22/0x80 [ 735.795605][T18763] __kvmalloc_node_noprof+0x57f/0x920 [ 735.800948][T18763] seq_read_iter+0x202/0xe20 [ 735.805510][T18763] vfs_read+0x55a/0xa30 [ 735.809638][T18763] ksys_read+0x145/0x250 [ 735.813849][T18763] do_syscall_64+0xec/0xf80 [ 735.818326][T18763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.824211][T18763] [ 735.826511][T18763] Memory state around the buggy address: [ 735.832150][T18763] ffff88803393c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 735.840186][T18763] ffff88803393c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 735.848218][T18763] >ffff88803393c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 735.856251][T18763] ^ [ 735.862373][T18763] ffff88803393c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 735.870409][T18763] ffff88803393c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 735.878443][T18763] ================================================================== [ 735.900146][ T5889] em28xx 5-1:0.132: Closing input extension [ 735.935478][ T5915] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 735.967781][ T890] usb 7-1: USB disconnect, device number 6 [ 736.117649][ T5915] usb 4-1: device descriptor read/64, error -71 [ 736.180421][T18769] netlink: 'syz.1.3890': attribute type 10 has an invalid length. [ 736.261833][ T5915] usb usb4-port1: attempt power cycle [ 736.303065][T18763] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 736.310285][T18763] CPU: 0 UID: 0 PID: 18763 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 736.320857][T18763] Tainted: [L]=SOFTLOCKUP [ 736.325164][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 736.335201][T18763] Call Trace: [ 736.338467][T18763] [ 736.341391][T18763] vpanic+0x1e0/0x670 [ 736.345359][T18763] panic+0xb9/0xc0 [ 736.349081][T18763] ? __pfx_panic+0x10/0x10 [ 736.353482][T18763] ? v4l2_fh_open+0xac/0x420 [ 736.358060][T18763] ? __pfx_panic+0x10/0x10 [ 736.362464][T18763] ? v4l2_fh_open+0xac/0x420 [ 736.367036][T18763] check_panic_on_warn+0x89/0xb0 [ 736.371965][T18763] ? v4l2_fh_open+0xac/0x420 [ 736.376543][T18763] end_report+0x6f/0x140 [ 736.380774][T18763] kasan_report+0x129/0x150 [ 736.385260][T18763] ? v4l2_fh_open+0xac/0x420 [ 736.389921][T18763] v4l2_fh_open+0xac/0x420 [ 736.394320][T18763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 736.400283][T18763] em28xx_v4l2_open+0x157/0x9a0 [ 736.405118][T18763] ? do_raw_spin_lock+0x121/0x290 [ 736.410129][T18763] v4l2_open+0x1bf/0x3a0 [ 736.414359][T18763] chrdev_open+0x4cc/0x5e0 [ 736.418755][T18763] ? __pfx_chrdev_open+0x10/0x10 [ 736.423671][T18763] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 736.429981][T18763] ? __pfx_chrdev_open+0x10/0x10 [ 736.434899][T18763] do_dentry_open+0x7ce/0x1420 [ 736.439648][T18763] vfs_open+0x3b/0x340 [ 736.443699][T18763] ? path_openat+0x33f3/0x3dd0 [ 736.448441][T18763] path_openat+0x340e/0x3dd0 [ 736.453013][T18763] ? __pfx_stack_trace_save+0x10/0x10 [ 736.458369][T18763] ? __pfx_filemap_map_pages+0x10/0x10 [ 736.463810][T18763] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 736.469429][T18763] ? getname_flags+0xb8/0x540 [ 736.474094][T18763] ? __pfx_path_openat+0x10/0x10 [ 736.479009][T18763] ? __lock_acquire+0x6b6/0x2cf0 [ 736.483930][T18763] do_filp_open+0x1fa/0x410 [ 736.488426][T18763] ? __pfx_do_filp_open+0x10/0x10 [ 736.493435][T18763] ? _raw_spin_unlock+0x28/0x50 [ 736.498269][T18763] ? alloc_fd+0x64c/0x6c0 [ 736.502582][T18763] do_sys_openat2+0x121/0x200 [ 736.507247][T18763] ? __pfx_do_sys_openat2+0x10/0x10 [ 736.512444][T18763] ? exc_page_fault+0x71/0xd0 [ 736.517108][T18763] ? do_user_addr_fault+0xc85/0x1380 [ 736.522390][T18763] __x64_sys_openat+0x138/0x170 [ 736.527226][T18763] do_syscall_64+0xec/0xf80 [ 736.531708][T18763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.537753][T18763] ? trace_irq_disable+0x37/0x100 [ 736.542759][T18763] ? clear_bhb_loop+0x60/0xb0 [ 736.547420][T18763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.553296][T18763] RIP: 0033:0x7f82438a7407 [ 736.557702][T18763] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 736.577462][T18763] RSP: 002b:00007fff230dd0b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 736.585863][T18763] RAX: ffffffffffffffda RBX: 00007f8244072880 RCX: 00007f82438a7407 [ 736.593820][T18763] RDX: 0000000000000000 RSI: 00007fff230def1b RDI: ffffffffffffff9c [ 736.601783][T18763] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 736.609739][T18763] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 736.617698][T18763] R13: 00007fff230dd300 R14: 00007f82441d9000 R15: 00005578deb0b4d8 [ 736.625658][T18763] [ 736.629057][T18763] Kernel Offset: disabled [ 736.633367][T18763] Rebooting in 86400 seconds..